Privacy Policy — How tko9 Collects, Uses, and Protects Your Personal Data

1 Data We Collect

tko9 collects personal data through several channels: directly from you when you register an account or interact with the platform, automatically through your device and browser when you visit the site, and from third-party sources such as payment processors and identity verification providers. We collect only the data that is necessary to deliver our services safely, compliantly, and effectively.

1.1 Account Registration Data

When you create a tko9 account, we collect the following personal information:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (required to verify that you meet the 18+ age requirement).
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postcode.
• Email address — used for account communications, promotional messages (with consent), and security alerts.
• Mobile phone number — used for account verification and two-factor authentication where enabled.
• Username and encrypted password — your login credentials for the tko9 platform.

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations and to protect the platform against fraud and money laundering, we may request and retain copies of the following documents:

• A valid government-issued photo identity document (National ID card, passport, or driving licence).
• A recent proof of address document such as a utility bill or bank statement issued within the previous three months.
• Proof of payment method ownership, such as a screenshot confirming that your bKash, Nagad, or Rocket mobile number is registered in your name.

1.3 Financial Transaction Data

tko9 records details of all financial transactions conducted through your account, including:

• Deposit amounts, dates, and payment methods (bKash, Nagad, Rocket, Upay, Visa, Mastercard).
• Withdrawal requests, amounts, processing dates, and destination payment accounts.
• Account balance history and transaction reference numbers.
• Bonus credits, wagering activity related to promotional funds, and bonus expiry records.

1.4 Betting and Gaming Activity Data

We record all gaming and betting activity conducted through your tko9 account, including:

• Bet placement records: sport/market selected, odds, stake amount, and date and time (Bangladesh Standard Time, UTC+6).
• Casino game sessions: game title, game provider, session start and end times, and wager amounts.
• Slot game activity, including games played, spin frequency, and session duration.
• Win/loss records and cumulative lifetime wagering statistics.

1.5 Technical and Device Data

When you access tko9, our systems automatically collect certain technical data about your device and connection:

2 How We Use Your Data

tko9 processes your personal data only for lawful, specified, and legitimate purposes. We do not use your data in ways that are incompatible with the purposes described at the time of collection. The primary bases on which we process your data are: contractual necessity (to deliver the services you have registered for), legal obligation (to comply with applicable international gaming and anti-money laundering regulations), legitimate interest (to protect the platform and improve our services), and, where required, your explicit consent.

2.1 Service Delivery

The core use of your personal data is to operate your tko9 account and deliver the services you have requested. This includes processing your deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment methods; settling your bets on cricket, football, and other sports markets; providing access to live casino and slot game content from providers such as Evolution Gaming, Pragmatic Play, and Spribe; and sending you transactional account communications such as deposit confirmations, withdrawal notifications, and security alerts.

2.2 Identity Verification and Fraud Prevention

Your registration and KYC data is used to verify your identity, confirm your age (18+), and ensure compliance with our one-account policy. This data is also used to detect and investigate suspected fraudulent activity, money laundering, bonus abuse, and other violations of our Terms & Conditions. Where fraudulent activity is confirmed, the relevant data may be shared with law enforcement or regulatory authorities as required by applicable international regulations.

2.3 Responsible Gaming

tko9 uses your betting and gaming activity data, alongside your session and deposit data, to monitor for signs of problem gambling behaviour. This analysis supports our responsible gaming obligations and may result in proactive outreach from our support team, the application of deposit limits or time-out restrictions, or a referral to our self-exclusion programme. The use of your data for responsible gaming purposes is a legitimate interest that we consider essential to the safe operation of the platform.

2.4 Marketing Communications

With your explicit consent (provided at the point of registration or subsequently through your account settings), tko9 may send you promotional communications about new games, seasonal bonuses, BPL cricket promotions, Eid special offers, and other tko9 events by email or SMS. You may withdraw your marketing consent at any time by updating your communication preferences in your account settings or by contacting us at [email protected]. Withdrawal of marketing consent does not affect transactional communications necessary to deliver your account services.

2.5 Platform Improvement and Analytics

Aggregated, anonymised technical and usage data is analysed to improve the performance, reliability, and user experience of the tko9 platform. This includes identifying and resolving technical errors, optimising page load speeds for users accessing the platform on mobile networks in Dhaka, Chittagong, Rajshahi, and other locations across Bangladesh, and improving the relevance of game recommendations and promotional offers.

3 Data Sharing & Disclosure

tko9 does not share your personal data with third parties except in the specific, limited circumstances described in this section. All third-party service providers with whom we share data are required to process that data only for the purposes specified by tko9 and in accordance with applicable data protection standards. We do not permit our service providers to use your data for their own independent purposes.

3.1 Payment Processing Partners

To process your deposits and withdrawals, tko9 shares necessary transaction data (such as your account identifier, transaction amount, and payment method reference) with our payment processing partners, which include the operators of bKash, Nagad, Rocket, Upay, and the relevant card scheme processors for Visa and Mastercard transactions. These partners are subject to their own data protection obligations and are not permitted to use your data beyond processing the specific transaction.

3.2 Identity Verification Providers

tko9 may engage third-party identity verification and KYC service providers to assist with the verification of documents submitted by players. These providers process identity document data on our behalf and under our instruction. All such providers are required to maintain the security and confidentiality of the data processed.

3.3 Game Content Providers

To deliver casino and slot game content, tko9 integrates with third-party game providers including Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, and Microgaming. These providers may receive your account session token and certain technical data required to load and authenticate a game session. Game providers do not receive your full personal profile, payment details, or identity documents.

3.4 Legal and Regulatory Disclosure

tko9 may disclose your personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where we are legally required to do so, where disclosure is necessary to investigate or prevent fraud or criminal activity, or where ordered to do so by a valid legal process. In all such cases, tko9 will disclose only the minimum data necessary to satisfy the legal obligation.

4 Cookies & Tracking

tko9 uses cookies and similar tracking technologies to operate the platform, remember your session preferences, analyse usage patterns, and deliver a consistent experience across visits. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

4.1 What Are Cookies

Cookies are small text files that are placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and remember certain preferences or actions. Some cookies are essential to the functioning of the website; others are used for analytics or marketing purposes and are placed only with your consent.

4.2 Types of Cookies Used by tko9

4.3 Managing Your Cookie Preferences

You may manage or disable non-essential cookies at any time through your browser settings. Most modern browsers allow you to view, block, or delete cookies via the browser's privacy or settings menu. Please note that disabling essential session cookies will prevent you from logging in to your tko9 account and using the platform's core features. Disabling analytics or marketing cookies will not affect your ability to place bets, make deposits, or access games.

5 Data Security

tko9 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme is reviewed and updated regularly to address evolving threats and to maintain the integrity of the platform and player data.

5.1 Technical Security Measures

• SSL/TLS Encryption: All data transmitted between your device and the tko9 platform is encrypted using 256-bit SSL/TLS encryption. This ensures that your login credentials, payment details, and personal information cannot be intercepted during transmission.
• Password Hashing: Your account password is never stored in plain text. tko9 uses industry-standard cryptographic hashing algorithms to store password data securely. Even tko9 staff cannot view your password.
• Access Controls: Access to personal data within tko9's internal systems is restricted on a strict need-to-know basis. Only authorised personnel whose role requires access to specific categories of personal data are granted that access.
• Secure Data Centres: Player data is stored in secure, access-controlled data centre facilities with physical security measures, environmental controls, and redundant systems to protect against data loss.
• Intrusion Detection: tko9 operates real-time monitoring and intrusion detection systems to identify and respond to suspicious access attempts or unusual activity on the platform.

5.2 Data Breach Response

In the event of a confirmed personal data breach that poses a risk to the rights and freedoms of affected players, tko9 will notify affected users without undue delay. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures tko9 has taken or is taking to address the breach and mitigate its impact. If you believe your tko9 account has been compromised, contact our support team immediately at [email protected].

6 Data Retention

tko9 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes or enforce our Terms & Conditions. When personal data is no longer required for any of these purposes, it is securely deleted or anonymised in accordance with our internal data retention schedule.

6.1 Active Account Data

While your tko9 account remains active, we retain all registration data, transaction records, betting and gaming activity logs, and KYC documents associated with your account. This data is necessary to operate your account, process payments, and fulfil our responsible gaming and compliance obligations on an ongoing basis.

6.2 Post-Closure Retention

Following the closure of your tko9 account — whether by your own request or by tko9 — we retain your personal data for a minimum period of five years from the date of closure. This retention period is applied to satisfy financial record-keeping obligations, support the investigation of any fraud or dispute that may arise after closure, and comply with applicable international anti-money laundering regulations. After the applicable retention period has expired, your personal data will be securely deleted or irreversibly anonymised.

6.3 Marketing Data

If you have provided consent for marketing communications, your contact details and marketing preferences are retained for as long as you remain opted in. If you withdraw marketing consent, your data is removed from our active marketing database within 30 days. Withdrawal of marketing consent does not affect your main account data, which continues to be retained in accordance with sections 6.1 and 6.2 above.

6.4 Technical Logs

Server logs, access logs, and security monitoring records are typically retained for a period of 12 months from the date of generation, after which they are automatically deleted. Logs that are relevant to an ongoing fraud investigation or legal matter may be retained for longer at the discretion of tko9's compliance team.

7 Your Data Rights

tko9 respects your rights over your personal data. The following rights are available to all registered users of the platform. To exercise any of these rights, please contact our support team at [email protected] with your account username and a description of the right you wish to exercise. We aim to respond to all data rights requests within 30 days of receipt.

7.1 Right of Access

You have the right to request a copy of the personal data that tko9 holds about you. Upon a verified request, we will provide a structured summary of your account data, transaction history, and any other personal information held on file, in a readable format and without charge for reasonable requests.

7.2 Right to Rectification

If any personal data held by tko9 is inaccurate or incomplete, you have the right to request that it be corrected or completed. You may update certain account details directly through your tko9 account settings. For changes to identity-critical information such as your legal name or date of birth, updated KYC documentation will be required.

7.3 Right to Erasure

You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you have withdrawn the consent on which processing was based. Please note that tko9 may be legally required to retain certain data (such as transaction records) for the retention period described in Section 6. Where erasure requests conflict with legal retention obligations, we will explain clearly which data can be deleted and which must be retained, and for how long.

7.4 Right to Restriction of Processing

You have the right to request that tko9 restricts the processing of your personal data in certain defined circumstances, such as while a dispute about the accuracy of your data is being resolved. During a restriction period, we will continue to store your data but will not process it for any purpose other than storage until the restriction is lifted.

7.5 Right to Data Portability

Where processing is based on your consent or on the performance of a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format so that you may transfer it to another service provider of your choosing.

7.6 Right to Object

You have the right to object to the processing of your personal data where tko9 relies on legitimate interests as the legal basis for processing. You also have an unconditional right to object to the processing of your data for direct marketing purposes at any time, without needing to provide a reason.

8 Contact & DPO

tko9 takes its data protection responsibilities seriously. If you have any questions, concerns, or complaints about how we handle your personal data, or if you wish to exercise any of the data rights described in Section 7, please contact our dedicated data protection support team using the details below.

8.1 Privacy Support Contact

For all privacy-related enquiries, please contact tko9 using the following details:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Response Time: We aim to acknowledge all privacy enquiries within 48 hours and provide a full response within 30 calendar days.
• Support Hours: Our English-speaking support team is available 24 hours a day, 7 days a week, including Bangladesh public holidays.

8.2 Updates to This Privacy Policy

tko9 reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify registered users via a platform notification or by email to the address associated with your account. The "Effective Date" shown at the top of this policy reflects the date on which the most recent version came into effect. We recommend reviewing this Privacy Policy periodically to stay informed of how tko9 protects your data. Your continued use of the tko9 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.