tikj Privacy Policy — How We Collect, Use, and Protect Your Personal Data
This Privacy Policy explains in full how tikj collects, processes, stores, and protects the personal information of players registered on the tikj platform. It applies to all users of tikj.io, including those accessing via mobile devices in Dhaka, Chittagong, Sylhet, and across Bangladesh. Please read this document carefully before registering your tikj account.
Summary: tikj collects personal data necessary to operate your account, process payments via bKash, Nagad, Rocket, and Upay, verify your identity, and comply with applicable legal obligations. We do not sell your personal data to third parties. All data is protected using 256-bit SSL encryption. You retain the right to access, correct, and request deletion of your data at any time.
Overview
tikj ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every individual who uses tikj.io. This Privacy Policy sets out the categories of personal data we collect, the purposes for which we process that data, the legal bases upon which we rely, how long we retain data, your rights as a data subject, and how you can exercise those rights.
This Policy applies to all visitors to tikj.io, all registered tikj players, and all individuals who interact with tikj through any channel, including email correspondence directed to [email protected]. By registering a tikj account or by continuing to use the platform after this Policy has been updated, you acknowledge that you have read and understood its contents.
This Privacy Policy should be read alongside the tikj Terms & Conditions, which govern the overall contractual relationship between you and the platform, and the Responsible Gaming policy, both of which are accessible from the footer of every page on tikj.io.
Data Controller
For the purposes of this Privacy Policy, tikj is the data controller responsible for the personal data collected and processed through tikj.io. As data controller, tikj determines the purposes and means of processing your personal information in accordance with the obligations described in this document.
All data-related enquiries, access requests, correction requests, and deletion requests should be directed to the tikj data protection contact at the email address listed in Section 14 of this Policy. tikj will acknowledge all formal data requests within five (5) business days and aim to resolve them within thirty (30) calendar days of receipt.
Personal Data We Collect
tikj collects only the personal data that is necessary and proportionate to the purposes described in this Policy. The categories of personal data we collect are set out in the table below:
| Category | Data Items | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, national ID number, passport number, photograph | Account registration, age verification (21+), KYC compliance |
| Contact Data | Email address, mobile phone number, residential address, district/division (e.g., Dhaka, Sylhet, Chittagong) | Account communications, withdrawal notifications, support correspondence |
| Financial Data | bKash/Nagad/Rocket/Upay mobile wallet numbers, Visa/Mastercard last four digits, transaction history, deposit and withdrawal amounts in BDT | Payment processing, fraud prevention, AML compliance |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, session duration, cookie identifiers | Platform security, fraud detection, service optimisation |
| Usage Data | Games played, bet history, wagering frequency, session times, bonus usage, responsible gaming tool activations | Account management, responsible gaming monitoring, personalisation |
| Communications Data | Support tickets, live chat transcripts, emails sent to [email protected] | Customer service delivery, dispute resolution, quality assurance |
tikj does not collect or store full payment card numbers. Card transactions are processed by certified payment gateways that operate under their own data security standards. tikj retains only masked card references (last four digits) for payment method identification purposes.
How We Collect Your Data
tikj collects personal data through the following channels:
- Direct Submission: Data you provide when registering a tikj account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
- Automated Collection: Technical and usage data collected automatically as you navigate tikj.io, including through cookies, web beacons, server logs, and similar tracking technologies. See Section 10 for full details on cookies.
- Payment Providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Visa, and Mastercard when you initiate a deposit or withdrawal. This data is limited to transaction references, amounts, timestamps, and masked account identifiers.
- Identity Verification Services: Where tikj uses a third-party KYC provider to verify identity documents, that provider may return a verification status, confidence score, and document authenticity flag. tikj does not receive raw document images from these providers beyond what you submit directly.
- Fraud Prevention Partners: Technical signals (IP reputation, device fingerprint) shared with fraud prevention services to protect the integrity of the platform and the security of all player accounts.
How We Use Your Personal Data
tikj processes personal data for the following clearly defined purposes. We process only the minimum data necessary for each purpose and do not use data collected for one purpose in an incompatible manner for another.
5.1 Account Management. To create, maintain, verify, and administer your tikj player account, including processing your registration details, managing your account balance in BDT, and handling account security settings.
5.2 Payment Processing. To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, to reconcile transaction records, and to investigate and resolve payment disputes. All financial data processed for this purpose is handled in accordance with the security standards required by the relevant payment network.
5.3 Identity Verification & KYC Compliance. To verify that you are who you claim to be, that you are aged 21 or above, and that you are not subject to any account restriction or exclusion. Identity verification is a condition of withdrawal processing and may be requested at any stage of the account lifecycle.
5.4 Legal & Regulatory Compliance. To comply with applicable legal obligations, including anti-money laundering (AML) requirements, record-keeping obligations, and responses to lawful requests from regulatory or law enforcement authorities.
5.5 Fraud Prevention & Platform Security. To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in the tikj Terms & Conditions.
5.6 Customer Support. To respond to your enquiries, resolve disputes, and maintain records of support interactions for quality assurance and training purposes.
5.7 Responsible Gaming. To monitor account activity for indicators of problem gambling behaviour, to administer responsible gaming tools you have activated (including deposit limits, cooling-off periods, and self-exclusion), and to communicate with you regarding responsible gaming resources where appropriate.
5.8 Marketing Communications. To send you promotional communications about tikj offers, seasonal promotions (such as BPL season or Eid campaigns), and platform updates, where you have provided your explicit consent to receive such communications. You may withdraw this consent at any time by contacting [email protected].
Legal Basis for Processing
tikj processes personal data in accordance with recognised legal bases. The primary legal bases we rely upon are as follows:
- Contractual Necessity: Processing that is necessary to perform our obligations under the tikj Terms & Conditions, including account registration, payment processing, and bet settlement.
- Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC, AML, and record-keeping obligations.
- Legitimate Interests: Processing for the purposes of fraud prevention, platform security, responsible gaming monitoring, and service improvement, where our legitimate interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing for direct marketing communications, where consent has been freely given, specific, informed, and unambiguous. You may withdraw consent at any time without affecting the lawfulness of prior processing.
Data Sharing & Third Parties
tikj does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data with third parties only in the following circumstances, and only to the extent necessary for each purpose:
- Payment Processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and security frameworks.
- Identity Verification Providers: Third-party KYC service providers receive the identity documents and personal details you submit for verification purposes. These providers are contractually required to handle your data securely and to use it solely for the verification purpose for which it was shared.
- Fraud Prevention Services: Technical signals including IP address and device identifiers may be shared with fraud prevention partners to protect the platform and all players from fraudulent activity.
- Game Content Providers: Providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi receive a session token and basic account identifier when you launch a game. They do not receive your full personal profile, financial data, or contact details.
- Legal & Regulatory Authorities: tikj will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a valid court order, or a lawful regulatory request. Where legally permissible, tikj will notify you of such a disclosure.
No Data Sales: tikj does not and will not sell your personal data to data brokers, advertising networks, or any other commercial third party. Your data is used exclusively to operate your tikj account and to comply with our legal obligations.
Data Retention
tikj retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The principal retention periods applied by tikj are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account plus 5 years after closure | Legal obligation (AML / KYC record-keeping) |
| Transaction records (deposits, withdrawals, bets) | 7 years from transaction date | Legal obligation (financial record-keeping) |
| Identity verification documents | 5 years after account closure or last KYC refresh | Legal obligation (AML compliance) |
| Customer support communications | 3 years from last interaction | Legitimate interests (dispute resolution) |
| Marketing consent records | Until consent is withdrawn plus 2 years | Legal obligation (consent record-keeping) |
| Technical / server log data | 13 months from collection date | Legitimate interests (security, fraud detection) |
| Self-exclusion records | Duration of exclusion plus 7 years | Legal obligation (responsible gaming compliance) |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.
Security Measures
tikj employs a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
- 256-Bit SSL/TLS Encryption: All data transmitted between your device and the tikj servers is encrypted using 256-bit SSL/TLS protocols. This applies to account login, payment submissions, and all API communications.
- Encrypted Data Storage: Sensitive personal data, including identity verification records and financial data, is stored in encrypted form on secured servers with access restricted to authorised personnel only.
- Access Controls: tikj applies role-based access controls so that employees can access only the personal data necessary for their specific job function. All data access is logged and subject to periodic review.
- Two-Factor Authentication: tikj offers optional two-factor authentication (2FA) for player accounts, adding an additional layer of protection against unauthorised account access.
- Regular Security Audits: The tikj platform and its underlying infrastructure are subject to regular internal security assessments and periodic third-party penetration testing.
- Incident Response: In the event of a confirmed personal data breach that poses a risk to player rights, tikj will notify affected players without undue delay and will take immediate remediation steps.
While tikj implements robust security measures, no internet-based platform can guarantee absolute security. Players are strongly encouraged to use a strong, unique password for their tikj account, to enable two-factor authentication, and to contact [email protected] immediately if they suspect any unauthorised access to their account.
Cookies & Tracking Technologies
tikj uses cookies and similar tracking technologies on tikj.io to ensure the platform functions correctly, to maintain your session while you are logged in, to protect against cross-site request forgery (CSRF), and to analyse how players use the platform so that we can improve the experience.
10.1 Strictly Necessary Cookies. These cookies are essential for the platform to operate and cannot be disabled. They include session cookies that maintain your logged-in state and security cookies that protect against common web attacks. No consent is required for these cookies.
10.2 Functional Cookies. These cookies remember your preferences such as your last visited game category, language settings, and responsible gaming tool configurations. Disabling these cookies may affect your experience on the platform.
10.3 Analytics Cookies. tikj uses anonymised analytics data to understand platform usage patterns, identify technical issues, and prioritise product improvements. Analytics data is aggregated and does not identify individual players by name.
10.4 Cookie Duration. Session cookies expire when you close your browser. Persistent cookies used for preference and analytics purposes are retained for a maximum of 13 months from the date of their last update, after which they are automatically deleted.
You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the tikj platform, including the ability to remain logged in during a session.
Your Data Rights
As a tikj player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact tikj at [email protected] with the subject line "Data Rights Request" and your registered account username.
- Right of Access: You have the right to request a copy of the personal data tikj holds about you. tikj will provide this information within 30 calendar days of a verified request.
- Right to Rectification: If any personal data tikj holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly through the tikj account dashboard.
- Right to Erasure: Subject to our legal retention obligations described in Section 8, you have the right to request deletion of your personal data. Where a legal obligation requires tikj to retain certain data beyond the duration of your account, we will inform you of the applicable retention period.
- Right to Restrict Processing: In certain circumstances, you have the right to request that tikj restrict the processing of your personal data — for example, while a rectification request is being assessed.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another service provider where technically feasible.
- Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including direct marketing. Upon receipt of a valid objection to marketing, tikj will cease processing your data for that purpose immediately.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
Minors & Age Policy
The tikj platform is strictly intended for individuals aged 21 years or older. tikj does not knowingly collect or process personal data from any person under the age of 21. Age verification is a mandatory step in the account registration and KYC process. Any account found to belong to an individual under the age of 21 will be immediately closed, all associated personal data will be deleted, deposits will be returned where feasible, and any winnings will be voided.
If you have reason to believe that a person under the age of 21 has registered a tikj account or is using the platform, please report this immediately to [email protected]. tikj takes underage gambling extremely seriously and will take prompt action upon receiving any credible report.
For Parents and Guardians: If you share a device with individuals under the age of 21, tikj strongly recommends enabling device-level parental controls and ensuring that your tikj account credentials are not accessible to minors. tikj accepts no liability for use of the platform by underage individuals where the registered account holder has failed to secure their account credentials.
Updates to This Privacy Policy
tikj reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. When a material change is made to this Policy, tikj will notify registered players via the email address associated with their account and will update the "Last Updated" date at the top of this page.
Continued use of the tikj platform following notification of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should cease using the platform and may request account closure by contacting [email protected]. Your data will continue to be retained for the periods specified in Section 8, as required by applicable law, regardless of account closure.
Contact Us
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about how tikj has handled your personal data, please contact the tikj data protection team using the details below. All communications regarding privacy and data protection should be addressed as follows:
Email: [email protected] — Please use the subject line "Privacy Enquiry" or "Data Rights Request" and include your registered account username and a clear description of your request. tikj aims to acknowledge all privacy-related communications within five (5) business days.
For queries specifically related to responsible gaming tools, self-exclusion, deposit limits, or session controls, please visit the tikj Responsible Gaming page at tikj.io/responsible-gaming, where these tools are available directly within your account dashboard immediately after login.
How tikj Keeps Your Data Safe
Behind the legal language, these are the practical steps tikj takes every day to protect the personal data of players across Bangladesh.
256-Bit SSL on Every Page
From account login to BDT payment processing, every interaction on tikj.io is protected by 256-bit SSL/TLS encryption. Your credentials and financial data are never transmitted in plain text.
We Never Sell Your Data
tikj does not sell, rent, or trade your personal data to third parties for their own commercial use. Your data is used exclusively to operate your account and to meet our legal obligations.
Strict 21+ Age Verification
tikj applies a mandatory KYC process to verify that every registered player is aged 21 or older. Identity data is handled with strict confidentiality and deleted according to the retention schedule in Section 8.
Secure Local Payment Channels
bKash, Nagad, Rocket, and Upay transactions are processed via encrypted payment gateways. tikj never stores full wallet credentials — only masked transaction references are retained.
Role-Based Access Controls
Internal access to player data is restricted on a strict need-to-know basis. Every data access event is logged, and access privileges are reviewed regularly to minimise exposure risk.
Full Data Rights for Every Player
You can request access to, correction of, or deletion of your personal data at any time by contacting [email protected]. tikj responds to all verified data rights requests within 30 calendar days.
Questions About Your tikj Account or Data?
Review the FAQ for quick answers, explore the tikj Casino, or visit the Terms & Conditions page for the full legal framework governing your account.
Gambling involves risk. Please play within your means. For privacy enquiries contact [email protected]