dktk1 Privacy Policy – How We Handle Your Data

Privacy at a Glance

Here is a plain-language summary of the most important points in this Privacy Policy. The full sections below contain the complete legally binding text.

1. Introduction

dktk1 ("we", "us", "our") operates the online betting and casino platform available at https://dktk1.bet. We are committed to protecting the personal data of all users who interact with our platform, including players registered in Bangladesh and visitors who browse without registering. This Privacy Policy sets out what personal data we collect, the legal basis on which we process it, how it is used, with whom it may be shared, and the rights you have in relation to your data.

By registering an account on dktk1 or continuing to use the platform, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not consent, please do not register or continue using the dktk1 platform.

2. Information We Collect

We collect personal data in two ways: information you provide directly when you register or transact, and information collected automatically when you use the platform. The following table summarises the main categories:

We do not collect GPS location data, camera access, microphone access, or any biometric data. We do not collect the actual bKash PIN, Nagad PIN, or card CVV — payment authentication is handled entirely by the respective payment provider's secure gateway, not by dktk1 systems.

3. How We Use Your Information

dktk1 processes your personal data only for specific, legitimate purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent. The lawful bases and specific purposes for which we process your data are:

• Account administration: to create, maintain, and manage your dktk1 account, verify your identity, process your deposits and withdrawals in BDT, and communicate account-related updates such as security alerts and transaction confirmations.
• Service delivery: to provide access to the betting and casino features of the dktk1 platform, including cricket markets (BPL, IPL, T20 World Cup), live casino games, video slots, and crash games.
• Fraud prevention and security: to detect and prevent fraudulent transactions, money laundering, multiple-account abuse, and unauthorized account access. This includes automated analysis of betting patterns, transaction sequences, and device fingerprints.
• Legal and regulatory compliance: to comply with applicable anti-money-laundering requirements, to respond to lawful requests from law enforcement or regulatory authorities, and to enforce our Terms & Conditions.
• Responsible gaming: to monitor account activity for signs of problem gambling, to apply deposit limits or self-exclusion restrictions requested by the player, and to flag accounts that show patterns consistent with at-risk gambling behaviour.
• Service improvement: to analyse aggregated, anonymised usage data to improve the performance, reliability, and user experience of the dktk1 platform. Individual player data is never used for A/B testing without consent.

4. Payment Data and bKash / Nagad Processing

When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, or Upay, the transaction is initiated through the respective mobile financial service's secure API. dktk1 receives only the following from the payment gateway: a transaction reference number, the amount, the currency (BDT), and a success or failure status. dktk1 does not receive, process, or store your mobile banking PIN, one-time password (OTP), or any authentication credential used with your mobile wallet.

For Visa and Mastercard transactions, card data (card number, expiry, CVV) is entered directly into the card payment provider's PCI-DSS compliant interface. dktk1 does not store full card numbers or CVV codes on its systems. Tokenised card references may be stored solely to facilitate repeat transactions, subject to your consent.

5. Sharing Your Information

dktk1 does not sell, rent, or trade your personal data. We may share your data only with the following categories of parties, and only to the extent necessary for the stated purpose:

• Payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard gateway operators): transaction reference data is shared with these providers solely to process and reconcile your deposits and withdrawals. They operate under their own privacy policies and are independently regulated.
• Game content providers (Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Spribe, and similar): these providers supply the game engines and return aggregated RTP data to dktk1. Individual player identity is not shared with game providers — sessions are identified by an anonymised session token only.
• Identity verification and KYC service providers: where KYC document checks are required, identity documents may be processed by a third-party verification service operating under a strict data processing agreement with dktk1. Verification data is retained only for the minimum period required by applicable compliance rules.
• Law enforcement and regulatory authorities: dktk1 may disclose personal data where required to do so by applicable law, court order, or lawful request from a government authority. We will notify you of such disclosure where permitted by law.

All third parties who process personal data on behalf of dktk1 are required to do so under a written data processing agreement that prohibits them from using the data for their own commercial purposes and requires them to implement appropriate security measures.

6. Cookies and Tracking Technologies

dktk1 uses a limited set of cookies and similar browser-based storage mechanisms to make the platform function correctly and to understand how players use the site. We do not use third-party advertising cookies, social media tracking pixels, or cross-site behavioural targeting technologies. The cookies we use fall into three categories:

• Essential cookies: required for the platform to function. These include your session authentication token, language preference, and any active responsible gaming limits you have set. Without these cookies, the site cannot function. They cannot be disabled.
• Analytics cookies: used to measure how players navigate the platform — which pages are visited most often, where users drop off, and how long sessions last. Data collected via analytics cookies is aggregated and anonymised before analysis. No individual profile is built from analytics data.
• Preference cookies: used to remember your display settings, such as which language you last used on the platform. These cookies improve your experience on return visits but are not strictly essential to platform operation.

You can control cookie behaviour through your mobile browser settings. Disabling essential cookies will prevent the dktk1 platform from functioning; disabling analytics or preference cookies will not affect your ability to place bets or access your account.

7. Data Retention

dktk1 retains your personal data for as long as your account remains active and for a period thereafter as required to comply with applicable legal and regulatory obligations. As a general guide: account registration and identity data is retained for a minimum of 5 years from the date of account closure; transaction records are retained for a minimum of 5 years from the date of each transaction; technical log data (IP addresses, session logs) is retained for 12 months and then automatically deleted or anonymised.

When your account is closed, dktk1 will cease to use your data for marketing or operational purposes. Data retained solely for legal compliance purposes will be held in a restricted access environment and will not be used for any other purpose. At the end of the applicable retention period, data is securely deleted or irreversibly anonymised.

8. Your Rights

As a dktk1 account holder, you have the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request" and your registered phone number for identity verification:

• Right of access: you may request a copy of all personal data dktk1 holds about you. We will respond within 30 days of receiving a verified request. The copy will be provided in a machine-readable format where technically feasible.
• Right of rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Corrections to identity data may require supporting documentation.
• Right of erasure: you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where it has been processed unlawfully. This right is subject to dktk1's overriding legal obligation to retain certain data for the minimum statutory retention periods described above.
• Right to restrict processing: in certain circumstances (for example, while a rectification request is being assessed) you may request that dktk1 temporarily restrict the processing of your data to storage only.
• Right to object to marketing: if you have opted in to receive promotional communications from dktk1, you may withdraw that consent at any time by contacting [email protected]. Following your opt-out, we will cease sending marketing messages within 5 business days.

9. Security Measures

dktk1 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit between your device and dktk1 servers; encrypted storage of sensitive data fields at rest; access controls that restrict internal staff access to personal data on a strict need-to-know basis; regular security assessments of platform infrastructure; and automated alerts for unusual account activity patterns.

No method of electronic transmission or storage is 100% secure. While dktk1 uses commercially reasonable security practices, we cannot guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a high risk to your rights, dktk1 will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

10. Minors and Age Restrictions

dktk1 is strictly a 21+ platform. We do not knowingly collect personal data from individuals under the age of 21. If you are a parent or guardian and believe that a person under 21 has registered on dktk1 using false information, please contact [email protected] immediately. Upon receiving a verified report, dktk1 will suspend the account, void all associated transactions, return any deposited funds where technically possible, and delete the personal data of the underage individual from our systems.

11. Changes to This Privacy Policy

dktk1 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When material changes are made, we will update the "Last updated" date at the top of this page and, where feasible, notify registered players via their registered contact. Continued use of the dktk1 platform after the updated policy is published constitutes acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your data.