2tk10 Privacy Policy

Introduction

2tk10 is Bangladesh's leading online betting and casino platform, providing cricket betting, live casino games, slots, crash games, and a broad range of sports wagering markets to players primarily based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh. The 2tk10 platform is operated with a strong commitment to data protection, transparency, and the responsible handling of all personal information entrusted to us by our players.

This Privacy Policy sets out, in plain and accessible English, the complete picture of how 2tk10 handles personal data. It covers what data we collect, why we collect it, how long we keep it, who we may share it with, what security measures we apply to protect it, and what rights you have as a data subject.

This policy is effective from January 2026 and supersedes all prior versions of the 2tk10 Privacy Policy. It applies to all personal data collected through the 2tk10 website at 2tk10.io, through our customer support channels, and through any affiliated services directly operated by 2tk10. It does not apply to the data practices of third-party game providers (such as Evolution Gaming, Pragmatic Play, or Spribe) whose privacy policies govern their own independent data processing activities.

We encourage all 2tk10 players to read this Privacy Policy carefully before registering an account. If you have any questions about our data practices that are not addressed here, please contact our support team at [email protected] and we will respond promptly in English.

Data We Collect

2tk10 collects personal data through several channels: directly from you when you register and use the platform; automatically through your use of the website; and from third-party service providers where necessary to verify your identity or process payments. The categories of data we collect include:

Identity and Registration Data

When you create a 2tk10 account, we collect your full legal name, date of birth, nationality, a copy of your government-issued photo identification (such as a National ID card or passport), and your chosen username. This information is required to verify that you meet the minimum age requirement of 21 years and to confirm your identity in compliance with our know-your-customer (KYC) obligations.

Contact and Address Data

We collect your email address, mobile phone number, and residential address. Email and phone number are used for account security communications (such as login alerts and two-factor authentication), transactional notifications (such as deposit confirmations and withdrawal updates), and — where you have consented — promotional communications about 2tk10 offers and new features.

Financial and Payment Data

To facilitate deposits and withdrawals, 2tk10 collects financial information including your registered bKash account number, Nagad number, Rocket number, Upay number, or relevant bank account details (Dutch-Bangla Bank, BRAC Bank, or other supported institutions). We do not store full payment card numbers on our own servers; card details are processed directly by our certified payment processor partners using PCI-DSS-compliant infrastructure.

Betting and Gaming Activity Data

2tk10 records your complete betting history, casino game history, deposit and withdrawal transactions, bonus claim history, session durations, and responsible gaming tool usage (including any deposit limits, cooling-off periods, or self-exclusion requests you have activated). This data is essential for the operation of your account, dispute resolution, fraud detection, and our regulatory compliance obligations.

Technical and Device Data

When you access 2tk10 through any device, we automatically collect certain technical data including your IP address, browser type and version, operating system, device type (mobile, tablet, or desktop), screen resolution, referring website URL, pages visited within 2tk10, time spent on each page, and error logs. This data is used for platform optimisation, fraud detection, and security monitoring.

How We Use Your Data

2tk10 uses the personal data we collect exclusively for the purposes described in this Privacy Policy. We do not use your data for purposes that are incompatible with those stated below. The primary purposes for which 2tk10 processes personal data are:

• Account Creation and Management: To register your 2tk10 account, verify your identity, maintain your account profile, and provide you with access to the platform's full range of betting and gaming features.
• Transaction Processing: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported Bangladeshi bank accounts; to maintain accurate financial records of all transactions; and to investigate and resolve payment disputes.
• KYC and Age Verification: To verify that you meet the minimum age requirement of 21 years and to confirm that the identity you have registered matches the payment methods associated with your account, in compliance with our anti-money-laundering obligations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, collusion, bonus abuse, and any other activity that violates our Terms & Conditions or applicable law. Technical and behavioural data is analysed by our security systems on an ongoing basis to identify anomalous patterns.
• Responsible Gaming: To monitor betting and gaming behaviour for signs of problem gambling; to enforce deposit limits, session reminders, cooling-off periods, and self-exclusion requests that you activate; and to fulfil our duty of care obligations to players across Bangladesh.
• Customer Support: To respond to your support requests, resolve account queries, investigate disputes, and maintain records of our communications with you for quality assurance and compliance purposes.
• Marketing Communications: Where you have provided explicit consent, to send you promotional emails, SMS notifications, and platform messages about 2tk10 bonuses, new game releases, and special events such as BPL cricket promotions and Eid seasonal offers. You may withdraw consent at any time.
• Platform Improvement: To analyse aggregated and anonymised usage data in order to improve the 2tk10 platform's performance, usability, game selection, and overall player experience.

Legal Basis for Processing

2tk10 processes your personal data on the following legal grounds, depending on the specific purpose of each processing activity:

Where 2tk10 relies on consent as the legal basis for any processing activity, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal. Withdrawal of consent to marketing does not affect your ability to continue using the 2tk10 platform for betting and gaming purposes.

Cookies & Tracking Technologies

2tk10 uses cookies and similar tracking technologies to operate the platform, maintain session continuity, detect fraud, and analyse usage patterns. A cookie is a small text file placed on your device by the 2tk10 website when you visit. The types of cookies used by 2tk10 are as follows:

• Strictly Necessary Cookies: These are essential for the operation of the 2tk10 platform. They enable core functions such as maintaining your login session, remembering your language preference, and ensuring secure transmission of financial transactions. These cookies cannot be disabled without preventing you from using key platform features.
• Performance and Analytics Cookies: These cookies collect anonymised data about how visitors interact with the 2tk10 website, including which pages are visited most frequently, how long users spend on each section, and where navigation paths lead. This data helps us identify areas for improvement and optimise the platform for Bangladeshi mobile users who represent the majority of our traffic.
• Functionality Cookies: These cookies remember your personal preferences on the 2tk10 platform, such as your preferred sports category, recently viewed games, and display settings. They improve the personalisation and convenience of your experience on the platform.
• Security and Fraud Detection Cookies: These cookies help 2tk10's security systems identify and flag unusual activity, including login attempts from unrecognised devices, multiple simultaneous sessions, and patterns consistent with automated bot activity or bonus abuse.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies may impair or prevent your use of the 2tk10 platform. 2tk10 does not use third-party advertising cookies or behavioural targeting cookies for the purpose of serving ads on external websites.

Third-Party Data Sharing

2tk10 does not sell your personal data to any third party. We share personal data only in the following limited circumstances, and only to the extent strictly necessary for the stated purpose:

• Payment Processing Partners: To facilitate your deposits and withdrawals, we share the minimum necessary financial information with our payment processing partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and BRAC Bank. These partners are contractually required to use your data solely to process the relevant transaction and to maintain the same standards of data security as 2tk10.
• Game Technology Providers: Third-party game studios including Evolution Gaming, Pragmatic Play, Pragmatic Play Live, Ezugi, NetEnt, Microgaming, and Spribe may receive limited technical identifiers (such as a pseudonymous player session token) to facilitate the delivery of their games within the 2tk10 platform. These providers do not receive your full identity data, payment information, or contact details unless independently required for their own regulatory compliance.
• Identity Verification Services: For KYC verification purposes, 2tk10 may share copies of identity documents with certified third-party identity verification service providers. These providers process your documents on our behalf under strict data processing agreements and are not permitted to retain or use your documents for any other purpose.
• Fraud Prevention Networks: 2tk10 participates in industry fraud prevention networks. We may share indicators of fraudulent activity (such as device fingerprints and IP address patterns associated with confirmed fraud) with other platform operators within these networks, without sharing identifiable personal details, in order to protect the broader player community.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or regulatory directive, 2tk10 may be required to disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities. In such cases, 2tk10 will disclose only the minimum data required by the specific legal obligation and, where permitted, will notify the affected player.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of 2tk10's assets, your personal data may be transferred to the acquiring entity as part of the transaction. In such an event, 2tk10 will notify registered players in advance and ensure that the acquiring entity is bound by privacy obligations equivalent to those set out in this policy.

Data Retention

2tk10 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, to comply with our legal obligations, and to resolve any disputes or enforce our agreements. The following retention periods apply as a general guide:

When personal data is no longer required for any of the above purposes and no mandatory retention obligation applies, 2tk10 will securely delete or anonymise the data so that it can no longer be attributed to any individual player. Anonymised, aggregated data may be retained indefinitely for platform analytics purposes.

Data Security

2tk10 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• Encryption in Transit: All data exchanged between your browser or mobile device and the 2tk10 platform is encrypted using TLS 1.2 or higher, with 256-bit SSL certificates. This ensures that your login credentials, payment details, and personal information cannot be read by any party intercepting the data in transit.
• Encryption at Rest: Personal data stored on 2tk10 servers — including identity documents, financial records, and account details — is encrypted using AES-256 encryption. Database access is restricted to authorised personnel only, using role-based access controls and multi-factor authentication.
• Password Security: Your 2tk10 account password is stored exclusively in hashed form using a one-way cryptographic hashing algorithm. 2tk10 staff cannot access your password in plain text under any circumstances. You are strongly encouraged to use a unique, complex password for your 2tk10 account.
• Access Controls: Access to player personal data is limited on a strict need-to-know basis. Only authorised 2tk10 personnel who require access to perform their job functions are granted access to personal data systems, and all such access is logged and regularly audited.
• Intrusion Detection: 2tk10 operates continuous intrusion detection and anomaly monitoring systems across its infrastructure. Any suspicious activity triggering security alerts is investigated immediately by our security team, and affected players are notified promptly where a breach involving their personal data is confirmed.
• Data Breach Response: In the event of a confirmed personal data breach that poses a risk to player rights or freedoms, 2tk10 will notify affected players without undue delay and will provide clear information about the nature of the breach, the data affected, and the remedial steps being taken.

While 2tk10 takes all reasonable and practicable steps to protect your personal data, no digital system can be guaranteed to be completely impenetrable. Players are encouraged to protect their own accounts by using strong, unique passwords, enabling two-factor authentication where available, and notifying [email protected] immediately if they suspect any unauthorised access to their account.

Your Privacy Rights

As a 2tk10 player, you hold a number of rights in relation to the personal data we hold about you. 2tk10 is committed to honouring these rights promptly and transparently. Your rights include:

• Right of Access: You may request a copy of all personal data that 2tk10 holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of receiving a verified request.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated. Account name and date-of-birth corrections require identity re-verification to prevent fraud.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to mandatory legal retention obligations such as financial record-keeping requirements.
• Right to Restriction of Processing: You may request that we restrict our use of your personal data in certain circumstances — for example, while the accuracy of data is being contested or while an objection to processing is being assessed.
• Right to Data Portability: You may request that we provide your personal data in a portable format so that you can transfer it to another service provider. This right applies to data you have provided directly to 2tk10 and that we process on the basis of your consent or for performance of our contract with you.
• Right to Object: You may object at any time to our processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, though we will need to assess whether our legitimate interests override your objection in a given case.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of processing undertaken before the withdrawal.

To exercise any of the above rights, please contact our data team at [email protected], stating your full registered name, registered email address, and the specific right you wish to exercise. We will respond within 30 days. We may need to verify your identity before processing certain requests to protect against unauthorised access to your data.

Children's Privacy

2tk10 is strictly an adult platform. Access to 2tk10 is permitted only to persons who are at least 21 years of age. We do not knowingly collect personal data from any individual under the age of 21. Age verification is conducted for all depositing accounts as part of our mandatory KYC process.

If 2tk10 becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete all associated personal data, and refund any deposited funds to the original payment method following standard verification. If you believe a minor has registered on 2tk10, please report this to [email protected] immediately.

International Data Transfers

The 2tk10 platform serves players primarily based in Bangladesh. Our primary data storage and processing infrastructure is designed to serve this market. However, certain third-party service providers — including game technology providers, fraud prevention network partners, and identity verification services — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred to a third party operating in another country, 2tk10 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. These safeguards include contractual data processing agreements that impose data protection obligations on the receiving party consistent with recognised international standards.

By using the 2tk10 platform, you acknowledge that your personal data may be processed in countries other than Bangladesh where 2tk10's third-party service providers operate, subject to the safeguards described above.

Policy Updates

2tk10 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or the introduction of new platform features that involve personal data processing. When material changes are made to this policy, we will notify registered players by email to the address associated with their account and will display a prominent notice on the 2tk10 platform for a reasonable period prior to the changes taking effect.

The date of the most recent update will always be displayed at the top of this page. We encourage you to review the Privacy Policy periodically to remain informed about how 2tk10 handles your personal data. Your continued use of the 2tk10 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

If you disagree with any changes to this Privacy Policy, you should stop using the 2tk10 platform and contact [email protected] to request closure of your account and deletion of your personal data, subject to our mandatory retention obligations.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 2tk10 handles your personal data, please contact our dedicated support team using the details below. We are committed to responding to all privacy-related enquiries within 30 days and to resolving any concerns in a transparent and fair manner.

Our English-speaking data support team is available around the clock to assist players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other regions of Bangladesh.

When submitting a data access, rectification, erasure, or portability request, please provide your full registered name, registered email address, and a brief description of the specific request. Identity verification may be required before we can action certain requests in order to protect your account from unauthorised third-party access.

2tk10 takes all privacy complaints seriously. If you feel that your concern has not been adequately addressed after contacting our support team, you may escalate the matter through the appropriate channels available to you under applicable law in your jurisdiction.