ttk11 Privacy Policy — Your Data, Protected

1 Introduction

This Privacy Policy ("Policy") describes how ttk11 ("ttk11", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("User", "Player", "you", "your") who access or use the ttk11 online gaming platform at ttk11.io and all associated sub-domains, mobile interfaces, and services (collectively, the "Platform").

ttk11 is committed to handling your personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. This Policy applies to all personal data collected through your use of the Platform, including data collected during registration, identity verification, deposits, withdrawals, gameplay, and customer support interactions.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. By registering an account or using the Platform, you confirm that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2 Data Controller

ttk11 is the data controller responsible for the personal data collected through the Platform. As data controller, ttk11 determines the purposes and means by which your personal data is processed. All enquiries relating to this Policy, including requests to exercise your data rights, should be directed to our designated privacy contact using the details provided in Section 15 of this Policy.

Where ttk11 engages third-party service providers to process personal data on its behalf (for example, payment processors or cloud infrastructure providers), those parties act as data processors under written contracts that require them to protect your data to the same standard as ttk11 and to process it only on ttk11's documented instructions.

3 Data We Collect

3.1 Identity and Contact Data

When you register an account on ttk11, we collect your full name, date of birth, mobile phone number, and email address. During KYC (Know Your Customer) verification — required before your first withdrawal — we additionally collect a copy of a government-issued photo ID (National ID Card, passport, or driving licence) and proof of address (a utility bill or bank statement dated within 90 days).

3.2 Financial Data

To process deposits and withdrawals, ttk11 collects the reference information associated with your chosen payment method. For mobile banking users (bKash, Nagad, Rocket, Upay), this includes the registered mobile number linked to your wallet. For cryptocurrency users, this includes your USDT TRC-20 wallet address. For bank transfer users, this includes your bank account name and number. Full card numbers and banking passwords are never collected or stored by ttk11.

3.3 Technical and Device Data

When you access the Platform, we automatically collect certain technical data including your IP address, device type and model, operating system version, browser type and version, screen resolution, time zone, and session timestamps. This data is essential for platform security, fraud prevention, and geo-compliance checks.

3.4 Usage and Gameplay Data

ttk11 logs your activity on the Platform, including game sessions played, bet amounts placed, wins and losses, sports markets viewed, promotional offers viewed and claimed, pages visited, and session duration. This data is used to monitor for problem gambling indicators, personalise your experience, and generate aggregate analytics that help us improve the Platform.

3.5 Communications Data

When you contact ttk11 support via live chat or email, we retain records of that correspondence including your name, account details, the nature of your enquiry, and the resolution reached. These records are retained for quality assurance and dispute resolution purposes.

4 How We Collect Data

ttk11 collects personal data through the following channels:

• Direct provision: Information you actively provide during account registration, KYC submission, deposit initiation, withdrawal requests, and support communications.
• Automated collection: Technical and usage data collected automatically via server logs, cookies, and similar tracking technologies when you access or use the Platform.
• Third-party payment providers: Confirmation data (transaction reference numbers, payment status) returned by payment processors upon completion of a deposit or withdrawal. ttk11 does not receive your full banking credentials from these providers.
• Identity verification services: Where ttk11 uses automated document verification tools to process KYC submissions, those tools may return a verification result and a confidence score, which is stored alongside your submitted documents.
• Fraud detection services: Aggregated risk signals from third-party fraud detection providers, which are used to assess account security and prevent unauthorised access. These signals do not constitute individual profiling for marketing purposes.

5 How We Use Your Data

ttk11 uses personal data only for the purposes listed below. We do not use personal data in ways that are incompatible with the purpose for which it was originally collected.

• To create, maintain, and manage your ttk11 account and verify your identity
• To process deposits and withdrawals via your chosen payment method
• To conduct KYC and anti-money laundering (AML) checks as required
• To deliver the Platform's games, sports betting markets, and associated features
• To monitor gameplay for responsible gaming indicators and enforce player protection measures
• To detect, investigate, and prevent fraud, cheating, collusion, and unauthorised account access
• To respond to your customer support requests and resolve complaints
• To send you account-related notifications (e.g., deposit confirmations, withdrawal approvals, security alerts)
• To send you marketing communications about promotions and offers, where you have opted in
• To personalise your Platform experience based on your preferences and gameplay history
• To generate aggregate, anonymised analytics that help us improve Platform performance
• To comply with our legal and regulatory obligations

6 Sharing Your Data

ttk11 does not sell or rent your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

6.1 Payment Service Providers

To process your deposits and withdrawals, ttk11 shares the minimum necessary transaction data with the relevant payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, USDT processors, Visa, Mastercard). These providers are contractually prohibited from using your data for any purpose other than completing the transaction.

6.2 Identity Verification Providers

KYC documents submitted to ttk11 may be processed by contracted identity verification service providers. These providers are bound by data processing agreements that restrict use of your data to the verification task only and require them to delete document images after verification is complete.

6.3 Game Technology Providers

Game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive a pseudonymous player identifier and session token to deliver game content within the Platform. Full identity data is not shared with game studios.

6.4 Legal and Regulatory Authorities

ttk11 may disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, when responding to a lawful order, or when disclosure is necessary to protect the safety and security of the Platform and its users.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ttk11's business, personal data held by ttk11 may be transferred to the acquiring entity as part of that transaction. Users will be notified of any such transfer and of any material changes to privacy practices that result from it.

7 Data Security

ttk11 employs a layered approach to data security that includes both technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration, or disclosure.

• All data transmitted between your device and the Platform is encrypted using 256-bit SSL/TLS protocols
• Account passwords are stored using industry-standard one-way cryptographic hashing — ttk11 staff cannot view your password
• Optional SMS-based two-factor authentication (2FA) is available to all registered users and is strongly recommended
• Platform infrastructure is hosted in data centres with physical access controls, redundant systems, and regular security audits
• Access to personal data within ttk11's internal systems is restricted to staff who require it to perform their job functions, governed by role-based access controls
• All staff with access to personal data are trained on data handling obligations and are bound by confidentiality agreements
• Regular penetration testing and vulnerability assessments are conducted on the Platform

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, ttk11 will notify affected users without undue delay using the contact details held on file, and will take all reasonable steps to contain and remediate the breach.

8 Data Retention

ttk11 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or audit obligations. The primary retention periods applicable to different categories of data are summarised in the Data Summary Table above (Section 3 introduction area).

Where your account is closed — whether at your request or by ttk11 — the following principles apply:

• Identity and contact data is retained for a minimum of five years after account closure to comply with anti-money laundering and fraud prevention obligations
• Financial transaction records are retained for a minimum of seven years after the transaction date in compliance with financial record-keeping requirements
• Gameplay and usage data is retained for three years post-closure for responsible gaming and dispute resolution purposes
• Marketing data is deleted promptly upon withdrawal of consent or account closure, whichever occurs first
• Technical log data (IP addresses, session logs) is retained on a rolling 12-month basis and then automatically purged

At the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our internal data lifecycle procedures.

9 Your Rights

As a user of the ttk11 Platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us using the details in Section 15.

• Right of Access: You may request a copy of the personal data ttk11 holds about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: You may request correction of any personal data that is inaccurate or incomplete. For minor details such as contact information, you may update these directly via your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Please note that this right is subject to overriding legal retention obligations (see Section 8).
• Right to Restriction: You may request that ttk11 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, on grounds relating to your particular situation.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Right Against Automated Decisions: You have the right to request human review of any automated decision that significantly affects you, including risk assessments and account restrictions triggered by automated fraud detection systems.

ttk11 will respond to all valid data rights requests within 30 days of receipt. Where a request is complex or where ttk11 receives a high volume of requests, this period may be extended by a further 60 days, in which case you will be notified of the extension and the reasons for it. There is no charge for exercising your data rights, except in cases where requests are manifestly unfounded or excessive, in which case ttk11 reserves the right to charge a reasonable administrative fee.

10 Cookies & Tracking Technologies

ttk11 uses cookies and similar tracking technologies (including local storage and session tokens) on the Platform. Cookies are small text files placed on your device that allow the Platform to recognise your browser and remember certain information across sessions.

10.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens that keep you securely logged in during a session, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Performance & Analytics Cookies: Used to collect aggregate, anonymised data about how users interact with the Platform — for example, which pages are visited most frequently and where users encounter errors. This information is used solely to improve Platform performance.
• Functionality Cookies: Store your preferences such as language selection, display settings, and preferred payment method to provide a more personalised experience across sessions.
• Responsible Gaming Cookies: Used to track session duration and gameplay activity thresholds for responsible gaming monitoring purposes. These cookies help enforce deposit limits, time-out periods, and self-exclusion settings that you have configured.

10.2 Managing Cookies

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling cookies may affect the functionality of the Platform. Instructions for managing cookies in the most commonly used browsers are available via the help sections of Chrome, Firefox, Safari, and Edge. Disabling strictly necessary cookies will prevent you from logging in to your ttk11 account.

11 Minors & Age Verification

The ttk11 Platform is strictly intended for adults aged 21 years and above. ttk11 does not knowingly collect personal data from individuals under the age of 21. All new accounts are subject to age verification as part of the KYC process, and accounts where the user is found to be under 21 will be immediately closed and any funds held will be returned via the original payment method after deduction of any fraudulently obtained bonuses.

If you are a parent or guardian and believe that a minor has registered an account on ttk11 or has provided personal data to the Platform without your consent, please contact us immediately at [email protected]. We will investigate and take appropriate action, including the deletion of any data collected in violation of this Policy, within 72 hours of receiving your report.

12 International Data Transfers

In order to deliver the Platform and its associated services, ttk11 may transfer personal data to service providers and infrastructure partners located outside Bangladesh. Where such transfers occur, ttk11 ensures that appropriate safeguards are in place to maintain a level of data protection equivalent to the standards described in this Policy.

These safeguards include the use of standard contractual clauses incorporated into data processing agreements with all third-party service providers who process personal data on ttk11's behalf, as well as due-diligence assessments of those providers' security practices prior to engagement and on a periodic basis thereafter.

ttk11 does not transfer personal data to jurisdictions that do not provide adequate data protection unless the contractual safeguards described above are confirmed to be in place. If you would like further information about the specific safeguards applied to international transfers of your data, please contact us at [email protected].

13 Marketing Communications

ttk11 sends promotional emails, SMS notifications, and in-platform messages about bonuses, tournaments, seasonal promotions (including Eid, Pohela Boishakh, and BPL cricket season offers), and new game launches only to users who have explicitly opted in to receive such communications during account registration or via their account preferences settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your notification preferences in the "Account Settings" section of the Platform
• Clicking the unsubscribe link included at the bottom of every marketing email
• Contacting our support team at [email protected] with a written opt-out request

Withdrawal of marketing consent will be processed within 5 business days. Please note that even after opting out of marketing communications, you will continue to receive transactional messages related to your account (deposit confirmations, withdrawal notifications, security alerts, and support responses), as these are necessary for the operation of your account and cannot be disabled.

14 Changes to This Policy

ttk11 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When material changes are made to this Policy, registered users will be notified via the email address associated with their account at least 7 days before the updated Policy takes effect, where reasonably practicable.

The effective date displayed at the top of this page will be updated each time the Policy is revised. We encourage you to review this page periodically to stay informed about how ttk11 protects your data. Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must cease using the Platform and may request account closure by contacting our support team.

Non-material changes — such as typographical corrections, clarifications that do not alter the substance of the Policy, or updates to contact details — may be made without prior notice and will take effect immediately upon publication.

15 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy, the personal data ttk11 holds about you, or the exercise of any of your data rights, please contact our dedicated privacy team using the details below. All correspondence should be in English and include your registered username and a clear description of your request or concern.

• Email: [email protected] (plain text — not a clickable link)
• Support hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (UTC+6)
• Live chat: available via the Platform when logged in to your account
• Correspondence address: available upon written request to [email protected]