3tk10 Privacy
Policy

Section 1 Information We Collect

3tk10 collects personal data from you through several channels: directly when you register an account, when you use the platform's features, when you contact our support team, and automatically through the technical operation of our website. Below we set out each category of data we collect and the specific circumstances under which it is gathered.

1.1 Registration Data

When you create a 3tk10 account, we collect the following mandatory information: your full legal name, date of birth, country and city of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi), mobile phone number, and email address. This data is used to establish your player identity, verify your age eligibility (18+), and maintain your account record. Providing false registration information constitutes a breach of our Terms & Conditions and may result in permanent account closure.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) compliance process, we may collect documentary evidence of your identity. Accepted documents include Bangladesh National Identity Card (NID), passport, and driving licence. We may also collect a recent utility bill or bank statement as proof of address. These documents are processed solely for identity verification purposes and are stored securely under strict access controls.

1.3 Financial and Transaction Data

When you make deposits or withdrawals through payment methods including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank, we collect records of those transactions. This includes the transaction amount in Bangladeshi Taka (৳), the payment method used, transaction reference numbers, and timestamps. We do not store full payment credentials such as card numbers, bKash PINs, or mobile banking passwords.

1.4 Gameplay and Wagering Data

We record detailed logs of your betting and gaming activity on 3tk10, including sports bets placed on cricket (BPL, IPL, T20, Bangladesh Tigers), casino game sessions, stake amounts, outcomes, and bonus usage. This data is used to operate the platform, resolve disputes, detect fraud, and — with your consent — personalise your gaming experience.

1.5 Technical and Device Data

Our systems automatically collect certain technical data when you access the 3tk10 platform, including: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, referring URL, pages visited, session duration, and clickstream data. This information is used for platform security, fraud prevention, and performance optimisation.

1.6 Communications Data

If you contact our customer support team via live chat, email, or any other channel, we retain records of those communications for quality assurance, dispute resolution, and compliance purposes. This includes the content of messages sent to [email protected] and any attachments you provide.

Section 2 How We Use Your Data

Purpose	Data Used	Basis
Account creation and management	Registration data, KYC documents	Contract performance
Age and identity verification	Date of birth, NID/passport	Legal obligation
Processing deposits and withdrawals	Transaction data, payment method details	Contract performance
Fraud and money laundering prevention	All categories, device data	Legal obligation, legitimate interest
Customer support and dispute resolution	Communications data, account history	Contract performance
Platform security and technical operation	Technical and device data	Legitimate interest
Responsible gaming compliance	Gameplay data, financial data	Legal obligation, legitimate interest
Personalised promotions (where consented)	Gameplay data, communication preferences	Consent
Legal and regulatory compliance	All categories as required	Legal obligation

Where 3tk10 processes your data on the basis of consent — such as for personalised promotional communications — you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

Section 3 Legal Basis for Processing

3tk10 processes your personal data under the following legal bases, each of which applies to the specific processing activities described in Section 2:

• Contract Performance: Processing is necessary to fulfil our contractual obligations to you as a registered player — including account management, payment processing, and delivery of gaming services.
• Legal Obligation: We are required by applicable law to collect and retain certain data, including identity verification records for anti-money laundering (AML) compliance, age verification, and responsible gaming obligations.
• Legitimate Interest: We process certain data to pursue our legitimate business interests, including fraud prevention, platform security, abuse detection, and analytical improvements — provided that these interests are not overridden by your privacy rights.
• Consent: Where we send you direct marketing communications or use non-essential cookies, we do so only with your explicit consent. You may withdraw this consent at any time without penalty.

Section 4 Cookies & Tracking Technologies

3tk10 uses cookies and similar tracking technologies on its platform to ensure correct functionality, maintain session security, and gather anonymised usage statistics. A cookie is a small text file placed on your device by a web server. It cannot execute programs and cannot deliver viruses to your device.

4.1 Categories of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the platform to function correctly. They enable core features such as secure login sessions, page navigation, and access to protected account areas. These cookies cannot be disabled without preventing the platform from operating normally.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, display settings, and deposit method history — to provide a more personalised and efficient experience on return visits.
• Analytical Cookies: We use anonymised analytical cookies to understand how players interact with the 3tk10 platform — including which pages are visited most frequently, where users encounter difficulties, and how long sessions typically last. This data is used to improve platform design and usability.
• Security Cookies: These cookies support our fraud detection systems by recording device fingerprint data and session activity patterns, helping us identify potentially compromised accounts or suspicious activity in real time.

4.2 Managing Cookies

You may control and manage cookies through your browser settings. Most modern browsers allow you to refuse all or certain categories of cookies, delete existing cookies, or receive notifications before a cookie is stored. Please note that disabling strictly necessary cookies will impair or entirely prevent your ability to use the 3tk10 platform. Disabling functional or analytical cookies will not affect core platform access but may reduce the quality of your experience.

Section 5 Data Sharing & Disclosure

3tk10 may share your personal data with the following categories of recipients in the circumstances described:

• Payment Processing Partners: Your transaction data is shared with payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard and affiliated banking partners) to the extent necessary to process your requested financial transactions. These providers operate under their own privacy policies and data security standards.
• Game Content Providers: To deliver casino games from studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, certain session data (e.g., player ID, stake amount, game outcome) is shared with the relevant provider's systems in real time. These studios do not receive your full personal profile.
• Identity Verification Services: KYC document verification may be carried out via specialised third-party identity verification platforms. These services process your submitted documents exclusively for the purpose of confirming your identity and age.
• Fraud Prevention and Security Services: We may share device data and transaction patterns with fraud-prevention service providers to identify and block suspicious activity that could harm our players or the integrity of the platform.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or regulatory instruction, 3tk10 will disclose personal data to competent authorities. We will, where legally permitted to do so, notify you of any such request before complying.
• Business Succession: In the event of a merger, acquisition, or sale of all or a substantial part of 3tk10's business assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

All third-party data processors engaged by 3tk10 are subject to contractual data processing agreements that require them to maintain appropriate security standards and prohibit them from using your data for any purpose beyond the specific service they provide to 3tk10.

Section 6 Data Retention

3tk10 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with our legal and regulatory obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your account's active status plus a minimum of five years following account closure, to comply with anti-money laundering and financial record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five years following the date of submission or account closure, whichever is later, in accordance with applicable AML regulations.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Customer support communications: Retained for a minimum of two years from the date of the last communication in any given support thread.
• Technical and device data: Retained for a maximum of 13 months from the date of collection, unless required for longer retention in connection with an ongoing investigation or legal matter.
• Cookies: Session cookies expire when you close your browser. Persistent cookies expire at the intervals specified in their individual cookie records, typically between 30 days and 12 months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Where anonymisation is used, the resulting anonymised data may be retained indefinitely for statistical and platform improvement purposes.

Section 7 Your Privacy Rights

As a 3tk10 player, you hold meaningful rights over your personal data. We are committed to honouring these rights promptly and without obstruction. The following rights are available to all registered players:

To exercise any of the rights listed above, please contact us at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 72 hours and aim to provide a full response within 30 calendar days. In cases of complexity or volume, this period may be extended by a further 30 days, and you will be informed of any such extension.

Section 8 Data Security Measures

3tk10 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include but are not limited to the following:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and 3tk10's servers is encrypted using TLS 1.2 or higher with 256-bit AES encryption.
• Database Encryption: Sensitive data fields within our databases — including identity document references and payment method identifiers — are stored in encrypted form.
• Access Control: Access to production systems and player data is restricted to authorised 3tk10 personnel on a strict need-to-know basis. All access events are logged, monitored, and regularly audited.
• Two-Factor Authentication (2FA): Administrative access to 3tk10's internal systems requires multi-factor authentication. Players are also encouraged to enable 2FA on their own accounts for additional security.
• Intrusion Detection and Prevention: 3tk10's infrastructure is protected by real-time intrusion detection systems (IDS) and web application firewalls (WAF) that monitor for and block malicious traffic patterns.
• Regular Security Audits: 3tk10 conducts periodic internal security reviews and engages independent security professionals to carry out penetration testing and vulnerability assessments.
• Incident Response: In the event of a confirmed personal data breach that poses a risk to affected players, 3tk10 will notify relevant parties in accordance with applicable legal obligations, including directly informing affected players where required.

Section 9 Third-Party Services

The 3tk10 platform integrates with a number of third-party services to deliver its full range of features. While 3tk10 takes reasonable steps to ensure that all third-party partners maintain appropriate data protection standards, we are not responsible for the privacy practices of external services operating under their own independent privacy policies. The following categories of third-party integration are relevant to this Privacy Policy:

• Game Studios: Real-money games provided by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed studios are delivered via secure API connections. Game session data is transmitted to and from each studio's certified servers in real time. Each studio operates under its own published privacy policy.
• Payment Gateways: Transactions processed via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks involve the transmission of transaction data to and from those providers' platforms. 3tk10 does not store raw payment credentials processed by these gateways.
• Analytics Platforms: 3tk10 may use anonymised web analytics tools to understand platform usage. All data processed by such tools is anonymised before transmission and cannot be used to identify individual players.
• Customer Support Tools: Our live chat and support ticket systems may be hosted on third-party support platforms. Communications conducted through these tools are subject to the support provider's data handling practices in addition to this policy.

3tk10 does not embed social media plugins, third-party advertising networks, or data-broker tracking pixels on its platform. Any integration additions in the future will be disclosed via an updated version of this Privacy Policy.

Section 10 Policy Updates & Contact

3tk10 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will publish the updated policy on this page with a revised effective date. For significant changes that materially affect how we process your personal data, we will provide additional notice via email or an in-platform notification where practicable.

We encourage you to review this Privacy Policy periodically to stay informed about how 3tk10 handles your personal data. Your continued use of the 3tk10 platform following the publication of a revised policy constitutes your acknowledgement of the updated terms.

Contact Our Data Team

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the 3tk10 data protection team at: [email protected]. Please include "Privacy Policy Enquiry" or "Data Rights Request" in the subject line so we can route your message to the appropriate team member promptly.

Our support team is available 24 hours a day, 7 days a week, including all Bangladeshi national holidays, to assist with any data-related concerns. Players based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other regions of Bangladesh are equally entitled to exercise their data rights as described in this policy.