Privacy Policy — How 10tk Keeps Your Data Safe

10tk is an online betting and gaming platform operating at https://10tk.lat, providing sports betting, live casino, slot games, and related services to players in Bangladesh and other permitted jurisdictions. Throughout this Privacy Policy, references to "10tk", "we", "us", or "our" refer to the operator of the 10tk platform.

10tk acts as the data controller in respect of all personal information collected from players and visitors through the platform. This means we determine the purposes and means of processing your personal data and are responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

If you have any questions about how your personal data is processed, you may contact us at any time at [email protected]. Our privacy team reviews all data-related queries and responds within five business days in the ordinary course.

10tk collects several categories of personal data depending on how you interact with the platform. The categories are set out below together with specific examples of the data points within each category:

Identity Data

• Full legal name as it appears on your government-issued ID
• Date of birth (required to verify the 21+ age requirement)
• National ID number or passport number where provided for verification
• Profile username chosen at registration

Contact Data

• Mobile phone number (used for OTP verification and account communications)
• Email address
• City and district of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet)

Financial Data

• Payment method identifier (e.g., bKash or Nagad mobile number, USDT wallet address, bank account reference)
• Transaction history: deposit amounts, withdrawal amounts, dates, and methods
• Account balance at specific points in time (for dispute resolution)

Technical and Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session duration, pages visited, and features used within the platform
• Betting history: markets wagered on, stake amounts, outcomes

Communications Data

• Content of support messages sent to the 10tk team
• Records of responsible gaming tool activations (e.g., deposit limit changes, time-out requests)
• Feedback or survey responses submitted voluntarily

10tk collects personal data through the following channels:

• Direct provision: Data you supply when registering an account, completing identity verification, making a deposit or withdrawal, contacting support, or submitting a responsible gaming request.
• Automated collection: Technical data gathered automatically as you browse and use the platform, including through cookies, server logs, and analytics tools (see Section 6).
• Payment processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and USDT network providers when you deposit or withdraw funds.
• Fraud prevention partners: Device fingerprinting and risk-scoring data from third-party fraud detection services that help us identify suspicious account activity.

10tk does not purchase personal data from data brokers and does not collect personal data from social media platforms without your explicit instruction to do so.

The table below sets out the purposes for which 10tk processes your personal data and the corresponding legal basis for each:

• Account registration and management — Processing is necessary to perform the contract between you and 10tk (i.e., to provide the betting and gaming service).
• Age verification (21+ compliance) — Processing is necessary for compliance with our legal obligation to prevent underage gambling.
• Processing deposits and withdrawals — Processing is necessary to perform the contract and to comply with anti-money-laundering obligations.
• Fraud detection and prevention — Processing is necessary for our legitimate interests in protecting the platform, other players, and financial systems from abuse.
• Responsible gaming monitoring — Processing is in the vital interests of players and complies with our duty of care obligations.
• Customer support communications — Processing is necessary to perform the contract and to respond to your queries.
• Marketing and promotional communications — Processing is based on your prior consent, which you may withdraw at any time by contacting [email protected].
• Platform analytics and improvement — Processing is based on our legitimate interests in understanding how players use the platform and improving it accordingly.

10tk does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and USDT network providers receive transaction data necessary to process your deposits and withdrawals. Each processor is bound by its own data protection obligations.
• Fraud and risk detection services: Anonymised or pseudonymised device and behavioural data may be shared with third-party fraud prevention partners to detect and prevent prohibited conduct on the platform.
• Game content providers: When you play a slot or live casino game, the relevant game studio (e.g., Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) may receive a session identifier and game-play data required to operate the game. These providers do not receive your full identity data.
• Legal and regulatory obligations: 10tk may disclose personal data to competent authorities, law enforcement agencies, or courts where required to do so by applicable law, a court order, or a binding regulatory request.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all assets of the 10tk platform, personal data held on registered players may be transferred to the successor entity, subject to equivalent privacy protections.

All third parties with whom 10tk shares personal data are contractually required to process that data only for the purposes stated, to maintain appropriate security standards, and to handle the data in accordance with applicable privacy law.

10tk uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your logged-in session, detect fraudulent activity, and understand how players navigate the site. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the platform to function. These enable your login session, keep your account secure across page navigations, and process transactions. They cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your preferences such as your selected language display setting and platform layout choices, so you do not need to re-configure them on each visit.
• Analytics Cookies: Collect anonymised information about how visitors use the platform — which pages are visited most, how long sessions last, and where users navigate from. This data is used in aggregate form to improve the platform.
• Security and Fraud Detection Cookies: Used alongside device fingerprinting to identify unusual access patterns, detect bot activity, and flag potentially fraudulent behaviour in real time.

10tk retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable legal or regulatory obligations. The key retention periods applicable to 10tk player data are:

• Active account data: Retained for the lifetime of your account and for a period of five years following permanent account closure. This period is required to comply with anti-money-laundering record-keeping obligations.
• Transaction records: Retained for a minimum of five years from the date of each transaction, consistent with financial record-keeping requirements.
• Identity verification documents: Retained for five years from the date of submission. Physical or scanned copies are stored in encrypted form with access limited to compliance personnel.
• Support communications: Retained for two years from the date of the most recent message in a conversation thread, unless the communication relates to an unresolved dispute, in which case retention continues until final resolution plus one year.
• Analytics and usage data: Retained in anonymised aggregate form indefinitely for platform improvement purposes. Identifiable usage logs are deleted after 12 months.

When personal data is no longer required and no legal obligation mandates its continued retention, 10tk will securely delete or anonymise it so that it can no longer be associated with any identifiable individual.

10tk implements a layered security architecture to protect personal and financial data from unauthorised access, accidental loss, destruction, or alteration. The key measures in place include:

• 256-bit SSL/TLS encryption on all data in transit between your device and the 10tk platform.
• AES-256 encryption for sensitive data stored in our databases, including identity documents and payment method identifiers.
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access identifiable player data.
• Two-factor authentication (OTP) available to all players and mandatory for all internal staff accounts with access to player data.
• Continuous automated monitoring for anomalous account behaviour, failed login attempts, and unusual transaction patterns.
• Regular internal security reviews and third-party penetration testing to identify and remediate vulnerabilities.

As a 10tk player whose personal data we process, you hold the following rights in respect of that data. To exercise any right, send a written request to [email protected] with sufficient detail to allow us to identify your account and understand the nature of your request:

• Right of Access: You may request a copy of all personal data 10tk holds about you, together with information about how it is processed. We will respond within 30 days.
• Right to Rectification: You may ask us to correct any inaccurate or incomplete personal data. Basic account details can be updated directly in your account settings; changes to identity documents must be submitted to support.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to legal retention obligations — we cannot delete data we are required by law to keep.
• Right to Restriction: You may ask us to restrict processing of your data while a dispute is being resolved or while we verify the accuracy of data you have challenged.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request a machine-readable copy of your data for transfer to another service.
• Right to Object: You may object to processing based on legitimate interests, including profiling for fraud detection. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

10tk will respond to all valid data rights requests within 30 calendar days. In complex cases we may extend this by a further 30 days, in which case we will notify you of the extension and the reason for it. We do not charge a fee for responding to data rights requests unless they are manifestly repetitive or unfounded.

The 10tk platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from any individual under the age of 21. Our registration process includes mandatory age verification steps designed to prevent underage access.

If we become aware that personal data has been collected from a person under 21 years of age — whether through a failure of the age verification process, misrepresentation by the individual, or any other means — we will immediately close the relevant account, delete all associated personal data to the extent permitted by law, and forfeit any account balance in accordance with our Terms & Conditions.

The 10tk platform may contain references to third-party payment providers and game studios whose services are integrated into the platform. While these integrations are necessary for the delivery of the 10tk service, each third-party provider operates under its own privacy policy and data practices, which are independent of this Privacy Policy.

10tk is not responsible for the privacy practices of third-party game studios or payment processors. When a game session is initiated with a provider such as Pragmatic Play, Evolution Gaming, or Spribe, your session data is transmitted to that provider's systems in accordance with the relevant integration agreement. We recommend reviewing the privacy policies of payment providers you use (e.g., bKash, Nagad) to understand how they handle your data on their end of any transaction.

This Privacy Policy applies solely to data collected and processed by 10tk in connection with your use of the platform. It does not apply to any third-party website, application, or service that you access independently.

10tk reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, changes in the services we offer, or changes in applicable law. When we make material changes to this Privacy Policy, we will notify registered players by email and display a prominent notice on the platform for a minimum of 14 days following the change.

The effective date displayed at the top of this page always reflects the date on which the current version came into force. We encourage you to review this Privacy Policy periodically so that you remain informed about how 10tk protects your personal data. Your continued use of the platform following the effective date of any updated version constitutes acceptance of the revised Privacy Policy.

Previous versions of this Privacy Policy are archived and available on request by contacting [email protected]. If a material change reduces your privacy rights compared to the version in effect when you registered, we will seek your explicit consent before the change takes effect in respect of your existing data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data 10tk holds about you, please contact our privacy team using the details below. All privacy-related communications are handled in English and treated with full confidentiality.

Please note that the email address above is displayed as plain text and is not a clickable link. Copy the address and paste it into your email client to send a message. Please include your registered username or account reference number in your message to help us locate your account and respond efficiently.