21tk Privacy Policy — How We Handle Your Data

Privacy at a Glance

The following cards summarise the most important points of this Privacy Policy. They do not replace the full text — please read the complete policy below before using the 21tk platform.

1. Introduction

21tk ("we", "us", "our") operates the online casino and sports betting platform at 21tk.org. We are committed to protecting the privacy of all individuals who interact with our platform, and this Privacy Policy explains in plain terms how we collect, use, store, and protect personal data. This policy applies to all users of 21tk, including registered account holders, visitors who browse the platform without registering, and any individual who contacts us via email or other communication channels.

By registering an account on 21tk or by continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree to this policy, please do not use the 21tk platform. This policy is reviewed periodically and will be updated when our data practices change. The version published on this page is always the current and governing version.

2. Information We Collect

21tk collects personal data that is necessary to provide you with a safe, functional, and legally compliant gaming service. We collect information in the following categories:

• Registration data: Your full name, date of birth, Bangladesh mobile number, and any additional information provided during account setup. This information is required to create and verify your account.
• Identity verification (KYC) documents: Government-issued identification documents, such as a National Identity Card (NID) or passport, collected when account verification is required under our compliance obligations.
• Financial transaction data: Records of all deposits and withdrawals processed through bKash, Nagad, Rocket, Upay, Visa, and Mastercard, including transaction reference numbers, amounts, timestamps, and the payment method used.
• Device and usage data: IP address, device type, operating system, browser type, session duration, pages visited, and in-app navigation paths. This data is collected automatically when you access the platform and is used to maintain platform security and improve the user experience.
• Support communications: The content of any email or other written communication you send to [email protected], including your name, registered mobile number, and the details of your query or complaint. These records are retained to maintain a full history of our interactions with you.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information unless this is specifically required by law or explicitly provided by you in the context of a support request.

3. How We Use Your Information

21tk uses the personal data we collect strictly for the following purposes, all of which are necessary to deliver the gaming service you have signed up for:

• Account creation and management: To create, verify, and maintain your registered account, including authentication of your identity and the enforcement of account security measures such as OTP verification.
• Payment processing: To process your deposits and withdrawals securely via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain an auditable record of all financial transactions on your account.
• Compliance and fraud prevention: To verify your age and identity as required under our responsible gaming obligations, to detect and prevent fraudulent activity, money laundering, and prohibited conduct as defined in our Terms and Conditions.
• Platform improvement: To analyse anonymised and aggregated usage data — including navigation patterns, game preferences, and session lengths — to improve the design, performance, and content of the 21tk platform.
• Customer support: To respond to your enquiries, complaints, and requests submitted to [email protected], and to maintain a complete record of our correspondence with you for quality assurance and dispute resolution purposes.
• Promotional communications: If you have opted in to receive promotional messages, to send you information about relevant bonuses, offers, and seasonal promotions available on 21tk. You may opt out of promotional messages at any time by contacting [email protected].

4. Legal Basis for Processing Personal Data

21tk processes your personal data on the following legal bases:

• Contractual necessity: Processing your registration data, financial transaction data, and identity verification documents is necessary for us to fulfil our contractual obligations to you as a registered player on the platform.
• Legal obligation: Collecting and retaining KYC documentation, transaction records, and fraud-monitoring data is required by applicable anti-money laundering laws and responsible gaming regulations.
• Legitimate interests: Analysing anonymised usage data to improve platform performance, detect fraud, and prevent security breaches serves the legitimate interests of both 21tk and its user community.
• Consent: Where we send you promotional communications or use non-essential cookies, we do so only on the basis of your prior consent. You may withdraw consent at any time without affecting the lawfulness of any processing already carried out.

5. Sharing Your Information

21tk does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the following limited and controlled circumstances:

• Payment processors: We share the minimum necessary financial data with bKash, Nagad, Rocket, Upay, Visa, and Mastercard solely to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and are contractually obligated to protect your data.
• Game providers: Aggregated, anonymised session data may be shared with game providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi for the purpose of game performance analytics. No personally identifiable information is shared with game providers.
• Legal and regulatory authorities: We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction when required to do so by applicable law, court order, or when we reasonably believe disclosure is necessary to prevent fraud, money laundering, or other illegal activity.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of 21tk's business assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified via your registered mobile number prior to any such transfer.

6. Cookies and Tracking Technologies

21tk uses cookies and similar tracking technologies on the platform. Cookies are small text files placed on your device that allow us to recognise your browser across sessions and maintain your login state. We use the following types of cookies:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in, security cookies that detect unusual activity, and preference cookies that remember your language and display settings. Essential cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: Used to collect anonymised data about how users navigate the platform — which pages are visited most often, how long sessions last, and where users encounter friction. This data is used exclusively to improve the platform and is never linked to individual identities.
• Functional cookies: Used to personalise certain aspects of your experience, such as remembering your preferred payment method or your last-played game category. These cookies are optional and can be disabled by contacting [email protected].

Most modern mobile browsers allow you to control or block cookies through your browser settings. Please note that disabling essential cookies will prevent the platform from functioning correctly, including maintaining your login state and processing transactions securely.

7. Data Retention

21tk retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows: account data and KYC documentation are retained for a minimum of five years following account closure in order to meet our anti-money laundering compliance obligations; financial transaction records are retained for a minimum of five years; support communications are retained for two years from the date of the final communication in each thread.

When data is no longer required for any lawful purpose, 21tk will securely delete or anonymise it. Anonymised data — from which no individual can be identified — may be retained indefinitely for aggregated analytics and platform improvement purposes.

8. Data Security

21tk implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include SSL/TLS encryption for all data transmitted between your device and our servers, encrypted storage of sensitive account data, access controls that restrict internal access to personal data on a strict need-to-know basis, and regular security reviews of our platform infrastructure.

Despite our best efforts, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights or freedoms, 21tk will notify affected users as soon as reasonably practicable. You are also responsible for maintaining the security of your own account by keeping your login credentials confidential and reporting any suspected unauthorised access to [email protected] immediately.

9. Your Data Rights

As a user of the 21tk platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with your full name and registered mobile number so we can locate your account:

• Right of access: You may request a copy of all personal data that 21tk holds about you. We will respond to such requests within 14 calendar days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. We will act on such requests within 7 calendar days.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any legal retention obligations that require us to retain it for a specified period.
• Right to restrict processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested or while a complaint is being investigated.
• Right to withdraw consent: Where processing is based on your consent — for example, promotional communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

We aim to resolve all data rights requests promptly and fairly. If you are not satisfied with our response, you have the right to raise a complaint with the relevant data protection authority in your jurisdiction.

10. Children's Privacy

The 21tk platform is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or retain personal data from any individual under the age of 21. If we discover or are notified that personal data belonging to a person under 21 has been submitted to us — including through fraudulent age misrepresentation during registration — we will immediately close the associated account, delete all related personal data, and forfeit any balance held in that account. If you are a parent or guardian and believe that a minor in your care has registered on 21tk, please contact us immediately at [email protected].

11. Third-Party Links

The 21tk platform does not contain links to third-party websites for commercial or advertising purposes. Any links that do appear — for example, to payment provider information pages — are provided solely for your convenience and do not constitute an endorsement by 21tk of that third party. 21tk is not responsible for the privacy practices or content of any external website. When you leave the 21tk platform, we encourage you to review the privacy policy of any site you visit.

12. Changes to This Privacy Policy

21tk reviews this Privacy Policy periodically and may update it when our data collection or processing practices change, when new services are introduced, or when applicable law requires us to modify our approach. When material changes are made, we will notify registered users by posting a notice on the platform or by sending a message to the registered mobile number associated with your account. The updated policy will take effect from the date it is published on this page.

The version of this Privacy Policy currently published on this page is always the governing version. We encourage you to check this page periodically so you are always aware of how your personal data is being handled. Your continued use of the 21tk platform after any update constitutes your acceptance of the revised policy.

13. Contact and Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 21tk handles your personal data, please contact our support team by email at [email protected]. Please include your full name and registered mobile number in your message so we can locate your account and respond accurately. Our support team is available 24 hours a day, seven days a week, and all privacy-related enquiries are handled within one hour.

For data deletion requests, right-of-access requests, or any other formal data rights exercise, please use the same email address and clearly state the nature of your request in the subject line. We are committed to responding to all data rights requests within 14 calendar days, as required by our data handling obligations.