21tk Privacy Policy

Welcome to the 21tk Privacy Policy. 21tk operates the online betting and gaming platform accessible at 21tk.io, serving players in Bangladesh with a range of products including sports betting, live casino, slot games, and arcade fishing titles. This Privacy Policy explains how 21tk collects, processes, stores, shares, and protects the personal data of all individuals who visit or register on the platform.

In this document, "personal data" means any information that identifies or can reasonably be used to identify a living individual. "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, and deletion. "You" or "the player" means any individual who accesses or uses the 21tk platform.

21tk is committed to handling personal data responsibly, lawfully, and with full transparency. This policy is written in plain English so that every player fully understands what happens to their data. The English version of this document is authoritative in all cases.

For the purposes of this Privacy Policy, 21tk acts as the data controller in respect of the personal data of all registered players and site visitors. As data controller, 21tk determines the purposes and means by which your personal data is processed.

All data-related enquiries, access requests, correction requests, and deletion requests should be directed to the 21tk support team at [email protected]. Our support team operates 24 hours a day, 7 days a week on Bangladesh Standard Time (BST, UTC+6) and will acknowledge all privacy-related requests promptly.

21tk collects personal data through several distinct channels. The categories of data we collect are set out in the table below:

21tk does not collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond liveness verification for KYC purposes), or medical information. If any such data is incidentally disclosed by a player in a support communication, it will not be recorded as a data point and will not be used for any processing purpose.

21tk uses collected personal data for the following specific purposes:

• Account creation and management: To register your account, verify your identity, maintain your account profile, and provide you with access to the full range of platform features.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods; to record transaction histories; and to resolve any payment disputes.
• Identity verification (KYC/AML): To verify that you meet the eligibility requirements of the platform, including the 21+ age requirement, and to comply with anti-money-laundering obligations.
• Personalisation: To tailor the platform experience to your preferences, including displaying relevant sports markets (e.g., BPL cricket, T20 World Cup), recommending game categories, and presenting relevant promotional offers where you have consented to receive them.
• Customer support: To respond to your queries, resolve account issues, process self-exclusion requests, and provide responsible gaming assistance.
• Security and fraud prevention: To detect and prevent unauthorised account access, bonus abuse, money laundering, and any other prohibited conduct described in the Terms and Conditions.
• Platform improvement: To analyse aggregated usage patterns, identify technical issues, and improve the overall quality and stability of the platform. This analysis uses anonymised or pseudonymised data wherever possible.
• Legal compliance: To comply with applicable legal obligations, respond to lawful requests from competent authorities, and maintain records required by law.
• Responsible gaming monitoring: To monitor betting patterns that may indicate problem gambling behaviour and, where appropriate, to proactively offer responsible gaming tools or contact the player.

Every instance of personal data processing by 21tk is grounded in at least one of the following legal bases:

• Contractual necessity: Processing required to perform the contract between 21tk and the player — including account management, transaction processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws, including anti-money-laundering regulations, identity verification requirements, and responses to lawful authority requests.
• Legitimate interests: Processing carried out in pursuit of 21tk's legitimate business interests, including fraud prevention, platform security, and platform improvement, where those interests are not overridden by the player's rights and interests.
• Consent: Processing carried out based on your freely given, specific, informed, and unambiguous consent — for example, personalised marketing communications. You may withdraw consent at any time by contacting [email protected] without affecting the lawfulness of processing carried out before withdrawal.

21tk does not sell, rent, or license personal data to third parties for their own marketing or commercial purposes. Personal data may be shared with the following categories of third party only where strictly necessary and subject to appropriate contractual safeguards:

• Identity verification providers: Third-party KYC and AML service providers who assist 21tk in verifying player identity and meeting legal compliance obligations.
• Payment processors: The operators of bKash, Nagad, Rocket, Upay, Visa, and Mastercard networks, to the extent necessary to process your deposits and withdrawals.
• Fraud prevention services: Specialist providers who help 21tk identify suspicious account activity, bonus abuse, and potential money-laundering patterns.
• IT and hosting infrastructure providers: Cloud hosting, database management, and cybersecurity service providers who process data on behalf of 21tk under strict data processing agreements.
• Competent authorities: Law enforcement agencies, regulatory bodies, or courts where 21tk is required by applicable law or a lawful authority request to disclose personal data.

All third-party service providers engaged by 21tk are required to process personal data only for the specific purpose for which it was shared, to maintain appropriate security standards, and to comply with applicable data protection obligations. 21tk does not permit service providers to use player data for their own secondary purposes.

21tk uses cookies and similar tracking technologies on the platform to support essential functionality, improve performance, and — where you have consented — to personalise your experience. A cookie is a small text file placed on your device by a website when you visit it.

The categories of cookies used by 21tk are as follows:

• Strictly necessary cookies: These cookies are essential for the platform to function and cannot be disabled. They include session management cookies, authentication tokens, and security cookies. No consent is required for these cookies.
• Performance cookies: These cookies collect anonymised information about how players use the platform — for example, which pages are visited most frequently and whether any errors occur. This data helps us improve the platform. These cookies require your consent.
• Functionality cookies: These cookies remember your preferences (such as language settings and display options) to provide a more personalised experience. These cookies require your consent.
• Analytics cookies: 21tk may use analytics tools to understand aggregated patterns of platform usage. Any data processed for analytics purposes is pseudonymised and never used to identify individual players for marketing purposes without separate consent.

You may manage or withdraw your consent to non-essential cookies at any time through the cookie preferences panel accessible in the platform settings. Please note that disabling certain cookies may affect the functionality of parts of the platform.

21tk retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal obligations. The following retention principles apply:

• Active account data: Personal data associated with an active 21tk account is retained for the duration of the account's existence and for a defined period after account closure.
• Transaction and financial records: All deposit, withdrawal, and betting records are retained for a minimum of seven years following the relevant transaction date, in line with standard anti-money-laundering record-keeping obligations.
• Identity verification documents: KYC documents (national ID copies, utility bills, verification selfies) are retained for a minimum of five years following account closure, or longer where required by applicable law.
• Support communications: Records of support interactions, including email correspondence and chat transcripts, are retained for up to three years following the date of the interaction.
• Technical and log data: Server logs and technical data are retained for up to twelve months and are used primarily for security monitoring and fraud detection purposes.

Upon expiry of the applicable retention period, personal data is either securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

21tk takes the security of personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Key security measures in place include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the 21tk platform is encrypted using industry-standard TLS protocols, including on all account and payment pages.
• Access controls: Access to personal data is restricted on a need-to-know basis. Only authorised 21tk personnel with a documented operational reason may access player data. All access is logged and audited.
• Secure data storage: Personal data is stored on secure servers with industry-standard access protection, firewall systems, and intrusion detection capabilities.
• Password security: Player passwords are stored using one-way cryptographic hashing. 21tk staff cannot view your plaintext password at any time.
• Regular security reviews: 21tk conducts periodic security assessments of its systems and processes to identify and address potential vulnerabilities.
• Incident response: In the event of a data security incident that poses a material risk to players, 21tk will notify affected individuals promptly and take all necessary remedial action.

While 21tk implements robust security measures, no online platform can guarantee absolute security against all possible threats. You also have a responsibility to protect your own account by keeping your credentials confidential and notifying 21tk immediately if you suspect unauthorised access.

As a data subject, you have a number of rights in respect of the personal data that 21tk holds about you. These rights are described below. To exercise any of these rights, please contact the 21tk support team at [email protected]. We will acknowledge your request and respond within a reasonable timeframe.

21tk will not charge a fee for handling data subject rights requests in ordinary circumstances. We reserve the right to charge a reasonable administrative fee or decline to act on requests that are manifestly unfounded, excessive, or repetitive. Where a request cannot be fully fulfilled — for example, because retention is required by law — we will explain the reason clearly.

21tk applies age verification checks during the registration process and may request additional proof of age at any time. If 21tk becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted promptly and the associated account will be closed immediately.

If you believe that a person under 21 has registered a 21tk account, please notify us at [email protected] so that we can investigate and take appropriate action.

The 21tk platform serves players based in Bangladesh. Some of the third-party service providers engaged by 21tk — including hosting infrastructure providers, identity verification partners, and fraud prevention services — may process personal data in jurisdictions outside Bangladesh.

Where personal data is transferred outside Bangladesh, 21tk takes appropriate steps to ensure that such transfers are conducted securely and that the receiving party applies a level of data protection consistent with the principles set out in this Privacy Policy. These steps may include:

• Executing standard contractual clauses or data processing agreements with the receiving party that impose binding data protection obligations.
• Transferring data only to jurisdictions or recipients that maintain recognised standards of data protection as assessed by 21tk's compliance function.
• Applying additional technical safeguards such as end-to-end encryption for data in transit across international networks.

If you have questions about the specific safeguards applied to any particular cross-border transfer, please contact [email protected].

21tk reserves the right to update or modify this Privacy Policy at any time. Changes may be required to reflect updates in our services, changes in applicable law, or improvements in our data protection practices.

When we make material changes to this Privacy Policy, we will take reasonable steps to notify registered players. Notification may be delivered via a prominent notice on the platform, an email to your registered address, or both, depending on the nature and significance of the change. The "Effective" date displayed at the top of this document will always reflect the date on which the current version came into force.

We encourage you to review this Privacy Policy periodically so that you remain informed about how 21tk handles your personal data. Your continued use of the platform following the posting of any revised Privacy Policy constitutes your acceptance of the updated terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 21tk handles your personal data, please contact our support team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

When contacting us about a data subject rights request, please include your registered username and a brief description of your request so that we can locate your account and respond efficiently. For security purposes, we may need to verify your identity before processing any request that involves disclosure or deletion of personal data.

If you are not satisfied with our response to a privacy-related complaint, you have the right to escalate the matter through applicable legal channels in your jurisdiction. 21tk is committed to cooperating fully with any legitimate investigative or regulatory process relating to data protection.