Privacy Policy
for taka23

taka23 collects personal data in three primary ways: information you provide directly, information generated automatically by your use of the platform, and information received from third-party service providers such as payment processors and identity verification agencies. The following table summarises the categories of data we collect and their source.

Special Category Data: taka23 does not intentionally collect sensitive personal data such as health information, racial or ethnic origin, political opinions, religious beliefs, or biometric data. If you voluntarily share such information with our support team (for example, disclosing a health condition when requesting responsible gaming assistance), we will treat that information with the highest level of confidentiality and use it only for the specific purpose for which it was shared.

Minors: taka23 does not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been submitted by a minor, we will delete it immediately and close any associated account. See our Responsible Gaming page for our full approach to protecting younger audiences.

taka23 processes your personal data only for specific, legitimate purposes and only when we have a valid legal basis for doing so. The following outlines how we use each category of data and the legal basis that applies.

• Account Registration & Management: We use your identity and contact data to create and maintain your taka23 account, verify your eligibility to play, and communicate with you about your account status. Legal basis: contractual necessity.
• Identity Verification (KYC): We use identity and verification data to confirm your age and identity, comply with anti-money laundering obligations, and ensure the integrity of the platform. Legal basis: legal obligation and legitimate interest.
• Payment Processing: We use your financial data to process deposits, execute withdrawal requests, and reconcile transactions. This data is shared with your chosen payment provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank). Legal basis: contractual necessity.
• Platform Security & Fraud Prevention: We use technical and usage data to detect and prevent fraud, cheating, bot usage, money laundering, and other prohibited activities. Legal basis: legitimate interest and legal obligation.
• Responsible Gaming: We monitor usage data to identify patterns that may indicate problem gambling behaviour, and to apply self-exclusion or deposit limits where requested. Legal basis: legal obligation and legitimate interest in player protection.
• Customer Support: We use communications data to respond to your enquiries, investigate complaints, and improve our support services. Legal basis: contractual necessity and legitimate interest.
• Platform Improvement: We use aggregated, anonymised usage data to understand how players interact with the platform, which games are most popular, and where technical improvements are needed. Legal basis: legitimate interest.
• Promotional Communications: With your explicit consent, we may use your contact data to send you information about taka23 promotions, new games, and special offers relevant to Bangladesh players. You may withdraw this consent at any time by contacting [email protected]. Legal basis: consent.

taka23 will never use your personal data for purposes that are incompatible with those listed above without first obtaining your consent or establishing a new lawful basis.

taka23 does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and only to the extent required for the specified purpose:

• Payment Service Providers: Your financial data is shared with your chosen payment provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank) to execute the transaction you have requested. These providers are bound by their own privacy and security obligations.
• KYC and Identity Verification Providers: Your identity documents and personal details may be shared with third-party KYC verification services to confirm your age and identity as required by our platform's integrity standards. These providers are engaged under strict data processing agreements.
• AML Screening Services: In accordance with anti-money laundering best practices, your name and other identifying information may be checked against sanctions lists and politically exposed persons (PEP) databases maintained by third-party compliance services.
• Game and Software Providers: Your username, bet history, and session data may be visible to the game studios and live casino operators (such as Evolution Gaming, Pragmatic Play, or Spribe) whose games you play on taka23, to the extent required for game functionality and dispute resolution.
• IT and Hosting Providers: The infrastructure on which taka23 operates is provided by cloud hosting and IT service providers. These providers may have access to stored data as part of their service delivery but are contractually prohibited from using your data for any other purpose.
• Legal and Regulatory Authorities: taka23 will disclose personal data to law enforcement agencies, courts, or regulatory authorities when required to do so by applicable law, court order, or in response to a legitimate legal request. We will notify you of any such disclosure where we are legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of taka23's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights under this Privacy Policy will be maintained.

International Transfers: Some of taka23's service providers operate outside Bangladesh. Where personal data is transferred internationally, taka23 ensures that appropriate safeguards are in place, such as data processing agreements with appropriate contractual protections, to maintain the security and confidentiality of your data throughout the transfer.

taka23 uses cookies and similar tracking technologies (including browser local storage and session storage) to operate the platform effectively, remember your preferences, and analyse how the site is being used. A cookie is a small text file stored on your device by your web browser when you visit a website.

Third-Party Cookies: taka23 does not deploy third-party advertising cookies that track your browsing activity across external websites. Any analytics tools we use are configured to anonymise your IP address and aggregate data before processing.

Managing Cookies: You can control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may prevent certain features of the taka23 platform from functioning correctly, including your ability to remain logged in during a session. Instructions for managing cookies are available in the help section of most major browsers including Chrome, Firefox, Safari, and Edge.

taka23 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, to satisfy anti-money laundering and fraud prevention obligations.
• Transaction and Financial Data: Retained for a minimum of seven (7) years following each transaction to comply with financial record-keeping requirements.
• KYC Verification Documents: Retained for a minimum of five (5) years following the completion of the verification process, or longer if required by applicable law.
• Communications and Support Data: Retained for three (3) years from the date of the most recent communication, to allow for complaint investigation and dispute resolution.
• Technical and Usage Data: Typically retained in identifiable form for up to thirteen (13) months, after which it is anonymised or deleted. Anonymised aggregated data may be retained indefinitely for analytical purposes.
• Marketing Consent Records: Retained for the duration of your account plus three (3) years to demonstrate compliance with consent-based marketing obligations.

When your personal data is no longer required for any lawful purpose, taka23 will securely delete or anonymise it. Secure deletion involves overwriting or destroying data in a manner that prevents reconstruction. Where data is anonymised rather than deleted, the anonymised data set cannot be linked back to you as an individual and therefore falls outside the scope of this Privacy Policy.

taka23 respects your right to control your personal data. Depending on the circumstances, you may have the following rights in relation to the personal data we hold about you:

• Right of Access: You have the right to request a copy of the personal data taka23 holds about you. We will provide this in a commonly used electronic format within thirty (30) days of your verified request.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update many of your account details directly through your taka23 account settings.
• Right to Erasure ("Right to Be Forgotten"): You have the right to request that taka23 delete your personal data. This right is not absolute — we may be required to retain certain data for legal, regulatory, or fraud prevention purposes as described in the Data Retention section above. We will inform you of any portions of your data that cannot be deleted and the reason why.
• Right to Restrict Processing: In certain circumstances (for example, if you contest the accuracy of your data while we verify it), you may request that we pause the processing of your personal data while the matter is resolved.
• Right to Data Portability: You may request that we provide your personal data in a structured, machine-readable format so that you can transfer it to another service provider where technically feasible.
• Right to Object: You have the right to object to our processing of your personal data where we are relying on legitimate interest as the legal basis. You also have an absolute right to object to your data being used for direct marketing purposes at any time.
• Right to Withdraw Consent: Where we are processing your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please send a written request to [email protected] with the subject line "Data Rights Request" and include your full name, registered email address, and a clear description of the right you wish to exercise. We may need to verify your identity before processing the request. We aim to respond to all valid requests within thirty (30) calendar days.

taka23 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your browser and taka23 is encrypted using SSL/TLS protocols. Look for the padlock icon in your browser address bar to confirm the connection is secure.
• Encrypted Data Storage: Sensitive personal data stored on taka23's servers, including payment information and identity documents, is encrypted at rest using strong encryption standards.
• Access Controls: Access to personal data within taka23's organisation is restricted on a strict need-to-know basis. Employees who handle personal data receive regular data protection training and are bound by confidentiality obligations.
• Two-Factor Authentication: taka23 supports two-factor authentication (2FA) for player accounts to provide an additional layer of security against unauthorised login attempts.
• Penetration Testing & Security Audits: taka23's technical infrastructure undergoes regular security assessments to identify and address vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, taka23 has an incident response procedure in place to investigate the breach, contain its impact, and notify affected players as promptly as possible.

While taka23 takes all reasonable steps to protect your personal data, no transmission over the internet or method of electronic storage is completely secure. You play an important role in your own data security — please ensure you use a strong, unique password for your taka23 account and never share your login credentials with anyone. If you suspect your account has been compromised, contact [email protected] immediately.

taka23 is committed to handling all privacy-related enquiries promptly and transparently. If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to report a concern about how your personal data has been handled, please contact us using the details below.

Privacy and Data Requests: Send your enquiry to [email protected] with the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate. Please include your registered name, account email address, and a clear description of your query or request. We aim to acknowledge all enquiries within two (2) business days and to provide a full response within thirty (30) calendar days.

Changes to This Privacy Policy: taka23 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make a material change, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players via email. Your continued use of taka23 following any update constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically.

This Privacy Policy is governed by and should be interpreted in accordance with the laws applicable to taka23's operations. All references to regulatory standards are provided for transparency and do not constitute a formal regulatory claim. If you are dissatisfied with our response to a privacy complaint, you may have the right to escalate the matter to a relevant data protection authority or legal body in your jurisdiction.

For all privacy-related matters, reach our team at [email protected]. Response times may vary during public holidays in Bangladesh, including Eid, Durga Puja, and Victory Day (December 16).