Privacy Policy
How tk11 Collects, Uses, and Protects Your Personal Data

1. Scope of This Policy & Data Controller Identity

This Privacy Policy applies to all personal data processed by tk11 in connection with the operation of the tk11 online gaming platform, accessible at tk11.cam, including all associated services such as sports betting, live casino, slots, crash games, and customer support functions.

For the purposes of applicable data protection law, tk11 (the internationally licensed entity operating this platform) acts as the data controller in respect of the personal data of registered players. When tk11 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, or cloud infrastructure operators — those entities act as data processors and are subject to binding contractual obligations regarding the confidentiality and lawful handling of that data.

By registering a tk11 account, you acknowledge that you have read, understood, and accepted this Privacy Policy in full. If you do not agree to the terms of this Policy, you must not use the tk11 platform.

2. Categories of Personal Data We Collect

tk11 collects personal data across the following categories, depending on the nature of your interaction with the platform:

tk11 does not collect special categories of personal data (such as racial or ethnic origin, religious beliefs, health data, or biometric data) except where a player voluntarily discloses such information in the context of a responsible gaming self-assessment, in which case it is processed exclusively for the purpose of player protection.

3. How We Collect Your Personal Data

tk11 collects personal data through the following mechanisms:

• Direct Submission: Data you actively provide during registration, KYC verification, payment initiation, support interactions, or profile updates.
• Automated Technical Collection: Data generated automatically by the platform when you interact with it — including session data, IP addresses, device fingerprints, and click-stream behaviour. This data is collected through server logs and first-party analytics systems.
• Payment Provider Data: When you deposit via JazzCash, EasyPaisa, or a bank transfer, the payment processor confirms transaction metadata (reference number, amount, sending wallet or account) to the tk11 platform. No full financial account credentials (PINs, banking passwords) are transmitted to or stored by tk11.
• Identity Verification Providers: Where tk11 engages a third-party KYC provider to verify identity documents, that provider returns a verification status and limited metadata to tk11. The underlying document images are processed by the KYC provider under their own privacy framework, to which players are separately directed.
• Cookies and Similar Technologies: As described in Section 7 below.

4. Lawful Basis for Processing

tk11 processes your personal data on one or more of the following lawful bases, depending on the specific processing activity:

• Contract Performance: Processing necessary to fulfil the agreement between tk11 and the player — including operating the player account, processing deposits and withdrawals, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and record-keeping mandates imposed by our international gaming licence.
• Legitimate Interests: Processing for purposes including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where those interests are not overridden by the player's own privacy interests.
• Consent: Processing for direct marketing communications, where you have opted in to receive such communications. Consent may be withdrawn at any time by updating your account preferences or contacting support.

5. How tk11 Uses Your Personal Data

The personal data collected by tk11 is used for the following purposes:

• Registering and maintaining your tk11 account, including verifying your identity, age (21+ requirement), and eligibility to use the platform;
• Processing deposits from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast, and processing withdrawal requests to your verified payment method;
• Delivering all gaming services on the tk11 platform — live casino (MT Live), slots (including Ganesh Fortune), cricket sportsbook, and crash games;
• Managing and enforcing bonus and promotional eligibility in accordance with the applicable Terms & Conditions;
• Providing customer support via live chat and email, including resolving disputes, handling withdrawal queries, and responding to KYC enquiries;
• Complying with AML obligations, including monitoring transaction patterns for indicators of money laundering or terrorist financing and filing suspicious activity reports where required by law;
• Operating responsible gaming systems — including monitoring play patterns for problem gambling indicators, enforcing player-set limits, and administering self-exclusion requests;
• Ensuring platform security — detecting and preventing fraud, multi-accounting, bonus abuse, and unauthorised access;
• Sending marketing communications where you have opted in to receive them;
• Improving platform performance through anonymised aggregate analytics.

6. Sharing Your Personal Data

tk11 may share personal data with the following categories of third parties, strictly on a need-to-know basis and under binding data processing agreements:

• Payment Processors: JazzCash, EasyPaisa, and banking partners (HBL, UBL, Meezan Bank) receive the minimum transaction data necessary to process deposits and withdrawals. These entities are independent data controllers in respect of their own systems and are subject to the Pakistan Telecommunications Authority and State Bank of Pakistan regulations.
• Identity Verification Providers: Third-party KYC/AML service providers receive identity document data solely for the purpose of verification. Data is not retained by these providers beyond the verification process without separate disclosure.
• Cloud Infrastructure Providers: Platform data is hosted on secure cloud infrastructure. Hosting providers access data only for infrastructure operation and are contractually prohibited from processing it for any other purpose.
• Regulatory and Law Enforcement Authorities: tk11 will disclose personal data to regulatory authorities, law enforcement agencies, or gaming licence supervisory bodies where required by law, court order, or where disclosure is necessary to prevent, detect, or prosecute criminal activity including money laundering, fraud, or match-fixing.
• Professional Advisors: Legal counsel, auditors, and compliance advisors may access limited personal data in the course of providing professional services to tk11, subject to professional confidentiality obligations.

7. Cookies & Similar Tracking Technologies

tk11 uses cookies and similar browser-based technologies on the platform for the following purposes:

• Essential Cookies: Required for platform operation — including maintaining your logged-in session state after tk11 Login, remembering your preferred language, and enabling security features such as CSRF protection. These cannot be disabled without impairing platform functionality.
• Performance Cookies: First-party analytics cookies that collect anonymised data about page load performance, navigation patterns, and error rates. This data is used exclusively to improve platform performance and is not linked to individual player identities.
• Functional Cookies: Remember player preferences such as game display settings, responsible gaming reminder intervals, and preferred game categories.
• Security Cookies: Session tokens and fraud detection identifiers used to identify suspicious login behaviour, multi-accounting attempts, and automated bot activity.

tk11 does not use third-party advertising or behavioural tracking cookies. You may adjust cookie settings in your browser, although disabling essential cookies will prevent you from logging in and using the platform. No cookie consent management is required for essential cookies; for non-essential cookies, your continued use of the platform following presentation of this Policy constitutes implied consent, which may be withdrawn by adjusting browser settings at any time.

8. Data Security Measures

tk11 implements the following technical and organisational security measures to protect your personal data:

• Encryption: AES-256 encryption for all data at rest. TLS 1.3 for all data in transit between the player's device and tk11 servers.
• Access Controls: Personal data is accessible only to tk11 personnel and contractors who require it to perform their specific role. Access is managed via role-based access control (RBAC) and is subject to ongoing review.
• Two-Factor Authentication: Administrative access to systems holding personal data requires multi-factor authentication. Players are strongly encouraged to enable 2FA on their own tk11 accounts.
• Penetration Testing: The platform undergoes regular third-party security assessments and penetration tests. Critical vulnerabilities are remediated within defined SLA windows.
• Data Breach Response: In the event of a personal data breach that creates a risk to players, tk11 will notify affected players and relevant regulatory authorities within the timeframes required by applicable law.

9. Data Retention Periods

tk11 retains personal data for the following periods:

• Active Account Data: Retained for the duration of the account's existence on the tk11 platform plus a post-closure retention period of 5 years, in accordance with AML regulatory record-keeping requirements applicable under our international gaming licence.
• Financial Transaction Records: Minimum 5 years from the date of transaction, in compliance with international AML standards.
• KYC Documents: Retained for 5 years from the date of verification or from account closure, whichever is later.
• Support Communication Records: Live chat transcripts and email correspondence retained for 2 years from the date of the interaction.
• Technical/Session Data: Typically retained for 12 months from generation, unless required longer for ongoing security investigations.
• Marketing Preferences: Retained until you withdraw consent or close your account.

Upon expiry of the applicable retention period, data is securely deleted using methods appropriate to the sensitivity of the data and the storage medium on which it is held.

10. International Data Transfers

As an internationally licensed platform, tk11 may transfer personal data to servers or service providers located outside Pakistan. Where such transfers occur, tk11 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy. Such safeguards include standard contractual clauses, data processing agreements, and, where applicable, transfers to jurisdictions that maintain an adequate level of data protection under the framework of our operating licence's regulatory requirements.

By registering a tk11 account, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Pakistan, subject to the safeguards described above.

11. Your Data Rights

As a tk11 player, you hold the following rights in respect of your personal data. These rights may be exercised by submitting a written request to [email protected], clearly identifying yourself and the right you wish to exercise. tk11 will respond within 30 days of receipt of a valid request.

12. Children's Privacy — Strictly Under 21 Prohibition

If you believe a minor has accessed the tk11 platform or submitted personal data, please contact us immediately at [email protected] so that we may investigate and take appropriate action. Parents and guardians in Pakistan are encouraged to use internet filtering and parental control software to prevent minors from accessing online gambling platforms.

13. Personal Data in Responsible Gaming Contexts

tk11 processes certain personal data specifically for the purpose of player protection and responsible gaming. This includes:

• Monitoring gaming activity patterns — bet frequency, session duration, deposit velocity, and loss sequences — to identify indicators of problematic gambling behaviour;
• Recording player-set limits (deposit limits, loss limits, session time limits) and enforcing them within the platform's gaming systems;
• Processing and permanently recording self-exclusion requests, which are retained to prevent accidental or deliberate re-registration by excluded players;
• Sharing self-exclusion data with relevant responsible gaming scheme databases where tk11 participates in such schemes under its gaming licence obligations.

This processing is conducted on the lawful basis of legitimate interests (player protection) and legal obligation (responsible gaming requirements of our gaming licence). For further information on the responsible gaming tools available to you on the tk11 platform, please visit our Responsible Gaming page.

14. Marketing Communications

Where you have opted in to receive marketing communications during registration or via your account settings, tk11 may send you promotional emails, SMS messages to your registered Pakistani mobile number, or in-platform notifications about bonuses, promotions, new game launches, and platform updates.

You may withdraw consent to receive marketing communications at any time by:

• Updating your notification preferences in your tk11 account settings;
• Clicking the unsubscribe link in any marketing email;
• Contacting [email protected] with a written opt-out request.

Withdrawal of consent for marketing communications does not affect the lawfulness of processing conducted prior to withdrawal, and does not affect your receipt of non-marketing operational communications (such as transaction confirmations, security alerts, and KYC request notifications), which are sent on the basis of contract performance and cannot be opted out of while your account is active.

15. Updates to This Privacy Policy

tk11 reviews and updates this Privacy Policy periodically to reflect changes in our data processing activities, applicable law, or regulatory guidance. Material changes — those that meaningfully affect your rights or the way we use your data — will be communicated to registered players via email to the address on file, with at least 14 days' notice before the changes take effect.

The effective date of the current version of this Policy is displayed at the top of this page. Your continued use of the tk11 platform following notification of material changes constitutes your acceptance of the updated Policy. If you do not accept the updated Policy, you must cease use of the platform and close your account.

16. Contact Information & Complaints

For any questions, requests, or complaints relating to this Privacy Policy or tk11's handling of your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 via the tk11 platform. Average first-response time under 90 seconds. Suitable for general privacy queries and account data requests.
• Email: [email protected] — for formal data subject rights requests, formal complaints, and KYC-related correspondence. Please include your registered account username and a clear description of your request.

tk11 will acknowledge receipt of a formal written privacy complaint within 3 business days and provide a substantive response within 30 calendar days. Where the matter is complex and requires extended investigation, we will notify you of the extended timeframe and the reason for it.