tak15 Privacy Policy — How We Handle Your Data

Introduction

tak15 ("we", "us", "our", "the Platform") operates the online casino and sports betting platform accessible at tak15.io. In the course of providing our Services to players based in Bangladesh and other permitted jurisdictions, tak15 collects, processes and stores certain personal data about registered users and visitors to the platform.

This Privacy Policy ("Policy") sets out in plain, formal terms what personal data tak15 collects from you ("you", "the Player", "the User"), the purposes for which that data is processed, the parties with whom it may be shared, and the measures tak15 takes to keep it secure. This Policy also explains the rights you hold over your own personal data and how to exercise those rights.

tak15 acts as the data controller in respect of personal data collected through the tak15 platform. This means tak15 determines the purposes and means of processing your personal data, and bears responsibility for ensuring that processing is carried out lawfully, fairly and transparently in accordance with applicable data protection principles.

Personal Data We Collect

tak15 collects personal data in several categories. The specific data points collected about any individual user depend on how that user interacts with the platform. The categories are as follows:

2.1 Identity & Contact Data

• Full legal name as it appears on your official identity document.
• Date of birth (used for mandatory 21+ age verification).
• Registered Bangladeshi mobile phone number.
• Email address.
• Residential address (collected during enhanced KYC verification where required).
• National Identity Card (NID) number or passport number (collected only when identity verification is required).

2.2 Account & Transactional Data

• tak15 account username and encrypted password hash.
• Account registration date and timestamp.
• Deposit history, withdrawal history and current wallet balance (in Bangladeshi Taka ৳).
• Betting history, game session records, and game transaction logs.
• Bonus and promotion claim history.
• Payment method identifiers (e.g., registered bKash, Nagad or Rocket mobile number — not full credentials).

2.3 Technical & Usage Data

• IP address at time of registration and each subsequent login.
• Device type, operating system, browser type and version.
• Screen resolution and device language settings.
• Pages visited on tak15, time spent on each page, and navigation path through the platform.
• Game launch events, session start and end times, and in-game action logs.
• Referral source (the URL or channel through which you arrived at tak15).

2.4 Communications Data

• Records of live chat conversations with tak15 support agents.
• Email correspondence sent to or received from tak15.
• Feedback, complaints and dispute submissions.
• Responses to any player surveys or promotional communications where you have opted in.

2.5 Identity Verification Documents

• Scanned or photographed copies of identity documents submitted during KYC (e.g., NID card, passport, driving licence).
• Proof-of-address documents where required (e.g., recent utility bill or bank statement).
• Selfie or liveness-check images where required for enhanced verification.

How We Collect Your Data

tak15 collects personal data through the following channels and mechanisms:

3.1 Direct Collection

Data you provide directly to tak15 during the account registration process, during KYC document submission, when contacting support, when completing a deposit or withdrawal request, or when responding to a survey or promotion.

3.2 Automated Technical Collection

Technical and usage data is collected automatically as you interact with the tak15 platform, through server logs, session tracking technology, and standard web analytics mechanisms. This includes data generated when you load a page, launch a game, place a bet, or carry out any other platform action.

3.3 Cookies and Similar Technologies

tak15 uses cookies and similar browser-based storage technologies to maintain session state, remember login status, support platform analytics, and deliver a consistent user experience. Further detail on the specific cookies used by tak15 is provided in Section 8 of this Policy.

3.4 Third-Party Sources

In limited circumstances, tak15 may receive data about you from third-party sources, including fraud-prevention databases, identity verification service providers, and payment processors. Data received from third parties is used solely for the purpose for which it was shared (for example, to verify your identity or assess the legitimacy of a transaction) and is handled in accordance with this Privacy Policy.

Purposes for Which We Process Your Data

tak15 processes personal data for clearly defined, legitimate purposes. The table below summarises the primary processing activities and the data categories involved in each:

tak15 will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, obtaining your explicit consent.

Legal Basis for Processing

tak15 processes personal data only where a lawful basis for doing so exists. The principal legal bases on which tak15 relies are as follows:

• Contractual necessity: Processing required to fulfil the tak15 service agreement with you — including account management, payment processing, game provision, and support services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, and record-keeping mandates.
• Legitimate interests: Processing carried out for tak15's legitimate business interests, such as fraud prevention, platform security, responsible gaming monitoring, and analytics — provided these interests do not override your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, specific and informed consent — primarily in the context of marketing communications. You may withdraw consent at any time by contacting tak15 support or using the unsubscribe mechanism in any marketing email.

Data Sharing & Third-Party Disclosure

tak15 does not sell, rent or trade your personal data to any third party for commercial or marketing purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the specific purpose.

6.1 Service Providers & Technology Partners

tak15 engages carefully selected third-party service providers to support platform operations. These include game content providers (such as Pragmatic Play, Evolution Gaming, Microgaming, Spribe and Ezugi), identity verification providers, payment processing partners, cloud hosting providers, and customer support platform vendors. All such providers are contractually required to process personal data only on tak15's instructions and in accordance with appropriate data protection standards.

6.2 Payment Processors

When you make a deposit or withdrawal, limited transactional data is shared with the relevant payment processor (for example, bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank or BRAC Bank) solely to complete the financial transaction. tak15 does not receive or store your full mobile banking credentials — only the mobile number or account identifier associated with the transaction.

6.3 Legal & Regulatory Disclosure

tak15 may be required to disclose personal data to law enforcement agencies, regulatory authorities or courts where compelled to do so by a valid legal process, court order or regulatory requirement. In such cases, tak15 will disclose only the minimum data required by the applicable legal obligation.

6.4 Business Transfers

In the event of a merger, acquisition, asset sale or other corporate restructuring involving tak15, personal data held by tak15 may be transferred to the relevant successor entity as part of that transaction. Players will be notified of any such transfer and of any material change in data controller identity prior to the transfer taking effect.

Payment Data & Financial Information

tak15 treats payment-related data with the highest level of care and applies additional security controls beyond those applied to standard personal data. The following principles govern tak15's handling of financial information:

• tak15 does not store full payment card numbers, mobile banking PINs, or internet banking passwords at any point in the transaction flow.
• Deposit and withdrawal transactions are processed through encrypted, tokenised connections to the relevant payment provider's API. tak15 receives only a transaction reference, a status code and the registered payment account identifier.
• Transaction records — including amounts, timestamps, payment method identifiers and transaction references — are retained as part of your account history for the purposes of financial record-keeping, dispute resolution and AML compliance.
• tak15 monitors transaction patterns for indicators of fraudulent activity, money laundering or structured deposits. Unusual patterns may trigger enhanced due diligence procedures including requests for additional documentation.

Cookies & Tracking Technologies

tak15 uses cookies and similar technologies (including local storage and session storage) to support the operation of the platform. The categories of cookies used are as follows:

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your tak15 account and using core platform features. tak15 does not use third-party advertising cookies or share cookie data with advertising networks.

Data Retention

tak15 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulation. The general retention principles applied by tak15 are as follows:

• Active account data: Retained for the full duration of the account's active status plus a minimum post-closure period required for legal and audit purposes.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of account closure, in accordance with standard anti-money laundering record-keeping expectations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Retained for up to three (3) years from the date of the last communication, or longer if related to an ongoing dispute.
• Technical and usage logs: Retained for up to twelve (12) months in raw form; aggregated/anonymised analytical summaries may be retained indefinitely.
• Marketing consent records: Retained until consent is withdrawn, plus a reasonable period thereafter to evidence the consent history.

Once the applicable retention period expires, personal data is securely deleted or irreversibly anonymised. Anonymised data — from which no individual can reasonably be identified — may be retained for statistical analysis purposes without time limit.

Data Security

tak15 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction or disclosure. Key security measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the tak15 platform is encrypted using current-generation TLS protocols. The padlock icon in your browser confirms an encrypted connection is active.
• Password hashing: tak15 never stores passwords in plain text. Passwords are processed using industry-standard one-way cryptographic hashing algorithms with per-user salts.
• Access controls: tak15 staff access to personal data is restricted on a strict need-to-know basis. Administrative access to player account data is logged, audited and subject to multi-factor authentication.
• Database encryption: Sensitive data fields within tak15 databases — including identity document references and payment identifiers — are encrypted at rest using AES-256 or equivalent standards.
• Penetration testing and security audits: tak15 conducts periodic security assessments and vulnerability testing to identify and remediate potential weaknesses before they can be exploited.
• Incident response: tak15 maintains a documented data breach response plan. In the event of a security incident involving personal data, affected players will be notified promptly in accordance with applicable notification obligations.

Your Data Rights

As an individual whose personal data is processed by tak15, you hold a number of rights in relation to that data. tak15 is committed to honouring these rights in a timely and transparent manner. Your rights include:

• Right of access: You may request a copy of the personal data tak15 holds about you, along with information about how it is processed. tak15 will respond to a verified access request within a reasonable timeframe.
• Right to rectification: If any personal data tak15 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details (such as your email address) directly within your account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where the data is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where processing has been unlawful. This right is subject to tak15's legal obligation to retain certain data (see Section 9).
• Right to restriction of processing: You may request that tak15 restrict the processing of your personal data in certain circumstances — for example, while a dispute about accuracy is being resolved.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that tak15 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object at any time to the processing of your personal data on the basis of tak15's legitimate interests, including profiling for responsible gaming purposes. tak15 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact tak15 support via live chat in your account dashboard or by email at [email protected]. tak15 may request verification of your identity before processing a rights request. tak15 will respond substantively within thirty (30) days of receiving a complete, verified request.

Children's Privacy

tak15 is strictly intended for adults aged 21 and above. tak15 does not knowingly collect, process or retain personal data from individuals under the age of 21. If tak15 becomes aware that a player is under the minimum age, the account will be immediately suspended, the data will be securely deleted (subject to any legal retention requirements), and any funds will be handled in accordance with tak15's Terms & Conditions and applicable law.

Parents and guardians who believe that a minor under their care has registered an account on tak15 without authorisation are urged to contact support immediately at [email protected] so that the account can be closed without delay. tak15 takes underage access extremely seriously and maintains active age-verification controls at the point of registration and during KYC review.

Changes to This Privacy Policy

tak15 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, changes in our data processing practices, or operational developments. When material changes are made, tak15 will notify registered players by email to their registered address and/or by a prominent notice displayed on the tak15 platform prior to the changes taking effect. The effective date shown at the top of this Policy will be updated whenever the Policy is revised.

Your continued use of tak15 after the effective date of any amended Privacy Policy constitutes your acknowledgement of the updated terms. tak15 recommends that players review this Policy periodically. If you have any concerns about a proposed change to this Policy, please contact tak15 support before the effective date of the change.

Contact & Privacy Enquiries

If you have any questions, concerns or requests relating to this Privacy Policy or the way tak15 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 inside your tak15 account dashboard — the fastest channel for privacy-related enquiries.
• Email: [email protected] — for formal written privacy requests, data subject access requests and complaints. Please include "Privacy Request" in the subject line to ensure prompt routing. Allow up to 48 hours for an acknowledgement and up to 30 days for a substantive response.
• WhatsApp: +880 1700 000000 — available during Bangladesh Standard Time (BST, UTC+6) business hours for general queries.

tak15 is committed to resolving privacy concerns promptly and transparently. If you believe tak15 has not adequately addressed your privacy concern after contact with the support team, you retain the right to escalate the matter through applicable dispute resolution channels.