taka5 Privacy
Policy

1. Data We Collect

1.1 Information You Provide Directly

When you register for a taka5 account, make a transaction, contact our support team, or participate in any promotional activity, you provide us with personal data. The categories of data collected directly from you include:

• Identity Data: Full legal name, date of birth, gender, and national identification number (NID) or passport number where required for KYC verification.
• Contact Data: Mobile phone number (including the number registered to your bKash, Nagad, or Rocket account), email address, and residential address including district, division, and postcode within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh).
• Account Credentials: Username and hashed password. taka5 never stores your password in plain text.
• Financial Data: Mobile financial service (MFS) account numbers for bKash, Nagad, Rocket, and Upay; bank account details for bank transfer transactions; and Visa/Mastercard details where applicable. Full card numbers are never stored on taka5 servers — card data is tokenised by our payment processor.
• Verification Documents: Copies of NID, passport, utility bills, or other documents submitted during the KYC or enhanced due diligence process.
• Communications: Records of correspondence with taka5 support, including live chat transcripts and email exchanges.

1.2 Data Collected Automatically

When you access and use the taka5 platform, certain technical and behavioural data is collected automatically by our systems:

• Device & Technical Data: IP address, browser type and version, operating system, device type (mobile, desktop, tablet), screen resolution, and language settings.
• Usage Data: Pages visited, games played, betting history, session duration, login timestamps, and navigation patterns within the taka5 platform.
• Transaction Data: Full record of all deposits, withdrawals, bonus credits, wagers placed, game results, and account balance changes.
• Location Data: Approximate geographic location derived from your IP address. taka5 does not access GPS or precise device location.
• Cookie & Tracking Data: Data collected via cookies and similar technologies as described in Section 5 of this policy.

1.3 Data Received from Third Parties

taka5 may receive personal data about you from third-party sources in limited circumstances, including:

• Identity verification and KYC service providers who confirm the authenticity of your identity documents;
• Payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) who confirm transaction status and flag potential fraud;
• Fraud prevention and anti-money laundering (AML) screening services;
• Responsible gaming services where a player has registered a self-exclusion request through an external programme.

2. How We Use Your Data

taka5 uses the personal data it collects for the following specific purposes:

2.1 Marketing Communications

taka5 will only send you promotional emails, SMS messages, or push notifications if you have provided consent to receive such communications during registration or subsequently updated your communication preferences in your account settings. You may withdraw consent at any time by adjusting your notification preferences or by contacting us at [email protected]. Withdrawing marketing consent does not affect your ability to use the taka5 platform.

3. Legal Basis for Processing

taka5 processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil our obligations under the player account agreement — including registration, payment processing, and customer support.
• Legal Obligation: Processing required to comply with applicable anti-money laundering, counter-terrorism financing, and age verification requirements.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention, platform security, analytics, and responsible gaming monitoring — provided those interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and non-essential cookies. You may withdraw consent at any time.

4. Sharing Your Data

4.1 Who We Share Data With

taka5 does not sell your personal data. We share your data only with the following categories of third parties, and only to the extent strictly necessary for the stated purpose:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card processors (Visa/Mastercard) — for the purpose of processing your transactions.
• KYC & Identity Verification Providers: Third-party services that verify the authenticity of identity documents you submit during the verification process.
• Fraud Prevention & AML Services: Screening platforms that help taka5 identify and prevent fraudulent activity and money laundering.
• Game Content Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other game studios whose software is integrated into the taka5 platform. These providers may receive aggregated, anonymised gameplay data for game performance monitoring purposes.
• IT Infrastructure & Cloud Providers: Hosting, database, and security service providers operating the technical infrastructure that powers the taka5 platform.
• Legal & Regulatory Authorities: Where required by law, court order, or regulatory authority, taka5 may be required to disclose personal data to relevant governmental or enforcement bodies.

All third parties with whom taka5 shares personal data are bound by appropriate data processing agreements or confidentiality obligations and are prohibited from using your data for any purpose beyond the specific service they provide to taka5.

4.2 International Data Transfers

Some of taka5's service providers operate outside Bangladesh. Where personal data is transferred internationally, taka5 ensures that appropriate safeguards are in place, including contractual protections equivalent to those applicable to data processed within Bangladesh.

5. Cookies & Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, remember your preferences, and track how you use the site. taka5 uses cookies and similar tracking technologies (such as local storage and session tokens) on its platform.

5.2 Types of Cookies Used by taka5

taka5 does not use third-party advertising cookies or behavioural targeting cookies. You can manage or delete cookies through your browser settings at any time. Disabling essential cookies will prevent you from logging into your taka5 account and using core platform features.

6. Data Retention

taka5 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law. The following general retention periods apply:

• Account data (active accounts): Retained for the duration of your account's active life plus a minimum of 5 years following permanent account closure, to comply with anti-money laundering record-keeping obligations.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction, in accordance with financial record-keeping requirements.
• KYC / identity verification documents: Retained for a minimum of 5 years from the date of submission or account closure, whichever is later.
• Customer support communications: Retained for 3 years from the date of the interaction, unless the communication relates to an unresolved dispute or legal matter.
• Marketing consent records: Retained until you withdraw consent, plus 1 year thereafter as evidence of the original consent.
• Technical / server logs: Retained for up to 12 months and then anonymised or deleted.

When personal data is no longer required, taka5 securely deletes or anonymises it in accordance with our internal data disposal procedures.

7. Your Privacy Rights

As a user of the taka5 platform, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all verifiable requests within 30 days.

• Right of Access: You may request a copy of all personal data taka5 holds about you, together with information about how and why it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure ("Right to be Forgotten"): You may request that taka5 delete your personal data where there is no overriding legal basis for continued retention. Note that we may be required to retain certain data for legal and regulatory compliance reasons even after your account is closed.
• Right to Restrict Processing: In certain circumstances, you may request that taka5 restrict how it processes your data — for example, while a rectification request is being assessed.
• Right to Data Portability: You may request that taka5 provide your personal data in a structured, machine-readable format for transfer to another service provider where technically feasible.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on taka5's legitimate interests, including profiling for responsible gaming purposes.
• Right to Withdraw Consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

8. Data Security

taka5 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, disclosure, or alteration. These measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and the taka5 platform is encrypted using industry-standard SSL/TLS protocols.
• Encrypted Data Storage: Sensitive data at rest — including identity documents and financial data — is stored using AES-256 encryption.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication for administrative systems.
• Regular Security Audits: taka5 conducts periodic security assessments and penetration testing of its platform infrastructure.
• Incident Response: taka5 maintains a documented data breach response procedure. In the event of a breach likely to result in a high risk to your rights and freedoms, you will be notified without undue delay.
• Staff Training: All taka5 personnel with access to personal data receive regular training on data protection obligations and security best practices.

While taka5 takes every reasonable precaution, no online platform can guarantee absolute security. You also play a role in keeping your account secure — see Section 3.3 of our Terms & Conditions for guidance on protecting your login credentials.

9. Third-Party Services & Links

The taka5 platform integrates game content from third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play games powered by these providers, your gameplay data may be processed by those providers' systems in accordance with their own data processing arrangements. taka5 ensures that all integrated providers operate under appropriate data processing agreements.

Payment transactions processed via bKash, Nagad, Rocket, Upay, or bank transfer are handled by those respective payment service providers, each of which operates under its own privacy policy. taka5 is not responsible for the privacy practices of third-party payment providers beyond the data processing agreements in place.

The taka5 platform does not contain links to external third-party websites for promotional or advertising purposes. Any links present on the platform are limited to taka5's own internal pages as defined in our site structure.

10. Changes to This Privacy Policy

taka5 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players via email or a prominent notice on the platform at least 7 days before the changes take effect, except where immediate revision is required for legal, regulatory, or security reasons.

The "Last Updated" date displayed at the top of this page indicates when the most recent revision was made. We encourage you to review this policy periodically to stay informed about how taka5 protects your personal data. Your continued use of the taka5 platform following the effective date of any revised policy constitutes your acknowledgement of the changes.

11. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or taka5's handling of your personal data, please contact our dedicated privacy team:

• Email: [email protected] (plain text — not a clickable link)
• Response Time: We aim to respond to all privacy-related enquiries within 5 business days and to formal data rights requests within 30 days.
• Language: Our support team handles privacy requests in English, available 24 hours a day, 7 days a week, including all Bangladeshi public holidays.

If you are not satisfied with taka5's response to your privacy concern, you have the right to escalate the matter through any applicable dispute resolution mechanism available to you.