Privacy Policy

Last updated: 2026-09-18

This policy explains how Twocent Limited ("Tenka", "we", "us") collects and uses personal data when you visit tenkabet.com or hold an account with us. We are the data controller for that data. Please also read our Terms of Service and AML & KYC Policy, which explain why some of this data is required by law.

1. Data we collect

Account data

Email address, username, avatar, and a hashed (never plain-text) password.
Two-factor authentication settings, including backup codes if you set up an authenticator app.
Your language preference and the date you accepted our Terms and age gate.

Verification data (only when requested)

Copies of a government-issued ID, a selfie, proof of address, and — where thresholds or risk triggers apply — documents showing your source of funds.
The result of identity, sanctions and politically-exposed-person checks.

Transaction and play data

Cryptocurrency deposit addresses generated for you, the wallet addresses you withdraw to, transaction hashes, amounts, coins and networks.
Your balance history, bets, game results, bonuses, rewards, level and referral activity.
Provably fair client and server seeds for original games.

Technical data

IP address, approximate location derived from it, device type, operating system, browser, and the date and time of each session. These are shown to you under Account → Security → Active Sessions.
Server logs, error reports and security events such as failed logins.

Communications

Support tickets, emails, and messages you post in the site chat.

2. Cookies and local storage

We use a small number of cookies and browser-storage keys. None of them are used for advertising.

Session cookie — keeps you signed in and protects forms against forgery. Essential; expires when your session ends or you log out.
Language (cb_lang) — remembers the language you chose. Stored for one year.
Age gate (cb_age_ok, browser local storage) — remembers that you confirmed you are 21 or older so the gate is not shown on every visit.
Preferences — small keys that remember interface choices such as whether the intro screen has been shown.
Google reCAPTCHA — protects our sign-up and login forms from bots. Google may set its own cookies and receives your IP address and browser information under Google's privacy policy.
Analytics — if we enable an analytics service we will use it only to measure how the Site is used in aggregate (pages visited, device type, country). Where the law requires it we will ask for your consent first.

You can delete cookies and local storage in your browser at any time. Blocking the session cookie will prevent you from logging in.

3. Why we use your data

To provide the service — running your account, crediting deposits, settling bets, paying withdrawals, showing your history and answering support tickets. (Performance of our contract with you.)
To meet legal obligations — verifying age and identity, anti-money-laundering checks, sanctions screening, keeping records, and responding to lawful requests from authorities.
To keep the Site safe and fair — detecting fraud, bonus abuse, multiple accounts, bots, and unauthorised access. (Our legitimate interest in protecting the Site and other players.)
To protect players — enforcing self-exclusion and the age limit, and monitoring for signs of harmful play.
To communicate with you — service emails such as verification codes, security alerts and withdrawal status. Promotional emails are sent only if you opt in, and you can unsubscribe at any time.
To improve the Site — aggregate statistics on how games and pages are used.

We do not sell personal data and we do not use it for automated decisions that have legal effects on you without human review; withdrawals, for example, are always reviewed by a person.

4. Who we share data with

Payment processor — NOWPayments processes cryptocurrency deposits and withdrawals and receives the wallet addresses, amounts and transaction identifiers needed to do so.
Identity-verification and screening providers — when we request KYC documents they may be checked by a specialist provider, which also screens names against sanctions and PEP lists.
Game providers — to launch a slot or live game the provider receives a player identifier, your currency and language, and your bets in that game. Providers do not receive your email, name or documents.
Blockchain analytics — deposit and withdrawal addresses may be checked against risk databases to detect funds linked to crime.
Service providers — hosting, email delivery, support tooling and security services that act on our instructions under contract.
Authorities — regulators, financial-intelligence units, law enforcement and courts where the law requires it or to protect our legal rights.
Business transfers — if the business is sold or restructured, data may transfer to the new operator under this policy.

5. International transfers

Our servers and providers may be located in countries other than yours. Where data leaves the region it was collected in, we rely on contractual safeguards with the recipient and limit what is transferred to what the service needs.

6. How long we keep data

Account, transaction and verification records: for the life of the account and for at least five years after it is closed, as required by anti-money-laundering rules. Longer if a legal matter is open.
Chat messages and support tickets: for up to two years.
Technical logs and session records: typically 90 days to 12 months, depending on the log.
Self-exclusion records: kept for as long as needed to enforce the exclusion and prevent re-registration.

7. Your rights

Depending on where you live you may have the right to:

access the personal data we hold about you and receive a copy;
correct data that is inaccurate — most account details can be changed at Account → Settings and Account → Security;
request deletion of your data, subject to the retention periods we are legally required to keep;
object to, or ask us to restrict, certain processing, and withdraw consent where processing is based on consent;
receive the data you gave us in a portable format;
complain to the data-protection authority in your country.

To exercise a right, open a ticket at support or email [email protected]. We will need to confirm your identity before releasing or deleting data, and we will respond within 30 days.

8. Security

We protect data with encryption in transit (HTTPS), hashed passwords, two-factor authentication, access controls that limit staff to the data they need, session management that lets you log out other devices, and monitoring for suspicious activity. Verification documents are stored separately from day-to-day account data and access to them is restricted and logged. No system is perfectly secure; if a breach affecting your data occurs we will inform you and any relevant authority as the law requires.

9. Under-21s

The Site is strictly for people aged 21 or over. We do not knowingly collect data from anyone younger. If we learn that an account belongs to a person under 21 we will close it, return any verified deposits to the source wallet where possible, and delete the data except what we must keep as a record of the closure.

10. Changes to this policy

We may update this policy as the Site and the law change. The date at the top shows the latest version; material changes will be announced on the Site.

11. Contact

Privacy questions and requests: support or [email protected]. Data controller: Twocent Limited, the Autonomous Island of Anjouan, Union of Comoros.