pklk Privacy Policy — How We Handle Your Personal Data

pklk collects personal data from you in the course of operating the Platform. We collect only the information that is reasonably necessary for the purposes described in this Privacy Policy. The categories of personal data we collect are set out below.

Information You Provide Directly

When you register an account, complete identity verification, make a deposit, or contact our support team, you provide us with information that may include:

• Full legal name and date of birth.
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, or other).
• Mobile phone number and email address.
• Government-issued identity document details (National ID card number, passport number, or driving licence number) submitted during KYC verification.
• Payment account identifiers — for example, the registered mobile number associated with your bKash or Nagad account — used to process deposits and withdrawals.
• Any information you voluntarily provide when communicating with our customer support team via live chat or email.

Information Collected Automatically

When you access or use the pklk Platform, our systems automatically collect certain technical and behavioural data, including:

• IP address and approximate geographic location derived from it.
• Device type, operating system, and browser version.
• Session timestamps — when you logged in and logged out.
• Pages visited within the Platform, games launched, and betting activity log.
• Referral URL (the page or link from which you arrived at pklk.net).
• Cookie identifiers and similar tracking data — see Section 4 for full details.

Information from Payment Partners

When you make a deposit or withdrawal using bKash, Nagad, Rocket, Upay, or a card payment network (Visa, Mastercard), our payment partners transmit to pklk a limited set of transaction data required to credit or debit your account. This typically includes a transaction reference number, the payment method used, the amount in BDT (৳), and a timestamp. pklk does not receive your full card number, mobile banking PIN, or any authentication credentials from these partners.

Data Category	Examples	Collection Method
Identity data	Name, date of birth, NID number	Registration & KYC form
Contact data	Email address, mobile number	Registration form
Financial data	Transaction reference, payment method, BDT amount	Payment partner API
Technical data	IP address, device type, browser	Automatic (server logs)
Usage data	Games played, pages visited, bet history	Automatic (platform analytics)
Communications data	Support chat transcripts, email correspondence	Direct user interaction

pklk processes your personal data only where there is a lawful and legitimate basis for doing so. The primary purposes for which we use your data are described below, along with the legal basis that applies to each processing activity.

Account Operation and Service Delivery

We use your registration data, contact details, and financial data to create and maintain your player account, process deposits and withdrawals in BDT (৳), authenticate your identity when you log in, and provide access to the full range of games and betting services available on the Platform. This processing is necessary for the performance of our agreement with you as a registered player.

Identity Verification and Fraud Prevention

pklk uses identity data — including the details from KYC documents you submit — to verify your age and identity, comply with anti-money laundering obligations, detect and prevent fraudulent or suspicious activity on the Platform, and protect the integrity of games and betting markets. This processing is based on legal obligation and our legitimate interest in maintaining a safe and fair platform.

Customer Support

When you contact our support team via live chat or by writing to [email protected], we use the information you provide — together with your account history — to respond to your query, investigate complaints, and improve our service. Support communications are retained for a period consistent with our data retention schedule (see Section 7).

Security and Platform Integrity

Technical data collected automatically — including IP addresses, device identifiers, and session logs — is used to detect and respond to security threats, identify unauthorised access attempts, investigate technical incidents, and enforce the one-account-per-player rule set out in our Terms & Conditions.

Responsible Gaming Monitoring

pklk uses your usage data, deposit history, and session patterns to identify players who may be showing signs of problematic gambling behaviour. This is part of our commitment to responsible gaming. Where our monitoring identifies a concern, our team may reach out to you proactively to offer support tools such as deposit limits or self-exclusion options.

Platform Improvement and Analytics

Aggregated, anonymised usage data — from which individual players cannot be identified — is used to analyse Platform performance, understand how players navigate the site, and make improvements to the user experience. This processing is based on our legitimate interest in continuously improving the Platform for the benefit of all players.

Marketing Communications

pklk may send you information about promotions, bonuses, and seasonal offers — such as those tied to BPL, IPL, Eid, or Pohela Boishakh events — where you have provided your consent to receive such communications at the time of registration or subsequently through your account settings. You may withdraw consent for marketing communications at any time by contacting our support team.

pklk does not sell or rent your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent necessary to fulfil the specific purpose in question.

Payment Service Providers

To process deposits and withdrawals, pklk shares the minimum necessary data with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. The data shared is limited to what each provider requires to execute or verify a transaction (for example, your registered mobile number for a bKash transfer, or the last four digits of your card for a Visa transaction). Each payment partner operates under its own privacy policy and data protection standards.

Identity Verification Partners

pklk may engage third-party identity verification services to assist with KYC checks. Where your identity documents are submitted for verification, the relevant data is shared with the verification partner solely for the purpose of confirming the authenticity of the documents and your eligibility to use the Platform. Verification partners are contractually prohibited from using your data for any other purpose.

Technology and Infrastructure Providers

pklk uses third-party cloud hosting, database management, and content delivery providers to operate the Platform infrastructure. These providers may process personal data as part of delivering their services to pklk. All such providers are engaged under data processing agreements that restrict their use of your data and require them to maintain appropriate security standards.

Game Software Providers

The games available on the pklk Platform are provided by third-party game studios and software developers, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. Where gameplay data is transmitted to a game provider's servers as part of rendering a game, pklk ensures that such data sharing is limited to what is technically necessary and is governed by applicable agreements with each provider.

Legal and Regulatory Disclosure

pklk may disclose your personal data to law enforcement agencies, regulatory authorities, or other government bodies where required to do so by applicable law, or where we reasonably believe that disclosure is necessary to prevent or detect fraud, money laundering, or other criminal activity, or to protect the rights and safety of pklk, its employees, or other players.

Business Transfers

In the event that pklk undergoes a merger, acquisition, or sale of all or a substantial portion of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any changes to the applicable privacy policy before your data is transferred and becomes subject to a different privacy policy.

pklk uses cookies and similar technologies — including local storage and session tokens — to operate the Platform effectively, maintain your logged-in session, remember your preferences, and gather anonymised analytics data. This section explains what cookies we use, why, and how you can manage them.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to store small pieces of information — such as a session token or a language preference — that improve the usability and functionality of the site.

Categories of Cookies Used by pklk

Cookie Type	Purpose	Duration
Strictly Necessary	Maintain your login session, prevent cross-site request forgery, and enable core Platform functions. Cannot be disabled without breaking Platform functionality.	Session / up to 24 hours
Functional	Remember your preferences such as language setting, display options, and recently viewed game categories to personalise your experience.	Up to 90 days
Analytics	Collect anonymised data about how players navigate the Platform — pages visited, time spent, error events — to help us identify usability improvements. No personally identifiable information is included in analytics reports.	Up to 12 months
Security	Detect suspicious login patterns, flag unusual activity, and support fraud prevention measures across sessions.	Up to 30 days

Managing Your Cookie Preferences

You may configure your browser to block or delete cookies at any time. Instructions for managing cookies vary by browser — consult your browser's help documentation for guidance. Please note that disabling strictly necessary cookies will impair your ability to log in and use core Platform features. Disabling functional or analytics cookies will not prevent you from using the Platform but may affect your experience.

pklk does not use cookies to serve third-party advertising or to track your activity across other websites for the purpose of building a marketing profile.

pklk implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. While no online platform can guarantee absolute security, we apply industry-standard practices appropriate to the nature and sensitivity of the data we hold.

Technical Safeguards

• Transport Layer Security (TLS 1.3): All data transmitted between your browser or app and pklk's servers is encrypted using TLS 1.3, the current industry standard for secure web communications.
• Data encryption at rest: Sensitive personal data — including identity document details and KYC records — is encrypted when stored on pklk's servers.
• Access controls: Access to personal data within pklk's systems is restricted to authorised personnel on a need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Intrusion detection and monitoring: pklk's infrastructure is monitored continuously for suspicious activity, and automated alerts are triggered by anomalous access patterns.
• Regular security audits: pklk conducts periodic reviews of its data security practices to identify and remediate vulnerabilities.

Data Storage Location

Personal data collected from players using the pklk Platform is stored on servers located in secure data centre facilities. Where data is processed by third-party service providers — such as cloud infrastructure or analytics partners — pklk ensures that appropriate contractual safeguards are in place governing how that data is handled and stored.

Data Breach Response

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, pklk will take prompt steps to contain the breach, assess its scope, and notify affected players at the registered email address or mobile number within a reasonable time frame. We will also take remedial action to prevent recurrence.

As a player on the pklk Platform, you have a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact our support team via live chat or by writing to [email protected] with the subject line "Privacy Rights Request". We will respond within 30 calendar days of receiving a valid request.

Right of Access

You have the right to request a copy of the personal data that pklk holds about you. This includes your registration information, KYC records, transaction history, and support correspondence. We will provide this information in a clear, readable format at no charge for standard requests.

Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update certain account details — such as your contact number or email address — directly through your account settings.

Right to Erasure

You may request that pklk delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for data processed on that basis), or where the data has been unlawfully processed. Please note that this right is subject to limitations: pklk is required by applicable anti-money laundering and record-keeping obligations to retain certain data for a specified minimum period after account closure, regardless of an erasure request. We will inform you of any such limitation when responding to your request.

Right to Restriction of Processing

In certain circumstances — for example, while a dispute about the accuracy of your data is being resolved — you may request that pklk restrict the processing of your personal data. During a restriction period, we will continue to store your data but will not actively process it for other purposes.

Right to Data Portability

Where technically feasible, you may request a copy of the personal data you have provided to pklk in a structured, commonly used, machine-readable format (such as CSV or JSON), so that you may transfer it to another service provider.

Right to Object to Marketing

You have the right to object at any time to the processing of your personal data for direct marketing purposes. To opt out of promotional communications from pklk, contact our support team. We will action your opt-out request within 5 business days.

pklk retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including legal, regulatory, and legitimate business obligations. The retention periods applicable to the main categories of personal data are set out below.

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	Legal obligation, fraud prevention
KYC / identity verification documents	Duration of account + 5 years after closure	Anti-money laundering compliance
Transaction records (deposits, withdrawals)	Duration of account + 7 years after closure	Financial record-keeping obligations
Betting and gameplay history	Duration of account + 3 years after closure	Dispute resolution, responsible gaming monitoring
Support communications	3 years from date of communication	Complaint handling, service improvement
Analytics data (anonymised)	Up to 24 months on a rolling basis	Platform performance analysis
Marketing consent records	Until consent is withdrawn + 1 year	Evidence of consent basis

At the end of the applicable retention period, personal data is either securely deleted from pklk's active systems or rendered permanently anonymous so that it can no longer be associated with any identifiable individual. If you have a specific query about how long pklk will retain a particular category of your data, please contact our support team.

pklk may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When we make material changes to this Policy, we will notify registered players via an on-platform notification or a message to the email address associated with your account, and we will update the effective date displayed at the top of this page.

We encourage you to review this Privacy Policy periodically so that you remain informed about how pklk protects your personal data. If you continue to use the Platform after a revised Privacy Policy has been notified to you, your continued use constitutes acceptance of the updated Policy.

If you have any questions about this Privacy Policy, about how pklk handles your personal data, or about how to exercise your privacy rights, please contact our support team at any time. Our team is available 24 hours a day, every day of the year, via live chat on the Platform. You may also write to us at [email protected] and we will respond within 5 business days.