pklak Privacy Policy

01 Information We Collect

pklak collects personal information from players at various stages of the account lifecycle — during registration, during account verification (KYC), during ongoing gameplay and transaction activity, and when you contact our support team. The categories of information we collect are as follows:

Registration Information

• Full legal name as it appears on your government-issued identification document.
• Date of birth (to verify that you meet the 21+ age requirement).
• Bangladesh mobile number (used for account authentication, OTP verification, and transaction processing via bKash, Nagad, Rocket, or Upay).
• Email address (used for account notifications, promotional communications where opted in, and security alerts).
• Preferred payment method and associated account identifiers (e.g., your bKash mobile number).

Identity Verification (KYC) Information

• Scanned or photographed copy of a valid government-issued photo ID — National ID Card (NID), passport, or driving licence.
• Any additional documentation requested by pklak's compliance team to confirm identity or address where required.

Transaction and Financial Information

• Records of all deposits and withdrawals, including amounts in BDT, timestamps, payment methods used, and transaction reference numbers.
• Account balance history and bonus credit/debit records.
• Chargeback and dispute records where applicable.

Gameplay and Platform Activity

• Game sessions played, bet amounts, win/loss records, and wagering history.
• Sports betting selections, stake amounts, odds accepted, and settlement records.
• Login timestamps, session durations, and platform activity logs.
• Responsible gaming tool usage — deposit limit settings, session reminders, cooling-off activations, and self-exclusion requests.

Technical and Device Information

• IP address at time of login and during active sessions.
• Device type, operating system, browser type and version.
• Cookies and similar tracking data (see Section 6 for details).
• Geolocation data at account registration and login, used to verify Bangladesh residency and detect account sharing or VPN usage.

Support and Communications

• Content of messages sent to pklak support via email.
• Records of disputes, complaints, and their resolutions.
• Survey responses and feedback submitted voluntarily by players.

02 How We Use Your Information

pklak uses the personal data collected from players for the following specific purposes only:

pklak will not use your personal data for any purpose not listed in the table above without first obtaining your explicit consent or establishing a separate legal basis under applicable law.

03 Legal Basis for Processing

pklak processes personal data on the following legal grounds:

• Contractual Necessity: Processing that is required to fulfil the agreement between pklak and the player — including account operation, transaction processing, game delivery, and customer support.
• Legal Obligation: Processing required to comply with applicable laws — including age verification, anti-money laundering (AML) requirements, KYC obligations, and responsible gaming mandates.
• Legitimate Interest: Processing carried out to pursue pklak's legitimate business interests, provided those interests are not overridden by your rights — including fraud prevention, platform security, abuse detection, and service improvement analytics.
• Consent: Processing based on your explicit, informed consent — specifically, the sending of optional promotional and marketing communications. You may withdraw your consent to marketing communications at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

04 Data Sharing and Disclosure

pklak does not sell, rent, or trade your personal data. We share player data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose:

Third-Party Service Providers

pklak engages certain trusted third-party service providers who process personal data on our behalf as data processors. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners (City Bank, BRAC Bank, Dutch-Bangla Bank, Islami Bank, Sonali Bank) — for deposit and withdrawal transaction processing.
• Identity verification providers: Third-party KYC services used to authenticate government-issued ID documents submitted during account verification.
• Game technology providers: Certified game studios (including Evolution Gaming, Pragmatic Play, Ezugi, Spribe, NetEnt, Microgaming) whose platforms are integrated into pklak. These providers may receive anonymised session identifiers necessary to operate game rounds.
• Security and fraud prevention services: Technical partners who help pklak detect and prevent fraudulent account activity, VPN usage, and multi-accounting.

All third-party service providers engaged by pklak are bound by contractual data processing agreements that prohibit them from using player data for any purpose other than the specific service they provide to pklak.

Legal and Regulatory Disclosure

pklak may disclose personal data to law enforcement agencies, financial intelligence units, or other government bodies in Bangladesh where we are legally required to do so — including in response to lawful requests relating to fraud investigations, money laundering inquiries, or other criminal proceedings. pklak will not notify the subject of such a disclosure where doing so would be unlawful or would prejudice an ongoing investigation.

Business Transfers

In the event that pklak undergoes a merger, acquisition, or transfer of substantially all of its assets, player personal data may be transferred as part of that transaction. Players will be notified via their registered contact details prior to any such transfer, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

05 Payment Data and Financial Information

pklak processes payment transaction data in order to facilitate deposits and withdrawals through Bangladesh mobile wallet services and bank transfer channels. The following principles apply to financial data handling:

• pklak does not store full payment credentials (such as complete bank account numbers or mobile wallet PINs) on its own servers. Payment authentication is handled directly by the respective payment service provider (bKash, Nagad, Rocket, Upay, or bank partner).
• Transaction records — including amounts, timestamps, reference numbers, and payment method identifiers (e.g., the last four digits of a mobile number) — are retained by pklak for a minimum of five years in compliance with applicable financial record-keeping requirements.
• All financial data transmitted between pklak and payment providers is encrypted using TLS 1.2 or higher. pklak does not transmit unencrypted financial data over any channel.
• Third-party deposits — that is, transactions originating from payment accounts not registered in the player's own name — are prohibited under pklak's Terms and Conditions. Any such transaction identified will be reversed and the associated account reviewed.
• In the event of a withdrawal dispute, pklak's transaction records, as confirmed by the relevant payment processor, will be considered authoritative.

06 Cookies and Tracking Technologies

pklak uses cookies and similar technologies on the platform to deliver a functional, personalised, and secure player experience. The types of cookies used are as follows:

Strictly Necessary Cookies

These cookies are essential for the platform to function and cannot be disabled. They include session authentication cookies that keep you logged in during an active session, and security cookies that protect against cross-site request forgery (CSRF) attacks. No personal information processed by strictly necessary cookies is used for marketing purposes.

Functional Cookies

Functional cookies remember your preferences — such as your preferred game lobby view, language settings, and responsible gaming notification preferences — so that you do not need to re-configure them on each visit.

Analytics Cookies

pklak uses anonymised analytics data to understand how players navigate the platform, which features are most used, and where technical issues occur. Analytics data is aggregated and does not identify individual players. This data is used solely to improve the pklak platform experience.

Managing Cookies

You can control non-essential cookies through your browser settings. Please note that disabling functional cookies may affect your experience on the pklak platform. Strictly necessary cookies cannot be disabled without preventing the platform from functioning correctly. For a full list of cookies used by pklak, contact [email protected].

07 Data Retention

pklak retains personal data for the periods described below. After the applicable retention period, data is securely deleted or anonymised so that it can no longer be associated with an individual player.

• Active account data: Retained for the full duration of your account's active status plus a minimum of five years following account closure.
• KYC and identity verification documents: Retained for a minimum of five years from the date of submission, in compliance with anti-money laundering record-keeping obligations.
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction.
• Gameplay and betting history: Retained for a minimum of three years from the date of each session, for dispute resolution and responsible gaming monitoring purposes.
• Support communications: Retained for a minimum of two years from the date of the most recent communication in a thread.
• Self-exclusion records: Retained indefinitely to prevent re-registration by self-excluded players, even after account closure.
• Marketing consent records: Retained for the duration of consent plus two years following withdrawal of consent.

Where a legal obligation, dispute, or regulatory investigation requires data to be retained beyond the standard periods above, pklak will retain the relevant data until that obligation, dispute, or investigation is fully resolved.

08 Data Security Measures

pklak implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, and destruction. Key measures include:

• Encryption in transit: All data exchanged between your device and the pklak platform is encrypted using TLS 1.2 or TLS 1.3 (HTTPS). Unencrypted HTTP connections are not supported.
• Encryption at rest: Sensitive personal data stored in pklak's databases is encrypted using AES-256 encryption.
• Access controls: Access to player personal data within pklak's systems is restricted to authorised personnel whose job roles require it. Access is governed by role-based permissions and is subject to activity logging and periodic review.
• Two-factor authentication (2FA): pklak's internal administrative systems require two-factor authentication for all staff access. Players are also encouraged to enable 2FA on their accounts where available.
• Penetration testing and security reviews: pklak conducts periodic security assessments and third-party penetration testing to identify and remediate vulnerabilities in our platform and infrastructure.
• Incident response: In the event of a confirmed personal data breach that poses a risk to players, pklak will notify affected players via their registered contact details without undue delay, describing the nature of the breach, the data affected, and the steps being taken to address it.

While pklak takes all reasonable precautions to secure your data, no internet-based platform can guarantee absolute security. Players are responsible for maintaining the security of their own login credentials and for notifying pklak immediately if they suspect unauthorised access to their account.

09 Your Rights as a Player

As a registered pklak player, you have the following rights with respect to your personal data. To exercise any of these rights, submit your request in writing to [email protected] from the email address registered on your account.

• Right of Access: You have the right to request a copy of the personal data pklak holds about you, along with information about how it is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held in your account. For name or date of birth corrections, updated identity documentation will be required.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and where no overriding legal obligation requires its retention. Please note that pklak is legally required to retain certain categories of data (such as KYC documents and transaction records) for a minimum of five years, meaning erasure requests may be partially fulfilled.
• Right to Restrict Processing: You may request that pklak restricts processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Object to Marketing: You may object to the processing of your personal data for direct marketing purposes at any time. To opt out of marketing communications, contact [email protected].
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request a structured, machine-readable copy of the personal data you have provided to pklak.

pklak will acknowledge all data rights requests within five business days and will endeavour to fulfil requests within 20 business days. In complex cases, this period may be extended by up to an additional 20 business days, in which case you will be notified of the extension and the reason for it.

10 Children and Minors

pklak is strictly an adults-only platform. The platform is not directed at, and does not knowingly collect personal data from, any person under the age of 21. Age verification is conducted as part of the account registration process, and KYC verification is required before any withdrawal is processed.

If pklak becomes aware that a player account has been registered by or on behalf of a person under the age of 21, the account will be immediately suspended, all pending transactions will be cancelled, and any balance in the account will be handled in accordance with pklak's Terms and Conditions regarding underage registration. Any personal data collected in connection with an underage account will be securely deleted to the extent permissible by applicable legal obligations.

Parents and guardians who believe their child may have accessed pklak are encouraged to contact [email protected] immediately so that the matter can be investigated and the account closed without delay.

11 Third-Party Services

The pklak platform integrates with third-party services — including game providers such as Evolution Gaming, Pragmatic Play, Ezugi, Spribe, NetEnt, and Microgaming — to deliver its game library. When you play a game on pklak, technical session data (such as anonymised player session tokens) may be transmitted to the relevant game provider to operate the game round. Game providers do not receive your full personal profile, name, or payment information.

pklak is not responsible for the privacy practices of third-party game providers, payment processors, or any other external service whose technology is integrated into the platform. Players are encouraged to review the privacy policies of these third parties independently. Links to third-party services accessible from pklak do not constitute an endorsement of those services' privacy practices.

12 Contact and Data Requests

For all privacy-related inquiries, data access requests, correction requests, erasure requests, marketing opt-out requests, or questions about this Privacy Policy, please contact the pklak data team:

• Support Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week
• Time Zone: Bangladesh Standard Time (BST, UTC+6)
• Response Time for Data Requests: Acknowledgement within 5 business days; fulfilment within 20 business days

When submitting a data rights request, please include your full registered name, the mobile number associated with your pklak account, and a clear description of your request. This information is required to verify your identity before any personal data is accessed or modified.

This Privacy Policy was last updated in January 2026 and supersedes all previous versions. pklak reserves the right to modify this policy at any time. Material changes will be communicated to all registered players via their registered contact details before taking effect.