Privacy Policy — How pklauk Protects Your Data

1. Information We Collect

1.1 Information You Provide Directly

When you register a pklauk account or interact with our services, we collect personal information that you provide to us voluntarily. This includes:

• Identity information: Full legal name, date of birth, gender, and nationality as submitted during registration or KYC verification.
• Contact information: Email address, mobile phone number, and residential address including city, district, and postal code within Bangladesh.
• Identity documents: Copies of government-issued identification such as your National Identity Card (NID), passport, or driver's licence submitted during the KYC process.
• Financial information: Details of your payment methods including bKash account numbers, Nagad wallet details, Rocket numbers, Upay credentials, and Visa or Mastercard details necessary to process deposits and withdrawals. pklauk does not store full card numbers — card data is handled by our certified payment processors.
• Account credentials: Your chosen username and a hashed version of your password. pklauk never stores passwords in plain text.
• Communications: Any messages, complaints, support tickets, or correspondence you send to pklauk via email or live chat.

1.2 Information Collected Automatically

When you access and use the pklauk platform, certain technical information is collected automatically by our systems. This data is primarily used for security monitoring, fraud prevention, and platform performance analysis:

• Device information: Device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Network information: IP address, internet service provider (ISP), and approximate geographic location derived from your IP address.
• Usage data: Pages visited, games played, bet history, session duration, click patterns, and navigation paths within the platform.
• Transaction logs: Records of all deposits, withdrawals, bonus activations, and bet placements associated with your account.
• Cookie and tracking data: Information gathered via cookies, web beacons, and similar technologies as described in Section 4 of this Policy.

Data Category	Examples	Collection Method
Identity	Full name, NID, date of birth	Registration & KYC forms
Contact	Email, phone, address	Registration form
Financial	bKash number, card details	Cashier / payment forms
Technical	IP address, device ID, browser	Automatic (server logs)
Behavioural	Game history, session data	Automatic (platform analytics)
Communications	Support tickets, emails	Direct submission

2. How We Use Your Information

pklauk uses the personal data we collect for specific, legitimate purposes directly related to operating a safe and trustworthy online gaming platform. We do not use your data for any purpose inconsistent with those disclosed in this Policy.

2.1 Account Administration and Service Delivery

Your identity and contact information is used to create and maintain your pklauk account, verify your age and identity in compliance with our responsible gaming obligations, process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and respond to your support queries. This is the core operational use of your data and is essential to the service.

2.2 Fraud Prevention and Security

Technical data including your IP address, device fingerprint, and transaction history is analysed by pklauk's automated security systems to detect and prevent unauthorised account access, suspicious transaction patterns, bonus abuse, money laundering activity, and underage gambling. This processing is a legitimate interest of pklauk and a necessary component of responsible platform operation.

2.3 Responsible Gaming Monitoring

pklauk uses your gameplay data — including session duration, bet frequency, deposit patterns, and self-exclusion history — to monitor for signs of problem gambling behaviour. Where our systems identify potential risk indicators, our responsible gaming team may proactively contact you to offer support tools. This use of data directly protects player welfare and is central to pklauk's commitment to responsible gaming.

2.4 Platform Improvement and Analytics

Aggregated and anonymised usage data is used to analyse platform performance, understand which game categories and features players engage with most, and guide product development decisions. This analytics data does not identify individual players and is used solely to improve the pklauk experience for all users.

2.5 Marketing Communications

Where you have given explicit consent during registration, pklauk may send you promotional emails, SMS notifications, or in-platform messages about new games, tournaments, seasonal promotions, and bonus offers relevant to your interests. You may withdraw your consent to marketing communications at any time by updating your account notification preferences or contacting [email protected]. Withdrawal of marketing consent does not affect service-critical communications such as account security alerts, withdrawal confirmations, or KYC requests.

3. Data Sharing and Disclosure

pklauk does not sell, rent, or commercially exchange your personal data with third parties. However, in order to operate our platform effectively, we share certain data with carefully selected third-party partners under strict contractual data protection obligations. The categories of recipients are as follows:

3.1 Payment Processing Partners

To process your financial transactions, pklauk shares the minimum necessary financial data with our payment processing partners, including the operators of bKash, Nagad, Rocket, Upay, and card processing networks associated with Visa and Mastercard. These partners operate under their own privacy policies and are independently responsible for the data they process in connection with your transactions. pklauk does not retain full payment instrument details beyond what is required for transaction reconciliation.

3.2 Identity Verification Services

During the KYC process, your identity documents and personal details may be shared with third-party identity verification service providers engaged by pklauk to validate your age and identity. These providers are contractually bound to process your data only for the purpose of identity verification and are prohibited from retaining or using it for any other purpose.

3.3 Technology and Infrastructure Providers

pklauk uses third-party cloud infrastructure, content delivery networks, and cybersecurity services to host and protect the platform. These providers may process data as part of their service delivery but are subject to strict data processing agreements that restrict their use of your data to the performance of services for pklauk.

3.4 Legal and Regulatory Disclosure

pklauk may disclose your personal information to law enforcement agencies, regulatory bodies, or other authorised public authorities in Bangladesh or internationally where we are required to do so by applicable law, court order, or legitimate legal process. We will notify affected players of such disclosures where we are legally permitted to do so.

4. Cookies and Tracking Technologies

4.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites work efficiently, remember your preferences, and provide aggregate analytical information to site operators. pklauk uses cookies and similar tracking technologies including web beacons and local storage objects across its platform.

4.2 Types of Cookies Used by pklauk

• Strictly Necessary Cookies: These cookies are essential for the pklauk platform to function. They maintain your login session, remember your account state across pages, and ensure the security of your authenticated session. You cannot opt out of these cookies without ceasing to use the platform.
• Functional Cookies: These cookies remember your platform preferences such as language settings, display preferences, and responsible gaming notification settings. They are not essential to the core service but improve your experience.
• Analytics Cookies: pklauk uses analytics tools to collect aggregated data about how players navigate and use the platform. This data helps us identify usability issues, measure the effectiveness of new features, and understand overall traffic patterns. Analytics data is aggregated and does not identify individual players.
• Security Cookies: These cookies support pklauk's fraud detection and account security systems. They help identify suspicious login patterns, detect bot activity, and flag unusual transaction behaviour for review.

4.3 Managing Cookies

Most modern browsers allow you to view, manage, and delete cookies stored on your device through the browser's settings menu. However, disabling strictly necessary cookies will prevent you from logging in to your pklauk account or using core platform features. If you choose to disable analytics or functional cookies, this will not affect your ability to access the platform but may reduce the personalisation of your experience.

5. Data Security and Retention

5.1 Security Measures

pklauk implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes 256-bit SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data at rest, role-based access controls limiting employee access to player data on a strict need-to-know basis, regular independent penetration testing and vulnerability assessments, and automated intrusion detection and response systems operating 24 hours a day.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data security incident that poses a significant risk to your rights and freedoms, pklauk will notify affected players as promptly as practicable and take immediate steps to contain and remediate the incident.

5.2 Data Retention Periods

pklauk retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account's active status plus a minimum of 5 years following account closure, for legal and compliance purposes.
• Transaction records: Retained for a minimum of 7 years in accordance with financial record-keeping best practices.
• KYC documents: Retained for a minimum of 5 years following account closure or the completion of the KYC process, whichever is later.
• Support communications: Retained for 3 years from the date of the communication.
• Marketing consent records: Retained for the duration of your consent plus 3 years to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, your data will be securely deleted or anonymised in accordance with our internal data destruction procedures.

6. Your Privacy Rights

pklauk respects your rights over your personal data. Regardless of your location within Bangladesh, you are entitled to exercise the following rights with respect to the personal information we hold about you:

• Right of Access: You may request a copy of all personal data pklauk holds about you. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information directly through your account settings, or contact our support team for assistance.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to processing on legitimate interest grounds. Please note that we may be required to retain certain data for legal, regulatory, or fraud prevention purposes even following a deletion request.
• Right to Restrict Processing: You may request that pklauk restrict the processing of your data in certain circumstances, such as while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where technically feasible, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where pklauk processes your data based on consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Object: You have the right to object to processing of your personal data where pklauk is relying on a legitimate interest as the legal basis for processing.

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request". We may request identity verification before processing your request to protect against unauthorised access to your data.

7. Third-Party Services

The pklauk platform integrates with a number of third-party service providers whose software, APIs, or platforms form part of the overall player experience. These include game content providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, whose game engines are embedded within the pklauk platform. When you play a game provided by one of these studios, limited gameplay data may be transmitted to that provider's systems for the purpose of delivering the game and recording its outcome.

Each of these game providers operates under its own privacy policy and is independently responsible for data it processes directly. pklauk contractually requires all game and service providers to implement appropriate data protection standards and to use any shared player data only for the specific purpose of delivering their service within the pklauk platform.

pklauk's Privacy Policy does not extend to third-party websites or services that may be referenced on our platform. Any link to an external resource should be understood as navigating outside the pklauk environment, at which point the third party's own privacy practices apply.

8. Updates to This Policy

pklauk reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify registered players by email and/or via a prominent notice on the platform at least 14 days before the revised Policy takes effect.

The "Effective Date" shown at the top of this Policy indicates when the current version came into force. We encourage you to review this Policy periodically to stay informed about how pklauk protects your information. Your continued use of the pklauk platform after a revised Policy has taken effect constitutes your acceptance of the updated terms.