pkpk Privacy Policy — Your Data, Your Rights, Our Obligations

1 Introduction and Scope

This Privacy Policy ("Policy") describes how pkpk ("pkpk", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "Player", "User") who access the website at pkpk.bar, register a player account, use any of the platform's services — including sports betting, live casino, slot games, crash games, and customer support — or interact with pkpk through any other channel.

This Policy applies to all users of the pkpk platform regardless of the device or location from which they access the service. It forms part of the overall agreement between you and pkpk and should be read alongside the Terms & Conditions and the Responsible Gaming Policy.

pkpk is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. We review this Policy regularly and update it whenever our data practices change or when required by evolving legal standards.

2 Data Controller Information

pkpk operates pkpk.bar and acts as the data controller in respect of the personal data collected from its registered players and website visitors. As data controller, pkpk is responsible for determining the purposes and means of processing your personal data and for ensuring that processing is carried out lawfully, fairly, and transparently.

For all data protection enquiries, access requests, correction requests, or deletion requests, please contact our data protection team using the contact details set out in Section 15 of this Policy. We aim to respond to all data-related requests within 30 calendar days of receipt.

3 Personal Data We Collect

pkpk collects several categories of personal data in the course of providing its platform services to Bangladesh players. The specific data collected depends on your interaction with the platform and the services you use.

3.1 Registration and Account Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify the 21+ age requirement).
• Email address and mobile phone number.
• Username and encrypted password.
• Residential address (city, district, and postal code within Bangladesh).
• Preferred language and communication preferences.

3.2 Identity Verification (KYC) Data

• Scanned or photographed copy of your National Identity Card (NID), passport, or driving licence.
• Proof of residential address document (utility bill, bank statement, or equivalent).
• Selfie or live photograph in some verification scenarios.
• Proof of payment method ownership (screenshot of registered bKash, Nagad, or Rocket account).

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records including amounts, dates, and payment method references.
• Mobile money account identifiers (bKash, Nagad, Rocket, Upay) — stored in hashed form where technically possible.
• Bank account details where bank transfer is selected as the withdrawal method.
• Bonus and promotional credit history.

3.4 Gaming and Betting Activity Data

• Bet history across all sports markets including cricket, football, and kabaddi.
• Game session records for casino games, slot titles, and crash games.
• Win and loss records, account balance history, and wagering totals.
• Self-imposed limits and responsible gaming tool settings.

3.5 Technical and Device Data

• IP address at the time of registration and each subsequent login.
• Device type, operating system, browser type and version.
• Unique device identifiers.
• Session timestamps and login duration.
• Geolocation data at the city level (derived from IP address — not GPS).

3.6 Communication Data

• Records of all communications between you and the pkpk support team, including live chat transcripts and email correspondence.
• Records of promotional emails opened, clicked, or unsubscribed from.
• Complaint and dispute records.

4 How We Collect Your Data

pkpk collects personal data through several channels depending on how you interact with the platform:

• Directly from you: when you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact customer support, or participate in a promotion.
• Automatically: through cookies, server logs, and analytics tools that record technical data when you access pkpk.bar — including your IP address, browser fingerprint, and navigation patterns within the site.
• From third-party service providers: our KYC and identity verification partners may return additional data points used to confirm your identity or assess fraud risk. Our payment processors confirm transaction outcomes and associated account references.
• From fraud and security tools: automated systems monitor platform activity and may flag unusual behaviour based on device patterns, IP reputation, and transaction velocity.

5 Legal Basis for Processing

pkpk processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: processing that is required to deliver the platform services you have requested — including account creation, transaction processing, game access, and customer support.
• Legal obligation: processing required for compliance with applicable law — including anti-money laundering (AML) checks, identity verification, fraud prevention reporting, and record-keeping mandated by regulatory requirements.
• Legitimate interests: processing that serves pkpk's legitimate operational interests, such as platform security monitoring, fraud detection, product improvement, and responsible gaming analytics — where those interests are not overridden by your privacy rights.
• Consent: processing based on your explicit consent, such as the sending of optional promotional communications and marketing emails. You may withdraw consent at any time by updating your communication preferences in your account settings or by contacting support.

6 How We Use Your Personal Data

pkpk uses the personal data it collects for the following purposes:

6.1 Account Management and Service Delivery

To create and maintain your player account, verify your identity and age, process deposits and withdrawals via bKash, Nagad, Rocket, and bank transfer, provide access to betting markets and casino games, and deliver customer support when you contact the pkpk team.

6.2 Fraud Prevention and Platform Security

To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other security threats. This includes automated monitoring of login patterns, transaction velocity, and device fingerprints. Where suspicious activity is detected, pkpk may suspend your account pending investigation and, where required by law, report the activity to the relevant authorities.

6.3 Responsible Gaming Compliance

To monitor gaming activity and identify patterns that may indicate problem gambling behaviour. pkpk may use this data to trigger responsible gaming interventions — such as displaying usage summaries, sending cooling-off reminders, or proactively contacting players whose activity patterns suggest risk — in accordance with the platform's Responsible Gaming commitments.

6.4 Legal and Regulatory Compliance

To fulfil obligations under applicable anti-money laundering regulations, to respond to lawful requests from competent authorities, to maintain records required by law, and to resolve disputes or enforce the Terms & Conditions.

6.5 Platform Improvement and Analytics

To analyse aggregate, anonymised usage data for the purpose of improving platform performance, game selection, user experience, and customer support quality. Individual player data is not used for this purpose in a personally identifiable form.

6.6 Marketing and Promotions

To send promotional offers, bonus notifications, and event announcements to players who have opted in to marketing communications. You may opt out at any time by using the unsubscribe link in any marketing email or by updating your preferences in your account settings. Opting out of marketing does not affect transactional communications related to your account.

7 Sharing Your Data with Third Parties

pkpk does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Your data may be shared only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, and bank transfer providers receive the minimum data necessary to process your deposit or withdrawal transaction. These providers operate under their own privacy policies and data protection obligations.
• Identity verification providers: third-party KYC service providers process identity documents and verification data on pkpk's behalf to confirm player eligibility. These providers are contractually bound to process data only as instructed by pkpk and to maintain appropriate security standards.
• Fraud prevention and security services: automated fraud detection platforms may receive device and behavioural data to assess transaction risk. No personally identifiable information is shared beyond what is required for risk scoring.
• Game providers: licensed game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier to deliver their games within the pkpk platform. These providers do not receive your full personal details.
• Legal and regulatory authorities: pkpk may disclose personal data to law enforcement agencies, courts, or regulators where required by a lawful request, court order, or applicable legal obligation.
• Business transfers: in the event of a merger, acquisition, or sale of all or part of pkpk's operations, player data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections being maintained.

8 Cookies and Tracking Technologies

pkpk uses cookies and similar tracking technologies to operate the platform, remember your session state, detect fraud, and improve your experience on pkpk.bar. The main categories of cookies used are as follows:

8.1 Strictly Necessary Cookies

These cookies are essential for the platform to function correctly. They maintain your login session, store your language and currency preferences, and enable security features such as CSRF protection. These cookies cannot be disabled without impairing platform functionality.

8.2 Functional Cookies

These cookies remember your preferences — such as your preferred payment method, your responsible gaming limit settings, and your most recently visited game categories — so that you do not need to re-enter them on each visit.

8.3 Analytics Cookies

pkpk uses first-party analytics to understand how players navigate the platform. This data is collected in aggregated, anonymised form and is used solely to improve page performance, game discovery, and support quality. pkpk does not use third-party advertising or retargeting cookies.

8.4 Security and Fraud Detection Cookies

These cookies generate a unique device fingerprint that helps pkpk's fraud prevention systems identify suspicious login attempts, account takeover activity, and multi-account creation. They are an essential component of platform security and player account protection.

You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies may prevent you from logging in or using certain platform features. pkpk does not honour Do Not Track (DNT) browser signals at this time, as no industry-wide standard for DNT compliance has been established.

9 Data Retention

pkpk retains personal data for as long as necessary to fulfil the purpose for which it was collected and to meet applicable legal, regulatory, and audit requirements. The following general retention periods apply:

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an individual. Where anonymisation is not possible, data is deleted in a manner that prevents recovery.

10 Data Security

pkpk implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and pkpk's servers.
• Encryption of sensitive data fields (including passwords and payment identifiers) at rest using industry-standard cryptographic algorithms.
• Role-based access controls that limit employee access to personal data on a strict need-to-know basis.
• Regular independent security audits and penetration testing of platform infrastructure.
• Multi-factor authentication requirements for all pkpk staff accounts that have access to production systems or player data.
• Comprehensive intrusion detection and real-time threat monitoring systems.
• Contractual security obligations imposed on all third-party service providers who process player data.

11 Your Privacy Rights

As a pkpk player, you hold a number of rights in respect of the personal data we hold about you. You may exercise any of these rights at any time by contacting us at [email protected] with the subject line "Privacy Rights Request".

11.1 Right of Access

You have the right to request a copy of the personal data pkpk holds about you. Upon a valid request, we will provide a summary of your data in a readable format within 30 calendar days.

11.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Some data fields can be updated directly within your account settings; others require a formal request to the support team.

11.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. Please note that erasure requests may be declined or partially fulfilled where pkpk has a legal obligation to retain certain data — for example, transaction records required for AML compliance.

11.4 Right to Data Portability

You have the right to receive the personal data you provided to pkpk in a structured, commonly used, machine-readable format (such as CSV or JSON), and to request that this data be transmitted directly to another service provider where technically feasible.

11.5 Right to Object

You have the right to object to the processing of your personal data where that processing is based on pkpk's legitimate interests. If you object, pkpk will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.

11.6 Right to Withdraw Consent

Where pkpk processes your data on the basis of your consent — for example, for marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

12 Children and Minors

The pkpk platform is strictly for adults aged 21 and above. pkpk does not knowingly collect personal data from individuals under the age of 21. If we discover or have reason to believe that an account has been registered by a person under 21, we will immediately suspend the account, begin the closure process, and delete the associated personal data to the extent permitted by law.

If you are a parent or guardian and believe that your child has accessed pkpk and provided personal data, please contact us immediately at [email protected]. We will investigate promptly and take appropriate action, including deletion of the minor's data and full refund of any amounts deposited.

13 Marketing Communications

pkpk may send promotional emails and in-platform notifications to players who have opted in to marketing communications during registration or subsequently through their account settings. Marketing content may include: bonus and promotion announcements; tournament and league betting opportunities (including BPL, IPL, and T20 World Cup events); new game releases; and seasonal offers tied to Bangladeshi occasions such as Eid and Pohela Boishakh.

You can opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link at the bottom of any promotional email.
• Updating your communication preferences in your pkpk account settings.
• Contacting support at [email protected] and requesting removal from the marketing list.

Opting out of marketing communications will not affect your receipt of essential transactional messages — such as deposit confirmations, withdrawal notifications, security alerts, or account verification requests — which are sent regardless of your marketing preference as they are necessary for the operation of your account.

14 Changes to This Privacy Policy

pkpk reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform services. When material changes are made, we will notify registered players via their registered email address and display a prominent notice on pkpk.bar no fewer than 7 days before the revised Policy takes effect.

The date at the top of this Policy indicates when it was last updated. Your continued use of the pkpk platform after the effective date of any revision constitutes your acceptance of the updated Policy. If you disagree with the changes, you should stop using the platform and submit an account closure request before the new Policy takes effect.

We encourage all players to review this Privacy Policy periodically to stay informed about how pkpk is protecting and using their data. All previous versions of this Policy are available upon request by contacting support.

15 Contact and Data Requests

For all privacy-related enquiries, data subject rights requests, or concerns about how pkpk handles your personal data, please use the contact details below. To help us locate your records and respond efficiently, please include your registered username and a clear description of your request.

Email (plain text — not a clickable link): [email protected]

Subject line for data requests: "Data Protection Request" or "Privacy Rights Request"

Response time target: Acknowledgement within 5 business days; substantive response within 30 calendar days.

Support hours: 24 hours a day, 7 days a week, including all Bangladesh public holidays.