pklok Privacy Policy

This Privacy Policy describes how pklok ("we", "us", "the Platform") collects, processes, stores, and protects personal information provided by users ("you", "Player") when you access or use the online gaming services available at pklok.org. This policy forms part of our overall Terms & Conditions and should be read alongside them. By registering an account or using the pklok platform, you acknowledge that you have read this Privacy Policy and consent to the practices described herein.

pklok is committed to handling your personal data responsibly and transparently. We collect only what is necessary to operate the platform safely, verify your identity, process payments, and comply with applicable legal obligations. We do not sell your personal data to third parties and we do not use your data for purposes beyond those described in this policy without first obtaining your explicit consent.

pklok collects personal information in three principal ways: information you provide directly when you register or use the platform, information generated automatically through your use of the platform, and information received from trusted third-party service providers where necessary for compliance or payment processing.

Registration and Account Information

• Full legal name and date of birth (required to verify the 21+ age requirement).
• Bangladeshi mobile number and, where provided, email address used to register the account.
• Government-issued identity document details and proof of address collected during KYC verification.
• Account preferences, communication preferences, and self-imposed responsible gaming limits set by you within the platform.

Transaction and Gaming Activity Data

• Deposit and withdrawal history, including payment method identifiers (bKash wallet number, Nagad account, bank account details where applicable), transaction amounts and timestamps.
• Betting and gaming history including wagers placed, games played, outcomes, and session durations.
• Bonus and promotion usage records, including wagering requirement progress and completion dates.

Technical and Usage Data

• IP address, device type, operating system, browser type and version, and device identifiers used to access the platform.
• Pages visited on the platform, time spent on each page, click paths, and feature interaction data used to improve the user experience.
• Cookie identifiers and session tokens used to maintain your login state and deliver a consistent platform experience across sessions.

pklok uses the personal data we collect exclusively for the following purposes. We do not use your data for purposes beyond this list without your explicit consent:

• Account registration and management: creating and maintaining your player account, verifying your identity, and administering your account preferences and settings.
• Payment processing: facilitating deposits via bKash, Nagad, Rocket, Upay and banking partners, processing withdrawal requests, and maintaining accurate transaction records for your account.
• Customer support: responding to account queries, handling complaints, processing responsible gaming requests such as self-exclusion or deposit limit changes, and communicating important account notifications.
• Compliance and fraud prevention: meeting our Know Your Customer (KYC) obligations, conducting anti-money laundering (AML) checks, detecting and preventing fraud or prohibited conduct, and complying with requests from law enforcement or regulatory authorities.
• Platform improvement: analysing aggregated, anonymised usage patterns to improve game performance, navigation, loading speeds, and the overall user experience for players across Bangladesh.
• Marketing communications: where you have explicitly opted in, sending you information about new games, promotions, bonus offers, and seasonal events such as Eid specials or BPL cricket promotions. You may opt out of marketing communications at any time through your account settings or by contacting [email protected].

The following table summarises the legal basis on which pklok processes each category of your personal data:

pklok does not sell, rent, or trade your personal information to third parties. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

Payment Service Providers

To process deposits and withdrawals, pklok shares relevant transaction details with payment processors including bKash, Nagad, Rocket, Upay, and banking partners such as Dutch-Bangla Bank, BRAC Bank and City Bank. These providers act as data processors under binding agreements and may only use your data to fulfil the specific transaction for which it was shared. They are not permitted to use your data for their own marketing or other purposes.

KYC and Compliance Providers

To fulfil our KYC and AML obligations, pklok may share your identity documentation and verification data with specialist identity verification providers. These providers are bound by strict data processing agreements and handle your data solely for the purpose of identity verification and compliance screening. Results of KYC checks are retained by pklok as required by applicable law.

Law Enforcement and Regulatory Authorities

pklok may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or lawful government request. We will notify you of any such disclosure where we are legally permitted to do so. pklok will never voluntarily share your data with government bodies beyond what is strictly required by law.

pklok uses cookies and similar tracking technologies to operate the platform, maintain your session state, and improve your experience. The types of cookies we use are as follows:

• Essential cookies: required for the platform to function. These include session authentication tokens that keep you logged in, security cookies that protect your account from unauthorised access, and load-balancing cookies that ensure consistent performance. These cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: collect anonymised data about how players navigate the platform, which games are most popular, and where users encounter difficulties. This data is used exclusively to improve the platform experience. Analytics data is aggregated and cannot be used to identify individual users.
• Preference cookies: store your platform preferences such as your chosen language, notification settings, and display options so that these are remembered between sessions without requiring you to re-configure them each time you visit.

You can manage cookie preferences through your browser settings. Disabling essential cookies will impair your ability to log in and use the platform. Disabling analytics or preference cookies will not prevent you from using pklok but may reduce the quality of your experience. pklok does not use cookies to serve third-party advertising.

pklok retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply: account registration data and KYC documents are retained for a minimum of five (5) years following account closure in accordance with standard AML compliance requirements. Transaction records are retained for a minimum of five (5) years from the date of the transaction. Gaming activity logs are retained for three (3) years from the date of activity. Marketing preferences and consent records are retained for as long as your account is active and for one (1) year following account closure or opt-out.

When retention periods expire and no legal obligation requires continued storage, pklok will securely delete or anonymise your personal data. Anonymised data — where all identifying information has been removed and re-identification is not possible — may be retained indefinitely for statistical and platform improvement purposes.

As a user of pklok, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with your registered account details and a clear description of your request:

• Right of access: you may request a copy of all personal data pklok holds about you. We will provide this within a reasonable timeframe and at no charge for routine requests.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. Account profile fields may also be updated directly through your account settings.
• Right to erasure: you may request deletion of your personal data. This right is subject to legal retention obligations — for example, we cannot delete transaction records that we are required to retain for AML compliance purposes. Where erasure is possible, we will action your request promptly.
• Right to restriction: you may request that we restrict processing of your personal data in certain circumstances — for example, while a complaint you have raised is under investigation.
• Right to withdraw consent: where processing is based on your consent (e.g. marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

pklok aims to respond to all data rights requests within fourteen (14) calendar days. In complex cases where additional time is required, we will notify you of the extended timeframe. We do not charge a fee for exercising your data rights unless requests are manifestly unfounded or excessive.

pklok implements a layered security approach to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include SSL encryption on all sessions to protect data in transit; secure, access-controlled server infrastructure with restricted personnel access; regular security audits and vulnerability assessments of platform systems; multi-factor authentication options for player accounts; and strict internal data access policies ensuring that only authorised pklok staff with a legitimate business need can access account data.

While pklok employs industry-standard security practices, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, pklok will notify affected users without undue delay and will take all reasonable steps to contain the breach and mitigate its impact.

pklok's services are strictly intended for adults aged 21 and above. We do not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been collected from a user who is underage, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has provided personal data to pklok, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

pklok may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. When we make material changes we will notify registered account holders via their registered mobile number or by placing a prominent notice on the platform no less than seven (7) days before the revised policy takes effect. The date of the most recent update is shown at the top of this page. Your continued use of the pklok platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your personal data.

For all privacy-related queries, data access requests, erasure requests, or concerns about how pklok handles your personal information, please contact our support team. Our team is available 24/7 and will handle all privacy requests with priority. Contact email: [email protected] (plain text only — not a clickable link). Please include your registered username and a clear description of your request in all correspondence. We aim to acknowledge all privacy requests within 48 hours and resolve them within fourteen (14) calendar days.