Privacy Policy — How pklakh Collects, Uses, and Safeguards Your Personal Information

1. Information We Collect

pklakh collects personal data in order to provide a secure, compliant, and enjoyable gaming experience. The categories of data we collect depend on how you interact with our platform. We collect only what is necessary for the purposes described in this policy.

1.1 Registration & Account Data

When you create a pklakh account, we collect the information you provide directly, including:

• Identity information: Full legal name, date of birth, gender, and National Identity Card (NID) or passport number for age and identity verification purposes.
• Contact information: Email address, mobile phone number, and residential address (city/district, Bangladesh).
• Login credentials: Username and hashed password. We never store your password in plain text.
• Payment account identifiers: The bKash, Nagad, Rocket, or Upay mobile wallet number or bank account number linked to your player account for deposits and withdrawals. We do not store full card numbers or CVV codes.

1.2 Transaction & Gaming Data

As you use the pklakh platform, we automatically generate and retain records of your activity to comply with our legal and regulatory obligations and to deliver a personalised experience:

• Deposit and withdrawal history, including amounts (in ৳ BDT), timestamps, and payment method used.
• Betting and gaming records, including game titles, wager amounts, outcomes, and session durations.
• Bonus claims, wagering progress, and promotion participation history.
• Customer support correspondence, including chat logs and email exchanges.

1.3 Technical & Device Data

When you access pklakh through a browser or mobile device, we collect technical information automatically:

1.4 KYC Documentation

As part of our Know Your Customer (KYC) and anti-money-laundering (AML) obligations, we may request copies of identity documents such as your National Identity Card, passport, or a recent utility bill. We may also request a selfie photograph for liveness verification purposes. These documents are handled with the highest level of security and are retained only as long as legally required.

2. How We Use Your Data

pklakh uses the personal data it collects exclusively for legitimate, clearly defined purposes. We do not sell your personal data to any third party for their own marketing use. The lawful bases on which we process your data are as follows:

• Contract performance: Processing deposits and withdrawals via bKash, Nagad, and Rocket; maintaining your account; providing access to games and promotions.
• Legal obligation: Conducting age verification (18+ requirement), identity checks, AML monitoring, and fraud prevention as required under applicable regulations.
• Legitimate interest: Improving platform performance and user experience; detecting and preventing cheating, bonus abuse, and unauthorised access; conducting internal analytics to understand player behaviour at an aggregate level.
• Consent: Sending you promotional emails, SMS notifications, or push notifications about offers, new games, and platform updates — but only where you have opted in to receive such communications. You may withdraw consent at any time.
• Responsible gaming: Monitoring for signs of problem gambling behaviour, enforcing self-exclusion requests, and applying player-requested deposit or session limits.

2.1 Marketing Communications

Where you have opted in, pklakh may contact you with personalised offers relevant to your gaming preferences, seasonal promotions such as Eid or Pohela Boishakh specials, and BPL or T20 World Cup cricket betting opportunities. Each marketing message will contain a clear unsubscribe mechanism. Opting out of marketing does not affect the delivery of transactional or account-related communications (e.g., deposit confirmations, withdrawal updates, security alerts).

2.2 Automated Decision-Making

pklakh uses automated systems to flag potentially fraudulent transactions, detect bonus abuse, and identify accounts exhibiting patterns associated with problem gambling. Where an automated decision results in a restriction on your account, you have the right to request a human review of that decision. Please contact [email protected] to invoke this right.

3. Data Sharing & Third Parties

pklakh does not sell, rent, or trade your personal data to external parties for commercial purposes. We share your data only in the limited circumstances described below, and only with parties who are contractually bound to handle it with appropriate security measures.

3.1 Payment Processors

To facilitate deposits and withdrawals, we share the minimum necessary transaction data — including your mobile wallet number and transaction amount in BDT — with our payment partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and Islami Bank. These institutions process your payment data under their own privacy policies and applicable Bangladeshi financial regulations. pklakh does not have access to your full bank account PIN or mobile banking password.

3.2 Game Providers & Technology Partners

The casino games available on pklakh are powered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game, a session token and anonymised player identifier may be shared with the relevant studio solely for the purpose of delivering the game, maintaining game state, and calculating outcomes. These studios are not provided with your name, NID, or payment details.

3.3 Regulatory & Law Enforcement Disclosure

pklakh may disclose personal data to government bodies, law enforcement agencies, or financial intelligence units where required to do so by applicable law or in response to a valid legal request. We will notify you of such a disclosure where we are legally permitted to do so.

3.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of pklakh's business, player data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the new entity prior to any change in how your data is handled.

4. Cookies & Tracking Technologies

pklakh uses cookies and similar tracking technologies — including browser local storage and session storage — to operate the platform, remember your preferences, and understand how players navigate the site. Below is a summary of the categories of cookies we use.

4.1 Managing Cookies

Strictly necessary cookies cannot be disabled as they are essential for the platform to function. For all other cookie categories, you may update your preferences through your browser settings. Most modern browsers allow you to block or delete cookies; however, doing so may affect your experience on pklakh — for example, you may be required to log in on every visit or your game display preferences may not be saved between sessions.

Please refer to your browser's help documentation for instructions on managing cookies. Common browsers used in Bangladesh (Chrome, Firefox, Samsung Internet, Opera Mini) all provide cookie management options under their privacy or settings menus.

5. Data Retention & Storage

pklakh retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The table below outlines our standard retention periods for the main categories of data we hold.

5.1 Data Storage Location

pklakh stores player data on secure servers. Data may be processed by our technology partners in data centres located outside Bangladesh. Wherever data is transferred internationally, we apply contractual safeguards — including data processing agreements with standard contractual clauses — to ensure your data receives an equivalent level of protection regardless of where it is stored.

5.2 Data Deletion

When a retention period expires, pklakh securely deletes or anonymises the relevant personal data so that it can no longer be attributed to you. Anonymised aggregate data (e.g., statistical game usage trends) may be retained indefinitely as it can no longer identify any individual player.

6. Your Privacy Rights

As a pklakh player, you hold specific rights over the personal data we hold about you. We are committed to honouring these rights promptly and without undue burden. To exercise any of the rights listed below, contact our support team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 72 hours and provide a substantive response within 30 days.

• Right to Access: You may request a copy of the personal data pklakh holds about you, including your account details, transaction history, and communication records. We will provide this in a readable format at no charge.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update some information directly through your account settings panel.
• Right to Erasure: You may request that pklakh delete your personal data where it is no longer necessary for the purposes for which it was collected. Note that we may be unable to fulfil this request in full where retention is required by law (e.g., AML record-keeping obligations).
• Right to Restrict Processing: You may request that we suspend the active processing of your data — for example, while you dispute the accuracy of the data we hold — without requiring its full deletion.
• Right to Data Portability: Where your data is processed on the basis of consent or contract, you may request that we provide it to you in a structured, machine-readable format (e.g., CSV or JSON) so that you can transfer it to another service.
• Right to Object: You may object to pklakh processing your data for direct marketing purposes at any time. You may also object to processing conducted on the basis of legitimate interest, though we may be able to demonstrate compelling grounds that override your objection.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

7. Data Security Measures

pklakh implements a layered approach to data security, combining technical controls, organisational policies, and staff training to protect your personal data against unauthorised access, disclosure, alteration, or destruction.

• SSL/TLS Encryption: All data transmitted between your device and pklakh.club is encrypted using TLS 1.2 or higher. Look for the padlock icon in your browser address bar to confirm an active secure connection.
• Password Hashing: Passwords are stored using industry-standard one-way cryptographic hashing algorithms. pklakh employees cannot read your password — only you know it.
• Two-Factor Authentication: pklakh supports additional login verification via one-time codes sent to your registered mobile number, providing an extra barrier against unauthorised account access.
• Activity Monitoring: Our security systems monitor login events, transaction patterns, and account activity around the clock to detect anomalies that may indicate unauthorised access or fraud.
• Access Controls: Personal data is accessible only to pklakh staff members who require it to perform their job functions. Access is managed through role-based permissions and is audited regularly.
• Third-Party Security Audits: pklakh engages independent security professionals to conduct periodic penetration testing and vulnerability assessments of our platform infrastructure.

7.1 Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, pklakh will notify affected players via their registered email address within 72 hours of becoming aware of the breach. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps pklakh is taking to address it and prevent recurrence.

8. Policy Updates & Contact

pklakh may update this Privacy Policy from time to time to reflect changes in our data practices, technological developments, or evolving legal requirements. When we make a material change to this policy, we will notify registered players via their registered email address and display a prominent notice on the platform for at least 14 days prior to the updated policy taking effect.

The effective date at the top of this page reflects when the most recent version was published. Continued use of the pklakh platform after the effective date of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with the updated policy, you may close your account by contacting our support team.

8.1 Contact for Privacy Enquiries

For any questions, concerns, or requests related to your personal data and this Privacy Policy, please contact the pklakh support team. We are available 24 hours a day, 7 days a week and aim to respond to all privacy-related enquiries within one business hour on average.

• Email: [email protected] (subject line: "Privacy Enquiry")
• Response time: Within 1 hour on average; formal data rights requests within 30 days.
• Language: All privacy correspondence is handled in English.
• Serving: Players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all of Bangladesh.