pklok Privacy Policy
At pklok, your privacy is treated as a core responsibility, not an afterthought. This Privacy Policy explains in plain terms exactly what personal data we collect from Bangladesh players, how we use it, who we share it with, and the rights you hold over your own information. We are committed to handling your data with transparency, security, and respect.
Summary: pklok collects only the personal data necessary to operate a safe, compliant, and enjoyable betting platform for Bangladesh players. We do not sell your data to advertisers or third-party marketers. We protect all transmitted data with SSL encryption and retain your information only for as long as your account is active or as required by law. This policy should be read alongside our Terms & Conditions.
Data Controller
pklok operates the online betting and casino platform accessible at pklok.io (the "Platform"). For the purposes of this Privacy Policy, pklok acts as the data controller responsible for determining how and why your personal data is collected and processed. When this policy refers to "pklok", "we", "us", or "our", it refers to the pklok platform operator and its authorised personnel.
pklok's Platform is directed at players located in Bangladesh. All personal data collected through the Platform is processed in connection with the provision of sports betting, casino gaming, and related services to registered players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and other locations within Bangladesh.
If you have any questions about how your data is handled, wish to exercise a data right, or wish to raise a privacy concern, you may contact pklok's data support team at any time at [email protected]. All privacy-related enquiries are acknowledged within 24 hours and resolved within five business days (Bangladesh Standard Time, UTC+6).
Data We Collect
pklok collects personal data that is necessary and proportionate to the services provided. The categories of personal data we collect are described below. We do not collect sensitive categories of personal data — such as racial or ethnic origin, political opinions, or health data — except where explicitly required for responsible gaming compliance (e.g., self-exclusion records).
2.1 Registration Data
When you create a pklok account, we collect the following information directly from you:
- Full legal name as it appears on your government-issued identification
- Date of birth (used to verify the 21+ age requirement)
- Residential address in Bangladesh
- Mobile number registered in your own name (used for OTP authentication and account notifications)
- Email address (used for account communications and security alerts)
- Chosen username and securely hashed account password
2.2 Identity Verification (KYC) Data
To comply with our Know Your Customer obligations and to verify the 21+ age requirement, pklok may request copies of the following documents:
- National Identity Card (NID) issued by the Bangladesh Election Commission
- Passport (biographic data page)
- Driving licence issued by the Bangladesh Road Transport Authority
- Recent utility bill or bank statement (for proof of residential address, dated within 90 days)
- Screenshot or confirmation of payment method ownership (e.g., bKash account confirmation, Nagad account details)
2.3 Financial Data
pklok collects data relating to financial transactions on the Platform, including:
- Deposit amounts, timestamps, and payment method identifiers (e.g., bKash wallet number, Nagad number, Rocket number, Upay ID, bank account last four digits, Visa or Mastercard last four digits)
- Withdrawal requests, amounts, and destination payment method identifiers
- Account balance history, transaction reference numbers, and bonus credit/debit records
pklok does not store full card numbers, CVV codes, or complete bank account numbers. Payment processing is handled via secure third-party payment processors. pklok retains only the minimum transaction reference data necessary for record-keeping and dispute resolution.
2.4 Betting and Gaming Activity Data
We record all activity associated with your pklok account, including:
- Sports bets placed, including event, market, stake amount, odds, and settlement outcome
- Casino game sessions, including game title, provider, session duration, wager amounts, and results
- Bonus claims, wagering requirement progress, and promotional participation records
- Live chat and customer support interaction logs
2.5 Technical and Device Data
When you access the pklok Platform, our servers and analytics systems automatically collect certain technical information:
- IP address (used for geolocation, fraud detection, and session management)
- Device type, operating system version, and browser type
- Session start and end times, pages visited, and features interacted with
- Mobile network operator (e.g., Grameenphone, Robi, Banglalink, Teletalk) where applicable
- Referral source (how you arrived at the Platform)
How We Collect Your Data
pklok collects your personal data through the following channels:
| Collection Method | Description |
|---|---|
| Direct Input | Data you enter when registering an account, completing KYC, making deposits or withdrawals, placing bets, or contacting support. |
| Automated Collection | Technical and device data collected automatically by our servers when you access the Platform, including IP address, browser data, and session activity. |
| Cookies & Tracking | Session and preference cookies placed on your browser or device when you visit the Platform. See Section 8 for full details on cookies. |
| Payment Processors | Transaction confirmation data received from payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card networks (Visa, Mastercard) upon completion of a deposit or withdrawal. |
| Identity Verification Providers | Where pklok uses third-party KYC verification services, we receive verification status and document check results from those providers. |
| Fraud Detection Systems | Automated signals generated by our internal fraud and anomaly detection tools based on account behaviour patterns. |
Purpose and Legal Basis for Processing
pklok processes personal data only where a legitimate purpose exists. The following table sets out the primary purposes for which we process your data and the corresponding legal basis for each:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account Registration & Management | Registration data, mobile number, email address | Performance of contract |
| Age Verification (21+) | Date of birth, KYC documents | Legal obligation; legitimate interest |
| Payment Processing | Financial transaction data, payment method identifiers | Performance of contract |
| Fraud Prevention & Security | IP address, device data, transaction history, behaviour patterns | Legitimate interest; legal obligation |
| Responsible Gaming Compliance | Betting activity, self-exclusion records, deposit limit settings | Legal obligation; legitimate interest |
| Customer Support | Account data, communication logs, transaction history | Performance of contract; legitimate interest |
| Platform Improvement & Analytics | Anonymised session data, feature usage patterns | Legitimate interest |
| Promotional Communications | Email address, mobile number, betting preferences | Consent (opt-in required) |
Promotional Communications: pklok will only send you promotional emails or SMS messages if you have explicitly opted in to receive them during registration or via your account settings. You may withdraw consent at any time by updating your notification preferences or by contacting [email protected].
Data Sharing & Third Parties
pklok does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing organisations under any circumstances. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.
5.1 Service Providers
pklok engages carefully selected third-party service providers to support the operation of the Platform. These providers act as data processors under pklok's instructions and are contractually bound to process data only for the purposes specified by pklok, to apply adequate security measures, and to delete or return data upon termination of their engagement. Categories of service provider include:
- Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, Mastercard — to execute deposit and withdrawal transactions
- KYC Verification Providers: Identity document verification and age-check services
- Game Providers: Pragmatic Play, NetEnt, Microgaming, Spribe, Evolution Gaming, Ezugi — limited game session data required to operate casino game functionality
- Cloud Infrastructure Providers: Hosting and data storage services operating the Platform's backend systems
- Fraud Detection & Cybersecurity Providers: Services that analyse transaction and session data to detect and prevent fraudulent activity
- Customer Support Technology: Live chat and helpdesk tools used to manage support interactions
5.2 Legal and Regulatory Disclosures
pklok may be required to disclose personal data to government authorities, law enforcement agencies, or regulatory bodies where we are under a legal obligation to do so, where disclosure is necessary to protect the rights or safety of pklok, its players, or the public, or where disclosure is required in connection with legal proceedings. pklok will disclose only the minimum data necessary to comply with such requirements and will, where legally permitted, notify the affected player prior to disclosure.
5.3 Business Transfers
In the event that pklok undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, player personal data may be transferred to the acquiring entity as part of that transaction. Where such a transfer occurs, pklok will ensure that the acquiring entity is bound by data protection obligations no less protective than those set out in this Privacy Policy, and will notify affected players prior to the transfer taking effect.
We do not sell your data. pklok will never sell, license, or monetise your personal data by sharing it with advertisers, data brokers, or any commercial third party for their own marketing or profiling purposes. This commitment applies regardless of whether you are an active player or a former account holder.
Data Retention
pklok retains your personal data for as long as your account remains active and for a defined period thereafter, as required for legal, regulatory, and dispute resolution purposes. The retention periods below represent our standard policy; specific categories of data may be retained for longer where required by applicable law or by ongoing legal proceedings.
| Data Category | Retention Period |
|---|---|
| Registration & Account Data | Duration of account plus 5 years after closure |
| KYC / Identity Documents | Duration of account plus 5 years after closure |
| Financial Transaction Records | 7 years from transaction date (financial record-keeping obligation) |
| Betting & Gaming Activity Logs | Duration of account plus 3 years after closure |
| Customer Support Communications | 3 years from last interaction |
| Self-Exclusion Records | Minimum 5 years from the date self-exclusion was applied |
| Technical / Session Logs | 12 months on a rolling basis |
| Marketing Consent Records | Duration of consent plus 3 years |
Upon the expiry of the applicable retention period, pklok will securely delete or anonymise your personal data so that it can no longer be associated with your identity. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.
Data Security
pklok takes the security of your personal data seriously. We implement a layered set of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, alteration, disclosure, and destruction. Our security framework includes:
- 128-bit SSL/TLS Encryption: All data transmitted between your device and the pklok Platform is encrypted in transit using industry-standard SSL/TLS protocols, preventing interception by third parties.
- Data Encryption at Rest: Sensitive personal data and financial records stored on pklok's servers are encrypted at rest using AES-256 encryption.
- Access Controls: Access to personal data is restricted to pklok personnel and authorised service providers on a strict need-to-know basis. All access is logged and regularly audited.
- Two-Factor Authentication (2FA): pklok offers SMS OTP two-factor authentication for all player accounts. Players are strongly encouraged to enable 2FA to protect their account against unauthorised access.
- Automated Threat Detection: pklok's systems continuously monitor for unusual login patterns, suspicious transaction behaviour, and other anomalies that may indicate a security incident.
- Regular Security Audits: pklok conducts periodic security assessments of its Platform infrastructure and data handling practices.
Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, pklok will notify affected players as promptly as practicable via their registered email address or mobile number, and will take immediate steps to contain the incident. Players are advised to use a strong, unique password for their pklok account and to contact [email protected] immediately if they suspect unauthorised access.
Cookies & Tracking Technologies
pklok uses cookies and similar tracking technologies on the Platform to ensure correct functionality, maintain your session, understand how the Platform is used, and improve the player experience. A cookie is a small text file placed on your device when you visit the Platform. The types of cookies used by pklok are described below.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Required for the Platform to function. These enable session management, login authentication, and security controls. They cannot be disabled without breaking core platform functionality. | Session |
| Functional | Remember your preferences such as language settings, preferred payment method, and display preferences to personalise your experience. | Up to 12 months |
| Analytics | Collect anonymised data about how players navigate and use the Platform (e.g., which pages are visited most, where sessions end). Used internally to improve Platform design and performance. | Up to 24 months |
| Fraud Prevention | Support our fraud detection systems by helping identify unusual behaviour patterns across sessions and devices. | Up to 12 months |
pklok does not use third-party advertising cookies or behavioural tracking cookies for the purpose of serving targeted advertisements on other websites. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent core Platform functionality from operating correctly.
Your Data Rights
As a registered pklok player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within five business days and will process your request in accordance with applicable data protection principles. We may need to verify your identity before processing a request.
Your Rights Over Your Personal Data
pklok respects your rights as a data subject. The following rights apply to all personal data we hold about you as a registered player on the Platform.
You have the right to request a copy of all personal data pklok holds about you. We will provide this in a clear, structured format within five business days of a verified request. Your access request should be sent to [email protected].
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may update most account details directly within your pklok account settings. For KYC document corrections, contact support.
You may request that pklok delete your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where you object to processing. This right is subject to our legal retention obligations (see Section 6).
You have the right to request that pklok restricts processing of your data — for example, while the accuracy of data is disputed, or while an objection to processing is being assessed. During a restriction period, pklok may store your data but may not actively process it.
Where data is processed on the basis of your consent or a contract with you, you have the right to receive your personal data in a structured, machine-readable format (e.g., CSV or JSON) for the purpose of transferring it to another service provider.
You have the right to object to pklok processing your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, in which case pklok must demonstrate compelling grounds for the processing to continue.
Minors & Age Protection
The pklok Platform is strictly restricted to individuals who are 21 years of age or older. pklok does not knowingly collect personal data from individuals under the age of 21. The collection of date of birth at registration and the KYC verification process are specifically designed to enforce this age restriction.
If pklok becomes aware that personal data has been collected from an individual under 21 years of age, all data associated with that individual will be permanently deleted and the account will be closed immediately. Any funds held in the account will be returned to the originating payment method after deducting the value of any wagers placed, which will be voided.
Parents and guardians who believe that a minor in their care has registered an account on the pklok Platform should contact us immediately at [email protected]. We take all such reports seriously and will act on them within 24 hours.
21+ Only. If you are under 21 years of age, you must not register or use the pklok Platform. pklok enforces age verification at all stages of the player journey and cooperates fully with guardians, parents, and responsible gaming organisations to prevent underage access to gambling services.
International Data Transfers
pklok's Platform is operated primarily for players located in Bangladesh. Some of our third-party service providers — including cloud infrastructure providers, KYC verification services, and game providers such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe — may process data in locations outside Bangladesh.
Where personal data is transferred to third parties operating outside Bangladesh, pklok takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. These safeguards may include contractual data protection clauses binding the receiving party to obligations consistent with internationally recognised data protection standards.
By registering an account on the pklok Platform, you acknowledge that your data may be transferred to and processed in other countries as described in this section, subject to the safeguards described above.
Changes to This Privacy Policy
pklok reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. Where a material change is made to this Policy — for example, a new category of data being collected, a new purpose for processing, or a new category of third-party recipient — pklok will notify registered players via their registered email address or via a prominent notice on the Platform at least 7 days prior to the change taking effect.
For non-material changes — such as clarifications of existing language, corrections to typographical errors, or updates to contact details — pklok may update the Policy without prior notice. The "Effective Date" displayed at the top of this page will always reflect the date on which the current version of the Policy came into force.
Continued use of the pklok Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised Policy, you should cease using the Platform and close your account by contacting [email protected].
Stay informed: We recommend reviewing this Privacy Policy periodically. The current version is always accessible at pklok.io/privacy-policy. If you have questions about any update, contact our support team at [email protected] and we will be happy to explain the changes.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way pklok handles your personal data, please get in touch with our support team using the contact details below. All privacy-related communications are treated as confidential and are handled by trained personnel.
- Email: [email protected] (subject line: "Privacy Policy Enquiry")
- WhatsApp: +880 1700-000000 (WhatsApp only, not voice calls)
- Live Chat: Available 24/7 via the Platform's live chat feature
- Response Time: Email enquiries acknowledged within 24 hours; resolved within 5 business days (Bangladesh Standard Time, UTC+6)
For concerns specifically related to responsible gaming, self-exclusion, deposit limits, or time-out features, please visit our dedicated Responsible Gaming page for full guidance and self-help tools available to all pklok players.
For general platform questions, account issues, or betting-related queries, you may also refer to our FAQ page, which covers the most common topics raised by pklok players across Bangladesh.
How pklok Protects Your Privacy
From the moment you register to every transaction you make, pklok applies industry-leading standards to keep your data safe and your experience secure.
All data exchanged between your device and the pklok Platform is protected by 128-bit SSL encryption, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
pklok maintains a strict zero-tolerance policy on selling or renting player data. Your personal information is never shared with advertisers, data brokers, or third-party marketers — not now, not ever.
Every pklok account undergoes identity and age verification to enforce our 21+ requirement. This protects the platform community and ensures that access is limited to eligible adult players across Bangladesh.
Sensitive personal data and financial records stored on pklok's servers are encrypted at rest using AES-256 encryption — the same standard used by global financial institutions — adding a critical second layer of protection beyond network-level security.
pklok players in Bangladesh hold comprehensive rights over their personal data — including access, rectification, erasure, portability, restriction, and objection. All rights requests are handled by trained staff within five business days.
This Privacy Policy is written in plain English and kept current. When material changes are made, pklok notifies registered players at least 7 days in advance via email, so you are never caught off guard by changes to how your data is used.
Ready to Experience Safe & Trusted Betting?
Now that you understand how pklok handles your personal data with care, explore everything the Platform has to offer — from live cricket betting and premium slots to real-time casino games. Your data is protected every step of the way.
SSL Secured | Fair Play Certified | 21+ Only | pklok is an entertainment platform. Please gamble within your means. | All times referenced are Bangladesh Standard Time (BST, UTC+6).