pkloke Privacy Policy

01 Introduction and Scope

This Privacy Policy ("Policy") describes how pkloke ("pkloke", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of users ("User", "Player", "you") who access or interact with the pkloke platform available at pkloke.app and any associated mobile-browser interfaces (collectively, the "Platform").

This Policy applies to all personal data we collect through the Platform, including data provided during account registration, identity verification (KYC), deposits, withdrawals, gameplay, promotional participation, and communications with our support team. It also covers data we collect automatically when you visit or use the Platform.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are available on the Platform. By using pkloke, you accept the combined effect of all three documents.

We may update this Policy periodically to reflect changes in our data practices, legal obligations, or operational requirements. The version number and effective date shown at the top of this page always indicate the current binding version. We will notify registered users of material changes via email or in-Platform notice before those changes take effect.

02 Personal Data We Collect

We collect personal data in two primary ways: data you provide to us directly, and data we collect automatically through your use of the Platform.

03 Legal Basis for Processing

pkloke processes your personal data on one or more of the following legal bases, depending on the nature of the data and the purpose of processing:

• Contractual necessity: Processing your identity, contact, and payment data is necessary to open and maintain your account, process transactions, and provide the gaming and betting services you have requested.
• Legal obligation: We are required to collect and retain certain data — particularly KYC and transaction records — to comply with applicable anti-money laundering (AML) obligations and other legal requirements.
• Legitimate interests: We process technical and usage data to detect fraud, ensure Platform security, prevent problem gambling behaviour, and improve the quality of our services. We only rely on legitimate interests where those interests are not overridden by your rights.
• Consent: Where we process data for optional purposes — such as sending promotional communications or placing non-essential cookies — we rely on your freely given, specific, and informed consent. You may withdraw consent at any time by contacting support@pkloke.app.

04 How We Use Your Personal Data

We use the personal data we collect for the following specific purposes:

• Account management: Creating, maintaining, and securing your pkloke account, including enforcing our one-account-per-person policy.
• Identity verification: Conducting KYC checks to confirm your age (21+), identity, and eligibility to use the Platform.
• Transaction processing: Accepting deposits and processing withdrawal requests to and from your registered bKash, Nagad, Rocket, or other payment method.
• Fraud prevention and security: Detecting and investigating suspicious activity, multiple account creation, bonus abuse, money laundering attempts, and unauthorised access to your account.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and applying deposit limits, session reminders, or self-exclusion tools where appropriate.
• Customer support: Responding to your enquiries, resolving disputes, and providing technical assistance via support@pkloke.app.
• Promotional communications: Sending bonus offers, seasonal promotions (e.g., Eid, BPL cricket tournament specials, Pohela Boishakh promotions), and platform updates — only where you have consented to receive them.
• Legal compliance: Retaining records as required by applicable law and responding to lawful requests from authorities.
• Platform improvement: Analysing aggregated and anonymised usage data to identify performance issues, popular games, and areas where the user experience can be improved.

We do not use automated decision-making (including profiling) that produces legal or similarly significant effects on you without human review and your right to contest the outcome.

05 Sharing Your Personal Data

pkloke does not sell, rent, or trade your personal data to third-party marketing organisations. We share personal data only in the following limited and controlled circumstances:

• Payment processors: We share the minimum necessary payment data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard solely for the purpose of executing your deposit and withdrawal transactions.
• Game content providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier to facilitate gameplay. They do not receive your full name, payment details, or contact information.
• Technology and infrastructure partners: Hosting providers, cloud infrastructure operators, and cybersecurity vendors who process data on our behalf under strict data processing agreements that prohibit them from using your data for any purpose other than providing services to pkloke.
• Legal and regulatory authorities: We will disclose personal data to law enforcement, financial intelligence units, or other regulatory bodies when required to do so by law, court order, or other binding legal process.
• Fraud prevention services: We may share data with fraud detection and AML screening services to identify and prevent financial crime. Data shared for this purpose is subject to strict confidentiality obligations.

All third parties with whom we share personal data are required to handle that data in a manner consistent with this Policy and applicable data protection law.

06 Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations. Our standard retention periods are as follows:

• Account and identity data: Retained for the lifetime of your account and for a minimum of five (5) years following account closure, to comply with AML record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• KYC documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant KYC review, whichever is later.
• Support communications: Retained for three (3) years from the date of the last interaction, unless the communication is part of a formal dispute that requires longer retention.
• Usage and technical data: Typically anonymised or aggregated within thirteen (13) months of collection for analytics purposes.
• Cookie data: Session cookies expire when you close your browser. Persistent cookies are cleared within twelve (12) months of placement, unless refreshed by a return visit.

When the applicable retention period expires, we securely delete or anonymise the relevant data so that it can no longer be associated with you as an individual.

07 Data Security Measures

pkloke takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure:

• 256-bit SSL/TLS encryption: All data in transit between your device and our servers is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher).
• Encrypted data storage: Sensitive data at rest — including KYC documents and payment identifiers — is encrypted using AES-256 encryption in our secure data centres.
• Access controls: Access to personal data within pkloke is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Two-factor authentication: OTP verification is used for login and high-value transaction authorisation to reduce the risk of unauthorised account access.
• Intrusion detection: Our infrastructure is monitored continuously for anomalous behaviour, and automated alerts are generated for potential security incidents.
• Regular security audits: We conduct periodic security assessments and penetration testing to identify and address vulnerabilities before they can be exploited.

Despite these measures, no method of electronic transmission or storage is completely secure. If you believe your pkloke account has been accessed without your authorisation, please contact support@pkloke.app immediately so we can take protective action without delay.

08 Cookies and Tracking Technologies

pkloke uses cookies and similar tracking technologies to operate the Platform effectively and to improve your experience. A cookie is a small text file placed on your device when you visit the Platform. We use the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. You cannot opt out of these without losing access to the Platform.
• Functional cookies: Remember your preferences such as language settings, display options, and recently played games so you do not have to reconfigure them on each visit.
• Analytics cookies: Collect anonymised data about how users interact with the Platform — pages visited, time spent, errors encountered — to help us improve performance and usability.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot traffic, and suspicious activity patterns.

You can manage or delete cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform, including your ability to stay logged in or access certain games.

09 Your Data Rights

As a pkloke user, you have the following rights in relation to your personal data. To exercise any of these rights, please contact support@pkloke.app with the subject line "Data Rights Request" and we will respond within 30 calendar days:

• Right of access: You may request a copy of all personal data we hold about you, together with details of how we use it and with whom we share it.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You may also update certain details directly through your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations (see Section 06).
• Right to restrict processing: You may ask us to pause processing of your data in certain circumstances — for example, while a dispute about its accuracy is resolved.
• Right to data portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request your data in a structured, machine-readable format.
• Right to withdraw consent: Where processing relies on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights.

We will not charge a fee for exercising your data rights in ordinary circumstances. If a request is manifestly unfounded or excessive, we may charge a reasonable administrative fee or decline the request, and we will explain our reasons in writing.

10 Third-Party Links and Services

The pkloke Platform may contain references to or integrations with third-party services — including game content from studios such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi — whose own privacy policies govern the handling of any data collected within their interfaces. pkloke is not responsible for the privacy practices of third-party studios or payment providers, and we encourage you to review their policies independently.

pkloke does not include links to external websites for marketing or advertising purposes, and we do not permit third-party advertising networks to place tracking technologies on the Platform without your explicit consent.

11 Protection of Minors

The pkloke Platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from persons under 21 years of age. If we discover or are informed that a user is under 21, we will immediately suspend the account, void all associated transactions, and securely delete the relevant personal data.

If you are a parent or guardian and believe that a minor has registered on pkloke using false information, please contact support@pkloke.app immediately with details so we can investigate and take appropriate action without delay. 21+

12 Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a complaint about how we handle your personal data, please contact our data team:

• Email: support@pkloke.app (plain text — not a clickable link)
• Subject line for data requests: "Data Rights Request"
• Subject line for complaints: "Privacy Complaint"
• Support hours: 09:00 – 23:00 Bangladesh Standard Time (BST, UTC+6), seven days a week
• Response time: Within 30 calendar days for data rights requests; within 5 business days for general privacy enquiries

We take all privacy complaints seriously and will investigate every submission thoroughly. If you are not satisfied with our response, you may escalate your complaint to the relevant data protection authority in your jurisdiction.