pkluk Privacy Policy

Who We Are

pkluk operates the online betting and casino platform available at pkluk.im. For the purposes of this Privacy Policy, pkluk acts as the data controller in respect of the personal data collected from users who register accounts and interact with the platform.

pkluk is an offshore platform that serves users across multiple jurisdictions, with a primary focus on the Bangladesh market. All customer-facing communications and platform content are provided in English. Bangladeshi Taka (BDT) is the designated transaction currency.

If you have any questions about how pkluk handles your personal data, or wish to exercise any of your data rights, you may contact our data protection team directly at [email protected]. All privacy-related inquiries will be acknowledged within two business days and resolved as promptly as reasonably practicable.

Data We Collect

pkluk collects personal data across several categories depending on how you interact with the platform. The following table summarises the main data types collected and the circumstances in which each arises.

2.1 Data You Provide Directly

The majority of personal data held by pkluk is provided directly by you during account registration, identity verification, payment transactions, and communications with our support team. You are not obligated to provide this data, but without certain mandatory fields the platform may not be able to service your account.

2.2 Data Collected Automatically

When you access the pkluk platform, our servers automatically record certain technical information about your device and session. This includes your IP address, device identifiers, browser type and version, operating system, and clickstream data. This automated data collection is essential for platform security, fraud prevention, and service performance monitoring.

How We Use Your Data

pkluk uses the personal data it collects for the following purposes:

• Account administration: to create and maintain your pkluk account, process deposits and withdrawals, and verify your identity in accordance with KYC requirements.
• Service delivery: to provide access to sports betting markets, casino games, live dealer tables, and all other platform features.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: to monitor betting patterns, identify indicators of problem gambling behaviour, and apply protective measures including deposit limits and self-exclusion in accordance with our Responsible Gaming Policy.
• Customer support: to respond to your enquiries, resolve complaints, and improve our support quality through review of past interactions.
• Marketing communications: to send you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. You may withdraw consent to marketing communications at any time.
• Legal compliance: to fulfil obligations under applicable laws, respond to lawful requests from regulatory or law enforcement authorities, and maintain records as required.
• Platform improvement: to analyse usage patterns, conduct internal research, and develop new features and products using aggregated or anonymised data.

pkluk will not use your personal data for any purpose that is incompatible with those listed above without first providing you with appropriate notice and, where required, obtaining your consent.

Legal Basis for Processing

pkluk processes your personal data under the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the user agreement — including operating your account, processing transactions, and providing access to platform services.
• Legal obligation: Processing necessary to comply with applicable laws, including anti-money laundering (AML) requirements, know-your-customer (KYC) obligations, and responses to lawful data requests from competent authorities.
• Legitimate interests: Processing conducted in pursuit of pkluk's legitimate interests, including fraud detection, platform security, responsible gaming monitoring, and business analytics, provided such processing does not override your fundamental rights and freedoms.
• Consent: Processing based on your explicit, freely given consent — particularly in relation to direct marketing communications and the use of non-essential cookies. You may withdraw consent at any time without detriment to your account.

Sharing Your Data

pkluk does not sell, rent, or trade your personal data to third parties. Data is shared externally only in the following limited circumstances:

• Payment processors: Transaction data is shared with payment service providers including bKash, Nagad, Rocket, and Upay to process deposits and withdrawals on your behalf. These providers are contractually bound to handle your data securely and only for the purposes of payment processing.
• Game providers: Platform session and account identifiers may be passed to third-party game studios — including Evolution Gaming, Pragmatic Play, NetEnt, Ezugi, and Microgaming — solely to facilitate game access. These providers operate under their own data protection obligations.
• Identity verification services: Where required for KYC compliance, your identity and document data may be shared with third-party verification partners for the sole purpose of confirming your eligibility to use the platform.
• Legal and regulatory authorities: pkluk may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by law, or where pkluk reasonably believes disclosure is necessary to protect the safety of users or to prevent criminal activity.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of pkluk's business, user data may be transferred to the acquiring entity as part of that transaction. Users will be notified of any such transfer in advance where reasonably practicable.

All third parties with whom pkluk shares personal data are required to implement appropriate technical and organisational measures to protect that data and to use it only for the purposes for which it was shared.

Cookies and Tracking Technologies

pkluk uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small data files stored on your device that help pkluk recognise returning users, maintain session state, and collect analytics data.

6.1 Essential Cookies

These cookies are strictly necessary for the pkluk platform to function. They enable core features such as user authentication, session management, and security controls. Essential cookies cannot be disabled without materially impairing platform functionality.

6.2 Analytics Cookies

pkluk uses analytics cookies to understand how users navigate the platform, which features are most used, and where technical issues occur. This data is aggregated and does not identify individual users. Analytics cookies are used solely to improve platform performance and user experience.

6.3 Marketing Cookies

Where you have provided consent, pkluk may use cookies to track your engagement with promotional communications and measure the effectiveness of marketing campaigns. You may withdraw consent to marketing cookies at any time without affecting your ability to use the platform.

Most browsers allow you to control cookie settings through their preferences or settings menus. Disabling certain cookies may affect how the pkluk platform behaves. For further information on managing cookies, consult your browser's help documentation.

Data Retention

pkluk retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The following general retention principles apply:

• Account identity and registration data is retained for the duration of your account relationship with pkluk and for a minimum of five years following account closure to meet anti-money laundering and legal record-keeping obligations.
• Transaction and betting history records are retained for a minimum of five years from the date of each transaction.
• Customer support communications are retained for two years from the date of the final message in each support thread.
• KYC verification documents are retained for the period required by applicable legal obligations, which is typically five years from the date of verification or account closure, whichever is later.
• Technical and usage data collected for analytics purposes is retained in aggregated or anonymised form only, with no defined deletion schedule.

Upon expiry of the applicable retention period, pkluk will securely delete or irreversibly anonymise the data in question. Where deletion is not immediately possible due to backup cycles or system constraints, the data will be isolated and protected from further active processing until deletion is completed.

Data Security

pkluk implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your browser or device and the pkluk servers.
• Encrypted storage of sensitive account credentials and payment references.
• Role-based access controls that restrict internal access to personal data to staff who genuinely require it for their job function.
• Regular security assessments and monitoring of platform infrastructure for vulnerabilities and anomalous access patterns.
• Incident response procedures that ensure prompt identification, containment, and notification in the event of a data breach affecting user personal data.

While pkluk takes all reasonable precautions to protect your data, no system connected to the internet can guarantee absolute security. You play an important role in protecting your own data by keeping your login credentials confidential and notifying pkluk immediately if you suspect unauthorised access to your account.

Your Rights

As a user of the pkluk platform, you have the following rights in respect of your personal data. To exercise any of these rights, contact pkluk at [email protected]. Requests will be acknowledged within two business days and actioned within a reasonable timeframe.

• Right of access: You may request a copy of the personal data pkluk holds about you, along with information about how it is used and with whom it has been shared.
• Right to rectification: You may request that inaccurate or incomplete personal data held by pkluk be corrected or updated.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to pkluk's legal retention obligations.
• Right to restrict processing: You may request that pkluk limit the processing of your data in certain circumstances, for example while a rectification request is pending.
• Right to data portability: Where processing is based on your consent or a contractual requirement, you may request your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on pkluk's legitimate interests, including profiling for direct marketing purposes. Where you object to marketing, pkluk will cease using your data for that purpose immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

Children's Privacy

The pkluk platform is strictly for adults aged 21 and above. pkluk does not knowingly collect personal data from individuals under the age of 21. If pkluk becomes aware that personal data has been collected from a minor, that data will be deleted promptly and the associated account will be permanently closed.

If you believe a minor has registered an account on the pkluk platform, please notify us immediately at [email protected] so that we can take appropriate action. pkluk takes the protection of minors seriously and enforces age verification measures at the point of registration and at any subsequent point where eligibility is called into question.

International Data Transfers

As an offshore platform, pkluk may process and store your personal data in jurisdictions outside Bangladesh. Where data is transferred internationally, pkluk takes steps to ensure that adequate protections are in place, including contractual safeguards with data processors and sub-processors operating in those jurisdictions.

Your personal data may be processed by our payment partners — including bKash and Nagad — within Bangladesh, and by game providers and infrastructure vendors in their respective operating regions. Each of these entities is required to maintain appropriate data protection standards under their agreements with pkluk.

By using the pkluk platform, you acknowledge that your data may be transferred to and processed in countries other than your country of residence. pkluk will always handle your data in a manner consistent with this Privacy Policy regardless of where that processing takes place.

Updates to This Privacy Policy

pkluk may update this Privacy Policy from time to time to reflect changes in how we handle personal data, changes to our services, or changes in applicable law. The effective date at the top of this document will be updated each time a new version is published.

Where changes are material — for example, where we introduce a new purpose for processing your data or make significant changes to your data rights — pkluk will provide advance notice to registered users via email or an in-platform notification before the changes take effect. For non-material changes, the updated policy will be published on this page without separate notification.

We encourage you to review this Privacy Policy periodically to stay informed about how pkluk protects your data. Your continued use of the platform following the effective date of any update constitutes your acknowledgement of the revised policy.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data pkluk holds about you, please contact us through one of the following channels:

• Email: [email protected] — please include "Privacy Request" in the subject line for faster routing.
• Live Chat: Available 24/7 directly from within your pkluk account dashboard.
• Response Time: Privacy-related requests will be acknowledged within two business days and resolved within a reasonable timeframe, typically no longer than 30 days for complex requests.
• Operating Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).

pkluk is committed to handling all privacy-related enquiries in a fair, transparent, and timely manner. If you are not satisfied with our response to a data rights request, you may have the right to lodge a complaint with a competent supervisory authority in your jurisdiction.