Privacy Policy — How pkluky Protects Your Data

This Privacy Policy is issued by pkluky ("pkluky", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at pkluky.app. pkluky is committed to protecting the privacy and personal data of all registered players and visitors to our platform.

This policy applies to all personal data collected through your use of the pkluky website, mobile-optimised platform, customer support channels, and any other interaction you have with pkluky as an organisation. By registering an account or continuing to use the pkluky platform, you acknowledge that you have read and understood this Privacy Policy.

pkluky collects personal data through several channels during your registration, verification, and ongoing use of the platform. The categories of data we collect include:

We do not knowingly collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, biometric data, or health data beyond what is strictly required for responsible gaming compliance purposes (such as self-exclusion records).

pkluky uses your personal data only for legitimate, clearly defined purposes. We do not use your data in ways that are incompatible with the reason it was originally collected. Our primary purposes for processing personal data are:

• Account management: To create, maintain, and secure your pkluky account, including verifying your identity and age in accordance with our 21+ age policy.
• Payment processing: To process deposits and withdrawals through bKash, Nagad, Rocket, Upay, and other supported payment channels, and to maintain accurate financial records.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, unauthorised account access, and other illegal activity. This includes sharing data with payment processors and fraud detection services where necessary.
• Regulatory compliance: To comply with applicable Know Your Customer (KYC) obligations and any legal requirements that apply to our operations.
• Responsible gaming: To monitor gaming activity for signs of problem gambling, enforce self-exclusion requests, and apply deposit and betting limits set by the player or required by our responsible gaming policy.
• Customer support: To respond to your queries, complaints, and support requests through our support channels.
• Platform improvement: To analyse aggregated, anonymised usage data to understand how players interact with the platform and to improve game selection, performance, and user experience.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have provided your consent to receive such communications. You may withdraw this consent at any time.

pkluky relies on one of the following legal bases for each processing activity: performance of a contract (your player account agreement), compliance with a legal obligation, our legitimate interests (fraud prevention, security, platform improvement), or your explicit consent (marketing communications).

pkluky does not sell your personal data to third parties. We share personal data only where it is strictly necessary for the purposes described in this policy, and only with the following categories of recipients:

• Payment processors and mobile wallet operators: bKash, Nagad, Rocket, Upay, and other payment service providers require certain personal and financial data to process your transactions. These providers are bound by their own privacy policies and data protection obligations.
• Game content providers: Licensed game studios (including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe) may receive technical session data necessary to deliver their games on our platform. No personally identifiable information beyond what is technically required is shared with game providers.
• Identity verification and KYC service providers: Third-party verification specialists may assist in confirming your identity and age as part of our regulatory compliance obligations.
• Fraud detection and cybersecurity services: Specialist providers help us monitor for suspicious activity, protect against cyber threats, and maintain the integrity of our platform.
• Legal and regulatory authorities: We may be required to disclose personal data to law enforcement, regulatory bodies, or courts in response to lawful requests or legal proceedings. We will notify you of such disclosures where legally permitted to do so.
• Professional advisers: Lawyers, auditors, and financial advisers who provide services to pkluky may have access to personal data in the course of those engagements, subject to strict confidentiality obligations.

All third-party service providers engaged by pkluky are required to handle your personal data in a manner consistent with this Privacy Policy and applicable data protection standards. We maintain written data processing agreements with all such providers.

pkluky uses cookies and similar tracking technologies on our platform to provide core functionality, improve performance, and understand how players use the site. A cookie is a small text file placed on your device when you visit our platform. We use the following types of cookies:

• Essential cookies: These are required for the platform to function correctly. They manage your session, keep you logged in, and remember your language and display preferences. These cookies cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: These cookies collect anonymised, aggregated data about how players navigate the platform — which pages are visited most, where errors occur, and how long sessions last. This data helps us improve the platform experience.
• Functional cookies: These remember your game preferences, last-played titles, and display settings so you do not need to reconfigure them on every visit.
• Security cookies: These help us detect and prevent fraudulent activity, including identifying unusual login patterns and flagging suspicious transactions.

pkluky does not use third-party advertising or cross-site tracking cookies. We do not participate in behavioural advertising networks or share cookie data with external advertising platforms.

You can manage or disable non-essential cookies through your browser settings. Note that disabling essential cookies will impair your ability to log in and use the platform normally. For more information on managing cookies on your specific device or browser, refer to your browser's help documentation.

pkluky retains your personal data only for as long as is necessary to fulfil the purposes described in this policy, or for as long as we are required to retain it by applicable law or regulatory obligation. Our general retention guidelines are as follows:

• Active account data: Retained for the full duration that your account remains open with pkluky, plus a minimum period of five years after account closure to comply with financial record-keeping and anti-money laundering obligations.
• Transaction records: Financial records including deposit and withdrawal histories are retained for a minimum of five years following the relevant transaction date.
• KYC and identity verification documents: Retained for a minimum of five years following account closure or the completion of the verification process, whichever is later.
• Support communications: Records of customer support interactions are retained for three years to assist with dispute resolution and service improvement.
• Marketing consent records: Records of your marketing consent or opt-out are retained for as long as they remain relevant, or for three years following your last interaction with pkluky.
• Technical and usage logs: Server logs and platform usage data are retained for up to 12 months in identifiable form, after which they are anonymised or deleted.

When personal data is no longer required for any lawful purpose, pkluky will securely delete or anonymise it in accordance with industry-standard data disposal practices.

pkluky takes the security of your personal data seriously. We implement technical and organisational measures designed to protect your data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage of sensitive data fields, including passwords (which are stored as salted hashes and are never stored in plain text).
• Role-based access controls ensuring that only authorised pkluky personnel with a legitimate need can access personal data.
• Regular security audits and vulnerability assessments conducted by internal and third-party security specialists.
• Two-factor authentication (2FA) available for player accounts to provide an additional layer of security at login.
• Automated fraud monitoring systems that flag unusual account activity for human review.

While we apply robust security measures, no internet-based platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for ensuring that the device you use to access pkluky is adequately secured. If you believe your account has been compromised, please contact us immediately at [email protected].

As a pkluky player, you hold the following rights with respect to your personal data. You may exercise any of these rights by contacting us at [email protected]:

pkluky will respond to all data rights requests within 14 business days. In complex cases where additional time is required, we will inform you of the extended timeline and the reason for it. We may ask you to verify your identity before processing a data rights request to ensure we do not disclose your data to an unauthorised party.

Please note that certain rights, such as the right to erasure, may be limited where pkluky has a legal obligation to retain your data — for example, financial records required for anti-money laundering compliance. We will clearly explain any such limitations in our response to your request.

pkluky is strictly an adults-only platform. We do not knowingly collect personal data from any person under the age of 21. Our registration process includes date-of-birth verification, and we conduct age verification as part of our KYC process.

If pkluky becomes aware that personal data has been collected from a person under the age of 21, we will immediately close the associated account, delete the personal data in question, and return any genuine deposits in accordance with our Terms and Conditions.

With your consent, pkluky may send you promotional communications including bonus offers, game launch announcements, seasonal promotions (such as Eid, Pohela Boishakh, or BPL season specials), and platform news via email or SMS to your registered contact details.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "unsubscribe" link included in any marketing email sent by pkluky.
• Updating your communication preferences in your pkluky account settings.
• Contacting our support team at [email protected] with a request to opt out.

Withdrawal of marketing consent will not affect the lawfulness of any processing carried out before the withdrawal, and will not prevent pkluky from sending you essential account-related communications such as security alerts, deposit confirmations, or withdrawal notifications.

pkluky reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes, we will notify registered players via the email address associated with their account and update the "Last updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how pkluky protects your data. Your continued use of the pkluky platform following notification of any changes constitutes your acknowledgement of the revised policy.

If you have any questions, concerns, or complaints about how pkluky handles your personal data, please contact our privacy team directly:

• Email: [email protected]
• Response time: We aim to acknowledge all privacy-related queries within 2 business days and to provide a full response within 14 business days.

If you are not satisfied with pkluky's response to your privacy complaint, you may have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. pkluky will cooperate fully with any such investigation or inquiry.