pklu Privacy Policy —
Your Data, Protected
At pklu, the privacy and security of your personal information is a fundamental responsibility. This Privacy Policy explains exactly what data we collect, why we collect it, how we use it, who we may share it with, and what rights you hold as a player based in Bangladesh. We are committed to transparency in every aspect of data handling.
Our Privacy Commitments
Six core commitments that define how pklu handles your personal data at every stage of your player journey.
Data Minimisation
pklu collects only the personal data that is strictly necessary to provide you with a safe, compliant, and functional gaming platform. We do not harvest data beyond what is required for account management, payment processing, and regulatory obligations.
Encryption at Rest & in Transit
All personal data stored on pklu servers is encrypted at rest using industry-standard AES-256 encryption. All data transmitted between your device and the pklu Platform is protected by TLS 1.2 or higher. Your information is never stored or transmitted in plain text.
No Selling of Personal Data
pklu does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Your information is used solely to operate and improve the pklu Platform and to fulfil our legal and regulatory obligations.
Your Rights Are Respected
You have the right to access, correct, export, or request deletion of your personal data at any time. pklu provides a clear process for exercising these rights without undue delay. Requests are handled within 30 days of receipt.
Controlled Third-Party Sharing
Where data is shared with third-party processors — such as payment providers bKash, Nagad, and Rocket, or identity verification partners — it is done under strict contractual data protection agreements. These partners are permitted to use your data only for the specific service they provide to pklu.
Regular Policy Review
pklu reviews and updates this Privacy Policy at least annually, or whenever there is a material change in how we handle personal data. All updates are published on this page with a revised effective date. Continued use of the Platform after an update constitutes acceptance of the revised Policy.
1 Who We Are
pklu operates the online gaming and sports betting platform available at https://pklu.io (the "Platform"). Throughout this Privacy Policy, references to "pklu", "we", "us", or "our" refer to the operator of the Platform. pklu acts as the data controller in respect of all personal data collected through the Platform.
The Platform is directed at adult players located in Bangladesh. If you are accessing the Platform from outside Bangladesh, you do so at your own discretion and remain subject to this Privacy Policy in its entirety.
2 Data We Collect
pklu collects personal data in the following categories. The specific data points collected depend on how you interact with the Platform.
2.1 Identity Data
This includes your full legal name, date of birth, gender, and a copy of your government-issued identification document (National ID card, passport, or driving licence) where submitted during the Know Your Customer (KYC) verification process.
2.2 Contact Data
This includes your email address, mobile phone number, and residential address as provided during registration or subsequently updated in your Account settings.
2.3 Financial Data
This includes details of the payment methods used to deposit and withdraw funds on the Platform — for example, your registered mobile number associated with bKash, Nagad, Rocket, or Upay, or masked card details where applicable. pklu does not store full card numbers. Payment processing is handled by third-party payment service providers subject to their own security standards.
2.4 Transaction Data
This includes the full history of deposits, withdrawals, bets placed, games played, bonus credits received and used, and winnings credited to your Account, including timestamps and transaction reference numbers.
2.5 Technical Data
This includes your IP address, device type and model, operating system and version, browser type and version, session timestamps, and unique device identifiers where applicable.
2.6 Usage Data
This includes information about how you navigate and interact with the Platform, including pages visited, features used, time spent on particular sections, game session data, and click-stream data.
2.7 Communications Data
This includes the content of any support tickets, live chat conversations, emails, or other correspondence you submit to pklu's customer support team.
| Data Category | Examples | Collected At |
|---|---|---|
| Identity Data | Full name, date of birth, NID/passport | Registration & KYC |
| Contact Data | Email, phone, address | Registration |
| Financial Data | bKash/Nagad number, masked card | Deposit / Withdrawal |
| Transaction Data | Bet history, deposit records | Ongoing Platform use |
| Technical Data | IP address, device ID, browser | Each session |
| Usage Data | Pages visited, game sessions | Each session |
| Communications Data | Support tickets, chat logs | When you contact support |
3 How We Collect Data
pklu collects personal data through the following channels:
- Direct interactions: Data you provide when you register an Account, complete KYC verification, make a deposit or withdrawal, place a bet, or contact our support team.
- Automated technologies: Technical and usage data collected automatically during each session via cookies, server logs, and similar tracking technologies as described in Section 7.
- Third-party sources: Identity verification data returned by our KYC partners following document checks. Payment confirmation data returned by payment processors such as bKash, Nagad, Rocket, and Upay. Fraud detection signals from third-party security services.
4 Purposes of Processing
pklu processes your personal data for the following purposes:
- Account management: Creating, maintaining, and securing your pklu Account, including login authentication and password reset workflows.
- Identity verification: Verifying your age (21+ requirement), identity, and payment method ownership in compliance with our Know Your Customer obligations.
- Payment processing: Facilitating deposits and withdrawals via supported payment methods, reconciling transactions, and resolving payment disputes.
- Service delivery: Providing access to games, betting markets, bonus offers, and other Platform features you have requested.
- Customer support: Responding to queries, resolving complaints, and managing dispute resolution processes.
- Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, multiple-account abuse, bonus abuse, and other prohibited conduct as defined in our Terms and Conditions.
- Responsible gaming: Monitoring player behaviour to identify indicators of problem gambling and administering self-exclusion, deposit limit, and cooling-off requests.
- Legal compliance: Meeting our obligations under applicable laws and cooperating with lawful requests from regulatory authorities.
- Platform improvement: Analysing aggregate usage data to improve the performance, features, and user experience of the Platform.
- Marketing communications: Sending promotional offers, bonus notifications, and news about Platform updates, where you have consented to receive such communications.
5 Legal Basis for Processing
pklu relies on the following legal bases for processing your personal data, depending on the purpose:
- Contractual necessity: Processing required to create and manage your Account, process payments, and deliver the services you have requested under our Terms and Conditions.
- Legal obligation: Processing required to comply with applicable laws, including identity verification, anti-money laundering checks, and cooperation with lawful authority requests.
- Legitimate interests: Processing for fraud prevention, security monitoring, Platform improvement, and responsible gaming purposes, where these interests are not overridden by your rights and interests.
- Consent: Processing for direct marketing communications, where you have provided explicit, freely given, and revocable consent. You may withdraw your consent at any time by contacting [email protected] or using the opt-out mechanism in any marketing email.
6 Third-Party Sharing
pklu does not sell your personal data. We share personal data with third parties only in the following circumstances and only to the extent necessary:
6.1 Payment Service Providers
To process deposits and withdrawals, pklu shares relevant payment and identity data with payment service providers including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank. These providers process your data solely to complete the requested financial transaction and are bound by their own privacy and security standards.
6.2 Identity Verification Partners
To fulfil our KYC obligations, pklu may share your identity documents and personal details with third-party identity verification service providers. These partners are contractually prohibited from using your data for any purpose other than the verification service they provide to pklu.
6.3 IT and Platform Infrastructure
pklu uses third-party cloud hosting, database, and infrastructure providers to operate the Platform. These providers access data only to the extent required to maintain and support the technical infrastructure and are subject to strict data processing agreements.
6.4 Legal and Regulatory Authorities
pklu may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or in connection with the prevention or detection of fraud or other criminal activity.
7 Cookies & Tracking Technologies
pklu uses cookies and similar tracking technologies on the Platform to ensure it functions correctly and to improve your experience. The following types of cookies are used:
- Strictly necessary cookies: Essential for the Platform to operate. These include session cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without affecting Platform functionality.
- Functional cookies: Used to remember your preferences, such as your preferred language or display settings, so that you do not need to re-enter them on each visit.
- Analytics cookies: Used to collect aggregate, anonymised information about how players navigate and use the Platform. This data helps pklu identify areas for improvement and optimise the user experience.
- Security cookies: Used to detect and prevent fraudulent activity, including identifying unusual login patterns or suspicious session behaviour.
You may manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform. pklu does not use third-party advertising or retargeting cookies.
8 Data Retention
pklu retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal and regulatory obligations. The following general retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years | Legal & AML compliance |
| Transaction Data | 7 years from transaction date | Financial record-keeping |
| KYC Documents | Duration of account + 5 years | Regulatory obligation |
| Communications Data | 3 years from last contact | Dispute resolution |
| Technical & Usage Data | 13 months rolling | Security & analytics |
| Marketing Consent Records | Until consent withdrawn + 3 years | Proof of consent |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregate statistical analysis, as anonymised data does not constitute personal data.
9 Data Security
pklu implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Key security measures include:
- TLS 1.2 or higher encryption for all data in transit between your device and the Platform.
- AES-256 encryption for all personal data stored on pklu servers.
- Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific role.
- Regular penetration testing and vulnerability assessments conducted by qualified security professionals.
- Comprehensive audit logging of all access to personal data systems, reviewed regularly for anomalies.
- Multi-factor authentication required for all internal administrative access to data systems.
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, pklu will take prompt remedial action and notify affected individuals without undue delay in accordance with applicable legal requirements.
10 Your Rights
As a player whose personal data is processed by pklu, you hold the following rights in respect of your data. To exercise any of these rights, please contact [email protected] with "Privacy Request" in the subject line. pklu will respond within 30 days of receiving a valid request.
Your Data Rights
pklu recognises and respects the following rights over your personal data. Contact [email protected] to exercise any of these rights.
Right of Access
You may request a copy of all personal data pklu holds about you, along with information about how it is used and with whom it has been shared.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
Right to Restrict Processing
In certain circumstances, you may request that pklu restrict the processing of your personal data while a query or complaint is being resolved.
Right to Data Portability
Where processing is based on your consent or a contract, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
Right to Withdraw Consent
Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
11 Children's Privacy
The Platform is strictly restricted to individuals aged 21 years or older. pklu does not knowingly collect personal data from anyone under the age of 21. If we become aware that a player's Account is held by a person under 21, we will immediately suspend the Account, void any pending bets, and take steps to delete the associated personal data, subject to any retention obligations that apply.
If you believe that a person under 21 has registered an Account on the Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.
12 Marketing Communications
pklu may send you promotional emails, SMS notifications, or in-platform messages about new games, bonus offers, tournaments, and Platform updates where you have provided your consent to receive such communications during registration or through your Account preferences.
You may opt out of marketing communications at any time by:
- Clicking the "unsubscribe" link included in any marketing email.
- Updating your notification preferences in your Account settings.
- Sending a written opt-out request to [email protected] with the subject line "Marketing Opt-Out".
Opting out of marketing communications will not affect the delivery of transactional messages, such as deposit confirmations, withdrawal notifications, security alerts, or KYC verification requests. These communications are necessary for the operation of your Account and cannot be disabled while your Account remains active.
13 Changes to This Privacy Policy
pklu reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data handling practices, legal obligations, or Platform features. When we make material changes, we will update the effective date displayed at the top of this page and, where the changes are significant, we will notify active players via their registered email address.
We encourage you to review this Privacy Policy periodically to stay informed about how pklu protects your personal data. Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.
If you do not agree with any changes made to this Privacy Policy, you should discontinue your use of the Platform and submit an Account closure request to [email protected].
14 Contact Us
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way pklu handles your personal data, please contact our support team using the details below. All privacy-related correspondence must be in English.
Subject Line: Privacy Request — [Your Registered Username]
Response Time: Within 30 days of receipt for data rights requests; within 3 business days for general privacy enquiries
Support Hours: Monday to Sunday, 09:00 – 23:00 BST (UTC+6)
pklu is committed to resolving privacy concerns promptly and transparently. If you are not satisfied with our response to a privacy complaint, you may escalate the matter through the dispute resolution process described in our Terms and Conditions.
Your Privacy Is Safe with pklu
Have questions about how we handle your data? Visit our FAQ, review our Terms and Conditions, or log in to manage your Account and communication preferences.