pkluke Privacy Policy

pkluke processes your personal data on one or more of the following legal bases depending on the nature of the processing activity:

• Contractual necessity: Processing required to open and maintain your pkluke account, process deposits and withdrawals, and deliver the gaming services you have requested.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering (AML) regulations, Know Your Customer (KYC) verification obligations, and regulatory reporting requirements.
• Legitimate interests: Processing carried out to detect and prevent fraud, protect the security and integrity of the platform, improve our services, and maintain accurate business records — provided these interests are not overridden by your fundamental privacy rights.
• Consent: Processing for optional purposes such as sending you marketing communications about promotions, new games, and seasonal offers. You may withdraw this consent at any time by contacting [email protected] or updating your notification preferences within your account settings.

pkluke uses the personal data it collects for the following purposes:

• Creating and managing your pkluke account, including identity verification and age confirmation (21+ requirement).
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and approved Bangladesh banking partners.
• Delivering the games, sports betting markets, promotions, and other services you access through your account.
• Administering bonuses and promotional offers, including verifying eligibility and tracking wagering requirement completion.
• Detecting and preventing fraud, money laundering, match-fixing, and any other prohibited conduct outlined in the pkluke Terms & Conditions.
• Providing customer support and resolving complaints submitted to [email protected].
• Sending you account-critical notifications such as transaction confirmations, security alerts, and policy update notices — these cannot be opted out of as they are essential for account safety.
• Sending you optional promotional communications about bonuses, new game releases, cricket and football betting markets, and seasonal offers (e.g., BPL season promotions, Eid special offers) — these require your prior consent and can be withdrawn at any time.
• Conducting internal analytics to understand how players use the platform and to improve the user experience — all analytics are based on aggregated, anonymised data sets.
• Fulfilling our legal and regulatory obligations, including maintaining transaction records for the legally required retention period.

pkluke shares personal data with third parties only where strictly necessary and only for the specific purposes described below. pkluke does not sell personal data under any circumstances.

• Payment processors: bKash, Nagad, Rocket, Upay, and approved Bangladesh bank partners receive only the minimum data necessary to process a transaction you have initiated — typically your registered mobile number or account reference and the transaction amount in BDT.
• Identity verification services: Third-party KYC providers may receive your identity document details and selfie photograph solely for the purpose of verifying your identity and age. These providers are contractually bound to use your data exclusively for this purpose and to delete it once verification is complete.
• Game providers: Certified game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a pseudonymised player identifier (not your full name or contact details) for the purpose of game-round tracking, RTP calculation, and dispute resolution.
• Legal and regulatory authorities: pkluke will disclose personal data to competent authorities where required to do so by applicable law, valid court order, or legitimate regulatory request. pkluke will notify you of such disclosure where it is legally permitted to do so.
• Professional advisers: Legal counsel, auditors, and compliance consultants may access personal data on a strictly confidential basis where necessary for the provision of professional services to pkluke.

All third-party service providers engaged by pkluke are subject to contractual data processing agreements that require them to maintain the confidentiality and security of your personal data and to process it only on pkluke's documented instructions.

Some of pkluke's third-party service providers operate servers and data centres located outside Bangladesh. Where personal data is transferred internationally, pkluke ensures that appropriate safeguards are in place to maintain a standard of data protection equivalent to that described in this Privacy Policy.

Safeguards used for international transfers may include standard contractual clauses, data processing agreements incorporating equivalent data protection obligations, and transfers only to providers who maintain recognised security certifications (such as ISO 27001).

Where you have questions about the specific safeguards applicable to an international transfer of your personal data, you may request further information by contacting [email protected].

pkluke retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Active account data: Retained for the duration of your account's active status plus an additional 5 years following permanent account closure, to meet anti-money laundering record-keeping requirements.
• Transaction records: All deposit and withdrawal records are retained for a minimum of 5 years from the date of the transaction.
• KYC verification documents: Identity documents are retained for a minimum of 5 years following account closure or the completion of the business relationship.
• Support communications: Customer support correspondence is retained for 3 years from the date of the interaction.
• Marketing consent records: Records of your marketing preferences and consent history are retained for the duration of your account plus 2 years, in case of any future dispute regarding consent.

At the end of the applicable retention period, personal data is securely and permanently deleted from pkluke's systems in accordance with our internal data destruction procedures. Anonymised aggregate data (from which individual players cannot be identified) may be retained indefinitely for statistical and business analytics purposes.

The pkluke platform is strictly for adults aged 21 years and above. pkluke does not knowingly collect personal data from individuals under the age of 21. Age verification is carried out as part of the KYC process for all new accounts.

If pkluke becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all funds will be returned to the source payment method, and the personal data of the minor will be permanently deleted from pkluke's systems without delay.

If you believe that a minor has created a pkluke account, please notify us immediately at [email protected] with the subject line "Minor Account Report". pkluke treats all such reports with the highest priority.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, pkluke will:

• Investigate the breach immediately upon discovery and take all reasonable steps to contain it.
• Notify affected players via their registered email address or account dashboard notification within 72 hours of confirming the nature and scope of the breach, where technically feasible.
• Provide affected players with clear information about the nature of the breach, the categories of data affected, the likely consequences, and the steps pkluke has taken or is taking to address the breach.
• Advise affected players on any steps they should take to protect themselves, such as changing passwords or monitoring their payment accounts.

pkluke maintains a dedicated incident response procedure and conducts annual security drills to ensure our team is prepared to respond effectively to any potential data security incident.