Privacy Policy — pkalk Data Protection

1.1 Registration Data

When you create a pkalk account, we collect the information you provide during the registration process. This includes your full legal name, date of birth, email address, residential address (including city — for example, Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi), and your chosen username. This data is required to create and maintain your account, confirm your identity, and ensure compliance with the 18+ age restriction applicable to all pkalk players.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer process, pkalk may request copies of government-issued identity documents such as your National Identity Card (NID), passport, or birth certificate. We may also request proof of address documents and, where relevant, evidence of the payment method registered to your account. KYC documents are used exclusively for identity verification, fraud prevention, and anti-money laundering compliance. They are stored securely and are not shared with third parties except where legally required.

1.3 Financial Transaction Data

pkalk records details of all deposits and withdrawals made through the platform, including transaction amounts in BDT, timestamps, payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), and transaction reference numbers. We do not store full payment account credentials such as bKash PINs, Nagad passwords, or bank account passwords — these remain entirely within the respective payment provider's systems.

1.4 Gaming & Betting Activity Data

pkalk maintains records of your gaming and betting activity on the platform. This includes games played, bet amounts, outcomes, session durations, and responsible gaming interactions such as deposit limit settings or self-exclusion requests. This data is used to operate game services, calculate winnings, detect unusual activity, and support responsible gaming initiatives.

1.5 Technical & Device Data

When you access pkalk, our servers automatically collect certain technical data, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session timestamps. This data is used for security monitoring, fraud detection, platform optimisation, and geographic access controls.

1.6 Communications Data

If you contact the pkalk support team via email or live chat, we retain records of those communications, including your message content, the support agent's response, and the date and time of the exchange. This data is used to resolve your query, maintain service quality standards, and provide a reference history for future support interactions.

pkalk uses the personal data we collect for the following clearly defined purposes:

pkalk does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review. Where profiling is used — for example, to identify problem gambling patterns — it is applied to protect your interests and is always subject to human oversight by our responsible gaming team.

3.1 Payment Processors

To process your deposits and withdrawals, pkalk shares the minimum necessary transaction details with our payment partners — bKash, Nagad, Rocket, Upay, and participating Bangladeshi banks including Dutch-Bangla Bank, BRAC Bank, and City Bank. These partners receive only the data required to execute the specific transaction and are bound by their own privacy obligations and data security standards.

3.2 Game Technology Providers

pkalk's gaming catalogue is powered by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. When you play a game hosted on their platforms through pkalk, a session token and limited account identifier may be shared with the provider to initialise your game session. These providers do not receive your full name, payment details, or contact information.

3.3 Regulatory and Law Enforcement Disclosure

pkalk will disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, by a valid court order, or in connection with an investigation into fraud, money laundering, or other criminal activity. In such cases, pkalk discloses only the minimum data necessary to satisfy the legal requirement and will, where legally permitted, notify the affected player.

3.4 Internal Group Entities

pkalk may share data with affiliated entities within its corporate group for operational, compliance, or fraud prevention purposes. Any such sharing is governed by internal data-sharing agreements that impose equivalent data protection standards to those set out in this Privacy Policy.

3.5 Service Providers

pkalk engages trusted third-party service providers to support platform operations, including cloud hosting infrastructure, email delivery, customer support software, and security monitoring tools. These providers act as data processors on pkalk's instructions and are contractually prohibited from using your data for any purpose beyond the specific service they provide.

pkalk uses cookies and similar lightweight tracking technologies to ensure the platform functions correctly, to maintain your session while you are logged in, and to gather anonymous analytics data that helps us improve the player experience. We do not use third-party advertising cookies, cross-site tracking pixels, or behavioural profiling technologies from advertising networks.

4.1 Types of Cookies Used

4.2 Managing Cookies

You can control or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your pkalk account and using core platform features. Disabling functional or analytics cookies will not affect your ability to play but may result in a slightly reduced experience (for example, your display preferences may not be remembered between sessions).

4.3 Local Storage

In addition to cookies, pkalk may use browser local storage to preserve non-sensitive session state information such as your most recently viewed game category or your active responsible gaming limit settings. Local storage data does not leave your device and is not transmitted to pkalk's servers unless explicitly triggered by a platform interaction.

pkalk retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, to satisfy legal and regulatory obligations, and to resolve any disputes that may arise. The table below summarises our standard retention periods by data category.

After the applicable retention period expires, pkalk securely deletes or anonymises the relevant data so that it can no longer be associated with any individual player. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregate statistical purposes only.

Player data is stored on secured servers. Where data is processed or stored outside Bangladesh, pkalk ensures that equivalent data protection safeguards are in place through contractual arrangements with the relevant service providers.

pkalk implements a layered security architecture to protect player data against unauthorised access, accidental loss, alteration, or disclosure. Our security programme includes the following measures:

• Transport Layer Security (TLS): All communications between your browser or app and pkalk's servers are encrypted using TLS 1.2 or higher. The padlock icon in your browser confirms this encryption is active during every session.
• Password hashing: Account passwords are stored as one-way cryptographic hashes using industry-standard algorithms. pkalk staff cannot view your password in plain text, and it is never transmitted or stored in an unencrypted form.
• Access controls: Access to systems containing player personal data is restricted on a need-to-know basis. Staff with access to sensitive data undergo background checks and are bound by confidentiality obligations.
• Intrusion detection and monitoring: pkalk's infrastructure is monitored continuously for anomalous activity, unauthorised access attempts, and signs of compromise. Alerts are reviewed by a dedicated security team operating on Bangladesh Standard Time (BST, UTC+6).
• Regular security reviews: pkalk conducts periodic internal security assessments and vulnerability checks to identify and remediate weaknesses in the platform before they can be exploited.
• Data minimisation: We collect only the data we need. Sensitive fields such as payment PINs and full card numbers are never stored on pkalk's systems.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to player rights or freedoms, pkalk will notify affected players and relevant authorities in accordance with applicable law, without undue delay.

7.1 Right of Access

You have the right to request a copy of the personal data pkalk holds about you. Upon receiving a verified access request, we will provide a structured summary of the data categories held, the purposes for which they are processed, and any third parties with whom they have been shared.

7.2 Right to Rectification

If any of the personal data pkalk holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account details — such as your email address or contact information — directly through your pkalk account settings. For corrections to identity documents or date of birth, please contact our support team with the relevant evidence.

7.3 Right to Erasure

You may request that pkalk delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. Please note that erasure requests may be declined where retention is required by applicable law — for example, financial transaction records subject to anti-money laundering retention obligations cannot be deleted early on request.

7.4 Right to Restrict Processing

You have the right to request that pkalk restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or while an objection you have raised is being assessed. During a restriction period, pkalk will store the data but will not actively process it beyond storage.

7.5 Right to Data Portability

Where pkalk processes your data on the basis of your consent or contractual necessity, and where processing is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON). You may also request that this data be transmitted directly to another service provider where technically feasible.

7.6 Right to Object

You have the right to object to pkalk's processing of your personal data where that processing is based on legitimate interest, including profiling. You also have an absolute right to opt out of receiving direct marketing communications from pkalk at any time, by contacting our support team or using the unsubscribe link in any marketing email.

7.7 Complaints

If you believe that pkalk has processed your personal data in violation of applicable data protection law, you have the right to lodge a complaint with the relevant supervisory authority in the jurisdiction under which pkalk operates. We would, however, always encourage you to contact us directly first so that we can attempt to resolve your concern promptly and informally.

8.1 Policy Amendments

pkalk reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable law. When we make material changes, we will update the effective date displayed at the top of this page and, where appropriate, notify registered players via email. The most current version of the Privacy Policy will always be accessible at pkalk.net/privacy-policy. Continued use of the pkalk platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

8.2 Minors

pkalk is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18. If you believe that a minor has provided personal data to pkalk, please contact us immediately at [email protected] (plain text — not a link) and we will take prompt steps to delete that data and close the relevant account.

8.3 Contact the pkalk Privacy Team

For any questions, concerns, or requests related to this Privacy Policy or the personal data pkalk holds about you, please reach out to our privacy team using the contact details below. Our support team operates 24 hours a day, 7 days a week on Bangladesh Standard Time (BST, UTC+6).

• Email: [email protected] (plain text — not a link)
• Support hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)
• Response time: Privacy requests responded to within 30 calendar days

This Privacy Policy was last reviewed and updated on 1 January 2026. pkalk thanks you for taking the time to read it and remains committed to protecting your personal data with the highest standards of care and transparency.