pkluc Privacy Policy – How We Handle Your Data

This Privacy Policy ("Policy") describes how pkluc ("we", "us", "our", "the Company") collects, uses, stores, and protects personal data relating to individuals ("you", "your", "the Player") who access or use the website at https://pkluc.pro ("the Platform") and any related services provided by pkluc, including sports betting, live casino, slot games, and promotional features.

This Policy applies to all personal data we process regardless of the medium through which it is submitted — including registration forms, deposit and withdrawal transactions, customer support communications, and automated data collected during your browsing sessions on the Platform.

By creating a pkluc account or continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood how your personal data will be handled in accordance with the provisions set out below.

pkluc operates the Platform accessible at https://pkluc.pro and is the data controller responsible for the personal data collected through it. As data controller, pkluc determines the purposes and means by which your personal data is processed.

For all data-related enquiries, including requests to exercise your rights as a data subject, you may contact the pkluc Data Privacy team using the details provided in Section 14 of this Policy. All privacy enquiries are handled in strict confidence and are assigned a unique reference number for tracking purposes.

pkluc collects personal data from you through several channels. The categories of data collected and the typical source of each are set out in the table below.

pkluc does not intentionally collect special categories of sensitive personal data (such as health information, religious beliefs, or political opinions) except where you voluntarily disclose such information in the context of a responsible gaming support interaction, in which case it is processed solely for the purpose of providing that support.

pkluc uses the personal data it collects for the following specific purposes. We do not use your data for any purpose incompatible with those listed here without first obtaining your explicit consent.

• To create and manage your pkluc account, including verifying your identity and age (21+) at the time of registration and at subsequent verification checkpoints.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records of all transactions in BDT.
• To settle bets, calculate winnings, apply bonus credits, and enforce wagering requirements in accordance with the Terms and Conditions.
• To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and any other conduct that violates our Terms and Conditions.
• To deliver customer support via live chat and email, including handling account disputes, withdrawal queries, and technical issues.
• To send you transactional communications — such as deposit confirmations, withdrawal notifications, password reset emails, and security alerts — that are necessary for the operation of your account.
• To personalise your Platform experience, including recommending games, surfacing relevant promotions, and adapting content to your stated preferences.
• To monitor and improve the performance, security, and reliability of the Platform, including identifying bugs, testing new features, and analysing user behaviour patterns in aggregate.
• To comply with applicable legal and regulatory obligations, including record-keeping requirements and responses to lawful requests from competent authorities.
• To administer our responsible gaming programme, including monitoring betting patterns for signs of problem gambling and contacting players who may be at risk.

pkluc processes your personal data only where a valid legal basis exists. The primary legal bases on which we rely are as follows:

• Contractual necessity: Processing required to fulfil the contract between you and pkluc — i.e., your pkluc account and the services attached to it — including account creation, payment processing, and bet settlement.
• Legal obligation: Processing required to comply with applicable law, including identity verification obligations, anti-money-laundering record-keeping, and responses to lawful authority requests.
• Legitimate interests: Processing necessary for our legitimate business interests, such as fraud detection, platform security, analytics to improve our services, and responsible gaming monitoring — provided those interests are not overridden by your privacy rights.
• Consent: Where we rely on your consent as the legal basis (for example, sending optional promotional communications), you may withdraw that consent at any time by contacting support or adjusting your account notification preferences.

pkluc does not sell, rent, or otherwise trade your personal data. We share personal data with third parties only in the following limited and controlled circumstances:

• Payment service providers: We share necessary financial data with bKash, Nagad, Rocket, Upay, Visa, and Mastercard to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and are bound by applicable financial data protection standards.
• Identity verification services: We may engage third-party KYC (Know Your Customer) service providers to assist in verifying your identity and age. Such providers process only the data strictly necessary for verification and are contractually prohibited from using it for any other purpose.
• Game software providers: Certain technical data (such as session tokens and game-round identifiers) is shared with our licensed game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe — to facilitate game delivery and result certification. These providers do not receive your personal identity or contact data.
• Fraud prevention and security: We may share data with fraud detection services, cybersecurity partners, and relevant law enforcement or regulatory authorities where we have a legitimate interest or legal obligation to do so.
• Professional advisers: We may share data with legal counsel, auditors, and other professional advisers where necessary to seek advice or conduct compliance reviews, subject to strict confidentiality obligations.

All third parties with whom pkluc shares personal data are required to implement appropriate technical and organisational security measures and to process data only for the purposes specified by pkluc. We do not permit third parties to use your data for their own marketing or commercial purposes.

Given the nature of pkluc as an online betting and casino platform serving players across Bangladesh — including in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh — financial data is among the most sensitive categories of information we handle. pkluc applies the following specific safeguards to payment data:

• Full bKash, Nagad, or Rocket mobile banking account numbers are not stored on pkluc servers in plain text. Only masked references (e.g., last four digits or a tokenised identifier) are retained for transaction record-keeping.
• Card data (where Visa or Mastercard is used) is handled exclusively by our PCI-DSS-compliant payment gateway partner. pkluc does not store full card numbers on its own infrastructure.
• All deposit and withdrawal transactions are logged in our financial records for a minimum period of five years in accordance with standard financial record-keeping practice.
• Transaction data may be reviewed by our anti-money-laundering compliance team as part of routine monitoring. Unusual patterns — such as large deposits followed by immediate withdrawal without substantial wagering activity — may trigger enhanced due diligence procedures.

pkluc uses cookies and similar tracking technologies to operate the Platform, maintain your logged-in session, remember your preferences, and gather aggregate analytics data. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session management cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without impacting Platform functionality.
• Functional cookies: Used to remember your account preferences, such as your preferred language setting, notification preferences, and last-played game category.
• Analytics cookies: Used to collect aggregate, anonymised data about how players navigate the Platform. This data helps us identify popular features, diagnose technical issues, and plan improvements. No individual player is identifiable from analytics data.
• Security cookies: Used to detect and prevent fraudulent login attempts, identify suspicious activity patterns, and enforce account access controls.

pkluc does not deploy third-party advertising cookies or retargeting pixels. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your pkluc account.

pkluc implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security controls include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and pkluc servers.
• Encrypted storage for all sensitive personal and financial data held in pkluc databases.
• Role-based access controls ensuring that only authorised pkluc personnel whose job function requires it can access personal data.
• Multi-factor authentication on all pkluc administrative systems.
• Regular third-party penetration testing and vulnerability assessments of Platform infrastructure.
• Continuous monitoring of server environments for intrusion attempts and anomalous activity.
• A documented data breach response procedure, including player notification protocols where a breach meets the applicable legal notification threshold.

pkluc retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law and standard industry practice. The following general retention periods apply:

• Account data: Retained for the duration of your active account plus five years after account closure. This reflects standard financial record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of each transaction in accordance with financial compliance obligations.
• KYC and identity verification documents: Retained for five years from the date of submission or from account closure, whichever is later.
• Customer support communications: Retained for three years from the date of the interaction, or longer where the communication relates to an unresolved dispute or legal matter.
• Responsible gaming records: Retained for five years to support continuity of care and to prevent re-registration by self-excluded players.
• Technical and usage data: Retained in anonymised aggregate form indefinitely for analytics purposes. Identifiable technical data is deleted after 24 months of account inactivity.

Upon expiry of the applicable retention period, personal data is securely deleted from active systems and purged from backup archives on a rolling schedule. Where full deletion is not technically feasible (for example, in certain backup configurations), the data is isolated and protected from further active processing until it can be deleted.

As a player whose personal data is processed by pkluc, you have the following rights. To exercise any of these rights, please contact the pkluc support team as described in Section 14. We will respond to all valid requests within 30 days of receipt.

• Right of access: You have the right to request a copy of the personal data pkluc holds about you, along with information about how it is being used.
• Right to rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. You may also update certain account details directly through your account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing has no other lawful basis. This right is subject to legal retention obligations — for example, we cannot delete transaction records that we are required by law to retain.
• Right to restriction: You have the right to request that pkluc restrict its processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of our legitimate grounds.
• Right to data portability: You have the right to receive a copy of personal data you have provided to pkluc in a structured, commonly used, machine-readable format, where processing is based on your consent or on a contract.
• Right to object: You have the right to object to processing of your personal data where pkluc relies on legitimate interests as the legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (such as receiving promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

pkluc's services are strictly restricted to individuals aged 21 and above. 21+ We do not knowingly collect personal data from anyone under the age of 21. If you are a parent or guardian and believe that a minor under your care has created a pkluc account or provided us with personal data, please contact us immediately at [email protected]. Upon verification of such a report, pkluc will promptly close the account, void any associated balances or bets, and securely delete the personal data concerned.

Age verification is a mandatory step in the pkluc registration and KYC process. Players who are found to have provided a false date of birth to circumvent the 21+ age requirement will have their account permanently closed and all associated data may be retained for the minimum period required for legal and compliance purposes.

pkluc reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, technological developments, or applicable legal requirements. The "Effective Date" shown at the top of this Policy indicates when the current version came into force.

Where a change is material — meaning it meaningfully alters how we collect, use, or share your personal data — pkluc will provide at least 7 days' advance notice by email to your registered address or via a prominent on-site notification banner. Non-material clarifications may take effect immediately upon publication without prior notice.

We encourage you to review this Policy periodically. Your continued use of the pkluc Platform following the effective date of any update constitutes your acknowledgement of the revised Policy. If you do not accept the updated Policy, you must cease using the Platform and may request account closure by contacting support.

For any questions, concerns, or requests relating to this Privacy Policy or to your personal data held by pkluc, please use the following contact channels. All privacy and data protection enquiries are handled by the pkluc Data Privacy team and treated with strict confidentiality.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly on the pkluc Platform
• Subject line for data requests: "Data Privacy Request – [Your Registered Email]"
• Target response time: within 2 hours for live chat; within 5 business days for email privacy requests; within 30 days for formal data subject rights requests

When submitting a data subject rights request, please include your full registered name, your registered email address, and a clear description of the right you wish to exercise. pkluc may request additional information to verify your identity before processing the request. This is to protect your data from being disclosed to unauthorised individuals.