Privacy Policy — How pk luk Collects, Uses, and Protects Your Personal Data

Data Controller & Scope

This Privacy Policy applies to all personal data collected and processed by pk luk (the "Platform", "we", "us", "our") in connection with the operation of the online casino and sportsbook available at pk-luk.club. For the purposes of this policy, pk luk acts as the data controller — meaning we determine the purposes and means by which your personal data is processed.

This policy applies to all individuals who access, register on, or interact with the pk luk Platform, including registered players, prospective players who browse without registering, and any individual who contacts our support team. It covers personal data collected through the website, through customer support communications via email to [email protected], and through any related promotional communications you have opted into.

This policy is written in English and is directed at players located in Bangladesh, including those based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. If you are accessing pk luk from outside Bangladesh, the terms of this policy still apply to the data we collect from you, but local data protection laws in your jurisdiction may also be relevant.

Personal Data We Collect

pk luk collects personal data through several distinct channels. The categories of data collected, and the channel through which each is obtained, are set out in the table below.

Data We Do Not Collect

pk luk does not collect or store full payment card numbers, CVV codes, or bank account PINs. We do not collect biometric data beyond the photograph present on your submitted identity document. We do not collect information about your religious beliefs, political opinions, health conditions, or other special-category personal data, except where you voluntarily disclose health-related information in the context of a responsible gaming self-exclusion request.

Data from Minors

The pk luk Platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that personal data belonging to a minor has been submitted to the Platform, that account will be closed immediately, the data will be deleted, and the matter may be reported to relevant authorities in Bangladesh.

How We Use Your Data

pk luk processes your personal data on several distinct legal bases. For each purpose listed below, we identify the applicable lawful basis for processing:

• Account creation and management — To create and maintain your pk luk account, verify your identity, and manage your player profile. Lawful basis: Performance of a contract.
• Payment processing — To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and bank transfer; to maintain transaction records; and to investigate disputed transactions. Lawful basis: Performance of a contract; legal obligation.
• KYC and age verification — To confirm that you are at least 18 years of age and that your identity matches your payment method, in compliance with anti-money laundering (AML) and responsible gaming obligations. Lawful basis: Legal obligation.
• Platform security and fraud prevention — To detect and investigate suspicious account activity, duplicate accounts, bonus abuse, and attempted fraud. Lawful basis: Legitimate interests.
• Customer support — To respond to your queries, complaints, and requests submitted to [email protected]. Lawful basis: Performance of a contract; legitimate interests.
• Responsible gaming monitoring — To identify patterns of play that may indicate problem gambling and to facilitate deposit limits, time-outs, or self-exclusion where requested or required. Lawful basis: Legal obligation; legitimate interests.
• Marketing communications — To send you information about pk luk promotions, BPL season bonuses, Eid offers, and Pohela Boishakh campaigns — but only where you have given explicit consent. Lawful basis: Consent. You may withdraw this consent at any time by contacting support.
• Platform improvement and analytics — To analyse aggregate, anonymised usage patterns to improve the performance, stability, and content of the pk luk Platform. Lawful basis: Legitimate interests.

Cookies & Tracking Technologies

The pk luk Platform uses cookies — small text files placed on your device — and similar technologies including local storage and session tokens. The following table describes every category of cookie used on pk-luk.club:

pk luk does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. The analytics cookies used on the Platform record only anonymised, aggregate data — individual user behaviour is not profiled or sold to any external advertising network.

Managing Cookies

You can manage or disable non-essential cookies at any time through your browser settings. The exact steps vary by browser — please consult your browser's help documentation for instructions. Please note that disabling strictly necessary cookies will prevent you from logging into your pk luk account and using the Platform's core features.

Data Sharing & Third Parties

pk luk does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the following limited and controlled circumstances:

Certified Game Providers

To deliver casino games and sports betting markets on the Platform, pk luk integrates with certified game and data providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited technical data — such as your anonymised player session ID and bet value — solely to deliver the game experience. These providers operate under their own data protection policies and are bound by contractual obligations to handle data securely and not to use it for independent marketing purposes.

Payment Processors

To process deposits and withdrawals, pk luk shares the minimum necessary financial data with your chosen Bangladesh payment provider — bKash, Nagad, Rocket, Upay, or your bank. The data shared is limited to the information required to execute the specific transaction. pk luk does not store full mobile wallet PINs or bank account passwords.

Legal and Regulatory Disclosure

pk luk may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies in Bangladesh where we are legally required to do so — for example, in connection with an AML investigation, a court order, or a formal regulatory inquiry. Any such disclosure will be made only to the extent required by the applicable legal obligation, and we will notify you of the disclosure where legally permitted to do so.

Business Transfers

In the event that pk luk undergoes a merger, acquisition, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any resulting changes to this Privacy Policy prior to the transfer taking effect.

Data Retention & Deletion

pk luk retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, and to comply with applicable legal and regulatory obligations. The retention periods applicable to each category of data are as follows:

• Account and identity data: Retained for the duration of your active pk luk account, plus a minimum of 5 years following account closure. This extended retention is required for AML compliance and dispute resolution purposes.
• Transaction and financial data: Retained for a minimum of 5 years from the date of each transaction, in compliance with financial record-keeping obligations applicable to online payment processing in Bangladesh.
• KYC documents (NID, passport, proof of address): Retained for the duration of your account plus 5 years post-closure. Physical copies are never made; digital copies are stored in encrypted form only.
• Account activity and betting history: Retained for 3 years from the date of each activity record, or for the duration of any ongoing dispute related to that activity, whichever is longer.
• Customer support communications: Retained for 2 years from the date of the communication, unless the communication relates to an open complaint or legal matter, in which case it is retained until the matter is resolved.
• Analytics and technical data (anonymised): Retained for 12 months, after which it is permanently deleted or further anonymised such that it can no longer be associated with any individual player.
• Marketing consent records: Retained for the duration of your marketing consent plus 3 years following withdrawal of consent, to demonstrate compliance with consent obligations.

When a retention period expires, personal data is securely deleted from all pk luk systems using industry-standard data destruction methods. Anonymised, aggregate statistical data derived from your account activity may be retained indefinitely, as it no longer constitutes personal data once the individual identifier has been irreversibly removed.

Your Data Rights

As a pk luk player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request — [Your Registered Username]". We will acknowledge all requests within 5 business days and aim to complete them within 30 calendar days.

Right of Access

You have the right to request a copy of all personal data held by pk luk about you. This includes your account information, transaction history, KYC records, betting history, and any support communications associated with your account. Your request will be fulfilled in electronic format (PDF or CSV) free of charge, provided you have completed KYC verification so that we can confirm the requester's identity.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For example, if your registered name contains a typographical error, or if your contact number has changed, you may submit a rectification request through our support team. Corrections to identity data may require re-submission of supporting KYC documentation.

Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other lawful basis for processing. Please note that erasure requests cannot always be fulfilled in full where retention is required by a legal obligation (such as AML record-keeping requirements). Where partial deletion is possible, we will delete the maximum possible amount of data and explain in writing why any remaining data cannot be deleted at this time.

Right to Restrict Processing

You have the right to request that pk luk restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being disputed, or while an objection to processing is being assessed. During a restriction, we will continue to store your data but will not actively process it for any purpose other than storage and legal compliance.

Right to Object

You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. In particular, you may object to the use of your data for marketing communications at any time by contacting support. Upon receipt of a marketing objection, we will cease all marketing communications within 5 business days.

Security Measures

pk luk implements a layered security architecture to protect the personal data of Bangladesh players against unauthorised access, disclosure, alteration, or destruction. The key security measures currently in place include:

• TLS/SSL Encryption in Transit: All data transmitted between your device and pk-luk.club is encrypted using TLS 1.2 or TLS 1.3. The presence of HTTPS in your browser address bar confirms that your connection is encrypted at all times.
• Encryption at Rest: Personal data and financial records stored on pk luk's servers are encrypted using AES-256 encryption. Encryption keys are stored separately from the encrypted data and are rotated on a regular schedule.
• Access Controls: Access to personal data within pk luk's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of data access required to perform their specific role. All internal data access is logged and regularly audited.
• Two-Factor Authentication for Internal Systems: All pk luk staff accounts that have access to player data require two-factor authentication (2FA). Players are also strongly encouraged to enable any available account security features.
• Regular Security Assessments: pk luk conducts periodic internal security reviews and vulnerability assessments to identify and remediate potential weaknesses in the Platform's data protection infrastructure.
• Data Breach Response: In the event of a confirmed personal data breach that is likely to result in a risk to affected players, pk luk will notify affected individuals promptly via their registered email address, describing the nature of the breach, the data categories involved, and the steps being taken to mitigate harm.

While pk luk takes all reasonable and practical steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. You also play an important role in keeping your data safe: use a strong, unique password for your pk luk account, do not share your login credentials with anyone, and contact [email protected] immediately if you suspect that your account has been accessed without your authorisation.

This Privacy Policy was last reviewed and updated in January 2026. pk luk reserves the right to update this policy at any time. Any material changes to the policy will be communicated to registered players via their registered email address and will be reflected in the "Last Updated" date at the top of this page. Continued use of the pk luk Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms.