Your Privacy at pk lack

1 Data We Collect

pk lack collects personal data through three primary channels: information you provide directly during registration and account management, data generated automatically through your use of the platform, and information received from trusted third-party service providers such as payment processors and identity verification partners.

Information you provide directly:

• Full legal name, date of birth, and residential address (required for account registration and KYC verification).
• Email address and mobile phone number (used for account communications and OTP authentication).
• Government-issued identity documents such as National ID (NID), passport, or driving licence (collected during the KYC process prior to your first withdrawal).
• Payment account details including bKash number, Nagad number, Rocket number, Upay account, bank account number, or card details (used solely to process deposits and withdrawals).
• Any communications you send to our support team, including live chat transcripts, email correspondence, and feedback submissions.

Data collected automatically when you use pk lack:

• IP address, device type, operating system, and browser version (used for fraud detection and platform optimisation).
• Session timestamps, pages visited, game history, bet amounts, and wagering patterns (used for responsible gaming monitoring and personalisation).
• Cookies and similar tracking technologies as described in the Cookies section below.

Data received from third parties:

• Transaction confirmation data from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard (used to reconcile deposits and withdrawals).
• Identity verification results from KYC service providers (used to comply with anti-money laundering obligations).
• Fraud risk scores from payment processors (used to protect your account from unauthorised transactions).

2 How We Use Your Data

pk lack processes your personal data only for lawful, specified, and legitimate purposes. The table below summarises the main purposes for which your data is used and the legal basis for each processing activity.

pk lack does not use your personal data for automated profiling that produces legal or similarly significant effects without human review. Where algorithmic tools are used for fraud detection or responsible gaming alerts, a human compliance officer reviews any consequential decisions before action is taken on your account.

3 Data Sharing & Third Parties

pk lack does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Data is shared only in the limited circumstances described below, and always under contractual protections that require the recipient to handle your data securely and only for the stated purpose.

Categories of third parties with whom data may be shared:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard receive only the transaction data necessary to execute your specific payment instruction. They do not receive your full account profile or gaming history.
• KYC and identity verification partners: Your identity documents are shared with our accredited KYC service provider solely to verify your identity. Verification results are returned to pk lack; the raw documents are not retained by the third-party provider beyond the verification session.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a session token to authenticate your game session. They do not receive your full name, payment details, or contact information.
• Cloud infrastructure and hosting providers: pk lack's servers and databases are hosted on secure cloud infrastructure. Hosting providers operate under strict data processing agreements and have no independent right to access or use your data.
• Legal and regulatory authorities: pk lack may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required by law, court order, or to investigate suspected criminal activity including fraud and money laundering.

All third-party service providers are required to implement appropriate technical and organisational security measures, and they are permitted to process your data only in accordance with our documented instructions.

4 Cookies & Tracking Technologies

pk lack uses cookies and similar technologies (such as local storage and session tokens) to deliver and improve the platform experience. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies do not contain executable code and cannot access other files on your device.

Types of cookies used by pk lack:

• Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, remember your language preferences, and prevent cross-site request forgery. These cookies cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: These help us understand how players navigate the platform — which pages are visited most frequently, where players encounter errors, and how long sessions last. Data collected is aggregated and anonymised. pk lack uses a self-hosted analytics solution; no data is transmitted to third-party analytics services.
• Functional cookies: These remember your in-platform preferences such as default game view, display settings, and notification preferences, so you do not need to reconfigure them on each visit.

pk lack does not use advertising cookies, retargeting pixels, or any cross-site tracking technology that follows you across other websites.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into your pk lack account. For instructions on managing cookies in your specific browser, refer to the browser's official help documentation.

5 Data Retention & Storage

pk lack retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and compliance obligations. The retention periods below represent the standard schedule applied to different categories of data.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

All data is stored on servers located within secure data centres. Data is encrypted both in transit (TLS 1.3) and at rest (AES-256). Access to production data stores is restricted to authorised personnel and is logged for audit purposes.

6 Your Privacy Rights

As a pk lack player, you have the following rights with respect to your personal data. To exercise any of these rights, please send a written request to [email protected] with the subject line "Data Rights Request". pk lack will acknowledge your request within 5 business days and provide a substantive response within 14 business days.

• Right of access: You may request a copy of all personal data pk lack holds about you, along with information about how it is being processed.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected. You may also update many details directly through your account profile page.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that erasure requests may be declined where retention is required by law (e.g., AML record-keeping obligations).
• Right to restriction of processing: You may request that pk lack restrict processing of your data in certain circumstances — for example, while a dispute about the accuracy of the data is being resolved.
• Right to data portability: You may request that we provide your account and transaction data in a structured, machine-readable format so that it can be transferred to another service provider.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that took place prior to withdrawal.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling for fraud detection purposes, where your particular circumstances warrant it.

7 Data Security Measures

pk lack treats the security of your personal data as a fundamental responsibility. We maintain a layered security programme that encompasses technical, organisational, and procedural controls designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure.

Technical controls in place include:

• TLS 1.3 encryption for all data in transit between your browser and pk lack servers.
• AES-256 encryption for all sensitive data stored at rest, including identity documents and payment account details.
• OTP-based two-factor authentication (2FA) available to all players and mandatory for staff accessing administrative systems.
• Intrusion detection systems (IDS) and web application firewall (WAF) to monitor and block suspicious traffic in real time.
• Regular automated vulnerability scans and periodic penetration testing conducted by independent security professionals.
• Strict role-based access controls: employees can access only the data required for their specific job function, and all access is logged.

Organisational controls include:

• All staff handling personal data undergo mandatory data protection training at onboarding and annually thereafter.
• Third-party vendors are assessed for security compliance before being granted access to any pk lack systems or data.
• A formal incident response plan is in place. In the event of a data breach that poses a risk to your rights, pk lack will notify affected players without undue delay and will document the incident internally.

Despite these measures, no internet-based platform can guarantee absolute security. You play an important role in keeping your account safe: use a strong, unique password, enable 2FA, and contact us immediately at [email protected] if you suspect your account has been compromised.

8 Changes to This Policy

pk lack may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When a material change is made, we will notify registered players via the email address associated with their account at least 14 days before the change takes effect. The updated Policy will also be published on this page with a revised "Last updated" date.

Minor, non-material changes (such as corrections to typographical errors or clarifications that do not alter the substance of the Policy) may be made without prior notice. In all cases, the version of the Policy published on this page at any given time is the version that governs your use of pk lack at that time.

If you disagree with any changes to this Privacy Policy, you have the right to close your account and request deletion of your data subject to applicable legal retention requirements. To do so, contact our support team at [email protected].