pklock Privacy Policy

01 Introduction and Scope

This Privacy Policy ("Policy") is published by pklock and governs the collection, processing, storage, and transfer of personal data relating to all individuals who visit, register on, or interact with the pklock platform available at pklock.bio. The Policy applies equally to desktop and mobile browser access, customer support correspondence, and any promotional or transactional communications sent by pklock.

pklock is committed to maintaining the highest practical standards of data privacy and security. This Policy has been written in plain English to ensure that every player, regardless of technical background, can understand how their personal data is handled. Where technical or legal terminology is unavoidable, we have provided plain-language explanations alongside.

This Policy should be read alongside the pklock Terms & Conditions, which together form the complete legal framework governing your relationship with pklock. In the event of any inconsistency between this Policy and the Terms & Conditions on a privacy-specific matter, this Policy prevails.

02 Data Controller Identity

For the purposes of this Privacy Policy, pklock acts as the data controller in respect of all personal data collected from users of the pklock.bio platform. As data controller, pklock determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

Where pklock engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification services, or analytics providers — those third parties act as data processors and are contractually bound to process data only in accordance with pklock's instructions and this Policy.

All data-related enquiries, access requests, and complaints should be directed to the pklock Data Team at: [email protected] — please include "Privacy" or "Data Request" in the subject line of your message so it is routed to the correct team.

03 What Data We Collect

pklock collects personal data across several categories depending on the nature of your interaction with the platform. The table below summarises the categories of data we collect and the primary reason for collecting each category:

pklock does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health information, biometric data, or criminal records, except where such data is volunteered by the player through support correspondence or is required by a legal obligation (for example, where a self-exclusion request references a gambling disorder).

04 How We Collect Your Data

pklock collects personal data through the following channels and mechanisms:

• Direct provision: Data you provide when completing the pklock registration form, submitting identity verification documents, contacting customer support, or updating your account profile.
• Automated technical collection: Data collected automatically when you access pklock.bio, including IP address, device identifiers, browser fingerprint data, and session activity logs via server-side logging and first-party cookies.
• Payment providers: Transaction confirmation data (reference numbers, timestamps, amounts) received from bKash, Nagad, Rocket, Upay, and bank transfer gateways when you initiate a deposit or withdrawal.
• Identity verification partners: Verification outcome data (pass/fail status, document type confirmed) returned by the third-party identity verification service used to fulfil pklock's Know Your Customer (KYC) obligations. Raw document images are processed by the verification partner and are not stored on pklock servers beyond the period required for compliance purposes.
• Fraud and security systems: Risk scoring data generated by pklock's internal fraud detection systems in response to account and transaction activity patterns.

pklock does not purchase personal data from data brokers or obtain data from social media platforms. Any data obtained from third parties is limited to what is necessary for the specific operational or compliance purpose described above.

05 Why We Use Your Data

pklock processes personal data on the basis of one or more of the following lawful grounds: (a) the performance of a contract with you; (b) compliance with a legal obligation; (c) your explicit consent; or (d) our legitimate interests in operating a secure and compliant gaming platform, provided those interests are not overridden by your own privacy rights.

The specific purposes for which pklock processes your data include:

• Creating and administering your pklock account, including verifying your identity and age in accordance with our 18+ policy.
• Processing deposits and withdrawals and maintaining an accurate transaction record for each account.
• Detecting, investigating, and preventing fraudulent activity, money laundering, and other prohibited conduct as described in the pklock Terms & Conditions.
• Monitoring gameplay and betting patterns for the purposes of responsible gaming — including identifying signs of problem gambling behaviour and triggering interventions where appropriate.
• Delivering personalised game recommendations, promotional offers, and bonus communications to players who have opted in to marketing. Players may withdraw marketing consent at any time by contacting [email protected] or updating their account preferences.
• Improving the performance, reliability, and user experience of the pklock platform through aggregated and anonymised analytics.
• Responding to customer support enquiries and resolving complaints within the timeframes set out in the Terms & Conditions.
• Meeting pklock's legal and regulatory obligations, including record-keeping requirements applicable to online gaming operators serving the Bangladesh market.

06 When We Share Your Data

pklock does not sell, rent, or otherwise commercially exploit your personal data. Data is shared with third parties only in the following tightly defined circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, and bank gateway operators receive the minimum data necessary to process your specific transaction (typically your account reference and transaction amount).
• Identity verification services: A third-party KYC provider receives your identity document data solely for the purpose of verifying your identity and age. This provider is contractually prohibited from using your data for any other purpose.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi may receive a tokenised player identifier and session data necessary to deliver their games. These providers do not receive your full identity or financial data.
• Legal and regulatory authorities: pklock will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by law, court order, or regulatory direction. Where legally permitted, pklock will notify the affected player before making such disclosure.
• Corporate transactions: In the event of a merger, acquisition, or sale of pklock's business, player data may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and of any material changes to data handling that may result.

All third-party data processors used by pklock are subject to contractual data processing agreements that impose obligations equivalent to those described in this Policy. pklock conducts periodic reviews of its data processor relationships to ensure continued compliance.

07 Payment Data and MFS Partners

Given that the primary payment methods used by pklock players in Bangladesh are mobile financial services (MFS) — specifically bKash, Nagad, Rocket, and Upay — it is important to explain in detail how payment data flows between the player, pklock, and the MFS provider.

When you initiate a deposit via bKash or another MFS provider, the transaction is completed directly within the MFS provider's own secure interface. pklock receives only a transaction confirmation token — a reference identifier generated by the MFS provider that confirms the transaction was completed successfully, along with the transaction amount and timestamp. pklock does not at any point receive, process, or store your bKash PIN, Nagad MPIN, or any banking password.

For withdrawal requests, pklock transmits your registered MFS account number and the withdrawal amount to the MFS provider via a secure API. This is the minimum data necessary to complete the transfer. pklock stores a record of the transaction reference, amount, and date for compliance and dispute resolution purposes, in accordance with the retention periods set out in Section 9.

pklock strongly advises all players to set up two-factor authentication on their bKash, Nagad, and Rocket accounts independently of their pklock account security settings. The security of your MFS accounts is the responsibility of the respective MFS providers and is outside pklock's control.

08 Cookies and Tracking

pklock uses cookies and similar tracking technologies on pklock.bio to ensure the platform functions correctly, to maintain your login session, and to collect aggregated usage data that helps pklock improve the player experience. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the platform to operate. They maintain your authenticated session, store your language and display preferences, and protect against cross-site request forgery (CSRF). These cookies cannot be disabled without breaking core platform functionality.
• Analytics Cookies: pklock uses first-party analytics to understand how players navigate the platform — for example, which game categories are most visited and where players exit during the deposit flow. This data is collected in aggregated, anonymised form and is not linked back to individual player accounts.
• Functional Cookies: These cookies remember your preferences such as your last visited game category, preferred payment method (not payment credentials), and notification settings, so you do not need to re-configure them on each visit.

pklock does not use third-party advertising cookies or cross-site tracking pixels. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your pklock account. Disabling functional or analytics cookies will not affect your access but may reduce the quality of your experience.

09 How Long We Keep Your Data

pklock retains personal data for the minimum period necessary to fulfil the purpose for which it was collected and to meet applicable legal and regulatory retention obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active account, plus a minimum of 5 years after account closure, in order to meet anti-money-laundering record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, in line with financial record-keeping obligations.
• Customer support correspondence: Retained for 3 years from the date of the last interaction, or longer if the correspondence relates to a formal complaint or legal dispute that remains unresolved.
• Technical and usage logs: Retained for up to 12 months in their raw form. Aggregated and anonymised analytics data derived from usage logs may be retained indefinitely as it no longer constitutes personal data.
• Marketing preferences and consent records: Retained for the lifetime of the account and for 3 years after account closure as evidence of consent management.

At the end of the applicable retention period, personal data is either securely deleted or irreversibly anonymised so that it can no longer be attributed to an individual. Where data is anonymised rather than deleted, it may continue to be used for aggregated analytics and platform improvement purposes.

10 How We Secure Your Data

pklock employs a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, and destruction. The key technical and organisational measures in place include:

• Encryption in transit: All data transmitted between your browser and pklock servers is encrypted using TLS 1.2 or higher, delivering 256-bit SSL protection across the entire platform.
• Encryption at rest: Sensitive personal data stored in pklock databases — including identity document references and financial data — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within pklock's internal systems is restricted to personnel with a documented operational need. All internal data access is subject to role-based access controls and audit logging.
• Network security: pklock's infrastructure is protected by firewalls, intrusion detection systems, and regular penetration testing conducted by independent security professionals.
• Incident response: pklock maintains a documented data breach response procedure. In the event of a data breach that poses a risk to player privacy, affected players will be notified promptly and appropriate remedial action will be taken without delay.

While pklock takes all reasonable and practical steps to secure your personal data, no online platform can guarantee absolute security. Players are strongly encouraged to use a strong, unique password for their pklock account, to enable two-factor authentication, and to keep their contact details up to date so that security alerts can be delivered promptly.

11 Your Data Rights

As a pklock player, you have the following rights in respect of your personal data. To exercise any of these rights, contact the pklock Data Team at [email protected] with the subject line "Data Rights Request":

pklock will acknowledge all data rights requests within 48 hours and will respond substantively within 30 calendar days. There is no fee for standard requests. Where a request is manifestly unfounded or excessive, pklock reserves the right to charge a reasonable administrative fee or decline the request, with written explanation.

If you are not satisfied with pklock's response to a data rights request, you may escalate your complaint by emailing [email protected] with the subject line "Data Complaint". pklock will treat such escalations as formal complaints and will respond within 14 business days.

12 Children and Minors

The pklock platform is strictly intended for adults aged 18 years and above. pklock does not knowingly collect personal data from individuals under the age of 18. The pklock registration process includes age verification steps designed to prevent minors from creating accounts.

If pklock becomes aware that personal data has been collected from a minor — whether through a registration bypass, use of a parent's or guardian's identity, or any other means — the account will be suspended immediately, all personal data associated with the account will be deleted as soon as reasonably practicable, and any deposits made by the minor will be returned to the originating payment method.

Parents and guardians who believe that a minor in their care has created a pklock account should contact [email protected] immediately. pklock will treat all such reports with the highest priority and will take prompt action to close the account and remove all associated data.

13 Changes to This Policy

pklock reserves the right to update this Privacy Policy at any time. Where changes are material — for example, where pklock begins processing a new category of personal data, introduces a new third-party data processor, or changes the retention periods for existing data — pklock will provide at least 14 days' advance notice by posting a prominent notice on pklock.bio and, where possible, by sending a notification to the email address registered to each player's account.

For minor or non-material changes — such as typographical corrections, clarification of existing practices without substantive alteration, or updates required to comply with changes in applicable law — pklock may update the Policy without prior notice. The "Effective Date" at the top of this page will always reflect the date of the most recent revision.

Your continued use of the pklock platform after any updated Policy has taken effect constitutes your acceptance of the revised terms. If you do not agree with any change to this Policy, you should cease using the platform and contact [email protected] to arrange account closure and, where applicable, a data deletion request.

14 Contact and Data Requests

For all privacy-related enquiries, data rights requests, or complaints relating to how pklock handles your personal data, please contact the pklock Data Team using the details below. All communications should be in English.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request – [Your Username]"
• Subject Line for Data Complaints: "Data Complaint – [Your Username]"
• Response Commitment: Acknowledgement within 48 hours; substantive response within 30 calendar days.
• Operating Hours: Support is available during Bangladesh Standard Time (BST, UTC+6) business hours, Monday to Saturday.

When submitting a data rights request, please include your full registered username, the email address associated with your pklock account, a clear description of the data or action you are requesting, and a copy of a valid identity document so that we can verify your identity before fulfilling the request. This verification step is necessary to protect your data from being disclosed to or deleted by an unauthorised third party.

pklock is committed to resolving all data privacy concerns fairly and promptly. If you remain dissatisfied after exhausting pklock's internal complaints process, you retain the right to seek further recourse through applicable legal channels in Bangladesh.