PK Lock Privacy Policy

1 Introduction

PK Lock ("we", "us", "pk lock") is committed to protecting the privacy of every player who uses our platform. This Privacy Policy describes how pk lock collects, uses, stores, and protects your personal data when you visit pk-lock.org, register a pk lock account, make deposits, play games, or contact our support team.

We understand that privacy is important to our players in Bangladesh. That is why we have written this policy in plain language — so you know exactly what is happening with your data at every step. We do not hide anything in complicated legal text. If something is unclear, reach out to us directly and we will explain it.

This policy should be read alongside the pk lock Terms and Conditions and our Responsible Gaming policy, both of which are incorporated by reference.

2 Data We Collect

PK lock collects only the personal data that is necessary to provide you with a safe, fair, and functional gaming experience. The categories of data we collect are set out below.

3 How We Collect Your Data

PK lock collects your personal data through the following channels:

• Registration form: When you create a pk lock account, you provide your name, mobile number, email address, and date of birth directly to us.
• Identity verification: When pk lock requests KYC documents, you upload identity documents such as your national ID card or passport through the secure verification portal.
• Deposits and withdrawals: When you make a transaction via bKash, Nagad, or Rocket, your mobile money account number and transaction reference are recorded by pk lock.
• Platform usage: As you use the pk lock platform — browsing games, placing bets, logging in — our systems automatically record technical and usage data.
• Cookies and tracking: The pk lock website uses cookies and similar technologies to collect technical data about your device and browsing behaviour. See Section 7 for full details.
• Support interactions: When you contact pk lock support via email or live chat, the content of those communications is recorded and stored.
• Third-party verification: In some cases, pk lock may verify your identity or check for fraud using data from third-party identity verification services. These services do not receive your gaming data in return.

4 How We Use Your Data

PK lock uses your personal data for the following purposes. We only process your data where we have a lawful basis to do so — either because it is necessary to perform our contract with you, because we have a legal obligation, or because we have a legitimate interest that does not override your privacy rights.

• Account management: Creating and maintaining your pk lock account, processing logins, and managing your profile settings.
• Payment processing: Handling deposits and withdrawals via bKash, Nagad, and Rocket, and maintaining accurate transaction records.
• Identity verification: Verifying your age and identity to comply with our legal obligations and prevent underage gambling.
• Fraud and security: Detecting and preventing fraudulent activity, money laundering, and unauthorised account access on the pk lock platform.
• Responsible gaming: Monitoring your gaming activity to identify signs of problem gambling and to apply any limits or restrictions you have set on your account.
• Customer support: Responding to your queries, resolving disputes, and improving the quality of our support service.
• Platform improvement: Analysing usage patterns to improve the pk lock platform, fix bugs, and develop new features that benefit our players.
• Legal compliance: Meeting our obligations under applicable laws and regulations, including anti-money laundering (AML) requirements and responding to lawful requests from authorities.
• Marketing (with consent only): Sending you promotional offers and updates about pk lock — but only if you have explicitly opted in. You can withdraw consent at any time.

5 Sharing Your Data

PK lock does not sell your personal data. We share your data only in the limited circumstances described below, and only with parties who are contractually required to protect it.

• Payment processors: Your financial data is shared with bKash, Nagad, and Rocket solely to process your transactions. These providers have their own privacy policies and security standards.
• Identity verification providers: When KYC verification is required, your identity documents may be shared with a third-party verification service. This service is bound by strict confidentiality obligations.
• IT and hosting providers: PK lock uses third-party cloud infrastructure to host the platform. These providers process data on our behalf and are contractually prohibited from using it for their own purposes.
• Legal and regulatory authorities: PK lock may disclose your data to law enforcement, regulatory bodies, or courts when required to do so by applicable law or a valid legal order.
• Business transfers: In the event of a merger, acquisition, or sale of pk lock's business, your data may be transferred to the acquiring entity. You will be notified of any such transfer in advance.

6 Payment Data

PK lock takes the security of your financial data very seriously. Here is how payment data is handled on the pk lock platform:

• No full account storage: PK lock does not store your full bKash, Nagad, or Rocket account credentials. Only the mobile number associated with your payment account and transaction references are retained.
• Encrypted transmission: All payment data transmitted between your device and the pk lock platform is encrypted using TLS 1.3 or higher. This means your financial information cannot be intercepted in transit.
• Transaction records: PK lock retains records of all deposits and withdrawals for a minimum of five years to comply with anti-money laundering regulations. These records are accessible only to authorised pk lock staff and relevant regulatory authorities.
• Withdrawal verification: To protect against fraud, pk lock verifies that withdrawal requests are made to the same mobile money account used for deposits. Requests to withdraw to a different account require additional identity verification.

7 Cookies & Tracking Technologies

The pk lock website uses cookies and similar technologies to make the platform work properly and to improve your experience. Here is what you need to know:

• Essential cookies: These are required for the pk lock platform to function. They manage your login session, remember your preferences, and keep your account secure. You cannot opt out of essential cookies without disabling the platform entirely.
• Analytics cookies: PK lock uses analytics tools to understand how players use the platform — which pages are visited most, where players encounter problems, and how long sessions last. This data is aggregated and anonymised.
• Preference cookies: These remember your settings, such as your preferred language or display options, so you do not have to reconfigure them every time you visit pk lock.
• Marketing cookies (consent required): If you have opted in to marketing communications, pk lock may use cookies to personalise the offers and promotions you see. You can withdraw this consent at any time.

You can manage cookie preferences through your browser settings. Note that disabling non-essential cookies may affect some features of the pk lock platform. For detailed instructions on managing cookies in your browser, refer to your browser's help documentation.

8 Data Retention

PK lock retains your personal data only for as long as it is necessary for the purposes described in this policy, or as required by applicable law. The general retention periods we apply are as follows:

• Active account data: Retained for the full duration your pk lock account is active, plus a minimum of five years after account closure to meet legal and regulatory obligations.
• Transaction records: Retained for a minimum of five years from the date of each transaction, in line with anti-money laundering requirements.
• Identity verification documents: Retained for five years after account closure or the completion of the last transaction, whichever is later.
• Support communications: Retained for two years from the date of the last interaction, unless the communication relates to an ongoing dispute or legal matter.
• Marketing consent records: Retained for as long as you remain opted in, plus one year after you withdraw consent, to demonstrate compliance.
• Technical and usage data: Retained in anonymised or aggregated form indefinitely for platform improvement purposes. Identifiable technical data is deleted after 12 months.

When your data is no longer required, pk lock securely deletes or anonymises it so that it can no longer be linked back to you.

9 How We Protect Your Data

PK lock implements a layered security approach to protect your personal data from unauthorised access, loss, or misuse. Our security measures include:

• AES-256 encryption: All personal data stored in pk lock's databases is encrypted at rest using AES-256, the same standard used by financial institutions worldwide.
• TLS encryption in transit: All data transmitted between your device and pk lock's servers is protected by TLS 1.3 encryption, preventing interception.
• Access controls: Access to personal data within pk lock is restricted on a strict need-to-know basis. Staff members can only access the data required to perform their specific role.
• Two-factor authentication: PK lock offers two-factor authentication (2FA) for player accounts. We strongly recommend enabling 2FA to add an extra layer of protection to your pk lock account.
• Regular security audits: Independent third-party security experts conduct regular penetration tests and vulnerability assessments of the pk lock platform.
• Incident response: PK lock has a documented data breach response plan. In the event of a breach that affects your personal data, we will notify you and relevant authorities within the timeframes required by applicable law.

10 Your Privacy Rights

As a pk lock player, you have the following rights over your personal data. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

11 Minors

The pk lock platform is strictly for adults aged 18 and over. PK lock does not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has registered a pk lock account or provided personal data to us, please contact us immediately at [email protected].

Upon receiving a verified report of underage registration, pk lock will immediately close the account, delete all associated personal data, and return any funds deposited to the payment source. We take underage gambling extremely seriously and have age verification procedures in place to prevent it.

12 Changes to This Policy

PK lock may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last Updated" date at the top of this page.

For significant changes that materially affect how we use your personal data, pk lock will notify registered players via email or an in-platform notification at least 14 days before the changes take effect. Your continued use of the pk lock platform after the effective date of any update constitutes your acceptance of the revised policy.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way pk lock handles your personal data, please get in touch. We take all privacy enquiries seriously and aim to respond within 2 business days.

• Email: [email protected]
• Subject line for data requests: Use "Privacy Request – [Your Name]" so we can prioritise your query.
• FAQ: Common privacy questions are answered on our FAQ page.
• Terms: For the full legal framework governing your use of pk lock, see our Terms and Conditions.

If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint by emailing [email protected] with the subject line "Formal Privacy Complaint". A member of the pk lock management team will personally review your case and respond within 7 business days.