pkla Privacy Policy —
Your Data, Your Rights

pkla operates an online betting and casino platform serving players in Bangladesh and the broader South Asian market. As a platform that handles real-money transactions and sensitive identity documents, pkla recognises that the responsible and transparent management of personal data is fundamental to the trust our players place in us.

This Policy applies to all personal data collected through the pkla website, mobile browser interface, and any other channel through which players interact with pkla's services. It covers data collected during registration, during active use of the Platform, during KYC verification, and during the Account closure process.

This Policy does not apply to third-party websites, payment processors, or game providers that operate under their own independent privacy policies. Where pkla's platform links to or integrates with third-party services, this Policy makes clear the boundary of pkla's data responsibility.

For the purposes of applicable data protection law, pkla acts as the data controller in respect of all personal data collected from players who use the Platform. As data controller, pkla determines the purposes and means by which personal data is processed.

pkla's primary point of contact for data protection enquiries is the support team, reachable via live chat (available 24/7 on the Platform) or by written communication to [email protected]. Written data protection requests should include your Account username, a description of your request, and relevant identification to allow pkla to verify your identity before responding.

pkla operates under international licensing. Full corporate registration details are available to verified Players on written request via the support team.

pkla collects personal data in several categories, depending on the nature of your interaction with the Platform. The table below summarises the categories of data collected and the primary context in which each is gathered.

pkla does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, or health data, except where a player voluntarily discloses health-related information in the context of a responsible gaming self-exclusion request (in which case it is used solely for that purpose).

pkla uses the personal data it collects for the following purposes:

• Account creation and management: To register your Account, verify your identity at sign-up, manage your login credentials, and maintain your Account profile throughout your time as a pkla player.
• KYC and age verification: To confirm that you are at least 21 years of age and to verify that the payment methods registered to your Account are owned by you. KYC is a mandatory step before withdrawal requests are processed.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard in Bangladeshi Taka (BDT). Financial data is shared with payment providers solely for the purpose of executing your transaction.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multiple Account creation, and other prohibited conduct as defined in the pkla Terms and Conditions.
• Regulatory compliance: To meet obligations under applicable anti-money laundering (AML), counter-terrorist financing (CTF), and responsible gaming regulations that apply to pkla's international operations.
• Customer support: To respond to your enquiries, process formal complaints, investigate disputed transactions or bet settlements, and otherwise provide you with assistance through our 24/7 support team.
• Responsible gaming: To administer deposit limits, self-exclusion periods, session reminders, and reality checks at your request, and to proactively identify account behaviour patterns that may indicate problem gambling.
• Platform improvement: To analyse aggregated, anonymised usage patterns to improve the performance, design, and content of the pkla Platform. This analysis does not involve processing personal data at the individual level.
• Promotional communications: To send you relevant offers, bonus notifications, and news about new games or features, where you have not opted out of such communications. You may unsubscribe from marketing emails at any time via your Account settings or by contacting support.

pkla processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform the contract between you and pkla — specifically, your Account registration, deposit and withdrawal transactions, bet placement, and game access. Without this processing, pkla cannot deliver its services to you.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC verification, AML/CTF record-keeping, and age verification requirements.
• Legitimate interests: Processing carried out in pkla's legitimate business interests, including fraud detection, platform security, abuse prevention, and analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for which pkla has obtained your explicit consent, such as sending promotional marketing communications. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

pkla does not sell, rent, or trade your personal data. We share data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the transactional and payment identity data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are responsible for data processed within their own systems.
• Game providers: Third-party game software providers (including Evolution Gaming, Pragmatic Play, Spribe, NetEnt, Microgaming, and Ezugi) may receive session and gameplay data necessary to deliver and maintain their games within the pkla Platform. Game providers do not receive your financial or identity documents.
• KYC and identity verification partners: pkla may use third-party identity verification services to assist in processing KYC documents. These partners are bound by strict confidentiality agreements and are permitted to use your data only for the verification purpose for which it was shared.
• Fraud prevention services: pkla shares data with specialist fraud detection providers to identify patterns of prohibited conduct. These services process data under data processing agreements that govern their permitted use.
• Legal and regulatory authorities: pkla may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law, a valid court order, or a lawful regulatory request. pkla will notify the affected Player of such disclosure where it is legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of pkla's business, player data may be transferred to the acquiring entity. Players will be notified in advance of any such transfer and will be afforded the opportunity to close their Account before the transfer takes effect.

All third parties with whom pkla shares personal data are required to maintain appropriate technical and organisational security measures and are prohibited from using player data for any purpose beyond the specific purpose for which it was shared.

pkla retains personal data for as long as is necessary to fulfil the purposes set out in this Policy, unless a longer retention period is required or permitted by law. The following retention principles apply:

• Active Accounts: Personal data associated with an active Player Account is retained throughout the life of the Account and for a defined period following Account closure.
• KYC and identity documents: Identity and payment verification documents are retained for a minimum period following Account closure to meet anti-money laundering record-keeping obligations. The specific retention period is determined by the applicable regulatory requirements of pkla's licensing jurisdiction.
• Transaction records: Deposit and withdrawal records, including bKash, Nagad, Rocket, and Upay transaction logs, are retained for a minimum period in line with financial record-keeping requirements.
• Gameplay and betting data: Bet history and game session logs are retained for the period required to resolve any outstanding disputes and to satisfy responsible gaming audit obligations.
• Communication data: Support chat transcripts and email correspondence are retained for a reasonable period to facilitate follow-up and to assist in dispute resolution.
• Self-exclusion records: Records of self-exclusion requests are retained beyond the exclusion period to prevent a Player from registering a new Account during an active exclusion and to honour permanent self-exclusion requests indefinitely.

Once the applicable retention period expires, personal data is securely deleted or anonymised in a way that prevents re-identification. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.

As a pkla player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact pkla's support team via live chat or email at [email protected]. pkla will respond to verified requests within a reasonable timeframe and will not charge a fee for exercising your rights in normal circumstances.

Please note that some of these rights are not absolute — they are subject to exceptions where pkla has overriding legal obligations, such as the requirement to retain KYC and transaction records. Where pkla is unable to fulfil a request in full, it will explain the reason clearly in its response.

pkla uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, and to collect analytical data about how the Platform is used. A cookie is a small text file placed on your device when you visit the pkla Platform.

The following categories of cookies are used on the pkla Platform:

• Strictly necessary cookies: These cookies are essential for the Platform to operate. They enable core functions such as secure login session management, Account authentication, and navigation between pages. The Platform cannot function properly without these cookies and they cannot be disabled.
• Functional cookies: These cookies remember your preferences — such as your preferred language, display settings, and last visited game category — to provide a more personalised experience on return visits.
• Analytical cookies: pkla uses anonymised analytical data to understand how players navigate the Platform, which game categories are most visited, and where technical issues arise. This data is used in aggregate form only and does not identify individual players.
• Security cookies: These cookies assist in detecting unusual login behaviour, bot activity, and fraudulent access attempts. They are a component of pkla's broader platform security infrastructure.

You may configure your browser to block or delete cookies at any time. However, disabling strictly necessary cookies will impair or prevent your ability to use the pkla Platform, including logging in to your Account. pkla does not use third-party advertising cookies or behavioural tracking cookies for cross-site advertising purposes.

pkla implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS encryption on all data transmitted between your device and pkla's servers, ensuring that your personal and financial information cannot be intercepted in transit.
• Encrypted storage for sensitive personal data including identity documents, payment credentials, and Account passwords. Passwords are hashed using industry-standard algorithms and are never stored in plain text.
• Access controls: Strict role-based access controls limit which pkla staff members may access player data and under what circumstances. Access to sensitive Account data is logged and audited.
• Penetration testing and vulnerability assessments conducted periodically by qualified security specialists to identify and address potential weaknesses in pkla's infrastructure.
• Two-factor authentication (2FA) available to all players for additional Account login security. pkla strongly recommends enabling 2FA on your Account via the Account security settings.
• Incident response procedures: In the event of a confirmed personal data breach that poses a risk to players, pkla will notify affected players and relevant authorities in accordance with applicable obligations, providing details of the nature of the breach, the data affected, and the steps being taken to address it.

While pkla employs robust security measures, no internet-based platform can guarantee absolute security. Players are advised to use strong, unique passwords for their pkla Account, not to share login credentials, and to contact support immediately if they suspect unauthorised access to their Account.

The pkla Platform is strictly for adults aged 21 and above. pkla does not knowingly collect, process, or store personal data relating to individuals under the age of 21. Age verification is a mandatory step in the Account registration and KYC process, and pkla reserves the right to request proof of age at any stage of the Player's lifecycle on the Platform.

If pkla discovers or is notified that personal data belonging to a person under the age of 21 has been collected — whether through a falsified registration or any other means — pkla will immediately suspend the relevant Account, void any associated bets or winnings in accordance with the Terms and Conditions, and permanently delete the data of the underage individual from its systems.

If you are a parent or guardian and believe that a minor in your care has registered an Account on pkla, please contact our support team immediately at [email protected]. pkla treats reports of underage account registration as a matter of the highest priority and will act on verified reports without delay.

The pkla Platform may contain references to or integrations with third-party services — including game software providers such as Evolution Gaming, Pragmatic Play, Spribe, and Ezugi, and payment processors such as bKash and Nagad. Where you interact with these services, their own privacy policies govern the collection and use of your data within their systems.

pkla is not responsible for the privacy practices or the content of third-party services. pkla's Privacy Policy applies exclusively to data processed by pkla within the scope of its own platform and operations. Players are encouraged to review the privacy policies of any third-party service they interact with in connection with their use of pkla.

pkla does not control and is not responsible for the privacy practices of third-party game content embedded within the Platform via secure iframes or API integrations. The game session data transmitted to game providers is limited to the minimum necessary for the game to function and is governed by pkla's data processing agreements with those providers.

pkla may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or changes in the services we offer. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

Where a proposed change is material — meaning it significantly affects how your personal data is processed or your rights in relation to that data — pkla will provide advance notice to registered players via the Platform and, where appropriate, via email to the address registered on your Account. You will be given a reasonable opportunity to review the changes before they take effect.

Your continued use of the pkla Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with an updated Policy, you may close your Account by contacting the support team. Account closure requests will be processed in accordance with the procedures set out in the pkla Terms and Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or pkla's handling of your personal data, please contact our support team using the details below. All contact information is provided as plain text only and is not a clickable link.

• Email: [email protected]
• Live Chat: Available 24/7 via the pkla Platform
• Support Hours: Bangladesh Standard Time (BST, UTC+6)
• Subject line for data requests: "Data Protection Request — [Your Username]"
• Response time: Within 30 days for formal data subject requests; within 24 hours for general privacy enquiries

When submitting a data subject rights request, please include your Account username and sufficient identity information to allow pkla to verify that the request originates from the registered Account holder. pkla will not process data access, deletion, or portability requests without first verifying the identity of the requester to protect against unauthorised disclosure.