pk64 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") explains how pk64 ("pk64", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("Player", "User", "you") who access or use the pk64 online betting and casino platform available at pk64.io (the "Platform").

pk64 is committed to safeguarding the privacy and security of all personal data entrusted to us by our players. We operate the Platform for the benefit of adult players in Bangladesh, and we recognise our responsibility to handle personal data with the highest standards of care, transparency, and integrity.

By registering an account, making a deposit, placing a bet, or otherwise using the pk64 Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the Platform.

This Policy should be read alongside the pk64 Terms & Conditions and Responsible Gaming Policy, all of which form part of the overarching agreement between you and pk64.

2 Data We Collect

pk64 collects the following categories of personal data from players and prospective players. All data collection is limited to what is necessary for the purposes described in this Policy.

Identity & Contact Data

• Full legal name as it appears on official identification documents.
• Date of birth (to verify the 21+ age requirement).
• Email address (used for account communications and support).
• Mobile phone number (used for account verification and security alerts).
• Residential address (required during KYC verification).

Identity Verification (KYC) Documents

• National Identity Card (NID), passport, or driver's licence image.
• Proof of address documents (utility bill, bank statement, etc.) where required.
• Selfie or liveness-check image where enhanced verification is required.

Account & Activity Data

• Account username and encrypted password hash.
• Login timestamps, session durations, and IP addresses.
• Betting and gaming history, including stakes, outcomes, and game types.
• Bonus claims, wagering progress, and promotional participation records.
• Responsible gaming settings and self-exclusion records.

Financial & Transaction Data

• bKash, Nagad, Rocket, and Upay mobile wallet identifiers (phone numbers registered to the wallet).
• Deposit and withdrawal transaction amounts, dates, and reference numbers.
• Transaction history for audit and anti-money-laundering (AML) compliance purposes.

Technical & Device Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system, and browser type and version.
• Cookie identifiers and session tokens (see Section 8).
• Referral source and UTM parameters where applicable.

Communications Data

• Records of support interactions via live chat and email, including the content of those communications.
• Survey responses and player feedback where voluntarily submitted.

3 How We Collect Data

pk64 collects personal data through the following channels and mechanisms:

Directly From You

• When you register a player account on pk64.io.
• When you submit KYC verification documents.
• When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, or Upay.
• When you contact pk64 support via live chat or email at [email protected].
• When you respond to surveys or participate in promotional campaigns.
• When you update your account profile or responsible gaming settings.

Automatically Through Platform Use

• When you log in to your pk64 account (IP address, device data, timestamp).
• When you navigate the Platform (page views, click paths, session duration).
• When you place bets or play casino games (stake amounts, game outcomes, session data).
• Through cookies and similar tracking technologies placed on your device (see Section 8).

From Third Parties

• From identity verification service providers during the KYC process.
• From payment processors (bKash, Nagad, Rocket, Upay) to confirm transaction status.
• From fraud prevention and anti-money-laundering screening services.
• From game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe) in relation to game session data.

4 How We Use Your Data

pk64 uses the personal data collected for the following purposes. We do not use your data for any purpose that has not been disclosed in this Policy.

Marketing Communications. Where you have provided explicit consent, pk64 may send you promotional emails and notifications about new games, bonuses, and seasonal offers (such as Eid promotions, Pohela Boishakh specials, or BPL cricket betting offers). You may withdraw your consent to marketing communications at any time by contacting [email protected]. Withdrawal of marketing consent does not affect the processing of your data for other purposes described in this Policy.

5 Legal Basis for Processing

pk64 processes personal data on the basis of the following legal grounds:

• Contractual Necessity — Processing your data is necessary to create and manage your account, process your deposits and withdrawals, settle your bets, and provide the services described in the pk64 Terms & Conditions.
• Legal Obligation — pk64 is required to collect and retain certain data — particularly KYC identity documents and transaction records — to comply with applicable anti-money-laundering, counter-terrorism-financing, and age-verification obligations.
• Legitimate Interests — pk64 processes technical and activity data to detect fraud, prevent abuse, maintain platform security, and improve the overall quality of the service, where these interests are not overridden by your rights and freedoms.
• Consent — Where we rely on consent as a legal basis (primarily for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing & Disclosure

pk64 does not sell, rent, or trade your personal data. We share data with third parties only in the following limited circumstances:

Service Providers. pk64 engages trusted third-party service providers who process data on our behalf under strict contractual obligations. These include:

• Identity verification and KYC processing partners.
• Payment processors — bKash, Nagad, Rocket, Upay — to confirm and settle transactions.
• Game providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe — for game session data necessary to operate their games on the Platform.
• Anti-fraud and AML screening service providers.
• Cloud hosting and data storage providers operating under appropriate data security standards.
• Customer support platform providers used to manage live chat and email interactions.

Legal & Regulatory Disclosure. pk64 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or government authority, without prior notice to you where disclosure is legally required or permitted.

Business Transfers. In the event of a merger, acquisition, or sale of all or a substantial portion of pk64's assets, player data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to data processing practices that result from it.

7 Payment Data

All financial transactions on pk64 are conducted in Bangladeshi Taka (৳) via the following mobile financial services: bKash, Nagad, Rocket, and Upay. These payment providers operate their own independent platforms and are governed by their own privacy policies and terms of service.

What pk64 Stores. pk64 retains the mobile wallet phone number associated with each deposit or withdrawal transaction, together with the transaction reference number, amount, date, time, and status. This information is stored in encrypted form and is used exclusively for transaction reconciliation, support queries, and AML compliance purposes.

What pk64 Does Not Store. pk64 does not store full payment card numbers, CVV codes, or any payment credentials beyond the wallet identifiers described above. We do not have access to your bKash, Nagad, Rocket, or Upay account PIN or password at any stage of the transaction.

Transaction Records. Full transaction records are retained for a minimum period of five (5) years from the date of the transaction in accordance with financial record-keeping best practices. After this period, transaction data is reviewed for deletion unless a longer retention period is required by applicable law or an ongoing investigation.

8 Cookies & Tracking Technologies

pk64 uses cookies and similar tracking technologies on pk64.io to operate the Platform, remember your preferences, maintain your login session, and analyse how the Platform is used. This section explains what cookies we use and why.

What Are Cookies. Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to retain certain information about your preferences and activity.

Types of Cookies We Use

• Strictly Necessary Cookies — These are essential for the Platform to function. They maintain your login session, remember your language preference, and enable core security functions. These cookies cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies — These remember your account preferences, such as your responsible gaming settings, notification preferences, and display settings, to provide a more personalised experience on return visits.
• Analytics Cookies — These help pk64 understand how players use the Platform by collecting aggregated, anonymised data about page views, session durations, and navigation paths. This data is used solely to improve the Platform.
• Security Cookies — These support fraud detection and anti-bot measures, helping pk64 identify and block suspicious login attempts and unusual account activity.

Managing Cookies. You may manage or disable cookies through your browser settings at any time. Please be aware that disabling strictly necessary cookies will prevent you from logging in to your pk64 account and using the Platform. To manage cookie preferences, refer to the help documentation for your specific browser.

9 Data Security

pk64 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure.

Technical Measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and pk64.io.
• Encryption of sensitive data fields at rest within our database systems.
• Role-based access controls ensuring that only authorised personnel can access player data, and only to the extent necessary for their specific role.
• Comprehensive access logging and real-time alerting for anomalous access events.
• Regular security assessments and penetration testing of the Platform infrastructure.
• Multi-factor authentication requirements for internal system access by pk64 staff.

Organisational Measures include:

• Data protection training for all pk64 staff who handle personal data.
• A formal data breach response procedure, including notification protocols for affected players where required.
• Third-party vendor security assessments before engagement and on a periodic basis thereafter.
• A designated data protection contact responsible for overseeing compliance with this Policy.

10 Data Retention

pk64 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or audit obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Where data forms part of an ongoing legal dispute, regulatory investigation, or audit, the relevant data will be retained until the matter is fully resolved.

11 Your Rights

As a pk64 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our data protection team at [email protected]. We will acknowledge your request within 5 business days and aim to resolve it within 30 days.

• Right of Access — You may request a copy of the personal data pk64 holds about you at any time. We will provide this in a clear, structured format.
• Right to Rectification — If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can also update many details directly from your account profile page.
• Right to Erasure ("Right to Be Forgotten") — You may request that pk64 delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and there is no other legal basis for processing. Note that certain data must be retained to comply with legal obligations and cannot be deleted on request.
• Right to Restriction of Processing — You may request that pk64 restrict the processing of your data in certain circumstances, such as while you contest the accuracy of the data or while an objection is being assessed.
• Right to Data Portability — You have the right to receive the personal data you have provided to pk64 in a structured, commonly used, machine-readable format, and to request that it be transmitted to another controller where technically feasible.
• Right to Object — You may object to pk64's processing of your personal data where that processing is based on legitimate interests. pk64 will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent — Where processing is based on your consent (such as for marketing communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

12 Children & Minors

The pk64 Platform is strictly for adults aged 21 years and above. pk64 does not knowingly collect personal data from individuals under the age of 21, and registration by minors is strictly prohibited.

If pk64 becomes aware that a player account has been registered by an individual who is under 21 years of age, the account will be immediately suspended, all associated balances will be withheld pending investigation, and the matter will be reviewed in accordance with our responsible gaming obligations.

If you are a parent or guardian and believe that a minor in your care has registered an account on pk64 or has provided us with personal data, please contact us immediately at [email protected] so that we can investigate and take appropriate action, including the deletion of the minor's data.

pk64 encourages the use of parental control software to prevent minors from accessing online gambling platforms. Details of available tools can be found on our Responsible Gaming page at pk64.io/responsible-gaming.

13 Policy Updates

pk64 reserves the right to update, amend, or replace this Privacy Policy at any time. When we make changes, we will update the "Last Updated" date at the top of this page and, where the changes are material, we will notify registered players by email or through an on-screen notification displayed upon their next login to the Platform.

Your continued use of the pk64 Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this Policy, you must discontinue your use of the Platform and close your account by contacting [email protected].

We recommend that you review this Privacy Policy periodically to stay informed about how pk64 protects your personal data. The most current version of this Policy will always be available at pk64.io/privacy-policy.

14 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which pk64 handles your personal data, please contact our data protection team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

• Email: [email protected]
• Subject Line: Privacy Policy Enquiry
• Response Time: We aim to acknowledge all enquiries within 5 business days (Bangladesh Standard Time, UTC+6).
• Support Hours: 24 hours a day, 7 days a week.

All formal data rights requests (access, erasure, rectification, portability, objection) should also be directed to [email protected] with the subject line "Data Rights Request" and should include your full name and the email address registered to your pk64 account so that we can verify your identity before processing the request.