pk65 Privacy Policy

1 Introduction

pk65 is committed to protecting the privacy and personal data of all users who access and use the pk65 platform. This Privacy Policy sets out in clear, plain terms what personal data we collect, why we collect it, how long we keep it, who we may share it with, and what rights you have over your information.

This policy applies to all data collected through the pk65 website at pk65.io, including the registration process, account management portal, betting and casino interfaces, payment processing flows, customer support interactions, and any marketing communications you opt into.

pk65 processes personal data in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, storage limitation, integrity, and confidentiality. We only collect the data we genuinely need to deliver a safe, functional, and compliant service to players in Bangladesh.

If you have any questions about this Privacy Policy or the way pk65 handles your data, please contact our support team at [email protected]. We are committed to resolving privacy queries promptly and transparently.

2 Data Controller

For the purposes of this Privacy Policy, the data controller responsible for your personal data is pk65, operating the online betting and casino platform accessible at pk65.io and targeting the Bangladesh market.

As data controller, pk65 determines the purposes for which your personal data is processed and the means by which that processing takes place. We are accountable for ensuring that personal data under our control is handled lawfully, fairly, and transparently in accordance with this policy.

All data protection enquiries, subject access requests, and requests to exercise your data rights should be directed to our support team:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day from within your logged-in pk65 account
• Response time: We aim to acknowledge all data requests within 3 business days and resolve them within 30 days.

3 Personal Data We Collect

pk65 collects the following categories of personal data from registered users and platform visitors:

3.1 Registration and Identity Data

• Full legal name
• Date of birth (to verify 21+ age requirement)
• Mobile phone number
• Email address (where provided)
• Username and encrypted password
• Residential address (city, district, Bangladesh)

3.2 Identity Verification (KYC) Data

• National Identity Card (NID) number and scan
• Passport number and copy (where NID is unavailable)
• Driving licence (where submitted as an alternative)
• Selfie photograph for facial matching during verification
• Proof of address documentation where requested

3.3 Financial and Transaction Data

• bKash, Nagad, Rocket, or Upay mobile wallet identifiers (phone numbers)
• Bank account numbers and bank names (for bank transfer deposits/withdrawals)
• Deposit history, withdrawal history, and transaction timestamps
• Deposit amounts, withdrawal amounts, and current account balance

3.4 Betting and Gaming Activity Data

• Full betting history (sport, event, odds, stake, outcome)
• Casino game session records (game name, provider, stake, win/loss)
• Bonus claims, wagering progress, and promotional participation history
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated)

3.5 Technical and Device Data

• IP address at login and during session activity
• Device type, operating system, and browser type/version
• Session duration and page interaction data
• Cookies and similar tracking technologies (see Section 10)

3.6 Communications Data

• Records of live chat conversations with pk65 support
• Email correspondence sent to or received from [email protected]
• Feedback or complaint submissions

4 How We Collect Your Data

pk65 collects personal data through the following channels and methods:

• Directly from you: During the account registration process, when you complete identity verification, when you initiate a deposit or withdrawal, when you contact customer support, and when you opt into promotional communications.
• Automatically during platform use: Our servers and analytics systems automatically record technical data such as IP addresses, device identifiers, session timestamps, and page interaction data whenever you access pk65.io.
• Via cookies and tracking technologies: pk65 uses first-party cookies and similar technologies to maintain session state, remember preferences, and gather aggregated analytics about platform usage. See Section 10 for full details.
• From third-party payment providers: When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, or a partner bank, we receive transaction confirmation data from the relevant payment network, including transaction reference numbers and timestamps.
• From identity verification partners: Where pk65 uses a third-party KYC service to assist with document verification, that service may return verification status data and match confidence scores to pk65.
• From game providers: Third-party game providers such as Pragmatic Play, Evolution Gaming, Ezugi, and Spribe supply session and outcome data to pk65 as part of the game integration, enabling us to accurately record your casino activity and settle bets.

5 How We Use Your Personal Data

pk65 uses the personal data we collect for the following specific purposes:

pk65 does not use automated decision-making or profiling that produces legal or similarly significant effects on users, except where such processing is strictly necessary for fraud detection or age verification purposes. In those cases, a human review is always available upon request.

6 Legal Basis for Processing

pk65 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contract performance: Processing that is necessary to create and maintain your pk65 account, accept and settle bets, process payments, and deliver the core betting and casino service you have contracted for.
• Legal obligation: Processing required to comply with applicable laws and regulations, including age verification obligations, anti-money laundering requirements, and record-keeping mandates.
• Legitimate interest: Processing undertaken to pursue pk65's legitimate business interests where those interests are not overridden by your privacy rights. This includes fraud detection, platform security, abuse prevention, internal analytics, and service improvement. pk65 conducts a balancing assessment before relying on legitimate interest as a legal basis.
• Consent: Where we process your data for purposes that are not strictly necessary for contract performance or legal compliance — such as sending promotional communications or depositing marketing cookies — we will request your explicit consent beforehand. You may withdraw consent at any time by contacting [email protected].

7 Sharing Your Personal Data

pk65 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We may share your data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

7.1 Payment Processors

To process your deposits and withdrawals, pk65 shares relevant transaction data with our payment partners, including bKash, Nagad, Rocket, Upay, and partner banks (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank). These providers receive only the data necessary to authorise and complete the requested transaction.

7.2 Identity Verification Providers

Where pk65 engages a third-party KYC provider to assist with document verification, your identity documents and facial match data are shared with that provider for the sole purpose of completing the verification process. KYC providers are contractually prohibited from using your data for any other purpose.

7.3 Game Providers

Third-party game providers (including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe) receive session initiation data — typically a session token tied to your account — to launch and record game sessions. These providers operate under their own privacy frameworks and are responsible for data processed within the game environment itself.

7.4 IT and Infrastructure Providers

pk65 uses third-party infrastructure providers for hosting, data storage, content delivery, and platform security. These providers act as data processors on our behalf and are bound by strict data processing agreements that prohibit independent use of your data.

7.5 Law Enforcement and Regulatory Bodies

pk65 may disclose personal data to law enforcement agencies, courts, or regulatory authorities where we are required to do so by law, by a valid legal order, or where we reasonably believe that disclosure is necessary to prevent or report suspected criminal activity, fraud, or harm.

8 Data Retention

pk65 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Active account data: Retained for the duration of your account's active status plus a minimum of five years following account closure, to meet our record-keeping and compliance obligations.
• Identity verification (KYC) documents: Retained for a minimum of five years following account closure or the completion of the transaction to which they relate, in accordance with anti-money laundering record-keeping requirements.
• Transaction records: Deposit and withdrawal records, bet histories, and casino session records are retained for a minimum of five years following the date of the transaction.
• Customer support records: Live chat and email communication records are retained for a minimum of two years following the date of the interaction.
• Technical and device data: Server logs and session records are retained for up to 12 months for security and fraud investigation purposes, after which they are deleted or anonymised.
• Marketing consent records: Records of your marketing consent (including the date and method of opt-in) are retained for the duration of your account plus one year following withdrawal of consent.

When the applicable retention period expires, pk65 will securely delete or anonymise your personal data. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for platform analytics and business planning purposes.

9 Security Measures

pk65 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and pk65 servers.
• One-way cryptographic hashing (bcrypt) for all stored account passwords — plain-text passwords are never stored.
• Access controls: Personal data is accessible only to pk65 staff members who have a legitimate operational need to access it, subject to role-based access controls and audit logging.
• Database encryption: Sensitive data fields — including payment method identifiers and identity document references — are encrypted at rest within our database infrastructure.
• Intrusion detection and monitoring: pk65 operates continuous security monitoring to detect and respond to suspicious access patterns, brute-force attempts, and anomalous data access events.
• Regular security reviews: pk65 conducts periodic internal security assessments of its platform infrastructure and data handling processes.
• Incident response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, pk65 will notify affected users promptly and take immediate steps to contain the breach and mitigate potential harm.

10 Cookies & Tracking Technologies

pk65 uses cookies and similar tracking technologies on the pk65.io website to ensure the platform functions correctly, to maintain your session state, and to gather aggregated analytics about how the site is used. The following categories of cookies may be set when you visit pk65.io:

10.1 Strictly Necessary Cookies

These cookies are essential for the pk65 platform to function. They enable core features such as maintaining your login session, remembering your language preference, and protecting the site against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without breaking core platform functionality.

10.2 Analytics Cookies

pk65 uses first-party analytics tools to measure aggregated traffic patterns, page performance, and feature usage across the platform. This data is used in anonymised, aggregated form to improve the quality of the pk65 service. Individual user behaviour is not profiled for commercial targeting purposes.

10.3 Functional Cookies

Functional cookies remember your platform preferences — such as your preferred deposit method or display settings — so that you do not have to reconfigure them on every visit. These cookies persist across sessions but contain no sensitive personal data.

10.4 Managing Cookies

You can control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair or prevent your ability to use the pk65 platform, including the pk65 Login process. Instructions for managing cookies are available in your browser's help documentation.

11 Your Data Rights

As a user of the pk65 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact pk65 support at [email protected] or via live chat. We will respond to verified requests within 30 days.

• Right of access: You have the right to request a copy of the personal data that pk65 holds about you. We will provide this in a clear, structured format.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account-level data such as your name or date of birth, you may also be required to provide supporting documentation.
• Right to erasure: You have the right to request that pk65 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where it has been processed unlawfully. This right is subject to overriding legal retention obligations — for example, we are required to retain transaction records for a defined period regardless of a deletion request.
• Right to restriction: You may request that pk65 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested or while a legitimate interest assessment is being reviewed.
• Right to data portability: Where we process your data on the basis of your consent or for contract performance, you have the right to receive that data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where pk65 relies on legitimate interest as its legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

12 Minors and the 21+ Policy

pk65 enforces a strict minimum age of 21 years for all registered users. The pk65 platform is not directed at, and is not intended for use by, any person under the age of 21. pk65 does not knowingly collect personal data from individuals under 21 years of age.

During the registration process, all users are required to confirm that they are 21 years of age or older. pk65 conducts identity verification checks and reserves the right to request government-issued proof of age at any time. Any account found to belong to a person under 21 will be immediately closed, and any data associated with that account will be securely deleted in accordance with our data minimisation obligations.

If you are a parent or guardian and believe that a person under 21 in your care has registered an account on pk65, please contact us immediately at [email protected]. We will investigate and close the account promptly.

13 International Data Transfers

pk65 operates as an online platform serving the Bangladesh market. Some of the third-party service providers we work with — including game providers, infrastructure partners, and KYC verification services — may process personal data in jurisdictions outside Bangladesh. Where such transfers occur, pk65 ensures that appropriate contractual safeguards are in place to protect your data to a standard consistent with this Privacy Policy.

Specifically, all third-party data processors engaged by pk65 are required to:

• Process personal data only on documented instructions from pk65.
• Implement appropriate technical and organisational security measures to protect the data.
• Delete or return all personal data to pk65 upon termination of the service relationship.
• Not engage sub-processors without prior written authorisation from pk65.
• Cooperate fully with any audit or inspection conducted by pk65 to verify compliance with data protection obligations.

If you have questions about the specific safeguards in place for any international data transfer involving your personal data, please contact us at [email protected] and we will provide the relevant details.

14 Changes to This Privacy Policy

pk65 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or the structure of our platform. When we make material changes to this policy, we will notify registered users by posting a prominent notice on the pk65.io platform and, where appropriate, by sending a notification to your registered mobile number or email address.

The effective date at the top of this Privacy Policy will be updated each time a revision is published. We encourage you to review this page periodically to stay informed about how pk65 protects your personal data. Your continued use of the pk65 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms.

If a proposed change materially reduces your privacy rights or significantly alters how we use your personal data, we will provide at least 14 days' advance notice before the change takes effect. If you do not agree with the revised policy, you may close your account by contacting pk65 support prior to the effective date of the change.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way pk65 processes your personal data, please reach out to our support team using any of the channels below. All privacy-related enquiries are handled by trained staff and treated with strict confidentiality.

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week from within your pk65 account dashboard
• Support Hours: 24 hours — Bangladesh Standard Time (BST, UTC+6)
• Response Time: We aim to acknowledge all privacy enquiries within 3 business days and provide a full response within 30 days of receiving a verified request.

For responsible gaming support — including requests to set deposit limits, activate a cooling-off period, or discuss self-exclusion — please visit our dedicated Responsible Gaming page, or mention "responsible gaming" when contacting our support team and your request will be prioritised.