ptkpk Privacy Policy

Introduction and Scope

This Privacy Policy ("Policy") is published by ptkpk and applies to all users who access or use the ptkpk online gaming and sports betting platform, including the website at https://ptkpk.org and any associated mobile or web application (collectively, the "Platform"). This Policy describes what personal information ptkpk collects, why we collect it, how we use and protect it, who we share it with, how long we retain it, and what rights you have in relation to your personal data.

By registering an account on ptkpk, making a deposit, placing a bet, or otherwise accessing the Platform, you acknowledge that you have read and understood this Policy and consent to the collection, processing, and use of your personal data as described herein. If you do not agree with any part of this Policy, you should refrain from using the Platform and contact us at [email protected] to request account closure.

Information We Collect

ptkpk collects personal information from you directly when you register and use the Platform, and automatically through technical systems when you browse or interact with the Platform. The categories of personal data we collect include:

• Identity data: full legal name, date of birth, nationality, and government-issued identification document details (e.g., national ID, passport) collected during registration and KYC verification.
• Contact data: mobile phone number, email address, and residential address as provided during registration or subsequent account updates.
• Financial data: deposit amounts, withdrawal history, payment method identifiers (e.g., masked bKash or Nagad mobile numbers, masked card numbers), and transaction timestamps retained for regulatory compliance and fraud prevention purposes.
• Account activity data: login timestamps, session durations, games played, bets placed, bonus claims, responsible gaming settings configured, and support interactions — all stored as part of the Platform's operational records.
• Technical data: IP address, device type and model, operating system version, browser type and version, screen resolution, and approximate geolocation data derived from IP — collected automatically when you access the Platform.
• Communications data: the content of emails, live chat messages, support tickets, and any other written communications you send to ptkpk, together with metadata such as timestamp and subject matter.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information unless specifically required for a responsible gaming referral or by applicable law. Where such data is collected for responsible gaming purposes, it is handled with the highest level of confidentiality.

How We Use Your Information

ptkpk uses the personal information we collect for the following specific purposes. We do not use your data for any purpose not listed here without first notifying you and, where required, obtaining your consent:

• Account creation and management: to register your account, verify your identity through KYC checks, maintain your account profile, and process account-related requests including password resets, limit changes, and self-exclusion.
• Transaction processing: to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, reconcile account balances, detect duplicate transactions, and maintain financial records as required by applicable law.
• Responsible gaming: to enforce deposit limits, session time limits, and self-exclusion periods you have set; to detect patterns of play that may indicate problem gambling; and to communicate support resources to players who may be experiencing difficulty.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent transactions, multi-accounting, bonus abuse, money laundering, and other prohibited activities. This includes automated monitoring of account activity and flagging anomalous behaviour for manual review.
• Legal and regulatory compliance: to fulfil our obligations under applicable anti-money laundering, counter-terrorism financing, and consumer protection regulations; to respond to lawful requests from regulatory authorities or law enforcement agencies; and to maintain records as required by law.
• Platform improvement: to analyse aggregate usage patterns, identify technical issues, improve game and feature performance, and develop new services. Analytics data used for this purpose is aggregated and does not identify individual players.
• Marketing communications: where you have opted in to receive promotional messages, to send you personalised offers, bonus notifications, and updates about new games, features, or seasonal promotions relevant to players in Bangladesh. You may opt out at any time by contacting [email protected].

Legal Basis for Processing Your Data

ptkpk processes personal data on the following legal bases. At least one legal basis applies to every processing activity we carry out:

• Contractual necessity: most core data processing — including account management, transaction processing, and responsible gaming enforcement — is necessary for ptkpk to fulfil its contractual obligations to you as a registered player on the Platform.
• Legal obligation: certain processing activities — including KYC verification, transaction record-keeping, and reporting of suspicious activity — are required by applicable law and are carried out irrespective of consent.
• Legitimate interests: certain processing — including fraud detection, platform security monitoring, and aggregated analytics — is carried out on the basis of ptkpk's legitimate interest in maintaining a safe, fair, and well-functioning platform, balanced against your privacy interests.
• Consent: where ptkpk sends you personalised marketing communications or uses non-essential cookies, we rely on your consent. You may withdraw consent at any time without affecting the lawfulness of processing that took place before withdrawal.

How We Share Your Information

ptkpk does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your personal information only in the following limited circumstances:

• Service providers: ptkpk engages trusted third-party service providers to operate certain aspects of the Platform, including payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard networks), KYC verification providers, game content providers (including Pragmatic Play, Evolution Gaming, Ezugi, Spribe, and other licensed studios), and IT infrastructure and hosting providers. These providers access your data only to perform services on our behalf and are contractually bound to protect it.
• Regulatory and law enforcement authorities: ptkpk may disclose personal data to regulatory bodies, financial intelligence units, or law enforcement agencies where required by applicable law, court order, or regulatory directive. Such disclosures are made only to the extent necessary to comply with the relevant legal obligation.
• Business transfers: in the event of a merger, acquisition, restructuring, or sale of all or part of ptkpk's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the privacy practices of the new entity before the transfer takes effect.
• Fraud prevention consortia: where ptkpk participates in industry fraud-prevention information-sharing arrangements, anonymised or pseudonymised risk signals (not your full identity) may be shared with other platform operators for the purpose of protecting the integrity of online gaming and preventing coordinated fraud.

Payment Data and Financial Information

All financial transactions on ptkpk are processed through encrypted, secure payment channels. When you make a deposit using bKash, Nagad, Rocket, or Upay, the transaction is initiated through the respective payment gateway, which applies its own security and privacy protocols. For card payments via Visa and Mastercard, transactions are processed through PCI-DSS compliant payment processors. ptkpk does not store full card numbers, CVV codes, or complete mobile financial service credentials on its own servers.

ptkpk retains transaction records — including deposit and withdrawal amounts, timestamps, and masked payment method identifiers — for a minimum period required by applicable financial record-keeping and anti-money laundering regulations. These records may be used in fraud investigations, regulatory audits, and dispute resolution processes.

Cookies and Tracking Technologies

ptkpk uses cookies and similar tracking technologies (including local storage and session tokens) to operate the Platform, remember your preferences, and improve your experience. We use the following categories of cookies:

• Strictly necessary cookies: essential for the Platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional cookies: used to remember your language preferences, responsible gaming settings, and display preferences so you do not need to re-enter them on each visit.
• Analytics cookies: used to collect aggregated, anonymised data about how visitors use the Platform — including which pages are visited most frequently, session lengths, and navigation paths. This data is used solely to improve Platform performance and user experience.
• Marketing cookies: used only where you have given explicit consent to receive personalised promotional communications. These cookies help us deliver relevant bonus offers and seasonal promotions to you. You may withdraw consent and disable marketing cookies at any time.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your account and using the Platform. For a full list of cookies used by ptkpk and instructions on how to manage them, contact [email protected].

Data Retention

ptkpk retains personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to any longer retention periods required by applicable law. The following general retention guidelines apply: active account data is retained for the lifetime of your account plus a minimum of five years after account closure; transaction and financial records are retained for a minimum of seven years from the date of the transaction to satisfy anti-money laundering and financial record-keeping obligations; communications with support are retained for a minimum of three years; technical and log data is retained for a minimum of one year.

When personal data is no longer required for any lawful purpose, ptkpk will securely delete or irreversibly anonymise it. Where deletion is not immediately possible due to the nature of our storage systems, the data will be isolated from active processing and flagged for deletion at the next scheduled purge cycle.

Your Data Rights

Subject to applicable law and ptkpk's legal retention obligations, you have the following rights in relation to your personal data held by ptkpk. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request" along with sufficient information to verify your identity:

Data Security

ptkpk implements a layered, defence-in-depth approach to data security. Our security programme includes the following measures, which are reviewed and updated on a regular basis:

• Transport-layer security: all data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS. Insecure HTTP connections are automatically redirected to HTTPS.
• Access controls: access to personal data is restricted to ptkpk staff and contractors who require it for their specific job functions. All staff with access to personal data complete mandatory data protection training and are bound by confidentiality obligations.
• Infrastructure security: our server infrastructure is hosted in data centres with physical access controls, redundant power supplies, and environmental monitoring. Regular penetration testing and vulnerability assessments are conducted by independent security specialists.
• Incident response: ptkpk maintains a documented data breach response procedure. In the event of a confirmed data breach that poses a risk to affected individuals, ptkpk will notify relevant parties in accordance with applicable legal requirements.

While ptkpk takes reasonable and industry-standard precautions to protect your personal data, no digital system can guarantee absolute security. You are responsible for maintaining the security of your own login credentials and for notifying ptkpk immediately if you suspect any unauthorised access to your account.

Children and Underage Users

ptkpk is strictly an adults-only platform. We do not knowingly collect personal information from anyone under the age of 21. Registration, depositing, and participation in any game or betting activity on ptkpk is prohibited for anyone under 21 years of age. If ptkpk discovers that an account belongs to a person under the age of 21, the account will be immediately suspended, all funds will be returned to the deposit source (after deducting any winnings derived from gameplay), and all personal data associated with that account will be handled in accordance with ptkpk's legal obligations and our data retention schedule.

Marketing Communications

ptkpk may send you promotional emails, SMS notifications, or in-platform messages about bonuses, new games, seasonal promotions (such as Eid specials, Pohela Boishakh offers, or BPL cricket season promotions), and other ptkpk news — but only where you have explicitly opted in to receive such communications during registration or through your account settings. We will never send unsolicited bulk marketing messages.

You may opt out of marketing communications at any time by contacting [email protected] with the subject line "Unsubscribe", or by adjusting your notification preferences in your account settings. Opting out of marketing communications will not affect transactional messages (e.g., deposit confirmations, withdrawal processing notifications, or security alerts), which are sent as part of your account service.

Cross-Border Data Transfers

ptkpk operates globally and your personal data may be processed or stored on servers located outside Bangladesh. Where personal data is transferred to a country that may not provide the same level of data protection as Bangladesh, ptkpk implements appropriate safeguards — such as contractual data protection clauses with service providers — to ensure your data remains adequately protected regardless of where it is processed.

All ptkpk service providers who handle personal data on our behalf — regardless of where they are located — are contractually required to process that data only in accordance with ptkpk's instructions and to implement security measures that meet or exceed the standards described in this Policy.

Changes to This Privacy Policy

ptkpk reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will notify registered players via the email address on file or through an in-platform notification displayed upon login, at least 14 days before the changes take effect where practicable.

The revised Policy will always show its effective date at the top of this page. Your continued use of the Platform after the revised Policy takes effect constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must stop using the Platform and contact [email protected] to request account closure.

Contact Us About Privacy

If you have any questions, concerns, or complaints about this Privacy Policy or about how ptkpk handles your personal data, please contact the ptkpk Data Privacy team in writing. We are committed to addressing all privacy-related enquiries promptly and transparently.