Privacy Policy
for pk899 Players

pk899 is an online betting and gaming platform operating under an offshore structure and serving players primarily in Bangladesh. We offer cricket betting, live casino games, slots, crash games, and related wagering services. In the course of providing these services, we necessarily collect and process certain personal data belonging to our registered users.

This Policy is intended to be read in conjunction with our Terms & Conditions and our Responsible Gaming page, both of which contain additional provisions relevant to your use of the pk899 platform. Capitalised terms used but not defined in this Policy carry the meanings assigned to them in the Terms & Conditions.

We are committed to handling your personal data responsibly and transparently. We collect only what is necessary, retain it only for as long as required, protect it with industry-standard security measures, and never sell it to third parties for commercial gain. This Policy sets out those commitments in full.

pk899 collects personal data through a number of channels — directly from you when you register or interact with the platform, automatically when you use our services, and in limited circumstances from verified third-party sources. The categories of personal data we collect are as follows:

We do not collect sensitive special-category data such as racial or ethnic origin, religious or philosophical beliefs, health data, or biometric data — except where identity documentation submitted during KYC verification may incidentally contain such information. In those cases, the information is used solely for identity verification purposes and is not processed for any other purpose.

pk899 uses the personal data we collect for the following specific purposes. We do not process your data for any purpose beyond what is described below without first obtaining your explicit consent or being required to do so by applicable law.

• Account creation and management: To establish, maintain, verify, and administer your pk899 player account, including authentication, password recovery, and account security notifications.
• Identity verification (KYC): To verify that you meet the 21+ age requirement and to confirm your identity in accordance with our anti-fraud and anti-money-laundering obligations. Verification is required before any withdrawal is processed.
• Transaction processing: To facilitate deposits via bKash, Nagad, Rocket, Upay, USDT, and BTC, and to process withdrawal requests to your registered payment method. Financial data is shared with relevant payment processors only to the extent necessary to complete each transaction.
• Service delivery: To provide access to betting markets (BPL, IPL, T20 World Cup, ICC events, football, kabaddi), live casino games from Pragmatic Play, Evolution Gaming, and other providers, slots, crash games, and all other pk899 product features.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, bonus abuse, identity theft, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming compliance: To monitor player behaviour for indicators of problem gambling, to enforce deposit limits and self-exclusion requests, and to ensure that players who have restricted their accounts cannot bypass those restrictions.
• Customer support: To respond to your queries, complaints, and requests submitted via live chat or email to [email protected], and to maintain records of those interactions for quality assurance and dispute resolution purposes.
• Platform improvement: To analyse aggregated and anonymised usage data to improve the performance, usability, and content of the pk899 platform, including optimising the mobile experience for players in Dhaka, Chittagong, Sylhet, and other cities across Bangladesh.
• Promotional communications: To send you information about promotions, bonuses, seasonal offers (e.g., Eid specials, Pohela Boishakh offers, BPL season promotions), and platform updates — only where you have opted in to receive such communications. You may unsubscribe at any time.
• Legal and regulatory compliance: To comply with applicable legal obligations, to respond to lawful requests from competent authorities, and to enforce our Terms & Conditions and this Privacy Policy.

pk899 processes your personal data only where a valid legal basis exists for doing so. The primary legal bases on which we rely are as follows:

• Contractual necessity: The processing of your identity data, contact data, and financial data is necessary for us to perform the contract we have with you — namely, providing the pk899 betting and gaming service. Without this processing, we cannot create or maintain your account or process your transactions.
• Legitimate interests: We process technical data, usage data, and communications data on the basis of our legitimate interests in operating a secure, fraud-free platform, preventing abuse, improving our services, and resolving disputes. We have assessed that these interests are not overridden by your right to privacy in the context of a consensual online wagering platform.
• Legal obligation: We process identity data and financial data as required to comply with applicable anti-money laundering regulations, fraud prevention frameworks, and any lawful direction from competent authorities.
• Consent: Where we send you promotional communications by email or in-platform notification, we rely on your prior consent to do so. You may withdraw this consent at any time by updating your communication preferences in account settings or by contacting [email protected].
• Vital interests: In exceptional circumstances — for example, where a player discloses information suggesting an immediate risk to their personal safety — we may process personal data to the extent necessary to protect those vital interests and to refer the matter to appropriate emergency services.

pk899 does not sell, rent, or otherwise commercially exploit your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for each purpose.

• Payment processors: Your financial data — including bKash, Nagad, Rocket, or Upay account references and USDT/BTC wallet addresses — is shared with our licensed payment processing partners solely to execute deposits and withdrawals. These partners are contractually bound to process your data only for the specified payment purpose and in accordance with industry security standards.
• Identity verification providers: When you submit KYC documents, those documents are processed by our contracted identity verification service provider. This provider has no right to use your documents for any purpose other than verifying your identity for pk899.
• Game providers: Technical session data (including anonymised player identifiers) is shared with game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to the extent necessary to deliver game functionality, maintain game history records, and resolve game disputes. Game providers do not receive your full identity or financial data.
• Fraud detection partners: Anonymised or pseudonymised technical data may be shared with specialist fraud detection services to identify patterns associated with multi-accounting, bonus abuse, or financial crime. Your full identity is not shared with these services.
• Legal and regulatory authorities: Where required by a valid legal order, court direction, or lawful request from a competent authority, pk899 may disclose personal data. We will notify you of any such disclosure request where we are legally permitted to do so.
• Business successors: In the event of a merger, acquisition, or transfer of all or part of the pk899 business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer via your registered email address at least 30 days before it takes effect, and you will have the right to close your account before the transfer completes.

pk899 uses cookies and similar tracking technologies on the platform to enable core functionality, enhance user experience, and gather anonymised analytics data. This section explains what cookies we use, why we use them, and how you can manage your preferences.

• Strictly necessary cookies: These cookies are essential for the platform to function and cannot be disabled. They include session authentication tokens, CSRF protection tokens, and load-balancing cookies. No personal data is stored in these cookies beyond a temporary session identifier.
• Functional cookies: These cookies remember your preferences — such as your language setting, preferred deposit method, and odds display format — so that you do not need to re-enter them on each visit. They expire after 30 days of inactivity.
• Analytics cookies: We use anonymised analytics cookies to understand how players navigate the platform, which game categories attract the most engagement, and where technical errors occur. This data is aggregated and cannot be used to identify any individual player.
• Fraud prevention cookies: Certain cookies are used by our fraud detection systems to identify unusual patterns of platform access, including rapid account switching, bot-like navigation behaviour, and geolocation anomalies. These cookies are strictly necessary for platform security.

You may manage cookie preferences through your browser settings. Most modern browsers allow you to block, delete, or restrict cookies on a per-site basis. Please note that disabling strictly necessary cookies will prevent the platform from functioning correctly and may result in you being unable to log in or complete transactions. Disabling functional or analytics cookies will not prevent you from using core platform features.

pk899 retains your personal data for the minimum period necessary to fulfil the purposes for which it was collected, and to comply with any applicable legal or regulatory retention obligations. The following retention periods apply to each category of personal data:

• Account data (identity and contact): Retained for the duration of your active account relationship with pk899, plus a minimum of 5 years following account closure. This retention period is maintained to support regulatory compliance, fraud investigations, and dispute resolution.
• Financial and transaction data: Retained for a minimum of 7 years following each transaction, consistent with standard financial record-keeping requirements. This includes all bKash, Nagad, Rocket, USDT, and BTC transaction records.
• KYC verification documents: Retained for the duration of your account, plus 5 years post-closure, or such longer period as may be required by applicable anti-money-laundering regulations.
• Customer support records: Live chat transcripts and email correspondence are retained for 3 years from the date of the interaction, to support quality assurance reviews and dispute resolution.
• Technical and usage data: Aggregated analytics data is retained indefinitely in anonymised form. Raw technical logs (IP addresses, device fingerprints) are retained for 12 months and then permanently deleted or anonymised.
• Responsible gaming data: Self-exclusion records and deposit limit histories are retained for the full duration of your account plus 5 years, to prevent attempts to circumvent self-imposed restrictions.

When data is no longer required for any of the above purposes and no legal retention obligation applies, pk899 permanently and securely deletes or anonymises it. Deletion processes are carried out on a rolling monthly basis.

The security of your personal data is a primary technical and operational priority at pk899. We implement a comprehensive set of administrative, technical, and physical security measures designed to protect your data against unauthorised access, disclosure, alteration, or destruction.

• Encryption in transit: All data transmitted between your device and the pk899 platform is encrypted using TLS 1.3 with 256-bit SSL certificates. This applies to all pages of the platform, including login flows, deposit pages, and game interfaces.
• Encryption at rest: Sensitive personal data and financial records stored in pk899's databases are encrypted at rest using AES-256 encryption. Encryption keys are managed via a dedicated key management system with strict access controls.
• Access control: Access to personal data is restricted on a strict need-to-know basis. pk899 staff members are granted access only to the data categories required to perform their specific job function. All internal data access is logged, monitored, and subject to periodic review.
• Authentication: pk899's internal systems require multi-factor authentication for all administrative access. We strongly recommend that players enable any available two-factor authentication options on their own accounts to reduce the risk of unauthorised access.
• Penetration testing: pk899 conducts periodic security assessments and penetration tests on its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a personal data breach that poses a risk to your rights and freedoms, pk899 will notify affected players via their registered email address within 72 hours of becoming aware of the breach, and will take all reasonable steps to contain and remediate the incident.

As a player on the pk899 platform, you hold the following rights in relation to your personal data. These rights may be exercised at any time by contacting our support team via live chat or by emailing [email protected]. We will respond to all data rights requests within 30 days of receipt.

• Right of access: You have the right to request a copy of all personal data that pk899 holds about you, together with information about how it is being used and with whom it has been shared. We will provide this information in a clear, structured format.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update some data (such as your email address and phone number) directly through your account settings.
• Right to erasure: You may request that pk899 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to legal and regulatory retention obligations — in particular, financial transaction records and KYC documents must be retained for the minimum periods described in Section 7.
• Right to restriction: You may request that pk899 temporarily suspend its processing of your personal data — for example, while the accuracy of the data is being verified or while a legal claim is being assessed.
• Right to data portability: Where pk899 processes your data by automated means on the basis of your consent or contractual necessity, you have the right to receive a copy of your data in a structured, machine-readable format (e.g., JSON or CSV), suitable for transfer to another service provider.
• Right to object: You have the right to object to the processing of your personal data where pk899 relies on legitimate interests as the legal basis. You also have an absolute right to object to the use of your data for direct marketing purposes at any time.
• Rights related to automated decision-making: pk899 uses automated systems to detect fraud, multi-accounting, and responsible gaming risk indicators. Where an automated decision significantly affects your account — such as a temporary account restriction pending fraud investigation — you have the right to request human review of that decision.

To exercise any of the above rights, please contact our support team via live chat on the pk899 platform or email [email protected] with the subject line "Data Rights Request". Please include your registered username and a clear description of the right you wish to exercise. We may need to verify your identity before processing your request.

The pk899 platform is strictly for adults aged 21 and above. We do not knowingly collect, process, or store personal data belonging to individuals under the age of 21. If pk899 becomes aware that personal data has been submitted by a person under 21 — whether through registration, a deposit attempt, or any other means — that account will be immediately suspended, all associated data will be deleted, and any funds held will be returned through the original deposit method after identity verification.

If you are a parent or guardian and you believe that a minor in your care has accessed or registered on the pk899 platform, please contact our support team immediately via live chat or at [email protected]. We take underage access extremely seriously and will act on all such reports within 24 hours.

pk899 operates as an offshore platform. As a result, the personal data you provide may be transferred to, stored in, and processed in countries outside Bangladesh. These countries may have data protection laws that differ from those in your home jurisdiction.

Whenever pk899 transfers personal data internationally — including to our payment processing partners, identity verification providers, and game suppliers — we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to or higher than that described in this Policy. Specific safeguards we rely upon include:

• Contractual clauses: All third-party service providers who receive your personal data are required to sign data processing agreements containing standard contractual clauses that impose binding data protection obligations on them.
• Adequacy decisions: Where available, we transfer data to countries or organisations that have been assessed as providing an adequate level of data protection by recognised international standards.
• Technical security: All international data transfers occur over encrypted channels using TLS 1.3. Personal data is never transmitted in unencrypted form across international networks.

By using the pk899 platform, you acknowledge that your personal data may be processed outside Bangladesh and consent to such transfers subject to the safeguards described above. If you have questions about the specific countries in which your data may be processed, please contact our support team.

pk899 reserves the right to update, amend, or replace this Privacy Policy at any time. Changes may be required to reflect updates to platform functionality, changes in the services we offer, new payment method integrations, evolving security practices, or shifts in applicable legal requirements.

When we make material changes to this Policy — meaning changes that meaningfully affect how we collect, use, or share your personal data — we will notify you by sending a notification to your registered email address and by displaying a prominent notice on the pk899 platform for a period of at least 14 days following the change. The updated Policy will be published on this page with a revised "Last Updated" date at the top of the document.

Your continued use of the pk899 platform after the effective date of any updated Privacy Policy constitutes your acceptance of those changes. If you do not agree with any material change to this Policy, you must stop using the platform and may request account closure via our support team. Outstanding balances will be processed according to our standard withdrawal procedure before account closure is finalised.

For any questions, concerns, or formal requests relating to this Privacy Policy or the way pk899 processes your personal data, please use the contact details below. Our support team operates 24 hours a day, 7 days a week, including Bangladesh public holidays such as Eid, Victory Day (16 December), and Independence Day (26 March).

• Live chat: Available directly on the pk899 platform. This is the fastest channel — typical first response time is under 2 minutes. Ideal for urgent data concerns, suspected unauthorised access, or account security issues.
• Email (plain text — not a link): [email protected] — use the subject line "Privacy Policy Query" or "Data Rights Request" to ensure your message is routed to our data handling team. We aim to respond within 12 hours (BST, UTC+6).
• Response timeframe: All formal data rights requests (access, rectification, erasure, portability, restriction, objection) will receive a full written response within 30 days of receipt. Complex requests may require up to 60 days, in which case we will notify you of the extension within the initial 30-day window.
• Identity verification: To protect your data, we will ask you to verify your identity before processing any data rights request. Acceptable verification methods include confirming your registered email address and providing your account username or a recent transaction reference.
• Support language: All privacy and data rights communications are handled in English. Our agents are familiar with the Bangladesh market context and can address queries specific to bKash, Nagad, and local regulatory considerations.

pk899 takes all privacy-related feedback seriously. If you believe that your data has been mishandled or that your rights have not been respected, please contact us first — we are committed to resolving all concerns directly. If you remain unsatisfied following our response, you may seek further recourse through applicable legal channels in your jurisdiction.