pkzz Privacy Policy — Your Data, Your Rights

This Privacy Policy applies to all users of pkzz, accessible at pkzz.bio, and describes how pkzz collects, uses, stores, shares, and protects personal information in connection with the operation of the platform. This policy is written in plain English to be easily understood by Bangladesh-based players, while also satisfying the requirements of a formal data protection notice.

By registering an account with pkzz or continuing to use the pkzz platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree to this Privacy Policy, you should not use pkzz. This policy should be read alongside the pkzz Terms & Conditions, which govern your overall use of the platform.

pkzz collects personal information from you in several ways — directly when you register and use the platform, automatically through the operation of the service, and in some cases from third-party service providers we work with. The categories of personal information we collect are described below.

pkzz uses the personal information we collect for specific, legitimate purposes directly related to the operation of the platform and the delivery of services to you as a Bangladesh-based player. We do not use your data for purposes beyond those listed below without seeking your additional consent. The primary purposes for which we use your personal data are:

• To create and manage your pkzz account, authenticate your identity during login and sensitive operations, and maintain the security and integrity of your account.
• To process deposits and withdrawals in BDT via your chosen payment method and to maintain accurate financial records of all transactions on your account.
• To verify your eligibility to use the platform, including your age (21+ requirement) and compliance with our Terms & Conditions, via KYC procedures where applicable.
• To detect and prevent fraud, money laundering, bonus abuse, multi-accounting, and other prohibited activities that could harm you, other players, or the integrity of the platform.
• To provide customer support, respond to your queries and complaints, and resolve disputes relating to your account, transactions, or gaming activity.
• To send you transactional communications related to your account activity — such as deposit confirmations, withdrawal notifications, and security alerts. With your additional consent, pkzz may also send you promotional communications about bonuses and offers.

pkzz periodically analyses aggregated, anonymised usage data to understand how Bangladesh players interact with the platform, which games are most popular, and where platform improvements would have the greatest impact. This analysis does not identify individual players and is used solely to improve the pkzz service.

pkzz processes your personal data on the following legal bases, depending on the specific purpose for which the data is being used:

• Contractual necessity — processing required to perform our contract with you (i.e., to operate your account, process payments, and settle bets).
• Legitimate interests — fraud detection, platform security, abuse prevention, and service improvement, where these interests are not overridden by your data protection rights.
• Legal obligation — where processing is necessary to comply with applicable law, including anti-money laundering obligations, age verification requirements, and cooperation with law enforcement.
• Consent — where you have given explicit consent for a specific processing activity, such as receiving promotional communications. You may withdraw this consent at any time by contacting pkzz support.

The third parties with whom pkzz may share your personal data include:

• Payment processors and mobile banking partners (bKash, Nagad, Rocket, Upay, and card network partners) — for the sole purpose of processing your deposits and withdrawals. These partners operate under their own privacy and security policies and are required to handle your data securely.
• Identity verification and KYC service providers — for the purpose of verifying your identity and age in compliance with our eligibility requirements. KYC providers are required by contract to use your data solely for verification purposes and to maintain appropriate security standards.
• Game studio technology partners (including Evolution Gaming, Pragmatic Play, Spribe, Ezugi, and NetEnt) — who may receive session and activity data necessary to deliver their games within the pkzz platform. Game studios are not provided with your full personal profile; they receive only the data required to operate game sessions correctly.
• Regulatory authorities, law enforcement agencies, and government bodies — where pkzz is required by law to disclose personal data, such as in response to a lawful request, court order, or regulatory investigation. pkzz will, where legally permissible, notify you of such a disclosure.

pkzz understands that mobile banking is deeply personal to Bangladesh players. The majority of pkzz transactions are processed via bKash, Nagad, and Rocket — services that Bangladesh players rely on for daily financial management. pkzz handles all payment-related data with the highest level of care. pkzz does not store your full bKash PIN, Nagad PIN, or Rocket PIN. When you initiate a deposit or withdrawal, you authenticate directly with your mobile banking provider using their own secure app or USSD channel — pkzz receives only the transaction confirmation result, not your credentials.

All transaction records are stored on secured, access-controlled servers. Transaction history visible in your pkzz account shows amounts, dates, and payment method type — sufficient for you to reconcile your own records — but does not expose full payment credentials. pkzz retains transaction records for the period required by applicable financial record-keeping obligations and then deletes or anonymises them in accordance with our data retention schedule.

pkzz uses cookies and similar lightweight tracking technologies to operate and improve the platform. Cookies are small text files stored on your device that help pkzz recognise your browser session, maintain your login state, and understand how the platform is being used. pkzz uses the following categories of cookies:

• Essential cookies — strictly necessary for the platform to function. These include session authentication cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. Essential cookies cannot be disabled without preventing the platform from functioning.
• Functional cookies — remember your preferences (such as language settings) to personalise your experience on pkzz without requiring you to reset them on each visit.
• Analytics cookies — collect anonymised, aggregated data about how players navigate pkzz, which pages are most visited, and where users encounter difficulties. This data is used solely by pkzz to improve platform performance and user experience for Bangladesh players. pkzz does not share analytics data with advertising networks.

You can manage cookie preferences through your mobile browser settings. Please note that disabling essential cookies will prevent you from logging in and using core platform features. pkzz does not use third-party advertising cookies or track your activity across websites outside of pkzz.bio.

pkzz retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, as described in this Privacy Policy, and to comply with applicable legal, regulatory, and financial record-keeping obligations. The specific retention periods that apply are: account data (registration information and KYC documents) is retained for the duration of your active account and for a period of five years following account closure; transaction records are retained for five years from the date of the transaction; gaming activity logs are retained for two years; device and technical data is retained for twelve months.

When your personal data is no longer required for the purposes for which it was retained, pkzz will securely delete or anonymise it. Anonymised data (data from which all identifying information has been permanently removed) may be retained indefinitely for statistical and platform improvement purposes, as it no longer constitutes personal data.

pkzz takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include 256-bit SSL/TLS encryption for all data in transit between your device and pkzz servers; encrypted storage of sensitive personal data fields at rest; strict access controls ensuring that pkzz staff can access personal data only on a need-to-know basis; audit logging of all access to personal data systems; regular security assessments and vulnerability testing; and incident response procedures in the event of a data security breach.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, pkzz will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach. While pkzz uses industry-standard protections, no digital platform can guarantee absolute security against all threats. You are also responsible for keeping your own account credentials secure — never share your pkzz password or OTP with anyone, including anyone claiming to be pkzz staff.

As a pkzz player based in Bangladesh, you have the following rights in relation to your personal data. To exercise any of these rights, please contact pkzz support using the email address shown in the footer of this website. pkzz will respond to all privacy rights requests within a reasonable timeframe:

• Right of access — you may request confirmation of whether pkzz holds personal data about you and, if so, a copy of that data along with information about how it is being used.
• Right to rectification — if any personal data pkzz holds about you is inaccurate or incomplete, you may request that it be corrected or completed.
• Right to erasure — you may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to its processing and there is no overriding legitimate interest. Please note that some data must be retained to fulfil legal obligations even after account closure.
• Right to restrict processing — you may request that pkzz restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of whether pkzz's legitimate interests override your rights.
• Right to withdraw consent — where pkzz processes your data based on your consent (such as for promotional communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

pkzz will acknowledge all privacy rights requests promptly and aims to fulfil them within 30 days. In complex cases pkzz may request an additional 30-day extension, in which case you will be notified. pkzz will not charge a fee for handling your privacy rights request unless it is manifestly unfounded or excessive.

pkzz is strictly for adults aged 21 and above. pkzz does not knowingly collect personal data from individuals under the age of 21. If pkzz discovers that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed without notice. If you are a parent or guardian and believe that your child has provided personal data to pkzz, please contact pkzz support immediately so that we can take appropriate action.

The pkzz platform integrates games provided by third-party game studios including Evolution Gaming, Pragmatic Play, Spribe, Ezugi, and NetEnt. While these games are delivered within the pkzz platform, the game studios' own software operates within the game window. pkzz takes reasonable steps to ensure that game studio partners maintain appropriate data protection standards, but pkzz cannot accept responsibility for the independent data practices of game studios beyond the contractual commitments they have made to pkzz. This Privacy Policy governs pkzz's own data practices only. pkzz does not include links to external websites, and no external website's privacy practices are covered by this policy.

pkzz reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable law. When material changes are made, pkzz will update the "Last updated" date shown at the top of this page. For significant changes that materially affect how we use your personal data, pkzz will endeavour to notify you via the platform or your registered contact details where practicable. Your continued use of the pkzz platform following the posting of any updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how pkzz is protecting your information.

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about how pkzz handles your personal data, please contact pkzz support using the email address displayed in the footer of this website. Privacy enquiries are handled by our support team, who aim to respond to all formal privacy requests within 30 days. Please include your registered mobile number and a clear description of your privacy concern or request to help us respond efficiently. pkzz takes all privacy concerns seriously and will investigate and respond to each request individually.