Privacy Policy — newpklak Platform

1 Information We Collect

newpklak collects personal data from you in several ways: directly when you register an account or contact support, automatically when you use the platform, and occasionally from third-party partners involved in payment processing or identity verification. The categories of personal data we may hold about you are described below.

Registration and Identity Data. When you create a newpklak account, we collect your full name, date of birth, email address, and mobile phone number. Where account verification (KYC) is triggered, we additionally collect a copy of your government-issued photo identification (National Identity Card, passport, or driving licence), proof of address, and, where required, documentation confirming ownership of your nominated payment method.

Financial and Transaction Data. We record the details of every deposit and withdrawal processed through your newpklak wallet, including transaction amounts in BDT, payment method identifiers (such as your registered bKash or Nagad number), transaction timestamps, and processing status. Full payment card numbers are never stored on newpklak's systems; card data is handled exclusively by our PCI-DSS compliant payment processor.

Betting and Gaming Activity Data. We maintain a comprehensive record of your betting and gaming activity on the platform, including the markets you have wagered on, stake amounts, odds accepted, outcomes, and any bonuses claimed. This data is used for account management, dispute resolution, responsible gaming monitoring, and fraud prevention.

Technical and Device Data. When you access newpklak via web browser or mobile device, we automatically collect your IP address, device type, operating system, browser type and version, session duration, pages visited, and referring URL. This data is used to ensure platform security, detect suspicious access patterns, and improve site performance for players in Bangladesh.

Communications Data. If you contact our support team via live chat or email, we retain a record of that correspondence, including chat transcripts and email threads. This data is used to resolve disputes, maintain service quality records, and fulfil any legal or regulatory obligations requiring us to demonstrate how a complaint was handled.

2 How We Use Your Data

newpklak processes your personal data only where we have a lawful basis for doing so. The primary lawful bases we rely on are: performance of contract (processing your bets, managing your account, paying out winnings), legal obligation (KYC, anti-money laundering, age verification), and legitimate interests (fraud prevention, platform security, responsible gaming monitoring).

The specific purposes for which we use your personal data include:

• Account creation and management: Setting up and maintaining your newpklak account, verifying your identity and age, and managing your wallet balance.
• Payment processing: Processing BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, and card payment networks, and maintaining financial records in compliance with applicable law.
• Service delivery: Enabling you to browse markets, place bets, participate in promotions, access live casino games and slots, and receive winnings.
• Customer support: Responding to your queries, resolving disputes, and maintaining support records.
• Fraud and security: Detecting and preventing fraudulent activity, money laundering, bonus abuse, account takeover attempts, and other prohibited conduct described in our Terms & Conditions.
• Responsible gaming: Monitoring betting patterns for indicators of problem gambling, applying deposit limits and self-exclusion requests, and providing personalised responsible gaming interventions where appropriate.
• Legal compliance: Meeting our obligations under applicable anti-money laundering, counter-terrorism financing, and data protection laws.
• Service improvement: Analysing aggregated, anonymised usage data to improve platform functionality, market offering, and the overall player experience for our Bangladesh audience.
• Marketing communications: Sending you relevant promotional offers and product updates by email or SMS, where you have opted in to receive such communications. You may withdraw this consent at any time by contacting [email protected].

3 Data Sharing and Disclosure

newpklak does not sell your personal data to third parties. We share personal data only where strictly necessary and only with parties bound by appropriate confidentiality and data protection obligations. The categories of third parties with whom we may share your data are set out below.

Payment Processors. To process your deposits and withdrawals, we share the minimum necessary financial data with our authorised payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and international card scheme processors (Visa, Mastercard). Each partner is contractually required to handle your data in accordance with their own published privacy policies and applicable financial regulations.

Identity Verification Providers. To fulfil our KYC and age verification obligations, we may share your identity documents with specialist third-party verification providers. These providers process your data on our behalf under strict data processing agreements and are not permitted to use your data for any other purpose.

Game and Software Providers. Where you access live casino games or slots provided by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — a session token and anonymised player identifier are shared with the relevant provider to facilitate gameplay. No directly identifiable personal data (such as your full name or NID number) is passed to game providers.

Legal and Regulatory Authorities. newpklak will disclose your personal data to law enforcement agencies, courts, or regulatory bodies where required by a lawful order, warrant, or legal obligation. We will notify you of any such disclosure where we are legally permitted to do so.

Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of newpklak's assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you in advance of any such transfer and of any material change to the privacy practices governing your data.

4 Cookies and Tracking Technologies

newpklak uses cookies and similar tracking technologies (including local storage and session identifiers) to operate the platform, remember your preferences, maintain your login session, and analyse how players interact with the site. This section explains what types of cookies we use and how you can manage them.

Strictly Necessary Cookies. These cookies are essential to the operation of the newpklak platform and cannot be disabled. They include session authentication tokens, CSRF protection cookies, load-balancing identifiers, and wallet session cookies. Without these cookies, core platform functions — including logging in, viewing your balance, and placing bets — would not work.

Functional Cookies. These cookies remember your stated preferences, such as your preferred language setting (English), your odds format (decimal or fractional), and whether you have acknowledged certain platform notices. Disabling these cookies will not prevent you from using the platform, but some preferences may need to be re-set on each visit.

Analytics Cookies. We use first-party analytics tools to understand how players navigate the platform, which markets and games are most popular, and where technical errors occur. This data is collected in aggregated, anonymised form and is used exclusively for internal platform improvement. We do not use third-party advertising analytics or retargeting pixels.

Managing Cookies. You can configure your browser to block or delete cookies at any time. Please note that blocking strictly necessary cookies will prevent you from logging in to your newpklak account. For guidance on managing cookies in your specific browser, refer to the help documentation provided by your browser vendor. You may also clear local storage via your browser's developer tools or privacy settings.

5 Data Security and Retention

Security Measures. newpklak implements a multi-layered technical and organisational security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive personal data stored at rest, including identity documents and financial records.
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need can access personal data.
• Regular penetration testing and vulnerability scanning of the newpklak platform infrastructure.
• Multi-factor authentication requirements for all internal staff accounts with access to player data systems.
• Isolated storage environments for KYC documents, separated from general platform databases.

Data Retention. We retain your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The general retention periods we apply are as follows:

• Account data and KYC documents: Retained for the duration of your account relationship with newpklak plus a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping obligations.
• Transaction and betting records: Retained for a minimum of five (5) years from the date of the relevant transaction or wager.
• Support communications: Retained for two (2) years from the date of the most recent communication in a thread, unless the subject matter is part of an ongoing dispute or legal proceeding.
• Technical and device logs: Retained for ninety (90) days in active systems; may be archived for up to twelve (12) months for security investigation purposes.
• Marketing consent records: Retained for the period of your consent plus two (2) years following withdrawal, as evidence that communications were sent on a lawful basis.

When data reaches the end of its applicable retention period, it is securely deleted or anonymised using industry-standard data destruction methods. Anonymised, aggregated data from which you cannot be individually identified may be retained indefinitely for statistical and platform improvement purposes.

6 Your Privacy Rights

As a newpklak player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Privacy Rights Request" and include sufficient information to allow us to verify your identity before processing the request.

• Right of Access: You may request a copy of all personal data that newpklak holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct it. Minor details such as contact information can often be updated directly within your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent (in cases where consent was the lawful basis). Note that we may be unable to erase certain data that we are legally required to retain (e.g., AML records).
• Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances, for example while the accuracy of data is being contested or while a complaint is being investigated.
• Right to Data Portability: You may request that we provide your personal data in a portable format so that you can transfer it to another service provider, where technically feasible.
• Right to Object: You may object to our processing of your personal data where we rely on legitimate interests as the lawful basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Marketing Consent: If you have opted in to receive promotional communications from newpklak, you may withdraw that consent at any time by emailing [email protected]. Withdrawal does not affect the lawfulness of marketing sent prior to the withdrawal date.

We aim to respond to all verified privacy rights requests within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days and will notify you of the extension. We do not charge a fee for processing privacy rights requests unless the request is manifestly unfounded or repetitive.

7 Third-Party Links and Services

The newpklak platform may from time to time include references to third-party services, such as payment gateways, game studios, or informational resources. Where you follow a link or initiate a session with a third-party service, you leave the newpklak environment and that party's own privacy policy governs the collection and use of your data from that point forward.

newpklak is not responsible for the privacy practices of third-party websites or services, even where those parties are commercial partners of ours. We encourage you to review the privacy policy of any third-party service before providing them with personal information. The inclusion of a link or integration within the newpklak platform does not constitute an endorsement of the third party's data handling practices.

In-game environments provided by third-party studios such as Pragmatic Play, Evolution Gaming, or Spribe operate within isolated iFrame or API sessions. These studios receive only a session token and anonymised player reference — not your full name, NID, mobile number, or financial data. Their own software privacy terms apply within the game environment itself.

8 Updates to This Policy

newpklak reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When we make material changes to this policy, we will notify you by sending an email to the address registered to your newpklak account and by posting a prominent notice on the platform for a minimum of 14 days following the change.

The "Effective Date" at the top of this document indicates when the current version came into force. We recommend checking this page periodically to stay informed about how newpklak protects your privacy. Your continued use of the newpklak platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes.

If you have concerns about any change to this Privacy Policy or wish to understand the impact of a change on your personal data, please contact our support team at [email protected] before continuing to use the platform.

This Privacy Policy should be read in conjunction with the newpklak Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference. In the event of any conflict between this Privacy Policy and the Terms & Conditions regarding the treatment of personal data, the provisions of this Privacy Policy shall prevail.