Your Privacy Matters at pk997

pk997 operates the online betting and gaming platform accessible at pk997.io. For the purposes of this Privacy Policy, pk997 acts as the data controller in respect of all personal data collected from players who register and use the platform. As data controller, pk997 determines the purposes for which and the means by which personal data is processed.

This Privacy Policy governs all personal data processed by pk997 in connection with the operation of pk997.io, including data collected during account registration, deposit and withdrawal transactions, gameplay activity, customer support interactions, and any promotional participation. It applies to all players regardless of the device or method used to access the platform, including desktop browsers, mobile browsers and any dedicated applications.

References in this policy to "pk997", "we", "us" or "our" are references to the pk997 platform. References to "you", "your" or "player" are references to any individual who accesses or uses pk997.io. For any questions regarding this Privacy Policy or pk997's data processing activities, please contact us at [email protected].

pk997 collects personal data through several channels: directly from you when you register an account or contact support; automatically when you interact with the platform; and, in limited circumstances, from third-party verification or payment service providers. The specific categories of data collected are described below.

• Identity and Contact Data: Full name, date of birth, mobile number, username and, where provided, email address. This is collected at registration and updated by you through account settings as needed.
• Financial and Payment Data: Your mobile wallet account number (bKash, Nagad, Rocket or Upay) or card details (Visa, Mastercard) used for deposits and withdrawals, together with a full transaction history in Bangladeshi Taka (৳). pk997 does not store full card numbers — card transactions are processed by certified payment processors who handle card data under their own PCI DSS compliance obligations.
• KYC Verification Documents: Where pk997 requires identity verification, you may be asked to provide a copy of your National Identity Card (NID), passport or other government-issued identity document, together with a selfie or liveness check image. These documents are used solely for identity and age verification and are stored securely.
• Technical and Device Data: Your IP address, device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, device identifiers, and session tokens generated upon login. This data is collected automatically through standard web technologies.
• Usage and Behavioural Data: Pages visited on pk997.io, games launched, bets placed (including stake, odds, game type and outcome), session start and end times, in-session navigation patterns, and feature usage. This data is used for responsible gaming monitoring, fraud detection and product improvement.
• Communication Data: Records of all communications between you and pk997's support team, including the content of support chat sessions and emails. These records are retained to ensure quality, resolve disputes and train support staff.
• Marketing Preference Data: Your notification and promotional communication preferences, as set by you in your account settings or communicated to our support team. pk997 will only send promotional communications where you have given explicit consent to receive them.

pk997 does not intentionally collect sensitive personal data (such as racial or ethnic origin, religious beliefs, political opinions or health data) through the normal operation of the platform. If any such data is incidentally received — for example, within a support message — it will be treated with the highest level of care and will not be used for any profiling or marketing purpose.

pk997 uses personal data collected from players for the following clearly defined purposes. We do not use your data for any purpose that has not been described in this policy or separately communicated to you with your consent.

• Account Management: To create, maintain and administer your pk997 account, verify your identity and age, and ensure you meet the 21+ eligibility requirement before accessing real-money betting features.
• Transaction Processing: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa and Mastercard; to match payment records; and to maintain accurate transaction histories in your account.
• Platform Security and Fraud Prevention: To detect, investigate and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering and any other prohibited conduct as described in the pk997 Terms & Conditions. Technical and behavioural data play an important role in our security monitoring systems.
• Responsible Gaming: To monitor your gaming activity for indicators of problem gambling; to enforce deposit, loss and session limits you have set; to communicate with you if we identify patterns that suggest gambling may be causing harm; and to action self-exclusion requests promptly.
• Customer Support: To respond to your queries, complaints and formal dispute submissions; to maintain records of all support interactions; and to improve the quality of our support service.
• Legal and Regulatory Compliance: To comply with applicable legal obligations including anti-money laundering (AML) requirements, record-keeping obligations and any lawful requests from regulatory or law enforcement authorities.
• Platform Improvement: To analyse aggregated, anonymised usage data to understand how players interact with pk997.io and to improve the platform's features, performance and user experience.
• Promotional Communications: Where you have given explicit consent, to send you information about promotions, bonuses, new game launches and special offers relevant to Bangladesh players. You may withdraw this consent at any time through your account settings.

pk997 processes personal data on one or more of the following legal bases depending on the specific data category and processing activity involved:

• Contract Performance: Processing that is necessary to enter into or perform the contract between pk997 and you as a registered player — including account creation, payment processing and service delivery.
• Legal Obligation: Processing that pk997 is required to carry out in order to comply with applicable law, including KYC and age verification obligations, AML record-keeping requirements and lawful authority requests.
• Legitimate Interest: Processing carried out for pk997's legitimate operational interests, where those interests are not overridden by your rights and interests. This includes fraud prevention, platform security, responsible gaming monitoring and product analytics.
• Consent: Processing based on your freely given, specific and informed consent — in particular, the sending of marketing and promotional communications. Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

For each data use listed in Section 3, the applicable legal basis is identified in the data categories table in the overview section above. If you have questions about the legal basis for any specific processing activity, please contact [email protected].

pk997 may share your personal data with the following categories of third parties, strictly for the purposes described:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa and Mastercard, and their respective processing partners. Your payment data is shared with these providers solely to process your transactions. Each provider operates under its own privacy policy and data protection obligations.
• Identity Verification Providers: Third-party KYC and identity verification services used to verify your identity documents and age where required. These providers receive only the data necessary to perform the verification function.
• Game Content Providers: Game studios and content providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi) may receive limited technical data (such as a pseudonymous player identifier and session token) necessary to deliver game content to your session. Game studios do not receive your full identity or financial data.
• IT Infrastructure and Security Providers: Cloud hosting, content delivery, DDoS protection and security monitoring providers who process technical data on pk997's behalf under strict data processing agreements that require them to maintain confidentiality and use data only for the purposes specified by pk997.
• Legal and Regulatory Authorities: Where required by law or legally enforceable request, pk997 may disclose personal data to law enforcement agencies, courts, regulators or other government authorities. pk997 will, where legally permissible, notify affected players of any such disclosure.
• Business Successors: In the event of a merger, acquisition, restructuring or sale of all or part of pk997's business, personal data held about players may be transferred to the acquiring entity as part of that transaction. Players will be informed of any such transfer and any material changes to this Privacy Policy that result from it.

All third-party data processors engaged by pk997 are required to implement appropriate technical and organisational security measures to protect the data entrusted to them, and to process that data only on pk997's instructions and for the stated purposes.

pk997.io uses cookies and similar tracking technologies to operate the platform effectively, remember your session, detect fraud and — where you have consented — to analyse your usage patterns for product improvement purposes. A cookie is a small text file placed on your device by a website you visit. Cookies cannot execute code or deliver malware.

pk997 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for pk997.io to function. They maintain your login session, store your security token and enable core platform features such as the betting slip and account dashboard. These cookies cannot be disabled without breaking the platform's functionality.
• Functional Cookies: These cookies remember your preferences — such as your preferred language (English) and notification settings — so that the platform presents consistently personalised to your settings across sessions.
• Analytics Cookies: Where you have consented, pk997 uses anonymised analytics cookies to understand how players navigate pk997.io, which features are most used and where technical issues arise. This data is aggregated and does not identify individual players.
• Security and Fraud Prevention Cookies: pk997 uses device fingerprinting and behavioural analytics tools that rely on cookies to identify suspicious activity, multi-accounting attempts and automated bot traffic. These are classified as strictly necessary for platform integrity.

You may manage non-essential cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into your account or using core platform features. pk997 does not use third-party advertising cookies and does not participate in cross-site advertising networks.

pk997 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures are reviewed and updated regularly to address evolving security threats and technological developments.

• Encryption in Transit: 256-bit SSL encryption via TLS 1.3 for all data transmitted between your device and pk997's servers.
• Encryption at Rest: Sensitive data stored in pk997's databases — including identity documents and payment method details — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within pk997's organisation is restricted on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations and receive regular data protection training.
• Intrusion Detection and Monitoring: pk997's infrastructure is protected by real-time intrusion detection systems, DDoS protection and 24/7 security monitoring to detect and respond to threats promptly.
• Two-Factor Authentication: pk997 supports and encourages the use of two-factor authentication (2FA) on player accounts to provide an additional layer of protection against unauthorised access.
• Penetration Testing: pk997's systems are subject to regular independent security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.

Notwithstanding these measures, no method of data transmission over the internet or electronic storage is 100% secure. pk997 cannot guarantee absolute security against all possible threats. In the event of a data security incident that affects your rights or interests, pk997 will notify affected players without undue delay and take all reasonable steps to mitigate the impact of the incident.

pk997 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, tax or anti-money laundering obligations. The following retention periods apply as a general guideline:

• Account and Identity Data: Retained for the duration of your account plus a minimum of 5 years following permanent account closure, to comply with anti-money laundering record-keeping requirements and to resolve any post-closure disputes.
• Transaction Records: All financial transaction records are retained for a minimum of 5 years following the date of the transaction, consistent with standard financial record-keeping obligations applicable to payment processing activities.
• KYC Documents: Identity verification documents are retained for the period required by applicable law, typically 5 years following account closure or the completion of the business relationship to which they relate.
• Support Communications: Records of customer support interactions are retained for 3 years following the date of the interaction, to allow pk997 to handle any late-arising complaints or disputes.
• Technical and Log Data: Server logs, IP address records and session data are retained for up to 12 months from the date of creation, after which they are automatically purged or anonymised.
• Marketing Preference Data: Retained for as long as your account is active or until you withdraw consent to receive promotional communications, whichever is sooner.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that makes it impossible to re-identify the individual to whom it related. Anonymised, aggregated data (which cannot be used to identify any individual) may be retained indefinitely for statistical and product development purposes.

As a player whose personal data is processed by pk997, you hold the following rights in respect of that data. To exercise any of these rights, please contact pk997 at [email protected] with a clear description of your request and sufficient information to verify your identity.

• Right of Access: You may request confirmation of whether pk997 holds personal data about you and, if so, a copy of that data together with information about how it is being used.
• Right to Rectification: You may request that pk997 correct any inaccurate or incomplete personal data held about you. For routine updates (such as a change of mobile number), you may also make the correction directly through your account settings.
• Right to Erasure: You may request that pk997 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing is unlawful. This right is subject to pk997's legal obligation to retain certain data for the periods described in Section 8.
• Right to Restriction: You may request that pk997 restrict its processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Object: You may object to processing carried out on the basis of legitimate interest, including profiling for fraud prevention purposes, where you believe your individual rights and interests outweigh pk997's legitimate interests.
• Right to Withdraw Consent: Where processing is based on your consent — particularly the sending of promotional communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.
• Right to Data Portability: Where processing is based on contract or consent and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used and machine-readable format.

pk997 will respond to all rights requests within 30 calendar days of receipt. In complex cases or where a large volume of requests is received, this period may be extended by a further 60 days, in which case pk997 will notify you of the extension and the reason for it. pk997 does not charge a fee for processing rights requests unless the request is manifestly unfounded or excessive.

pk997 takes the protection of minors extremely seriously. Our registration process includes a mandatory date-of-birth declaration, and accounts are subject to age verification checks. Where pk997 has reasonable grounds to suspect that an account holder is under 21 years of age, the account will be suspended pending identity and age verification, and any winnings accrued during the period of suspected underage play may be withheld pending investigation.

If you are a parent or guardian and believe that a minor in your care has registered an account with pk997 or has provided personal data to pk997 without your consent, please contact us immediately at [email protected]. pk997 will investigate the matter promptly, close any confirmed underage account and delete all personal data associated with it to the extent permitted by law.

pk997 encourages parents and guardians in Bangladesh and elsewhere to make use of parental control tools and internet filtering software to prevent minors from accessing online gambling platforms. We support responsible access to gaming and ask all adults in a household to keep their pk997 login credentials confidential and not accessible to minors.

pk997 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory guidance or business operations. When material changes are made, pk997 will notify registered players via the email address or mobile number associated with their account, and the updated policy will be published on pk997.io with a revised "Last Updated" date at the top of the document.

Minor or non-material changes — such as clarifications of existing wording or corrections of typographical errors — may be made without direct notification, but the updated version will always be accessible on this page. We encourage players to review this Privacy Policy periodically to stay informed about how pk997 handles their personal data.

Your continued use of pk997.io following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree to the revised policy, you should stop using pk997.io and may request account closure by contacting [email protected].

If you have any questions, concerns or requests relating to this Privacy Policy or pk997's handling of your personal data, please contact our Data Protection team using the details below. pk997 is committed to addressing all privacy-related enquiries promptly, fairly and in confidence.

When submitting a privacy enquiry or rights request, please include your registered username, the mobile number associated with your account, and a clear description of your request. This allows pk997 to locate your records and process your request without unnecessary delay. For formal data subject rights requests under Section 9 of this policy, pk997 may require you to provide a copy of a government-issued identity document to verify your identity before processing the request.

pk997 values transparency and aims to resolve all privacy concerns directly. If, after contacting pk997, you remain unsatisfied with the handling of your enquiry, you retain the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction.