pk399 Privacy Policy

pk399 collects personal data only to the extent necessary to provide a safe, functional, and compliant gaming platform. We do not collect data speculatively or beyond what is needed for a clearly defined operational purpose. The categories of personal data we collect are set out below.

1.1 Account Registration Data

When you create a pk399 account, we collect the information you provide during the registration process. This includes your full legal name, date of birth, mobile phone number, and the payment method (bKash, Nagad, Rocket, or Upay) you register for use on the platform. You may also be asked to provide a residential address for identity verification purposes.

1.2 Identity Verification Data

As part of our Know Your Customer (KYC) process — which all players may be required to complete — pk399 collects copies of government-issued identity documents such as your National ID card, passport, or driving licence. Where required, we may also collect proof of address and proof of payment method ownership. These documents are stored securely and accessed only by authorised compliance personnel.

1.3 Transaction Data

pk399 records all financial transactions associated with your account, including deposits, withdrawals, bonus credits, and wager histories. Transaction records include amounts, timestamps, the payment method used, and the reference numbers provided by your mobile financial service provider (bKash, Nagad, Rocket, or Upay). This data is retained for compliance, dispute resolution, and audit purposes.

1.4 Gaming Activity Data

We collect records of your gaming activity on the pk399 platform, including the games you play (slots, live dealer tables, cricket betting markets, and table games), bet amounts, session durations, and win/loss outcomes. This data is used for responsible gaming monitoring, platform improvement, and compliance reporting.

1.5 Technical and Device Data

When you access pk399 via a browser on any device, we automatically collect certain technical information, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session timestamps. This data helps us detect fraud, manage sessions, and optimise platform performance across device types.

1.6 Communications Data

If you contact pk399's customer support team by email, the content of your communications — including your email address and any attachments you provide — is retained for the duration of the support interaction and for a reasonable period thereafter for quality assurance and dispute resolution purposes.

pk399 processes personal data only on the basis of a legitimate, identified purpose. The following table summarises the primary purposes for which we use the data we collect and the lawful basis for each:

pk399 uses cookies — small text files stored on your device by your browser — to support core platform functionality and to gather anonymised usage statistics. Our cookie use is categorised as follows:

• Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, remember your account state between pages, and support security features such as CSRF protection. These cookies cannot be disabled without preventing core platform functionality from working correctly.
• Analytics cookies: These help us understand how players navigate pk399, which pages are visited most frequently, and where users encounter friction. Analytics data is processed in aggregated, anonymised form. No individual player is identified through analytics reporting. You may opt out of analytics cookies by contacting support@pk399.club.
• Preference cookies: These remember your platform settings between sessions, such as your preferred display language or notification preferences, to avoid you having to reconfigure the platform on each visit.

pk399 does not deploy third-party advertising cookies, social media tracking pixels, or cross-site retargeting scripts. The cookies in use on pk399.club are first-party only, with the exception of anonymised analytics services that process data under strict data processing agreements.

Most browsers allow you to view, manage, and delete cookies through their settings menus. However, disabling strictly necessary cookies will impair your ability to log in and use the pk399 platform normally. pk399 does not currently support a cookie preference centre widget, but manages cookie preferences on request via support@pk399.club.

pk399 does not sell personal data. We share personal data only in the circumstances described below, and only to the minimum extent required for each stated purpose.

• Game providers: To deliver live dealer games and RNG titles, pk399 works with licensed game studios including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe. These providers may receive session identifiers and anonymised betting data necessary to operate game sessions. They do not receive your full name, ID documents, or payment details.
• Payment processors: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, and Upay, pk399 exchanges transaction reference data with the respective mobile financial service provider APIs. This data is limited to what is operationally required to initiate and confirm each transaction.
• Identity verification services: Where pk399 uses a third-party KYC verification service to cross-check identity documents, the relevant document data is shared under a strict data processing agreement that limits the provider's use of that data to the verification purpose only.
• Legal and regulatory authorities: pk399 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, a valid court order, or a regulatory obligation. In such cases, pk399 will disclose only the data specifically requested and will, where legally permissible, notify the affected player.
• Fraud prevention networks: pk399 may share device fingerprint data, IP addresses, and anonymised behavioural signals with fraud prevention networks to identify and block abusive account activity. This sharing is conducted under data sharing agreements that restrict onward use.

All third parties with whom pk399 shares personal data are required to process that data in accordance with applicable data protection principles and are prohibited from using it for any purpose other than the one for which it was shared. pk399 reviews its third-party data sharing arrangements regularly and terminates relationships with any provider that fails to meet required standards.

pk399 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and compliance obligations. The following retention periods apply as a general framework:

• Account and registration data: Retained for the lifetime of the active account and for a minimum of five years following account closure, to comply with anti-money laundering record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five years from the date of the most recent transaction on the account, in accordance with applicable financial crime prevention standards.
• Transaction records: Retained for a minimum of five years from the date of each transaction for audit and compliance purposes.
• Gaming activity logs: Retained for a minimum of three years for responsible gaming monitoring and dispute resolution purposes.
• Customer support communications: Retained for two years following the close of the relevant support interaction, after which they are deleted unless required in connection with an ongoing dispute or legal matter.
• Technical and device data (logs): Retained for a maximum of 12 months in rolling form, after which they are anonymised or deleted.

Where personal data is no longer required and no legal retention obligation applies, pk399 deletes or anonymises it in a manner that prevents reconstruction. Anonymised or aggregated data that cannot be linked back to an individual may be retained indefinitely for statistical and platform improvement purposes.

If you close your pk399 account voluntarily, your personally identifiable data will be moved to a restricted archive within 30 days of account closure and will be inaccessible to operational systems. The data remains in archive only for the duration required by applicable retention rules and is then permanently deleted.

As a player on the pk399 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact us at support@pk399.club with the subject line "Privacy Rights Request" and a description of your request. We will acknowledge your request within five business days and provide a substantive response within 30 calendar days.

• Right of access: You may request a copy of the personal data pk399 holds about you, together with information about how it is processed and the categories of recipients with whom it has been shared.
• Right to rectification: If any personal data held by pk399 is inaccurate or incomplete, you may ask us to correct or complete it. We will verify the correction request and update records promptly.
• Right to erasure: In certain circumstances, you may request that pk399 delete your personal data. This right is subject to overriding legal obligations — for example, we cannot delete transaction records that we are required to retain under anti-money laundering laws. Where erasure is possible, we will action it within 30 days.
• Right to restrict processing: You may ask pk399 to restrict the processing of your data — for example, while a rectification request is being reviewed — rather than deleting it outright.
• Right to object: You may object to processing that is based on pk399's legitimate interests, including direct marketing communications. Objections to marketing will be honoured immediately; objections to other legitimate-interest processing will be reviewed on their individual merits.
• Right to data portability: Where processing is carried out on the basis of your consent or a contract, and by automated means, you may request that pk399 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service.
• Right to withdraw consent: Where pk399 processes data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

pk399 will not charge a fee for processing privacy rights requests in ordinary circumstances. If a request is manifestly unfounded or excessive — for example, repetitive requests submitted in bad faith — pk399 reserves the right to charge a reasonable administrative fee or decline to act on the request, with written reasons provided.

pk399 implements a layered approach to data security, designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. The key security measures in place include:

• Transport-layer encryption: All data transmitted between player devices and pk399's servers is encrypted using TLS 1.2 or higher. The site operates exclusively over HTTPS; unencrypted HTTP connections are automatically redirected.
• Access controls: Access to systems containing personal data is restricted to authorised pk399 staff on a role-based, need-to-know basis. Administrative access requires multi-factor authentication and is subject to audit logging.
• Password security: Player account passwords are stored in hashed form using a strong, salted hashing algorithm. pk399 never stores passwords in plaintext and does not have the technical ability to retrieve your password — only to reset it.
• Infrastructure security: pk399's platform infrastructure is hosted in data centres with physical access controls, environmental protections, and 24/7 monitoring. Regular vulnerability assessments and penetration tests are conducted to identify and remediate security weaknesses.
• Incident response: pk399 maintains a data breach response protocol. In the event of a security incident that poses a risk to player data, affected players will be notified without undue delay, along with information about the nature of the breach and the steps being taken to mitigate it.

While pk399 takes all reasonable and appropriate technical and organisational steps to protect your data, no system is entirely immune from risk. You play an important role in account security by choosing a strong, unique password, not sharing your login credentials with anyone, and logging out of your session when using a shared or public device. If you suspect your account has been compromised, contact support@pk399.club immediately.

pk399 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we offer. When we make material changes — such as adding a new category of data collection, a new processing purpose, or a new third-party sharing arrangement — we will notify active players via the email address registered to their account prior to the changes taking effect.

Minor updates that do not materially alter your privacy position (such as corrections, clarifications, or formatting improvements) may be made without individual notice. The "Effective" date at the top of this page will always reflect the date on which the current version came into force. We recommend reviewing this page periodically to stay informed of how your data is handled.

If you have any questions, concerns, or complaints about this Privacy Policy or pk399's data processing practices, please contact our support team:

• Email (plain text — not a link): support@pk399.club
• Subject line for privacy matters: Privacy Enquiry
• Response time target: 5 business days for acknowledgement; 30 calendar days for full response

pk399 treats all privacy-related communications as confidential and they are reviewed only by personnel authorised to handle such matters. If you are not satisfied with our response, you may escalate the matter by resubmitting with the subject line "Formal Privacy Complaint" for senior review.

Last reviewed: 1 January 2026. This Privacy Policy supersedes all previous versions published at pk399.club/privacy-policy.