Your Privacy Matters
to pk70

pk70 ("we", "us", "our") operates the online gaming and sports betting platform accessible at pk70.io and associated mobile interfaces (collectively, the "Platform"). We are committed to protecting the privacy and security of all personal information provided to us by players, visitors and anyone who interacts with our Platform.

This Privacy Policy applies to all personal data processed in connection with your use of pk70, whether you are a registered player, a visitor browsing the Platform without an account, or a person who contacts our support team. It covers data collected online through the Platform as well as data you may provide to us via email, live chat or other communication channels.

This policy is intended to give you a clear and honest account of our data practices. We have written it in accessible English so that players across Bangladesh — whether in Dhaka, Chittagong, Rajshahi, Sylhet, Khulna, Barisal, Rangpur, Mymensingh or Cox's Bazar — can understand exactly how their information is handled.

This Privacy Policy forms part of pk70's Terms & Conditions. By accepting the Terms & Conditions, you also accept this Privacy Policy. Where there is a conflict between this policy and the Terms & Conditions on a privacy matter, this Privacy Policy shall prevail.

pk70 collects several categories of personal data. The specific data we hold about you depends on how you interact with the Platform and whether you have a registered account.

pk70 collects personal data through the following means:

• Direct Collection: Data you provide when you register an account, complete the KYC verification process, make a deposit or withdrawal, contact customer support, or respond to a promotional survey.
• Automated Collection: Data collected automatically when you use the Platform, including IP addresses, device identifiers, browsing behaviour on the Platform, and session data gathered via cookies and similar technologies.
• Payment Providers: Confirmation data received from bKash, Nagad, Rocket, Upay, and banking partners when processing deposits and withdrawals. This data is limited to transaction confirmation and does not include full payment credentials.
• KYC Service Providers: Where we use third-party identity verification services to assist with document verification, those providers may return identity confirmation data to pk70 as part of the verification workflow.
• Game Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi may share game session data with pk70 for the purpose of dispute resolution, bonus settlement and responsible gaming monitoring.
• Fraud Prevention Partners: Risk and fraud management providers may share signals and risk scores with pk70 to assist in identifying suspicious account activity.

pk70 processes your personal data for the following specific purposes:

• Account Registration and Management: To create and maintain your pk70 account, verify your identity, manage your preferences and deliver the gaming services you have requested.
• KYC and Age Verification: To confirm that you meet the minimum age requirement of 21 years and to verify the accuracy of the personal information provided at registration, as required for responsible gaming compliance.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay and banking channels, and to maintain accurate financial records associated with your account.
• Fraud Prevention and Security: To detect, investigate and prevent fraudulent transactions, account takeover attempts, money laundering, and other forms of financial crime or platform abuse.
• Responsible Gaming: To monitor gaming behaviour and identify patterns that may indicate problem gambling, to enforce deposit limits and self-exclusion settings, and to respond to responsible gaming requests.
• Customer Support: To investigate and resolve queries, complaints and disputes submitted via live chat or email.
• Legal Compliance: To comply with applicable laws, regulations and lawful requests from competent authorities, including anti-money laundering obligations and data retention requirements.
• Marketing Communications: Where you have opted in, to send you promotional offers, bonus notifications and news about pk70 via email or SMS. You may withdraw marketing consent at any time.
• Platform Improvement: To analyse aggregated usage data to improve the performance, design and features of the pk70 Platform. This analysis uses anonymised or pseudonymised data where possible.

pk70 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations to you under the Terms & Conditions — including account management, payment processing and delivery of gaming services.
• Legal Obligation: Processing required to comply with applicable laws, including KYC/AML obligations and data retention requirements mandated by financial regulators.
• Legitimate Interests: Processing carried out in pk70's legitimate business interests — such as fraud prevention, platform security and service improvement — where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given consent, specifically for direct marketing communications. You may withdraw your consent at any time by updating your account preferences or contacting support.

pk70 does not sell, rent or trade your personal data. We share data only in the following limited circumstances, and always with appropriate data protection safeguards in place:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank and other payment processors receive the minimum data necessary to process your financial transactions.
• Identity Verification Providers: Third-party KYC and document verification partners who assist us in confirming player identity and age in compliance with responsible gaming standards.
• Game Providers: Game studios receive your player identifier and session data to deliver gameplay, calculate results and settle bets correctly. Game providers do not receive your full identity or financial data.
• Fraud and Risk Management Partners: Specialist fraud prevention services that analyse transaction patterns and device signals to protect pk70 and its players from financial crime.
• Technology Infrastructure Providers: Cloud hosting, database, and content delivery providers who process data on our behalf under binding data processing agreements. These providers are prohibited from using your data for their own purposes.
• Legal and Regulatory Authorities: Where we are required by law, court order or lawful regulatory request to disclose personal data to competent authorities. pk70 will notify you of such disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition or sale of all or part of pk70's business, personal data may be transferred to the acquiring entity. You will be notified of any such transfer in advance.

pk70 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or to comply with applicable legal and regulatory obligations. Our standard retention periods are as follows:

When data is no longer required for any legitimate purpose and the applicable retention period has expired, pk70 will securely delete or anonymise that data. Anonymised data may be retained indefinitely for statistical and analytical purposes, as it can no longer be linked to any individual.

pk70 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect it against unauthorised access, loss, disclosure or destruction:

• Encryption in Transit: All data transmitted between your device and the pk70 Platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Our platform enforces HTTPS across all pages.
• Encryption at Rest: Sensitive personal data — including identity documents, financial records and KYC data — is encrypted at rest on our servers using AES-256 encryption.
• Password Security: Account passwords are stored as one-way cryptographic hashes. pk70 employees cannot read your password and we will never ask for it.
• Access Controls: Access to personal data is restricted to pk70 personnel who genuinely require it to perform their role, and is governed by a strict principle of least privilege. All data access is logged and audited.
• Penetration Testing: pk70 conducts periodic security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: pk70 has a documented data breach response procedure. In the event of a confirmed data breach affecting your personal data, we will notify you promptly and take all necessary steps to contain and remediate the incident.

pk70 uses cookies and similar tracking technologies to operate the Platform effectively and to improve your experience. A cookie is a small text file placed on your device when you visit a website. pk70 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in, security tokens that protect against cross-site request forgery, and cookies that remember your language and currency preferences. These cookies cannot be disabled.
• Performance Cookies: Used to collect anonymised information about how players navigate the Platform — which pages are visited most, where errors occur, and how long players spend on each section. This data helps us improve Platform performance and user experience.
• Functionality Cookies: Remember your preferences and personalisation choices — such as your preferred deposit method or game filters — so you do not have to reconfigure them on every visit.
• Analytics Cookies: Used to understand aggregate usage patterns on the Platform using privacy-respecting analytics tools. Data collected is aggregated and does not identify individual players.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform. Note that strictly necessary cookies cannot be disabled as they are required for the Platform to operate.

As a data subject, you have the following rights in relation to your personal data held by pk70. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all rights requests within 30 days of receipt.

• Right of Access: You may request a copy of all personal data pk70 holds about you, together with information about how it is being processed. This is commonly known as a Subject Access Request (SAR).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account data, you can update most information directly within your account settings.
• Right to Erasure: You may request that pk70 delete your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (and there is no other legal basis), or where the data has been unlawfully processed. This right is subject to our legal retention obligations — financial and KYC records must be retained for the periods specified in Section 7.
• Right to Restriction: You may request that pk70 restrict processing of your data in certain circumstances — for example, while the accuracy of the data is being contested, or where you have objected to processing and we are considering your objection.
• Right to Data Portability: Where processing is based on your consent or a contract, and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used and machine-readable format.
• Right to Object: You may object to processing carried out on the basis of pk70's legitimate interests. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your rights, or the processing is necessary for the establishment, exercise or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent (primarily for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

With your consent, pk70 may contact you with information about promotions, bonuses, new games and pk70 news via email and SMS. Marketing communications are sent only to players who have opted in at registration or subsequently via their account settings.

Opting Out: You may unsubscribe from marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email from pk70.
• Updating your communication preferences within your pk70 account settings.
• Contacting our support team at [email protected] and requesting removal from all marketing lists.

Opting out of marketing communications will not affect transactional messages — you will continue to receive important account notifications such as deposit confirmations, withdrawal updates, KYC requests, and security alerts, as these are necessary for account management and cannot be unsubscribed from while your account is active.

pk70 does not engage in unsolicited cold marketing. We do not purchase contact lists or send marketing messages to individuals who have not registered an account with pk70 and opted in to receive communications.

pk70 is strictly an adult platform. Players must be 21 years of age or older to register an account or use any service offered by pk70. We do not knowingly collect personal data from individuals under the age of 21.

As part of our KYC verification process, all players are required to provide proof of age before their account is fully activated and before any withdrawal is processed. Where our systems or support team identify that a player may be under 21, the account will be suspended immediately pending verification, and any funds held will be returned to the payment source.

If you believe that a person under the age of 21 has registered an account with pk70, please notify us immediately at [email protected]. We will investigate and take appropriate action, including account closure and data deletion, without delay.

pk70 primarily serves players in Bangladesh and stores the majority of its player data on servers located within or near the Asia-Pacific region. However, some of our third-party service providers — including cloud infrastructure partners, KYC verification providers and fraud prevention tools — may process data in other jurisdictions.

Where personal data is transferred outside Bangladesh, pk70 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections described in this Privacy Policy. These safeguards may include:

• Contractual clauses that bind the recipient to data protection standards consistent with this policy.
• Transfers only to countries or organisations that pk70 has assessed as providing an adequate level of data protection.
• Additional technical protections such as end-to-end encryption for data in transit between jurisdictions.

You may request information about the specific safeguards in place for any international transfer of your personal data by contacting our support team.

pk70 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this policy, we will notify registered players by email or via an in-platform notification at least 14 days before the changes take effect.

The updated policy will always be available on this page at pk70.io/privacy-policy, with the effective date and version number clearly stated at the top of the document. We encourage you to review this page periodically to stay informed about how pk70 protects your data.

Your continued use of the pk70 Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a material change, you must close your account before the change takes effect and contact our support team to exercise your data rights as described in Section 10.

If you have any questions, concerns or requests relating to this Privacy Policy or the way pk70 processes your personal data, please contact our support team using the details below. We are committed to responding to all privacy-related enquiries promptly and transparently.

• Email: [email protected] — please use the subject line "Privacy Enquiry" for all data protection matters.
• Live Chat: Available 24/7 directly through the pk70 Platform. Select "Account & Privacy" from the support menu.
• Response Time: We aim to acknowledge all privacy enquiries within 24 hours and provide a full response within 30 days. For complex Subject Access Requests, we may request a one-month extension, in which case we will notify you promptly.
• Support Hours: Live Chat — 24 hours a day, 7 days a week. Email — 09:00 to 24:00 Bangladesh Standard Time (BST, UTC+6).