Privacy Policy —
Your Data, Protected

1. Introduction

pk778 is an online betting and casino platform built specifically for players residing in Bangladesh. The platform offers sports betting — including live cricket markets covering the Bangladesh Premier League (BPL), Indian Premier League (IPL), T20 World Cup, and Bangladesh Tigers international fixtures — alongside live casino games, slots, and crash games. All financial transactions on pk778 are conducted in Bangladeshi Taka (BDT) using locally trusted payment methods including bKash, Nagad, Rocket, and Upay.

In the ordinary course of providing these services, pk778 necessarily collects and processes certain personal data about its players. The purpose of this Privacy Policy is to be completely transparent about those data practices — what we collect, why we collect it, how long we keep it, and with whom (if anyone) it may be shared. pk778 is committed to handling personal data lawfully, fairly, and securely at all times.

This Policy applies to all personal data collected through the pk778 website (pk778.io), the platform's account management interface, customer support channels, and any related communications including promotional emails and live chat sessions. It applies to all registered players and to visitors who browse the platform without creating an account.

Players who have questions about any aspect of this Policy are encouraged to contact the pk778 support team at [email protected] before registering an account. Our support team operates 24/7 on Bangladesh Standard Time (BST, UTC+6) and will respond to privacy-related queries promptly and in plain English.

2. Data Controller

For the purposes of this Privacy Policy, pk778 acts as the data controller in respect of all personal data collected from players who use the platform. As data controller, pk778 is responsible for determining the purposes for which personal data is processed and the means by which that processing is carried out.

Where pk778 engages regulated third-party service providers — such as payment processors, identity verification partners, or fraud prevention services — to process personal data on its behalf, those providers act as data processors under instructions from pk778. Such providers are contractually bound to process data only as directed by pk778, to maintain appropriate security standards, and not to use player data for any purpose beyond the specific service they have been contracted to provide.

All data controller responsibilities, including the handling of data subject rights requests, the management of data breaches, and the maintenance of data processing records, are overseen internally by pk778's data protection function. Players may contact this function directly by emailing [email protected] with the subject line "Data Privacy Request".

3. Data We Collect

pk778 collects personal data across the following categories. In each case, the data collected is limited to what is necessary for the specified purpose:

• Registration Data: When you create a pk778 account, we collect your full legal name, date of birth, email address, Bangladesh-registered mobile number, residential address, and your chosen username and password. This information is required to create and maintain your account and to verify that you meet the 21+ age eligibility requirement.
• Identity Verification (KYC) Data: To comply with responsible gaming obligations and to process withdrawal requests, pk778 requires players to complete a Know Your Customer (KYC) verification process. This involves uploading a copy of a government-issued photo identification document (such as a National Identity Card or passport), proof of residential address (such as a utility bill or bank statement dated within three months), and in some cases a selfie image for facial verification purposes.
• Financial Data: pk778 collects records of all financial transactions associated with your account, including deposit amounts, deposit timestamps, withdrawal requests, withdrawal amounts, withdrawal destinations (bKash/Nagad/Rocket account numbers), and transaction reference IDs generated by third-party payment processors. pk778 does not store full payment account credentials; sensitive payment data is handled directly by the relevant payment processor.
• Usage and Behavioural Data: As you interact with the pk778 platform, we automatically collect certain technical and behavioural data, including your IP address at the time of login, your device type and operating system, your browser type and version, pages and game lobbies visited, session start and end timestamps, wagers placed (game type, stake, outcome), and betting history. This data is used for platform security, fraud prevention, responsible gaming monitoring, and service improvement purposes.
• Communications Data: If you contact pk778's customer support team via live chat or email, we retain records of those communications, including the content of messages, timestamps, and any supporting documentation you provide. This data is used to resolve your query and to improve the quality of our support service.
• Promotional Data: If you participate in pk778 promotions, tournaments, or bonus programmes, we collect data related to your eligibility, participation, and bonus usage. This includes wagering activity associated with bonus funds and any promotional preferences you have indicated.

4. How We Use Your Data

pk778 uses the personal data it collects for the following clearly defined purposes. We do not use personal data for any purpose that is incompatible with the purpose for which it was originally collected without first obtaining your explicit consent:

Where pk778 relies on legitimate interests as the legal basis for processing, we have assessed that our legitimate interest in processing the relevant data is not overridden by your privacy interests or fundamental rights. You may object to processing conducted on a legitimate interests basis by contacting [email protected]. We will assess your objection and respond within 30 days.

5. Legal Basis for Processing

pk778 processes personal data only where a valid legal basis exists for doing so. The four legal bases on which pk778 relies are as follows:

• Contract Performance: Processing that is necessary to fulfil our contractual obligations to you as a registered pk778 player. This includes creating your account, processing your deposits and withdrawals, and providing access to the platform's betting and gaming services.
• Legal Obligation: Processing that is required by applicable law. This includes conducting KYC age and identity verification, retaining financial transaction records for anti-money laundering compliance purposes, and responding to lawful requests from law enforcement or regulatory authorities.
• Legitimate Interests: Processing that is necessary for purposes that pk778 has assessed as legitimate, where those interests are not overridden by your privacy interests. This includes fraud detection, platform security monitoring, responsible gaming analysis, and anonymised analytics for service improvement.
• Consent: Processing that is based on your freely given, informed, and unambiguous consent. This applies principally to the sending of marketing and promotional communications. Where consent is the basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

Where the processing of personal data changes in scope or purpose such that a new legal basis is required, pk778 will notify you of the change prior to commencing the new processing activity and will obtain any required consent before proceeding.

6. Data Sharing & Disclosure

pk778 does not sell, rent, lease, or otherwise commercially transfer your personal data to third parties. Personal data may be shared in the following specific, limited circumstances only:

• Payment Processors: To process deposits and withdrawals, pk778 shares transaction-related data with regulated payment processing partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These partners receive only the data necessary to execute the requested transaction and are bound by their own regulatory obligations regarding data security and confidentiality.
• Identity Verification Partners: To conduct KYC verification, pk778 may share identity document images and registration data with certified third-party identity verification service providers. These providers process data solely for the purpose of verifying the authenticity of the documents submitted and confirming that the player meets the age eligibility requirement.
• Fraud Prevention Services: pk778 may share IP addresses, device fingerprints, and behavioural patterns with specialist fraud prevention partners to detect and prevent prohibited conduct including multi-accounting, bonus abuse, and money laundering activity.
• Game Content Providers: When you play a game provided by a third-party studio (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), limited technical data including your player session ID and stake amounts may be shared with that provider for the purpose of game delivery and result certification. These providers do not receive your full personal profile.
• Law Enforcement and Regulatory Authorities: pk778 will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities when required to do so by applicable law or when pk778 reasonably believes that disclosure is necessary to prevent criminal activity or to protect the rights, property, or safety of pk778, its players, or the general public.
• Business Successors: In the event of a merger, acquisition, or sale of all or part of pk778's business assets, player data may be transferred to the acquiring entity. In such circumstances, pk778 will provide advance notice to affected players and will ensure that the acquiring entity commits to honouring the obligations set out in this Privacy Policy.

7. Cookies & Tracking Technologies

pk778 uses cookies and similar tracking technologies on its website and platform to ensure the site functions correctly, to maintain your login session, and to understand how players interact with the platform. The following types of cookies are in use:

• Essential Cookies: These cookies are necessary for the pk778 platform to function and cannot be switched off. They include session authentication cookies that keep you logged into your account, security cookies that protect against cross-site request forgery, and load-balancing cookies that ensure platform stability. These cookies do not collect personal data for marketing purposes.
• Functional Cookies: These cookies remember your platform preferences such as your preferred language setting (English), your chosen game lobby layout, and your responsible gaming dashboard settings. Functional cookies improve your experience but are not essential for the platform to operate.
• Analytics Cookies: pk778 uses anonymised analytics to understand how players navigate the platform — which game lobbies are most visited, where players drop off during the registration flow, and how long typical sessions last. Analytics data is processed in aggregated, anonymised form and cannot be used to identify individual players.
• Security and Fraud Prevention Cookies: These cookies help pk778 detect and prevent unauthorised account access, suspicious login patterns, and other security threats. They may record your IP address, device fingerprint, and login frequency for fraud analysis purposes.

Players who wish to control their cookie preferences may do so through their browser settings. Disabling essential cookies will impair the functionality of the pk778 platform and may prevent you from accessing certain features including your account dashboard. Disabling analytics or functional cookies will not prevent you from using the platform's core services.

pk778 does not use third-party advertising cookies or allow external advertising networks to place cookies on the pk778 domain. Your browsing activity on pk778 is not shared with or sold to any advertising platform.

8. Data Retention

pk778 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, subject to any overriding legal obligation to retain data for a longer period. The following retention periods apply to the principal categories of personal data held by pk778:

When the applicable retention period expires, pk778 will securely delete or irreversibly anonymise the relevant personal data. Where anonymisation is applied, the resulting data set cannot be used to re-identify any individual and is retained indefinitely for aggregate statistical analysis only.

If you request account closure, your account will be deactivated and your personal data will be retained for the applicable post-closure retention periods described above, after which it will be securely deleted. You will not be able to access the pk778 platform during the post-closure retention period, but we are required to retain your data for the periods specified for legal compliance purposes.

9. Data Security

pk778 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. The principal security measures in place include:

• Transport Encryption: All data transmitted between your device and the pk778 platform is encrypted using 256-bit Transport Layer Security (TLS). This ensures that data in transit cannot be intercepted or read by any unauthorised third party.
• At-Rest Encryption: Personal data stored on pk778's servers is encrypted at rest using industry-standard AES-256 encryption. Encryption keys are managed separately from the encrypted data and are rotated on a regular schedule.
• Access Controls: Access to personal data within pk778's internal systems is restricted on a strict need-to-know basis. All staff with data access are authenticated via multi-factor authentication and are subject to role-based access controls that limit their access to only the data required for their specific responsibilities.
• Security Audits: pk778 conducts regular internal security reviews and engages independent security professionals to perform periodic penetration testing and vulnerability assessments of the platform's infrastructure. Findings are remediated on a prioritised basis.
• Incident Response: pk778 maintains a documented data breach response plan. In the event of a security incident that results in a risk to player personal data, pk778 will take immediate containment action, assess the severity and scope of the breach, and notify affected players within 72 hours of becoming aware of the incident where notification is required by applicable law.
• Password Security: Player passwords are stored as salted cryptographic hashes — the plaintext password is never stored or accessible by pk778 staff. Players are advised to use a strong, unique password for their pk778 account and to enable any additional authentication measures available on the platform.

10. Your Rights

As a pk778 player, you have the following rights in respect of your personal data. These rights may be exercised at any time by contacting pk778 at [email protected] with the subject line "Data Rights Request". pk778 will acknowledge your request within 5 business days and will provide a substantive response within 30 calendar days:

• Right of Access: You have the right to request a copy of all personal data that pk778 holds about you, together with information about the purposes for which it is processed, the categories of data held, the parties with whom it has been shared, and the retention period applicable to each category. This is commonly referred to as a Subject Access Request (SAR).
• Right to Rectification: If any personal data that pk778 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For account registration data such as your name or address, corrections can often be made directly through your account settings dashboard without the need to contact support.
• Right to Erasure: You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis exists for continued processing. This right is subject to pk778's legal obligation to retain certain categories of data for specified periods as described in Section 8.
• Right to Restriction: You have the right to request that pk778 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed. Where processing is restricted, pk778 will continue to store the data but will not actively process it pending resolution.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to pk778 in a structured, commonly used, machine-readable format (such as CSV or JSON), and to transmit that data to another service provider where technically feasible. This right applies to data processed on the basis of contract or consent.
• Right to Object: You have the right to object to the processing of your personal data where that processing is conducted on the basis of legitimate interests. You also have an unconditional right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing conducted prior to the withdrawal. To withdraw consent for marketing communications, use the unsubscribe link in any pk778 marketing email or contact [email protected].

pk778 will not charge a fee for handling routine data rights requests. If a request is manifestly unfounded or excessive — for example, if it is repetitive in nature — pk778 reserves the right to charge a reasonable administrative fee or to decline to act on the request, in which case we will explain our reasons in writing.

11. Children & Minors

pk778 is strictly an adult-only platform. Access to and use of the pk778 platform is permitted only to individuals who are aged 21 years or older. This age restriction reflects both pk778's responsible gaming policy and the legal requirements applicable to online gambling participation in the jurisdictions we serve.

pk778 does not knowingly collect personal data from individuals under the age of 21. All players are required to confirm their age during the registration process and to complete KYC identity verification that includes proof of date of birth before any withdrawal can be processed. Where pk778 has reason to believe that an account is being operated by a person under the age of 21, the account will be immediately suspended pending verification, and any funds held in the account will be reviewed in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a person under the age of 21 has registered an account on pk778 without authorisation, please contact us immediately at [email protected]. Upon verification of your report, pk778 will take prompt action to close the account and delete any personal data associated with it, except where retention is required by law.

12. Marketing Communications

pk778 may send promotional communications to players who have explicitly opted in to receive them. These communications may include information about new game releases, deposit bonus offers, seasonal promotions tied to events such as Eid, Pohela Boishakh, the BPL season, or the IPL tournament, platform feature announcements, and responsible gaming reminders.

pk778 will never send unsolicited marketing communications to players who have not opted in. The marketing opt-in is presented clearly during the account registration process as a separate, unticked checkbox — it is never bundled into the acceptance of Terms & Conditions or any other mandatory agreement.

Players who have opted in to marketing communications may opt out at any time by clicking the unsubscribe link included in the footer of every pk778 marketing email, by updating their communication preferences in their account settings dashboard, or by contacting [email protected] with the subject line "Marketing Opt-Out". Opt-out requests will be processed within 10 business days, after which no further marketing communications will be sent to the relevant email address.

Opting out of marketing communications has no effect on transactional communications — pk778 will continue to send account-related notifications such as deposit confirmations, withdrawal processing updates, KYC verification requests, and security alerts regardless of your marketing preferences, as these communications are necessary for the operation of your account.

13. Third-Party Services

The pk778 platform integrates with a number of third-party service providers to deliver its full range of betting and gaming features. These integrations are necessary for the platform to function and have been selected with data privacy and security as primary considerations. The principal third-party integrations are:

• Game Content Providers: pk778 hosts games developed by world-leading studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game, a technical session is established with the relevant provider's game server. Limited session data including your player ID and stake values is shared with the provider solely for the purpose of delivering the game and certifying its outcome. Game providers do not receive your full personal profile or payment details.
• Payment Processing Partners: Transactions via bKash, Nagad, Rocket, Upay, and partnered banks are processed by those organisations' own payment infrastructure. When you initiate a deposit or withdrawal, pk778 transmits the minimum information required to execute the transaction. These partners are regulated financial institutions with their own privacy and data security obligations.
• Analytics Infrastructure: pk778 uses internal analytics tools to understand platform usage patterns. All analytics processing is conducted on anonymised, aggregated data sets. Individual player profiles are not shared with any external analytics platform.
• Security and Fraud Detection: pk778 uses specialist fraud prevention technology to monitor for suspicious activity. This technology processes IP addresses, device characteristics, and behavioural patterns to identify potential fraud. Data shared with fraud prevention partners is limited to the technical signals required for threat detection and is not used for any other purpose.

The pk778 platform may contain links to third-party websites or services — for example, links to responsible gaming resources or payment partner information pages. pk778 is not responsible for the privacy practices or content of any third-party website. Players who follow links to external sites should review the privacy policy of those sites independently before providing any personal information.

14. Policy Changes

pk778 reserves the right to amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes in pk778's data processing practices, or improvements to the clarity and completeness of the policy's language. The "Last Updated" date at the top of this document will be revised whenever a change is made.

Where a proposed change is material — meaning it significantly affects the way in which pk778 collects or uses personal data — pk778 will provide advance notice to registered players via email to the address associated with their pk778 account at least 14 days before the change takes effect. Players who do not wish to accept a material change may request account closure in accordance with the procedure set out in the pk778 Terms & Conditions before the change takes effect.

For non-material changes — such as minor wording clarifications, corrections of typographical errors, or additions of explanatory detail that do not alter the substance of the policy — pk778 will update this document without advance individual notification. Players are encouraged to review this Privacy Policy periodically to stay informed of the current data practices governing their use of the platform.

Continued use of the pk778 platform following the effective date of any Privacy Policy update constitutes acceptance of the revised policy. If you do not agree with any revision, you should discontinue use of the platform and contact [email protected] to request account closure.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which pk778 handles your personal data, please contact us using the details below. Our data protection team is available 24 hours a day, 7 days a week, and will respond to all privacy-related enquiries in plain English:

• Support Email: [email protected] (subject line: "Data Privacy Request" for data rights matters)
• Live Chat: Available 24/7 inside the pk778 platform dashboard after login
• Response Time: Initial acknowledgement within 5 business days; substantive response within 30 calendar days
• Support Hours: 24 hours, 7 days a week — Bangladesh Standard Time (BST, UTC+6)

When submitting a data rights request, please include your registered email address, your pk778 username, and a clear description of the right you wish to exercise or the concern you wish to raise. This information helps us process your request accurately and efficiently. pk778 may ask you to verify your identity before acting on any request that involves accessing, correcting, or deleting personal data, in order to protect against unauthorised requests.