dkpk Privacy Policy — Your Data, Your Rights

dkpk collects personal information about you when you register an account, use our services, or contact our support team. We collect only the information that is necessary to deliver safe, fair, and compliant gaming services to players across Bangladesh. Below is a full account of the categories of data we collect and the circumstances under which each category is gathered.

Account Registration Data: When you create a dkpk account, we collect your full legal name, date of birth, email address, and a mobile phone number associated with your preferred payment method (such as your bKash or Nagad registered number). This information is required to open and verify your account and to comply with responsible gaming obligations.

Identity Verification (KYC) Data: In accordance with anti-fraud and responsible gaming standards, dkpk may collect copies of government-issued photo identification (such as your National ID card or passport), proof of address documents, and proof of payment method ownership. These documents are collected only when required for account verification and are handled with strict confidentiality.

Financial Transaction Data: When you make a deposit or withdrawal, dkpk records the transaction amount (in BDT), the payment method used (e.g., bKash, Nagad, Rocket, Upay, or bank transfer), the transaction reference number provided by the payment provider, the date and time of the transaction, and your account balance before and after the transaction. Full payment credentials such as PINs or bank passwords are never visible to or stored by dkpk.

Gaming Activity Data: dkpk automatically logs your gameplay history, including the games you play, bet amounts, outcomes, bonus usage, and session durations. This data is used for account management, responsible gaming monitoring, dispute resolution, and platform improvement.

Technical and Device Data: When you access dkpk from any device, we collect your IP address, browser type and version, operating system, device type (mobile or desktop), screen resolution, preferred language setting, and general geographic region (derived from your IP address). This data is collected automatically via server logs and standard web analytics tools.

Communications Data: When you contact our support team by email or live chat, we retain records of those communications, including the content of messages, timestamps, and any resolution actions taken. This allows us to maintain service continuity and respond effectively to follow-up enquiries.

dkpk processes your personal data only for specific, legitimate purposes directly related to the provision of our services. We do not process personal data in ways that are incompatible with the purposes for which it was originally collected. The table below summarises our primary data processing activities and the legal basis for each.

Where dkpk relies on your consent as the legal basis for processing (for example, sending promotional emails about BPL season offers, Eid bonuses, or new slot releases), you may withdraw that consent at any time by contacting [email protected] or adjusting your communication preferences within your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

dkpk does not sell, rent, or commercially trade your personal data to any third party under any circumstances. We may, however, share specific categories of your data with trusted third-party service providers and partners where doing so is strictly necessary to operate the dkpk platform and deliver services to you. All such third parties are contractually bound to process your data only for the purposes specified and to maintain appropriate security standards.

Payment Processors: To facilitate your deposits and withdrawals in BDT, dkpk shares the minimum required transaction details with payment service providers including bKash, Nagad, Rocket, Upay, and participating Bangladeshi banks (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank). Each of these providers operates under its own privacy framework and data protection obligations.

Game Content Providers: dkpk integrates casino games and sports data feeds from licensed third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a session token and anonymised player identifier to launch game content within the dkpk environment. They do not receive your name, contact details, or financial information.

Identity Verification Partners: Where dkpk uses a third-party KYC verification service to assist with identity and age checks, your submitted documents may be shared with that service solely for verification purposes. The service is prohibited from retaining or using your data for any other purpose.

Analytics Providers: dkpk uses web analytics tools to understand how players interact with the platform. Analytics data is aggregated and anonymised wherever possible. No personally identifiable information is shared with analytics providers beyond technical identifiers such as IP addresses, which are subject to IP anonymisation where supported.

Legal and Regulatory Disclosure: dkpk may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, court order, or legal process. In such cases, dkpk will disclose only the minimum data required to comply with the legal obligation.

dkpk uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, remember your preferences, and understand how players use our services. This section explains the types of cookies we use and your choices regarding them.

What Are Cookies? Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, remember your session, and store preference data such as your chosen language or display settings.

Types of Cookies Used by dkpk:

dkpk does not use advertising cookies, retargeting pixels, or third-party social media tracking cookies. We do not share cookie data with advertising networks.

Managing Cookies: You can control and delete cookies through your browser settings. Instructions for the most common browsers are available via the browser's built-in help documentation. Please note that disabling essential cookies will prevent you from logging into your dkpk account and using core platform features.

dkpk retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable legal obligations. The following retention periods apply to the main categories of personal data held by dkpk:

• Account Registration and KYC Data: Retained for the duration of your account plus a minimum of 5 years following account closure, in order to meet anti-money laundering record-keeping obligations and to handle any post-closure disputes or regulatory enquiries.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of the transaction, in accordance with financial record-keeping standards applicable to the online gaming sector.
• Gaming Activity Logs: Retained for 3 years following the date of each session, or for the duration of the account if the account remains active. These records support dispute resolution, responsible gaming reviews, and fraud investigations.
• Customer Support Communications: Retained for 2 years from the date of the last message in a support thread, unless the communication relates to an ongoing dispute, in which case it is retained until final resolution plus 12 months.
• Technical and Device Logs: Retained for 90 days in aggregated form for security monitoring and fraud detection. Individual IP logs are deleted after 90 days unless flagged as part of an active security investigation.
• Marketing Consent Records: Retained for as long as your consent remains active plus 3 years thereafter, to evidence consent in the event of a regulatory audit.

When the applicable retention period expires, dkpk securely deletes or anonymises the relevant personal data so that it can no longer be associated with an identifiable individual. Anonymous, aggregated data derived from your information (such as statistical reports on player behaviour) may be retained indefinitely as it no longer constitutes personal data.

dkpk takes the security of your personal data seriously. We implement a layered set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure. Our security practices include the following:

• TLS/SSL Encryption in Transit: All data exchanged between your browser or mobile app and the dkpk servers is encrypted using Transport Layer Security (TLS 1.2 or higher). This prevents interception by third parties while your data is in transit over the internet.
• Encryption at Rest: Sensitive data fields stored in dkpk's databases — including passwords (stored only as salted cryptographic hashes), KYC document references, and financial data — are encrypted at the storage layer.
• Access Controls: Access to systems containing personal data is restricted on a need-to-know basis. dkpk staff are granted only the minimum access rights necessary to perform their role. All internal access is logged and subject to periodic review.
• Password Security: Player passwords are never stored in plain text. dkpk uses a strong one-way hashing algorithm with a unique salt per user. Even dkpk support staff cannot see your password — if you forget it, a reset is the only recovery path.
• Intrusion Detection: dkpk operates continuous monitoring of its server infrastructure to detect unusual access patterns, brute-force login attempts, and potential data exfiltration. Automated alerts escalate anomalies to our security team in real time.
• Secure Development Practices: The dkpk platform is developed following security-first coding standards, including input validation, parameterised queries to prevent SQL injection, and regular vulnerability assessments of the application layer.

Despite these measures, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms, dkpk will notify affected players without undue delay and take all reasonable steps to contain and remediate the incident.

As a dkpk player, you hold meaningful rights over your personal data. dkpk respects these rights and will honour any valid request promptly and without unnecessary barriers. The following rights are available to you:

• Right of Access: You may request a copy of the personal data dkpk holds about you. This includes your account information, transaction history, gaming activity records, and any communications on file. We will provide this in a structured, readable format within 30 days of receiving your request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. You can update basic account details (such as your email address or contact number) directly within your account settings, or contact our support team for changes to KYC-related records.
• Right to Erasure (Right to be Forgotten): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to its processing. This right is subject to our legal retention obligations — we cannot delete data we are legally required to retain (for example, financial transaction records subject to anti-money laundering rules).
• Right to Restriction of Processing: You may request that dkpk temporarily restrict the processing of your data in certain circumstances — for example, while a dispute is being resolved or while you contest the accuracy of data we hold.
• Right to Data Portability: Where we process your data on the basis of your consent or a contract, and the processing is carried out by automated means, you may request that we provide your data in a machine-readable format (such as JSON or CSV) so that it can be transferred to another service provider.
• Right to Object: You may object to the processing of your personal data where dkpk relies on legitimate interest as the legal basis. You also have an absolute right to object to your data being used for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, contact our data privacy team at [email protected] with the subject line "Privacy Rights Request". Please include your registered name and the mobile number or email address linked to your dkpk account so we can identify you securely. We will respond within 30 days. Complex requests may be extended by a further 30 days, in which case we will notify you of the extension before the initial 30-day period expires.

dkpk periodically reviews and updates this Privacy Policy to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify active players via an on-site notice or email to the address registered on your account at least 7 days before the changes take effect. Your continued use of the dkpk platform following such notification constitutes acceptance of the updated Privacy Policy.

The current version of this Privacy Policy is always available at dkpk.app/privacy-policy with the effective date displayed at the top of the page. We recommend reviewing this page periodically so you remain informed about how your data is handled.

Governing Language: This Privacy Policy is published in English. In the event of any conflict between the English version and any translation, the English text prevails.

Contact Details: For all privacy-related enquiries, data subject requests, or concerns about how dkpk handles your personal information, please contact our support team. Our team operates around the clock on Bangladesh Standard Time (BST, UTC+6) and aims to acknowledge all privacy enquiries within 4 hours.

Email: [email protected]
Subject line for privacy requests: "Privacy Rights Request"
Average response time: under 1 hour for general queries; up to 30 days for formal data subject requests.