Pk luk Privacy Policy — How We Protect Your Data

PK Luk (https://pkluk.my) treats the privacy of its members as a top priority. When you register on our platform, place bets, or use any of our services, certain information is naturally required. This Privacy Policy clearly explains what data we collect, why we collect it, and how we keep it secure.

This policy applies to your use of our services through the PK Luk website, mobile app, and any authorised channels. Using any PK Luk service constitutes your acceptance of this Privacy Policy.

We never sell, rent, or share your data with advertisers. The permitted uses of your information are clearly defined in this policy — and we do not go beyond them.

PK Luk collects two types of information — what you provide directly, and data generated automatically as you use the platform.

PK Luk collects data only for specific purposes. We never retain information beyond what is needed, and data collected for one purpose is not used for another.

• Account Management: Your identity and contact details are used to create, verify, and keep your account secure.
• Transaction Processing: Your financial information is used to process deposits and send withdrawals.
• KYC & AML Compliance: Identity verification is mandatory to comply with international regulations.
• Customer Support: The support team may access your account information to help resolve your issue.
• Security & Fraud Prevention: Device and activity data is used to detect unusual behaviour.
• Personalized Experience: Your preferred sports and betting patterns are analysed to show you relevant offers.
• Legal Obligation: Providing information as required by the licensing authority or court order.

For any use of your data beyond what is stated here, we will ask for your consent first.

Pk luk does not sell or rent your data to third parties. However, in certain limited circumstances, information may be shared with specific third parties:

• Payment Service Providers: Only the minimum necessary information is shared with payment partners such as bKash, Nagad, and Rocket to process transactions. These partners operate under their own privacy policies.
• Technology Service Providers: Server hosting, cybersecurity, and software service providers may access certain system data under contract. They are not permitted to use this data for their own purposes.
• Licensing Authority: Certain reports must be submitted to regulatory authorities to maintain our gaming licence.
• Legal Requirements: If we are legally required to disclose information in response to a court order or government investigation, we will do so — and where possible, we will notify you in advance.

PK Luk's website and app use cookies and similar technologies. These are stored as small files in your browser and help the platform function more effectively.

PK Luk uses three types of cookies:

• Essential Cookies: Maintaining login sessions and storing security tokens are essential for the platform to function — these cannot be disabled.
• Functional Cookies: Your language preference, favorite games, and display settings are remembered to make your experience smoother.
• Analytics Cookies: Used to understand which pages are visited most and where issues occur. This data is used solely as fully anonymised statistics.

You can manage cookies through your browser settings. However, disabling essential cookies may cause some parts of the platform to function incorrectly.

PK Luk applies multiple industry-standard security layers to protect your data. Alongside technical safeguards, strict staff management policies are also enforced.

• 256-bit SSL/TLS Encryption: All data exchanged between your browser and our servers is encrypted — the same level of protection used by banks.
• Encrypted Database: Stored data is also encrypted. Even with direct server access, the data cannot be read.
• Two-Factor Authentication (2FA): OTP verification at login and re-verification of identity for large transactions.
• Real-Time Monitoring: If a suspicious login or unusual account activity is detected, the account is automatically placed on alert status.
• Restricted Staff Access: Only designated staff from specific teams can access your full data — and every access is logged.
• Regular Security Audits: Regular penetration testing and audits are conducted by independent third-party security specialists.

In the event of a security breach, affected members will be notified as quickly as possible and steps will be taken to minimise any harm.

PK Luk does not retain your data longer than necessary. Retention periods vary by data type, depending primarily on legal requirements and the purpose of the service.

• Account Information: Retained for up to 5 years after account closure (due to legal and regulatory obligations).
• Financial Transaction Records: Must be retained for a minimum of 5 years under AML regulations.
• Betting History: Retained while the account is active and for 2 years after account closure.
• Support Conversations: Retained for up to 1 year after resolution.
• Cookies Data: Session cookies are deleted when the browser is closed; persistent cookies last a maximum of 1 year.

After your account is closed, any data retained for legal reasons is not in active use — it is archived and held under strict controls.

As a PK Luk member, you have important rights regarding your own data. To exercise any of these rights, please contact us at support@pkluk.my.

PK Luk will respond to any rights request within 30 days. For complex or multiple requests, this may be extended to 60 days — but you will be notified in advance.

Pk luk does not knowingly collect data from anyone under 18. Age is verified at registration, and if it is later discovered that a member created an account while under 18, that account and all associated data will be deleted immediately.

If a parent or guardian believes their minor child has created an account on PK Luk, please contact support@pkluk.my. We will investigate promptly and take the necessary action.

PK Luk may update this Privacy Policy from time to time. How we notify you depends on the nature of the change:

• Minor Changes: The last updated date at the top of this page will be revised accordingly.
• Minor Changes: A notice will be posted on the website.
• Major Changes: You will be notified in advance via SMS to your registered phone number or by email.

Continued use of the platform after a major change is considered acceptance of the updated policy. If you do not agree with the new policy, you may close your account and request deletion of your data.