Privacy Policy

Introduction

This Privacy Policy ("Policy") explains how gkpk ("we", "us", "our") collects, uses, stores, shares and protects personal data provided by or generated by players ("you", "your") when accessing or using the gkpk platform at https://gkpk.org. This Policy forms part of gkpk's Terms and Conditions, and by using our platform you confirm your understanding of and agreement with the practices described here.

gkpk is committed to protecting your personal data in line with applicable data protection principles. We collect only the minimum data necessary to deliver our services, verify player identity, prevent fraud, comply with legal obligations, and improve your experience on our platform.

Information We Collect

gkpk collects personal data through several channels: information you provide voluntarily during registration, information generated automatically through your use of the platform, and information provided by third-party payment processors and identity verification partners. The table below summarises the main categories:

Certain categories — particularly Identity, Contact and Financial Data — are mandatory for account registration and withdrawal processing. Failure to provide required data may prevent you from accessing certain features of the platform.

How We Use Your Information

gkpk processes your personal data only for the following specific, documented purposes. We do not use your data for any purpose not described in this Policy without first obtaining your explicit consent:

• Account Management: To register and maintain your gkpk account, authenticate your identity at login, and manage your account settings and preferences.
• Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay and bank transfer, and to keep an accurate record of your transaction history.
• Legal & Regulatory Compliance: To comply with KYC requirements, AML obligations, and any other applicable legal duty, including reporting obligations to relevant authorities.
• Fraud Prevention & Security: To detect, investigate and prevent fraudulent transactions, collusion, bonus abuse, money laundering and any other prohibited activity that could harm gkpk players or the platform.
• Responsible Gaming: To monitor gaming behaviour for signs of problem gambling, to enforce self-exclusion and deposit limit settings, and to reach out proactively where a player may need support.
• Service Improvement: To analyse aggregated, anonymised usage data to improve the performance, reliability and features of the gkpk platform. Published analysis never includes personally identifiable information.

If gkpk wishes to use your personal data for a new purpose not covered by this Policy, we will notify you and, where required by applicable law, request your explicit consent before any such new processing begins.

Legal Basis for Processing

Each category of personal data gkpk processes has a documented legal basis. The primary legal bases we rely upon are:

• Contractual Necessity: Processing your identity, contact and financial data is necessary to provide the services you signed up for under our Terms and Conditions, including account registration, payment processing and customer support.
• Legal Obligation: Processing for KYC verification, AML compliance, fraud reporting and responding to lawful authority requests is required by applicable law and cannot be declined by either party.
• Legitimate Interests: Processing technical and behavioural data for fraud prevention, security monitoring and platform improvement is carried out in the legitimate interests of gkpk and its players, provided those interests are not overridden by your privacy rights.
• Consent: Where gkpk sends you direct marketing communications or uses non-essential cookies, we rely on your explicit consent. You may withdraw consent at any time by updating your preferences in account settings or by contacting [email protected].

Sharing Your Information

gkpk does not sell, rent or trade your personal data. We share personal data only with the following categories of recipient and only to the extent necessary for the stated purpose:

• Payment Processors: bKash, Nagad, Rocket, Upay and banking partners receive only the minimum data required to process your specific transaction and are contractually prohibited from using it for any other purpose.
• Identity Verification Partners: Third-party KYC providers receive identity documents solely to perform regulatory-required age and identity verification on gkpk's behalf. They are bound by strict data processing agreements.
• Legal & Regulatory Authorities: Where required by applicable law, court order or regulatory instruction, gkpk may disclose personal data to law enforcement agencies or other competent authorities. gkpk will notify you of such disclosure where legally permitted to do so.
• Technology Service Providers: Hosting, cloud infrastructure, analytics and customer support tool providers may access technical data as part of their service delivery. All such providers are vetted for security compliance and bound by data processing agreements restricting use of your data to the stated service purpose only.

Payment Data & Financial Privacy

gkpk treats financial data with the highest level of confidentiality. When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay or bank transfer, the transaction is processed through the relevant payment provider's secure gateway. gkpk stores only the reference data necessary to reconcile transactions — we do not store full mobile banking PINs, passwords or complete bank account credentials in any form.

All financial transaction records are retained for the period required by applicable anti-money laundering regulations. Transaction data is accessible only to authorised gkpk compliance and finance staff and to relevant regulatory authorities where disclosure is legally required. We apply role-based access controls and audit logging to all systems that store or process financial data.

Cookies & Tracking Technologies

gkpk uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain session security and understand aggregate usage patterns. The following types of cookies may be set when you use gkpk:

• Essential Cookies: Required for the platform to function. They enable session management, authentication tokens and security features. These cannot be disabled without breaking core platform functionality.
• Preference Cookies: Remember your settings such as language preference and responsible gaming limit configurations so you do not need to re-enter them on each visit.
• Analytics Cookies: Collect anonymised data about how players navigate the platform — pages visited, time on page, feature usage — to help gkpk improve the user experience. No personally identifiable information is associated with analytics data.
• Security Cookies: Used to detect fraudulent login attempts, bot activity and other security threats. These cookies are essential and cannot be disabled.

You can manage or delete non-essential cookies at any time through your browser's cookie settings. Please note that disabling certain cookies may affect the functionality of parts of the gkpk platform. gkpk does not currently respond to Do Not Track (DNT) browser signals as there is no universally accepted standard for DNT compliance.

Data Retention

gkpk retains personal data only for as long as necessary to fulfil the purpose for which it was collected or as required by applicable law. Registered account data — including identity, contact, financial transaction records and gaming history — is retained for the duration of the active account relationship and for a minimum of 5 years following account closure to comply with AML and record-keeping obligations. Data is stored in encrypted, access-controlled systems with strict internal access logging throughout this period.

Anonymous or aggregated analytics data that cannot identify any individual may be retained indefinitely for statistical and service improvement purposes. Where you exercise your right to erasure and there is no overriding legal basis to retain the data, gkpk will securely delete or anonymise your personal data within 30 days of receiving a valid erasure request.

Your Privacy Rights

Subject to applicable law and any overriding legal obligations such as AML record-keeping requirements, you have the following rights in relation to the personal data gkpk holds about you. To exercise any of these rights, contact [email protected] with your account details and a clear description of the right you wish to exercise:

• Right of Access: You may request a copy of all personal data gkpk holds about you. We will provide this within 30 days of a valid request, free of charge for the first request in any 12-month period.
• Right to Rectification: You may ask gkpk to correct any inaccurate personal data we hold about you. We will investigate and respond within 14 days.
• Right to Erasure: You may request deletion of your personal data where there is no overriding legal basis for its continued retention. Note that AML regulations require us to retain certain financial records for a minimum of 5 years regardless of erasure requests.
• Right to Restriction: You may ask gkpk to restrict processing of your personal data in certain circumstances, for example while an accuracy dispute is being resolved.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including profiling for direct marketing. Where you object to direct marketing, gkpk will stop processing your data for that purpose immediately.

gkpk will acknowledge all privacy rights requests within 5 business days. Where a request is complex or involves a large volume of data, we may extend the response period by up to 30 additional days, in which case we will notify you of the extension and the reason for it.

Data Security

gkpk implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration or destruction. These measures include SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data at rest, role-based access controls limiting data access to authorised personnel only, continuous security monitoring and intrusion detection systems, regular third-party penetration testing, and multi-factor authentication requirements for all internal system access.

Whilst gkpk takes all reasonable steps to protect your personal data, no system is entirely immune to security threats. In the event of a personal data breach likely to result in a risk to your rights and freedoms, gkpk will notify affected players without undue delay and will take all appropriate remediation steps to contain the breach and prevent recurrence.

Third-Party Links

The gkpk platform does not contain links to external third-party websites. All navigation within gkpk remains within our own platform. Should gkpk in future include references to third-party resources, this Policy will be updated to reflect how any data shared with those third parties is handled. gkpk accepts no responsibility for the privacy practices of any third-party services that players may access independently outside of the gkpk platform.

Children's Privacy

The gkpk platform is strictly intended for adults aged 21 and above. gkpk does not knowingly collect, store or process personal data from individuals under the age of 21. If we become aware that personal data from an underage individual has been collected, we will take immediate steps to delete that data and close the associated account without notice.

Changes to This Privacy Policy

gkpk may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. The date shown in the Last Updated notice at the top of this page reflects when the most recent revision was made. Where a change materially affects your rights or the way we handle your personal data, gkpk will endeavour to notify you in advance via email to your registered address or via a prominent on-platform notification.

Continued use of the gkpk platform after publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically. If you have questions about any changes, please contact [email protected] before continuing to use the platform.

Contact Our Privacy Team

If you have any questions, concerns or requests relating to this Privacy Policy or the way gkpk handles your personal data, please contact our privacy team. We aim to respond to all privacy-related enquiries within 72 hours during Bangladesh Standard Time (BST, UTC+6) business hours.