Newpklok Privacy Policy – Our commitment to protecting your data

Newpklok collects two types of information from you — what you provide directly and what is collected automatically.

What you provide directly:

• At registration: your name, email address, mobile number, date of birth, and country of residence.
• During KYC verification: a photo of your national ID or passport, along with a selfie.
• At payment: your mobile banking number or bank account details. Card numbers are not stored directly on newpklok's servers — the payment gateway handles that separately.
• Support contact time: messages and attached files you send.

Automatically collected information:

• Device information: browser type, operating system, screen resolution.
• Network data: IP address and approximate geographic location.
• Usage behaviour: which pages you visited and for how long, which games you played, and when you logged in.
• Cookies & tracking data: used to improve your experience on the site.

Without this information, newpklok cannot operate its services safely. We will never request access to your phone's contact list, messages, or camera.

Newpklok is fully transparent about how your information is used. Each purpose is clearly outlined below:

If you no longer wish to receive promotional emails or push notifications, you can turn them off at any time from your account settings. This will not affect your access to the core service.

Newpklok never sells your data to third parties. However, limited information may be shared in specific circumstances necessary for operating the service:

• Payment Providers: Only the information necessary to process transactions is shared with bKash, Nagad, Rocket, or your bank.
• Game Provider: Session data is shared with providers such as Evolution Gaming and Pragmatic Play to run games, but no personally identifiable information is included.
• Legal Authorities: If a valid court order or written request from an investigative authority is received, information may be disclosed in accordance with the law. This is not a matter of choice — it is a legal obligation.
• Security Auditor: Third-party security experts conducting system audits are given limited access to encrypted data only — no personally identifiable information is shared with them.

All third parties involved in the above areas are bound by individual privacy agreements. They are not permitted to use your data beyond what newpklok authorizes.

Newpklok uses industry-leading technology to protect user data. This is not merely a legal obligation — it is our ethical responsibility.

• 256-Bit TLS Encryption – All data transmitted through the site and app is encrypted — the same technology used by the banking industry.
• Firewall & DDoS Protection – Multiple layers of server-level security are in place, with active monitoring running around the clock to defend against external threats.
• Access Control – Within newpklok, only staff members who require access for their specific role can view particular data. No one has blanket access to all data.
• Password Hashing – Your password is never stored in plain text. bcrypt hashing is used, which is one-way — meaning no one can reverse-engineer your original password from the hash.
• Regular Backups – Data is backed up regularly and stored separately in a secure location, ensuring recovery is possible in the event of any incident.
• Annual Security Audit – Independent security experts review the entire system annually and identify any weaknesses.

In the event of a data breach, affected members will be notified by email within 72 hours and provided with guidance on the steps they should take.

Cookies are small text files stored in your browser. newpklok uses cookies to enhance your experience on the site. We use three types of cookies:

Analytics and preference cookies can be disabled through your browser settings. However, disabling essential cookies will affect the functionality of the site.

Every newpklok member has specific rights over their personal data. These aren't just words on paper — we genuinely uphold them.

Newpklok does not retain any data longer than necessary. However, certain information must be kept for a defined period due to legal and regulatory obligations:

• Account information: For as long as your account is active, and for 5 years after closure (as required by financial regulatory obligations).
• Transaction records: Up to 7 years. This is a requirement under international Anti-Money Laundering (AML) laws.
• KYC Documents: 5 years after account closure.
• Support conversations: Up to 3 years – useful for resolving disputes.
• Log & Analytics Data: Typically up to 12 months.
• Marketing Preferences: Deleted immediately upon withdrawal of consent.

Once the retention period expires, data is securely destroyed through an automated process — no separate request is needed.

Newpklok updates this Privacy Policy in line with changes in technology and regulations. Before any significant change:

• Registered members will be notified in advance by email.
• A notice will be posted on the site.
• At least 7 days' notice will be given before any changes take effect.

Continued use of the site after any changes will be considered acceptance of the updated policy. If you disagree, you will have the option to close your account and withdraw your balance. The date of the most recent update is always displayed at the top of this page.

For any questions, concerns, or complaints regarding the privacy policy, please get in touch with us. newpklok has a dedicated data protection representative who handles these matters directly.

If you are not satisfied with our response, you have the right to file a complaint with your country's data protection authority or our licensing authority.