Your Privacy at pkpkok

1. Information We Collect

1.1 Information You Provide Directly

When you register a pkpkok account or interact with the platform, you voluntarily provide personal data that is necessary to create and manage your account. This includes:

• Identity data: Full legal name, date of birth, gender, and nationality as entered during registration or KYC verification
• Contact data: Email address, mobile phone number, and residential address in Bangladesh (including division, district, and upazila)
• Identity document data: National Identity Card (NID) number, passport number, or driving licence number provided during identity verification; copies of the documents themselves
• Financial data: Mobile financial service account details for bKash, Nagad, Rocket, or Upay; bank account details for BRAC Bank, City Bank, Dutch-Bangla Bank, Islami Bank, or Sonali Bank transfers; Visa or Mastercard details used for deposits — note that full card numbers are not stored by pkpkok but are handled by our payment processor
• Communications data: Messages, emails, and live chat transcripts sent to pkpkok support

1.2 Information Collected Automatically

When you access the pkpkok platform, certain technical data is collected automatically by our servers and analytics systems:

• Device data: Device type (mobile, tablet, desktop), operating system and version, browser type and version, screen resolution, and unique device identifiers
• Network data: IP address, approximate geographic location derived from IP, internet service provider, and connection type
• Usage data: Pages visited, games played, bet amounts and outcomes, session duration, click paths, features used, and timestamps of all activity
• Cookie and tracking data: Data collected via cookies, web beacons, and similar technologies as described in Section 4 of this policy

1.3 Information from Third Parties

pkpkok may receive personal data about you from third-party sources in limited circumstances. This includes identity verification results from KYC service providers, fraud and risk signals from payment processors, and in some cases, information from public databases used to fulfil anti-money laundering screening obligations. pkpkok does not purchase marketing lists or obtain personal data from social media platforms for the purpose of targeting you with advertising.

2. How We Use Your Data

pkpkok processes personal data only for the specific, legitimate purposes described below. We do not use your data for purposes that are incompatible with those stated here without first obtaining your consent or establishing a separate lawful basis.

Purpose	Data Used	Lawful Basis
Account registration and management	Identity data, contact data	Contractual necessity
Processing deposits and withdrawals	Financial data, identity data	Contractual necessity
Identity and age verification (KYC)	Identity document data, date of birth	Legal obligation
Anti-money laundering screening	Identity data, financial data, usage data	Legal obligation
Fraud prevention and security	Device data, network data, usage data	Legitimate interest
Customer support	Contact data, communications data	Contractual necessity
Platform improvement and analytics	Usage data, device data (anonymised)	Legitimate interest
Responsible gaming monitoring	Usage data, financial data	Legal obligation / Legitimate interest
Sending account and service notifications	Contact data	Contractual necessity
Sending promotional communications (opt-in only)	Contact data, usage data	Consent

pkpkok will not use your personal data for automated decision-making that produces significant legal or similarly significant effects without giving you an opportunity to request human review of that decision.

3. Data Sharing & Third Parties

3.1 Categories of Recipients

pkpkok shares personal data with third parties only where necessary to deliver the service, comply with legal obligations, or protect the safety of the platform. The categories of recipients are as follows:

• Payment processors: bKash, Nagad, Rocket, Upay, and card payment processors receive the financial data necessary to execute deposits and withdrawals. These providers are independent data controllers subject to their own privacy policies and Bangladesh Bank regulations.
• KYC and identity verification providers: Third-party services that verify identity documents and perform background checks on behalf of pkpkok. These providers process identity document data solely for the verification purpose under a data processing agreement with pkpkok.
• Game content providers: Providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a session token and minimal player identifier data needed to serve game content. They do not receive your full identity or financial profile.
• Cloud infrastructure and hosting providers: The pkpkok platform operates on secure cloud infrastructure. Hosting providers may have access to server data as part of their infrastructure management role, subject to strict confidentiality agreements.
• Legal and regulatory authorities: pkpkok will disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required by applicable law or where pkpkok reasonably believes disclosure is necessary to prevent fraud, money laundering, or other criminal activity.

3.2 International Data Transfers

Some of pkpkok's third-party service providers may be located outside Bangladesh. Where personal data is transferred internationally, pkpkok takes reasonable steps to ensure that the recipient provides an adequate level of data protection through contractual safeguards, including standard data protection clauses where applicable.

3.3 Business Transfers

In the event that pkpkok undergoes a merger, acquisition, or sale of all or part of its business assets, personal data held about players may be transferred to the acquiring entity as part of that transaction. pkpkok will provide reasonable advance notice to affected players before personal data is transferred and becomes subject to a different privacy policy.

4. Cookies & Tracking Technologies

4.1 What Are Cookies

Cookies are small text files that are placed on your device when you visit the pkpkok website. They are widely used to make websites function correctly, to improve user experience, and to provide information to site operators. pkpkok uses cookies, web beacons, and similar technologies for the purposes described below.

4.2 Categories of Cookies Used by pkpkok

• Strictly necessary cookies: These cookies are essential for the pkpkok platform to function. They maintain your login session, remember your language and display preferences within the same session, and enable security features such as CSRF protection. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These cookies remember your account preferences between sessions, such as your preferred deposit method and notification settings. They are not required for the platform to operate but improve your experience on return visits.
• Analytics cookies: pkpkok uses server-side and privacy-respecting analytics tools to understand how players navigate the platform, which games are most popular, and where technical issues occur. Analytics data is aggregated and anonymised before being reviewed by the pkpkok team.
• Fraud prevention and security cookies: These cookies help pkpkok identify suspicious login behaviour, detect automated bot activity, and recognise devices associated with previously flagged accounts. They are a core part of our fraud prevention infrastructure.

4.3 Managing Cookies

You can manage or delete cookies through your browser settings. Most modern browsers — including Chrome, Firefox, Safari, and the default browser on Android devices popular in Bangladesh — allow you to view, block, and delete cookies from specific sites. Please note that disabling strictly necessary cookies will prevent you from logging in to your pkpkok account. Disabling analytics cookies will not affect your ability to use the platform but will limit pkpkok's ability to improve the service based on usage patterns.

5. Data Security & Retention

5.1 Security Measures

pkpkok implements a layered set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, and disclosure. These measures include:

• TLS/SSL encryption for all data in transit between player devices and pkpkok servers
• AES-256 encryption for sensitive data fields stored at rest in pkpkok databases
• Role-based access controls that limit employee access to personal data to the minimum necessary for their job function
• Multi-factor authentication requirements for pkpkok staff accessing production systems
• Regular security assessments and penetration testing by independent security professionals
• Automated intrusion detection and real-time alerting for anomalous access patterns

While pkpkok takes data security seriously and invests in robust protective measures, no internet-based system can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, pkpkok will notify affected players via their registered email address promptly after the breach is discovered and assessed.

5.2 Retention Periods

pkpkok retains personal data for the following periods, after which data is securely deleted or irreversibly anonymised:

• Account and identity data: Retained for the lifetime of your active account plus 5 years following account closure, to satisfy anti-money laundering record-keeping requirements
• Transaction records: Retained for 7 years from the date of each transaction in accordance with financial record-keeping obligations
• KYC document copies: Retained for 5 years following account closure or the last transaction, whichever is later
• Support communications: Retained for 2 years from the date of the last communication in a ticket thread
• Usage and analytics data (anonymised): Retained indefinitely in anonymised aggregate form; individual-level usage data is deleted or anonymised within 13 months of collection
• Marketing consent records: Retained for 3 years from the date consent was recorded or last renewed

6. Your Privacy Rights

As a pkpkok player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact pkpkok support at [email protected] with the subject line "Privacy Rights Request". pkpkok will respond within 30 days of receiving a verified request.

• Right of access: You may request a copy of all personal data pkpkok holds about you, along with information about how it is being used and with whom it has been shared.
• Right to rectification: If any personal data pkpkok holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can also update basic profile information directly through your account settings.
• Right to erasure: You may request that pkpkok delete your personal data. This right is subject to exceptions where retention is required by law (for example, anti-money laundering record-keeping obligations mean certain transaction records must be retained for a minimum period regardless of an erasure request).
• Right to restriction: You may request that pkpkok restrict the processing of your personal data in certain circumstances — for example, while a dispute about accuracy is being resolved.
• Right to data portability: You may request a machine-readable copy of the personal data you have provided to pkpkok directly, in a structured and commonly used format.
• Right to object: You may object to pkpkok processing your personal data where that processing is based on legitimate interests. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to withdraw consent: Where pkpkok processes your data based on your consent (for example, for promotional communications), you may withdraw that consent at any time by updating your notification preferences in account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

7. Minors & Age Restriction

pkpkok is strictly an adults-only platform. The service is not directed at, and is not intended for use by, any person under the age of 18. pkpkok does not knowingly collect personal data from individuals under 18 years of age.

As part of the pkpkok KYC process, every player is required to verify their date of birth using a government-issued identity document. Where pkpkok discovers or has reasonable grounds to believe that personal data has been collected from a person under 18, the account will be immediately suspended, all data associated with the underage account will be deleted, and any funds held in the account will be handled in accordance with applicable legal requirements.

If you are a parent or guardian and believe that a minor in your care has registered a pkpkok account, please contact [email protected] immediately so that we can investigate and take appropriate action. pkpkok takes underage gambling prevention seriously and supports responsible gaming across all player segments. All players must be 18 years or older — 18+ only.

8. Policy Updates & Contact

8.1 Updates to This Policy

pkpkok reviews and updates this Privacy Policy periodically to reflect changes in the platform, applicable law, or industry best practices. The date of the most recent revision is shown at the top of this document. Where a change materially affects how your personal data is used, pkpkok will notify you via your registered email address at least 14 days before the change takes effect. For minor clarifications or non-material updates, the revised policy will be published on this page without individual notification.

Your continued use of the pkpkok platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated version. If you do not agree with a material change, you have the right to close your account and request deletion of your data before the change takes effect by contacting support at [email protected].

8.2 Contact & Data Controller

pkpkok is the data controller responsible for the personal data described in this policy. For privacy-related queries, data subject requests, or concerns about how your data is being handled, you may contact the pkpkok privacy team at:

Email: [email protected]
Subject line: Privacy Policy Enquiry
Response time: Within 30 days for formal data subject requests; within 3 business days for general privacy enquiries.

pkpkok's support team is available 24 hours a day, 7 days a week via live chat and email, in English. For players based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar — all support interactions are conducted in English across all channels.