pkoko Privacy Policy

1 Introduction & Scope

pkoko is an online betting and casino entertainment platform operated for players based in Bangladesh. This Privacy Policy applies to all personal data collected and processed through the pkoko website, mobile-optimised platform, live chat system, email correspondence, and any other digital or communication channel operated under the pkoko brand at the domain pkoko.asia.

This policy applies to all registered players, prospective players who have commenced but not completed registration, and visitors to the pkoko website regardless of whether they hold an active account. It covers personal data collected directly from you, data collected automatically through your use of the platform, and data obtained from third-party sources such as payment processors and identity verification providers.

This Privacy Policy should be read together with pkoko's Terms & Conditions and Responsible Gaming Policy, both of which are available on this website and are incorporated by reference. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a matter of data protection, this Privacy Policy shall take precedence.

2 Personal Data We Collect

pkoko collects personal data that falls into the following categories. A detailed summary of data categories, examples, lawful basis, and purposes is provided in the table earlier on this page. The narrative below provides additional context for each category.

• Identity data: When you register a pkoko account, we collect your full legal name, date of birth, and where required for KYC verification, a copy of a government-issued identity document such as your Bangladesh National Identity Card (NID), passport, or driving licence. This data is necessary to verify that you are at least 21 years of age and to confirm your identity for anti-money laundering compliance.
• Contact data: We collect your email address, Bangladesh mobile phone number, and residential address. Your mobile number is used for account security alerts and, where you have opted in, for promotional SMS communications. Your address is collected as part of KYC verification and for regulatory record-keeping.
• Financial data: To process deposits and withdrawals, we collect identifiers associated with your chosen payment method, such as your bKash wallet number, Nagad account reference, Rocket mobile banking number, or bank account details for supported banks including Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. pkoko does not store full card numbers or payment authentication credentials on its own servers.
• Technical and usage data: We automatically collect technical data about your device and browsing session when you access the pkoko platform. This includes your IP address, device identifiers, browser type, operating system, pages visited, games accessed (including cricket betting, slots, live casino, and fishing games), bet history, session duration, and click-stream data. This data is used primarily for platform security, fraud prevention, and service improvement.
• Communications data: When you contact pkoko through live chat, email to [email protected], or WhatsApp, we retain records of those communications for customer support, dispute resolution, compliance documentation, and staff training purposes.
• Sensitive data: pkoko does not intentionally collect special category sensitive personal data such as health information, racial or ethnic origin, political opinions, or religious beliefs. Where a player voluntarily discloses health-related information in the context of a responsible gaming request (for example, disclosing a gambling addiction), that information is treated with the highest level of confidentiality and used solely to provide the relevant responsible gaming service requested.

3 How We Collect Your Data

pkoko collects personal data through the following channels and mechanisms:

• Direct collection: Data you actively provide when you complete the pkoko registration form, submit a KYC verification request, initiate a deposit or withdrawal transaction, contact our support team, or respond to a survey or promotion.
• Automated collection: Data collected automatically when you visit or use the pkoko platform, including through cookies, web beacons, server logs, and analytics technologies. This data is collected without requiring any specific action from you and occurs as a natural part of accessing any web-based platform.
• Third-party sources: Data received from third-party partners who assist pkoko in providing its services, including identity verification providers, payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), fraud detection services, and data analytics providers. pkoko only receives data from third parties that have a lawful basis for sharing it with us.
• Publicly available sources: In limited circumstances and solely for fraud prevention or regulatory compliance purposes, pkoko may cross-reference information you have provided against publicly available records such as court records, sanctions lists, or politically exposed persons (PEP) databases.

4 How We Use Your Personal Data

pkoko uses your personal data for the following purposes, each of which is supported by an appropriate lawful basis:

• Account creation and management: To register your pkoko account, verify your identity and age (21+ policy), manage your account settings, and provide you with access to the full range of platform services including cricket betting, live casino, slots, and fishing games.
• Transaction processing: To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer, Visa, or Mastercard) and to maintain accurate financial records of all transactions on your account.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions. Technical data including IP addresses and device identifiers plays a central role in this function.
• Responsible gaming: To monitor your gaming activity and betting patterns for signs of problem gambling behaviour, to deliver responsible gaming tools (deposit limits, session reminders, self-exclusion), and to provide proactive support where our responsible gaming systems indicate a potential concern.
• Legal and regulatory compliance: To fulfil our obligations under applicable anti-money laundering (AML) legislation, know-your-customer (KYC) requirements, and any lawful order or legal process from a competent authority.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and maintain records of all player-support interactions for quality assurance and regulatory purposes.
• Marketing communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and event-specific campaigns (such as BPL cricket season promotions, Eid bonus offers, or Pohela Boishakh special events) via email or SMS. You may withdraw your marketing consent at any time.
• Platform improvement: To analyse usage patterns, conduct A/B testing, and improve the design, functionality, and content of the pkoko platform for all players.

5 Sharing Your Personal Data

pkoko does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial purposes. We share your personal data only in the following circumstances, each of which is governed by appropriate data processing agreements or legal obligations:

• Payment processors: Your financial data is shared with payment service providers (including bKash, Nagad, Rocket, Upay, and card scheme operators Visa and Mastercard) solely for the purpose of processing your deposits and withdrawals. These providers operate under their own privacy policies and are responsible for the security of the data they process on their own platforms.
• Identity verification providers: Where KYC verification is required, your identity documents and personal details may be shared with specialist third-party identity verification providers. These providers process your data strictly on pkoko's behalf and are bound by confidentiality and data security obligations.
• Game technology providers: Technical session data (such as game session tokens and bet records) is shared with certified game providers including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Ezugi, and Habanero for the purpose of delivering and recording game outcomes. These providers do not receive your personally identifiable information beyond what is technically necessary for game delivery.
• Fraud and security partners: Anonymised or pseudonymised technical data may be shared with fraud detection and cybersecurity providers to identify and mitigate platform security threats. These providers process data solely as instructed by pkoko.
• Legal authorities: pkoko will disclose personal data to law enforcement agencies, regulatory bodies, courts, or other competent authorities when required to do so by a valid legal order, warrant, or statutory obligation. pkoko will notify the affected player of any such disclosure where it is legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of pkoko's business assets, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and the privacy implications in advance.

6 Cookies & Tracking Technologies

pkoko uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you visit a website. They allow the platform to recognise your device on subsequent visits and to remember certain preferences and settings.

• Strictly necessary cookies: These cookies are essential for the platform to function correctly. They manage your login session, maintain your account security state, and enable core platform features. These cookies cannot be disabled without preventing you from using the platform.
• Functional cookies: These cookies remember your preferences such as language settings, preferred game categories, and display configurations. They improve your experience but are not essential for platform operation.
• Analytics cookies: pkoko uses analytics tools to understand how players interact with the platform — which pages are most visited, how long sessions last, and where players encounter difficulties. This data is collected in aggregate and pseudonymised form and is used solely to improve the platform.
• Security cookies: These cookies help pkoko detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts. They work in conjunction with our fraud detection systems.

You may manage your cookie preferences through your browser settings. Blocking or deleting strictly necessary cookies will affect your ability to use the pkoko platform, including logging in and accessing your account. Blocking analytics or functional cookies will not prevent you from using the platform but may limit personalisation features.

7 Data Retention

pkoko retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your active pkoko account, plus a period of 5 years following account closure, to meet anti-money laundering and KYC record-keeping obligations.
• Transaction records: Financial transaction records (deposits, withdrawals, bet history) are retained for a minimum of 5 years following the date of each transaction in accordance with applicable financial regulation requirements.
• Support communications: Live chat transcripts, email correspondence, and WhatsApp message records are retained for a period of 2 years from the date of the last communication in the relevant thread, unless a longer period is required for ongoing dispute resolution.
• Technical and usage data: Server logs and session data are retained for a period of 12 months from the date of collection, after which they are anonymised or deleted.
• Marketing preference data: Retained until you withdraw your consent to marketing communications, at which point your data is removed from active marketing lists within 30 days. Suppression records (confirming that you opted out) are retained indefinitely to prevent accidental re-engagement.
• KYC documentation: Identity documents submitted for KYC verification are retained for 5 years following account closure or the date of the last regulated transaction, whichever is later.

Upon expiry of the applicable retention period, pkoko will securely delete or anonymise your personal data in accordance with our internal data disposal procedures. Data that has been anonymised — meaning it can no longer be linked back to you as an individual — may be retained indefinitely for statistical and analytical purposes.

8 Data Security

pkoko takes the security of your personal data seriously and implements appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• SSL/TLS encryption: All data transmitted between your device and pkoko's servers is encrypted using industry-standard SSL/TLS protocols, preventing interception by unauthorised third parties during transmission.
• Password security: Account passwords are stored using secure one-way cryptographic hashing algorithms (bcrypt or equivalent). Passwords are never stored in plain text and are never accessible by pkoko staff. pkoko will never ask you to share your password through any channel.
• Access controls: Access to personal data within pkoko's internal systems is restricted to authorised staff on a strict need-to-know basis. All internal access is logged and subject to periodic review.
• Payment data security: Payment card data and mobile wallet credentials are processed by certified payment service providers. pkoko does not store sensitive payment authentication data on its own servers.
• Fraud detection systems: pkoko operates real-time fraud detection systems that monitor account activity for unusual patterns, unauthorised access attempts, and suspicious transactions.
• Incident response: In the event of a confirmed data security incident that poses a risk to your personal data, pkoko will notify affected players and relevant authorities as required by applicable law, within the timeframes mandated by that law.

While pkoko takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and for notifying pkoko immediately at [email protected] if you suspect that your account has been accessed without your authorisation.

9 Your Data Rights

As a pkoko player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request" and include your registered username and a clear description of the right you wish to exercise.

• Right of access: You have the right to request a copy of the personal data pkoko holds about you, together with information about how it is used, where it came from, and who it has been shared with. We will respond to verified access requests within 30 days.
• Right to rectification: You have the right to request correction of inaccurate personal data we hold about you. For basic account details (email, address, phone number), corrections can often be made directly through your account settings. For identity and KYC data, corrections must be submitted with supporting documentation.
• Right to erasure: You have the right to request deletion of your personal data in certain circumstances, for example where the data is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and there is no other lawful basis for processing. Please note that this right is subject to overriding legal obligations — we may be required to retain certain data for AML, KYC, and financial record-keeping purposes regardless of a deletion request.
• Right to restrict processing: You have the right to request that pkoko restricts the processing of your personal data in certain circumstances, for example while the accuracy of your data is being verified following a rectification request.
• Right to data portability: You have the right to receive a copy of personal data you have provided to pkoko in a structured, commonly used, machine-readable format, and to transmit that data to another controller, where technically feasible.
• Right to withdraw consent: Where pkoko processes your personal data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time, with immediate effect. You also have the right to object to processing based on legitimate interests, though pkoko may be able to demonstrate compelling legitimate grounds that override your objection.

10 Children & Minors

The pkoko platform is strictly intended for adults aged 21 years and over. pkoko does not knowingly collect, use, or retain personal data from any individual under the age of 21. Age verification is a mandatory step in the pkoko registration process, and additional KYC age verification documents may be requested at any time.

If pkoko becomes aware that personal data has been collected from an individual who is under 21 years of age, it will take immediate steps to delete that data and close the associated account. Any deposits or winnings associated with an under-age account will be handled in accordance with pkoko's Terms & Conditions and applicable law.

Parents and guardians who believe that a minor may have registered on the pkoko platform should contact our support team at [email protected] immediately. pkoko will investigate and act promptly upon any verified under-age registration report.

11 International Data Transfers

pkoko's primary platform infrastructure and data storage is operated for the purpose of serving players in Bangladesh. In the course of delivering its services, pkoko may work with technology partners, game providers, and service providers whose servers and processing infrastructure are located outside Bangladesh. This may result in your personal data being transferred to and processed in jurisdictions other than Bangladesh.

Where such international transfers occur, pkoko ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that require the recipient to protect your data to a standard equivalent to that applied by pkoko. pkoko does not transfer personal data internationally except where necessary to deliver platform services, comply with legal obligations, or prevent fraud and security breaches.

Game providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi operate their own global infrastructure. Technical game session data necessary for game delivery may be processed on their servers in accordance with their own security and data protection standards. pkoko only works with game providers that meet internationally recognised security and fair-play certification standards.

12 Third-Party Links & Services

The pkoko platform does not contain links to third-party websites for commercial or advertising purposes. However, the platform does integrate with third-party services such as payment processors (bKash , Nagad, Rocket, Upay, Visa, Mastercard) and game providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Ezugi) that operate their own platforms and are governed by their own privacy policies.

When you initiate a deposit or withdrawal, you will interact directly with the relevant payment provider's interface. pkoko is not responsible for the privacy practices of those providers in relation to data you submit directly to their platforms. We recommend that you review the privacy policy of any payment provider before submitting your financial data to their platform.

pkoko does not embed third-party advertising networks, social media tracking pixels, or affiliate tracking scripts on its platform that would collect your personal data for third-party purposes without your knowledge. All analytics and tracking on the pkoko platform is operated by or on behalf of pkoko for the sole purpose of improving platform performance and security.

13 Changes to This Privacy Policy

pkoko reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform services. The date of the most recent revision is displayed at the top of this page. All changes become effective immediately upon publication of the updated policy on the pkoko website.

Where we make material changes that significantly affect how we use your personal data or the rights available to you, we will notify you in advance by sending an email to your registered email address and/or by displaying a prominent notice on the pkoko platform. Your continued use of the platform following the publication of any updated Privacy Policy constitutes your acceptance of those changes.

If you do not agree with any changes made to this Privacy Policy, you should stop using the pkoko platform and may request closure of your account by contacting our support team. Your data rights in relation to data collected prior to account closure remain unaffected.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way pkoko handles your personal data, please contact our Data Support team using the details below. We aim to respond to all privacy-related enquiries within 5 business days.

• Email: [email protected] (subject line: "Privacy Policy Enquiry")
• WhatsApp: +880 1700 000000 (available 24/7)
• Live Chat: Available directly on the pkoko platform, 24 hours a day, 7 days a week
• Response time: Privacy-related enquiries are typically responded to within 5 business days. Data rights requests (access, erasure, portability) are processed within 30 days of identity verification.