pkoka Privacy Policy

1. Data We Collect

When you register for a pkoka account, use our services, or interact with the platform in any way, we may collect and process the following categories of personal data. We collect only what is necessary for the specific purpose described, and we do not retain data beyond the periods outlined in Section 6 of this policy.

1.1 Identity and Contact Information

At registration and during any account verification process, pkoka collects information that allows us to confirm who you are and to communicate with you. This includes:

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify the 18+ age requirement)
• Email address (used for account communications and security alerts)
• Mobile phone number (used for account verification, two-factor authentication, and support communications)
• Residential address (collected at the withdrawal verification stage)
• National Identity Card (NID) number or passport number where documentary verification is requested

1.2 Financial and Payment Information

To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank channels, pkoka collects and records:

• Mobile wallet account numbers (bKash, Nagad, Rocket, Upay) associated with transactions
• Bank account details where direct bank transfers are used
• Transaction reference numbers and timestamps
• Deposit and withdrawal amounts in Bangladeshi Taka (৳)

1.3 Account Activity Data

As you use the platform, pkoka automatically records activity data that is necessary for platform operation, fraud prevention, and responsible gaming monitoring. This includes:

• Betting history, game session logs, and wager amounts
• Bonus claims and wagering progress records
• Login timestamps and session durations
• Responsible gaming limit settings and self-exclusion records
• Support interaction logs and correspondence history

1.4 Technical and Device Data

When you access pkoka via a web browser or mobile device, our servers automatically receive certain technical information. This is standard practice for all web-based platforms and includes:

• IP address (used for geographic access controls and fraud detection)
• Browser type, version, and operating system
• Device type and screen resolution
• Referring URL and pages visited within the platform
• Time zone and preferred language settings

Data Category	Examples	Primary Purpose
Identity	Name, DOB, NID, address	Age verification, KYC compliance
Contact	Email, mobile number	Account security, support
Financial	bKash number, transaction IDs	Payment processing, AML
Activity	Bet history, session logs	Responsible gaming, dispute resolution
Technical	IP address, browser type	Fraud detection, platform performance

2. How We Use Your Data

pkoka processes your personal data only where we have a lawful basis for doing so. The primary legal bases we rely upon are: (a) contractual necessity — processing required to provide you with the services you have signed up for; (b) legal obligation — processing required to comply with applicable laws including anti-money laundering and age verification requirements; and (c) legitimate interests — processing carried out for fraud prevention, platform security, and responsible gaming monitoring, where those interests are not overridden by your privacy rights.

2.1 Delivering Platform Services

The most fundamental use of your data is to operate your account and deliver the betting and gaming services you have requested. This includes processing your deposits and withdrawals, recording your betting activity for account balance accuracy, applying bonuses to your account, and enabling you to access the full range of pkoka games and markets.

2.2 Identity Verification and Regulatory Compliance

pkoka is required by its operational standards to verify the identity and age of all players before processing withdrawals, and in certain circumstances at the account registration stage. Your identity documents and personal details are used solely for this verification purpose and are stored securely with access restricted to authorised compliance personnel. pkoka may also be required to share certain data with relevant authorities in connection with anti-money laundering (AML) investigations or court orders — see Section 3 for details.

2.3 Fraud Prevention and Security

pkoka uses technical data, account activity patterns, and payment behaviour to detect and prevent fraudulent activity, including duplicate account creation, bonus abuse, money laundering, and unauthorised access attempts. Automated systems analyse this data in real time, and where a risk flag is raised, our security team reviews the account manually. This processing is carried out under our legitimate interest in protecting the integrity of the platform and safeguarding all legitimate players.

2.4 Responsible Gaming Monitoring

pkoka is committed to player welfare. We monitor account activity for patterns that may indicate problematic gambling behaviour, such as rapid escalation of bet sizes, unusually long session durations, or repeated self-exclusion requests followed by new account creation attempts. Where such patterns are identified, our responsible gaming team may reach out proactively to offer support resources. You can read more about available tools on our Responsible Gaming page.

2.5 Marketing Communications

If you have opted in to receive promotional communications from pkoka, we will use your email address and mobile number to send you information about offers, bonuses, seasonal promotions (including BPL season specials and Eid promotions), and new game releases. You may withdraw your consent to marketing communications at any time by contacting [email protected] or using the unsubscribe link included in all promotional emails. Withdrawal of marketing consent does not affect your ability to use the platform.

3. Data Sharing & Disclosure

pkoka does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share personal data with external parties only in the specific circumstances described below, and only to the extent strictly necessary for the purpose in question.

3.1 Payment Service Providers

To process your deposits and withdrawals, pkoka shares relevant transaction data with your chosen payment service provider — bKash, Nagad, Rocket, Upay, or the relevant bank. The data shared is limited to what is required to execute the transaction and is governed by the privacy policies of those respective providers. pkoka recommends that you review the privacy policy of your payment provider for details of how they handle transaction data.

3.2 Game Providers

pkoka's platform integrates games from third-party providers including Pragmatic Play, PG Soft, JILI, Evolution Gaming, Ezugi, Spribe, and others. When you play a game delivered by one of these providers, certain session data (such as player ID, session token, and wager amounts) is transmitted to the provider's servers to render the game correctly and calculate outcomes. Game providers operate under contractual data processing agreements with pkoka and are not permitted to use this data for their own marketing purposes.

3.3 Legal and Regulatory Disclosure

pkoka may be legally compelled to disclose personal data to law enforcement agencies, government bodies, or regulatory authorities where required by a valid court order, warrant, subpoena, or equivalent legal instrument. In such cases, pkoka will disclose only the specific data requested and will, where legally permissible, inform the affected player of the disclosure. pkoka will not voluntarily provide personal data to any authority without a valid legal basis.

3.4 Platform Infrastructure Providers

pkoka uses third-party cloud hosting, database management, and cybersecurity services to operate its technical infrastructure. These providers process personal data on pkoka's behalf under strict data processing agreements and are prohibited from accessing or using your data for any purpose beyond delivering the contracted technical service. All infrastructure providers used by pkoka maintain industry-standard security certifications.

3.5 Business Transfers

In the event that pkoka undergoes a merger, acquisition, restructuring, or sale of assets, personal data held by pkoka may be transferred to the acquiring entity as part of that transaction. Where such a transfer occurs, pkoka will take reasonable steps to ensure the receiving entity applies data protection standards equivalent to those described in this policy, and will notify affected players of the transfer within a reasonable timeframe.

4. Cookies & Tracking

pkoka uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage patterns, and protect against fraud. A cookie is a small text file that is stored on your device when you visit a website. Cookies do not contain executable code and cannot be used to access other files on your device.

4.1 Types of Cookies Used

• Essential cookies: These are strictly necessary for the platform to function. They manage your login session, maintain your account state across pages, and enable secure payment flows. The platform cannot function correctly without these cookies, and they cannot be disabled.
• Analytical cookies: These cookies allow pkoka to understand how users interact with the platform — which pages are visited most frequently, where users encounter errors, and how navigation flows perform. This data is collected in aggregated, anonymised form and is used solely to improve the platform.
• Preference cookies: These cookies remember settings you have applied — such as language preference or responsible gaming limit configurations — so that you do not need to re-enter them on each visit.
• Security cookies: These cookies help pkoka identify and prevent fraudulent activity, including bot traffic, automated betting scripts, and credential-stuffing attacks.

4.2 Managing Your Cookie Preferences

You can control non-essential cookie categories through your browser's privacy settings. Most modern browsers allow you to block or delete cookies on a per-site basis. Please note that disabling certain cookies may affect the functionality of the pkoka platform — for example, disabling preference cookies means your session settings will not be saved between visits.

4.3 Do Not Track

Some browsers transmit a "Do Not Track" (DNT) signal to websites. pkoka currently does not alter its data collection practices in response to DNT signals, as there is no universally accepted standard for how platforms should interpret such signals. We encourage you to use your browser's cookie controls directly if you wish to limit tracking.

5. Data Security

pkoka implements a layered security architecture designed to protect your personal data from unauthorised access, accidental loss, alteration, or disclosure. Our security measures are reviewed and updated regularly to reflect current best practices in the online gaming and financial services industries.

Key security measures in place include:

• Transport Layer Security (TLS): All data transmitted between your browser or app and the pkoka platform is encrypted using TLS 1.2 or higher. This applies to login sessions, payment flows, support chat, and all API communications.
• Encrypted data storage: Sensitive fields in pkoka's database — including identity document numbers and payment reference data — are stored in encrypted form. Database access is restricted to authorised systems and personnel through role-based access controls.
• Two-factor authentication (2FA): pkoka offers 2FA for player accounts. We strongly encourage all players to enable 2FA to reduce the risk of unauthorised account access.
• Intrusion detection and monitoring: pkoka's infrastructure is monitored continuously for suspicious access patterns, unusual API usage, and known attack signatures. Automated alerting systems notify the security team of anomalies in real time.
• Staff access controls: Access to player personal data by pkoka employees is governed by the principle of least privilege — staff members can access only the data necessary for their specific role. All access is logged and auditable.
• Data breach response: In the event of a confirmed data breach that poses a risk to affected players, pkoka will notify impacted users as promptly as practicable and will take immediate steps to contain and remediate the breach.

While pkoka takes all reasonable technical and organisational measures to protect your data, no internet-based system can guarantee absolute security. You are responsible for keeping your account credentials confidential and for logging out of your account when using shared or public devices.

6. Data Retention

pkoka retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

Data Type	Retention Period	Reason for Retention
Account identity data	Duration of account + 5 years post-closure	AML compliance, legal obligations
Transaction records	7 years from transaction date	Financial record-keeping, AML
Betting and game logs	3 years from session date	Dispute resolution, responsible gaming
Support correspondence	3 years from last interaction	Service quality, dispute history
Marketing consent records	Until consent withdrawn + 1 year	Consent audit trail
Technical/device logs	90 days	Fraud detection, security monitoring

Upon expiry of the applicable retention period, personal data is either securely deleted from pkoka's systems or anonymised in such a way that it can no longer be linked to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

Where you request account closure, pkoka will deactivate your account and begin the data deletion process in accordance with the retention schedule above. Note that certain legal retention obligations mean that not all data can be deleted immediately upon account closure — this is a standard requirement for regulated online platforms handling financial transactions.

7. Your Privacy Rights

pkoka respects your rights in relation to your personal data. The following rights are available to all pkoka account holders and can be exercised by contacting us at [email protected] with the subject line "Privacy Rights Request". pkoka will respond to all valid requests within 30 days.

7.1 Right of Access

You have the right to request a copy of the personal data that pkoka holds about you. Upon a verified access request, pkoka will provide a structured summary of your data in a readable format. This summary will cover identity data, transaction history, account activity records, and any communications history held in our systems.

7.2 Right to Rectification

If any personal data pkoka holds about you is inaccurate or incomplete, you have the right to request that we correct it. Minor corrections — such as a misspelled name or incorrect contact number — can typically be completed within 5 business days of a verified request. Corrections to identity documents require re-submission of updated verification documents.

7.3 Right to Erasure

You may request the deletion of your personal data where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you have withdrawn consent and no other legal basis for processing exists; or (c) the data has been processed unlawfully. Please be aware that pkoka may be unable to fulfil erasure requests in full where retention is required by applicable law — for example, financial transaction records must be retained for a defined statutory period regardless of an erasure request.

7.4 Right to Restriction of Processing

You may request that pkoka restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or while an objection to processing is under consideration. During a restriction period, pkoka will store your data but will not actively process it beyond what is strictly necessary.

7.5 Right to Object to Marketing

You have the absolute right to object to the use of your personal data for direct marketing purposes at any time. To opt out of marketing communications from pkoka, please contact [email protected] or use the unsubscribe option included in all promotional messages. Opt-out requests are processed within 48 hours.

8. Policy Updates & Contact

pkoka reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable legal requirements, or platform features. When material changes are made, we will update the effective date at the top of this page and, where the changes significantly affect your rights or our obligations, we will notify active account holders via email.

Minor editorial updates — such as clarifications of existing practices or corrections to typographical errors — will be reflected in the updated policy without separate notification. We encourage you to review this page periodically to stay informed about how pkoka handles your personal data. The most current version of this Privacy Policy is always available at pkoka.app/privacy-policy.

8.1 Contact the pkoka Privacy Team

If you have any questions, concerns, or requests relating to this Privacy Policy or the way pkoka handles your personal data, please reach out to our support team using the contact details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

• Email: [email protected] (subject line: "Privacy Enquiry")
• Live Chat: Available 24/7 directly through the pkoka platform
• Response time: Email enquiries within 2 business days; live chat within 5 minutes
• Operating hours: Support available 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

This Privacy Policy was last reviewed and updated on 1 January 2026. pkoka reserves the right to amend this policy at any time. The effective date displayed at the top of this page reflects the date of the most recent revision.