pjokk Privacy
Policy & Data Protection

pjokk operates the online betting and casino platform accessible at pjokk.io. We are the data controller responsible for all personal data collected through the Platform. pjokk is built specifically for the Bangladeshi online entertainment market, providing cricket betting, live casino, slots, and other gaming products to adults aged 21 and above.

As data controller, pjokk determines the purposes and means by which personal data is processed. Where pjokk engages third-party service providers to process data on its behalf — for example payment processors or identity verification services — those providers act as data processors under our instruction and are contractually bound to maintain the same standards of data protection that pjokk itself upholds.

For all data protection enquiries, you may contact us directly at [email protected]. The support team operates 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).

pjokk collects only the personal data that is necessary to provide, maintain, secure, and improve the Platform. We do not collect data speculatively or beyond what is required for the purposes described in this policy. The categories of data we collect are as follows:

• Identity Data: Full legal name, date of birth, nationality, and gender — collected at account registration and used for age verification and account identification.
• Contact Data: Email address, mobile phone number, and residential address — used for account communications, transaction notifications, and support correspondence.
• Financial Data: Mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank), transaction history, deposit and withdrawal records, and BDT wallet balances. This data is used exclusively for processing payments and complying with financial regulations.
• Verification Documents: Copies of government-issued identification documents (National ID, passport, or birth certificate) submitted during the Know Your Customer (KYC) verification process. These are retained securely for the duration required by applicable law.
• Gameplay Data: Betting history, game session logs, wagering amounts, win/loss records, and bonus utilisation. This data is used for account management, dispute resolution, responsible gaming monitoring, and product improvement.
• Technical Data: IP address, device type and model, operating system, browser type, screen resolution, session timestamps, and referring URL. This data is used for security monitoring, fraud detection, and platform optimisation.
• Communication Data: Records of all correspondence between you and pjokk support, including live chat transcripts, email threads, and any documents submitted in connection with a support query or dispute.
• Marketing Preferences: Your consent status for receiving promotional communications from pjokk, and the record of any consent withdrawals.

pjokk collects personal data through the following channels and methods:

• Account Registration: When you create a pjokk account, you directly provide your name, date of birth, contact details, and payment method information through the registration form.
• KYC Verification: When your account is selected for identity verification or you request a withdrawal above the verification threshold, you submit copies of identity documents directly to the pjokk verification team.
• Platform Interaction: As you use the Platform — browsing games, placing bets, making deposits and withdrawals, and contacting support — data about your activity is generated and recorded automatically.
• Cookies & Device Technologies: pjokk's Platform uses cookies and similar tracking technologies to collect Technical Data about your device and browsing behaviour. Please see Section 7 for full details on our use of cookies.
• Third-Party Payment Processors: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a supported bank, pjokk receives transaction confirmation data from those processors, including transaction reference numbers and timestamps.
• Fraud Prevention Partners: pjokk may receive risk-scoring data from fraud detection service providers in connection with account verification and transaction monitoring activities.

pjokk uses the personal data it collects strictly for the purposes described below. We do not use your data for any purpose that conflicts with this policy without first obtaining your explicit consent or being required to do so by applicable law.

• Account Management: Creating, maintaining, verifying, and administering your pjokk account, including processing your login credentials and keeping your account details up to date.
• Payment Processing: Executing deposits and withdrawals via your registered payment methods (bKash, Nagad, Rocket, Upay, and supported banks), maintaining accurate BDT wallet balances, and issuing transaction receipts.
• Age & Identity Verification: Confirming that all account holders are aged 21 or above and that the identity information provided at registration is accurate and genuine — a legal and operational requirement for pjokk's platform.
• Fraud Detection & Security: Monitoring account activity for signs of fraudulent behaviour, unauthorised access, money laundering, multi-accounting, or any form of abuse as defined in our Terms & Conditions.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and to fulfil self-imposed deposit limits, cooling-off periods, or self-exclusion requests made by Players.
• Customer Support: Responding to your queries, complaints, and requests, and maintaining records of all communications for quality assurance and dispute resolution purposes.
• Legal Compliance: Meeting obligations under applicable laws and regulations, including anti-money laundering (AML) requirements, financial record-keeping mandates, and cooperation with law enforcement agencies where required.
• Platform Improvement: Analysing aggregated, anonymised usage data to understand how Players interact with the Platform and to improve game selection, user experience, and technical performance.
• Marketing (with consent only): Sending promotional communications about bonuses, new games, seasonal offers, and platform news — only to Players who have explicitly opted in to receive such communications.

pjokk processes personal data on one or more of the following legal grounds, depending on the specific purpose of processing:

• Contractual Necessity: The majority of data processing on pjokk is necessary to perform our contract with you — i.e., to provide the betting and casino services you signed up for. Without this processing, we could not operate your account, process payments, or settle bets.
• Legal Obligation: Certain data processing activities — particularly those related to identity verification, AML compliance, financial record-keeping, and cooperation with regulatory or law enforcement bodies — are required by applicable law and cannot be waived.
• Legitimate Interests: pjokk processes some data on the basis of its legitimate interests as a platform operator, including fraud detection, security monitoring, and aggregated analytics for platform improvement. We conduct a balancing test before relying on this ground to ensure our interests do not override your rights.
• Consent: Where processing is not covered by the above grounds — primarily in relation to marketing communications — pjokk will only process your data with your freely given, specific, and informed consent. You may withdraw consent at any time without penalty by contacting [email protected].

pjokk does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share data only in the circumstances set out below, and only to the extent necessary for the stated purpose.

• Payment Processors: We share financial data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank solely for the purpose of executing your deposit and withdrawal transactions. Each processor handles your data under its own privacy policy and is contractually required to maintain appropriate security standards.
• Identity Verification Providers: pjokk may engage third-party KYC and age verification services to confirm the authenticity of documents submitted during the verification process. These providers act as data processors under pjokk's instruction.
• Fraud Prevention & Security Partners: To protect the Platform and its users, pjokk may share limited Technical Data (such as IP addresses and device fingerprints) with fraud detection service providers. This sharing is governed by strict data processing agreements.
• Law Enforcement & Regulatory Bodies: pjokk will disclose personal data to governmental authorities, law enforcement agencies, or financial intelligence units when required to do so by a valid legal order, court order, or applicable regulation. pjokk will notify you of such disclosure where it is legally permitted to do so.
• Game Content Providers: Certain game data (such as gameplay session identifiers) may be transmitted to third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe — for the purpose of delivering their game content and resolving technical disputes. These providers do not receive identity or financial data beyond what is strictly necessary.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of pjokk's business assets, personal data held by pjokk may be transferred to the acquiring entity. You will be notified of any such transfer and any material change to how your data is handled.

pjokk uses cookies and similar technologies to ensure the Platform functions correctly, to protect account security, and to understand how users interact with the site. The following types of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to operate. They maintain your login session, remember your account preferences within a session, and protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without breaking Platform functionality.
• Security Cookies: Used to detect and prevent fraudulent or abusive activity, including bot traffic, multi-accounting attempts, and unusual login patterns. These cookies are essential to the Platform's integrity and safety systems.
• Performance & Analytics Cookies: pjokk uses anonymised analytics data to understand page load performance, navigation patterns, and feature engagement. This data is aggregated and does not identify individual users. It is used solely to improve the Platform's technical performance and user experience.
• Functional Cookies: These remember your display preferences — such as notification settings and game interface options — so you do not need to reconfigure them on each visit.
• Cookie Retention: Session cookies expire when you close your browser. Persistent cookies used for security and analytics are retained for up to 12 months from the date of last activity, after which they are automatically deleted.
• Managing Cookies: You can manage or delete cookies via your browser settings at any time. Note that disabling certain cookies may affect your ability to log in or use features of the pjokk Platform correctly. pjokk does not use third-party advertising cookies or behavioural targeting cookies.

pjokk retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Active Account Data: All personal data associated with an active pjokk account is retained for the duration of the account's active status. This includes identity data, contact data, financial data, and gameplay records.
• Closed Account Data: Following account closure — whether initiated by you or by pjokk — we retain your identity and financial transaction records for a minimum of 5 years from the date of closure, in compliance with financial record-keeping requirements applicable to online payment platforms operating in the Bangladeshi market.
• KYC Documents: Identity verification documents are retained for a minimum of 5 years following the completion of the verification process or account closure, whichever is later. After the retention period expires, documents are securely destroyed.
• Support Communications: Records of customer support interactions are retained for 3 years from the date of the interaction, or longer where the interaction relates to a formal dispute or legal proceeding.
• Marketing Data: Consent records and marketing preference data are retained for the duration of your account plus 2 years following account closure, to evidence compliance with consent requirements.
• Technical & Log Data: Server logs and Technical Data associated with your sessions are retained for up to 12 months for security and fraud investigation purposes, after which they are anonymised or deleted.

pjokk implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, alteration, or disclosure. Our security infrastructure includes:

• Transport Encryption: All data transmitted between your device and the pjokk Platform is encrypted using 256-bit TLS/SSL. This applies to all pages of the Platform, including login, registration, deposit, withdrawal, and support pages.
• Data-at-Rest Encryption: Sensitive personal data stored on pjokk's servers — including financial data and identity documents — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. pjokk staff are granted access only to the data necessary to perform their specific job function, and all access is logged and auditable.
• Intrusion Detection: pjokk's infrastructure is monitored 24/7 by automated intrusion detection and anomaly alerting systems. Any unusual access pattern or potential security incident triggers an immediate internal review.
• Penetration Testing: The Platform is subject to regular security assessments to identify and remediate vulnerabilities before they can be exploited.
• Staff Training: All pjokk staff who handle personal data receive data protection and security awareness training as part of their onboarding and on an ongoing basis.
• Breach Response: In the event of a personal data breach that poses a risk to your rights, pjokk will notify affected users without undue delay and will take immediate steps to contain and remediate the breach. Please contact [email protected] immediately if you believe your account data may have been compromised.

As a pjokk account holder, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all valid requests within a reasonable timeframe and at no charge to you.

• Right of Access: You have the right to request a copy of all personal data that pjokk holds about you. We will provide this in a clear, accessible format within 30 days of receiving your request.
• Right to Rectification: If any personal data pjokk holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update basic account information directly through your account settings dashboard.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you believe the data has been processed unlawfully. Note that this right is subject to pjokk's legal data retention obligations — we may be required to retain certain data (particularly financial records) even following an erasure request.
• Right to Restrict Processing: You may request that pjokk restrict the processing of your personal data in certain circumstances — for example while we verify the accuracy of data you have disputed, or while an objection to processing is under review.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You have the right to object to pjokk processing your data where that processing is based on legitimate interests. You also have an absolute right to object to your data being used for direct marketing purposes at any time.
• Right to Withdraw Consent: Where pjokk processes your data on the basis of consent (primarily for marketing communications), you may withdraw that consent at any time by contacting [email protected] or by using the unsubscribe mechanism in any marketing email. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

pjokk is strictly an adult platform. We do not knowingly collect, process, or retain any personal data from persons under the age of 21. Our registration process includes mandatory age declaration and active identity verification to enforce this requirement.

• If pjokk discovers or is notified that an account has been registered by a person under 21, the account will be closed immediately and all associated personal data will be deleted from our systems, with the exception of the minimum records required to prevent re-registration by the same individual.
• Any balance held in an account confirmed as belonging to a person under 21 will be returned via the original deposit method where technically possible, after deducting any bonus amounts that were credited to the account.
• Parents and guardians who believe a minor may have registered an account on pjokk should contact [email protected] immediately. pjokk takes these reports seriously and will investigate and act on all such notifications without delay.
• pjokk recommends that parents and guardians use parental control software to restrict access to online gambling platforms on devices used by minors in the household. Preventing underage gambling is a shared responsibility between platform operators and families.

pjokk reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes to the Platform, or changes in applicable law. When we make material changes to this policy, we will notify all registered account holders by email to the address associated with their account, and we will update the "Last Updated" date shown at the top of this document and in the metadata panel above.

• Minor Updates: Corrections of typographical errors, clarifications of existing language, and formatting adjustments that do not change the substance of the policy may be made without advance notice to users.
• Material Changes: Any changes that affect how we collect, use, share, or retain your personal data — or that affect your rights under this policy — are considered material. We will provide at least 14 days' advance notice of material changes before they take effect.
• Continued Use: Your continued use of the pjokk Platform after a policy update becomes effective constitutes your acceptance of the updated terms. If you do not agree with the updated policy, you should close your account and cease using the Platform before the effective date of the changes.
• Version History: Previous versions of the Privacy Policy are available upon request by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to how pjokk handles your personal data, please contact us using the details below. pjokk is committed to responding to all data protection enquiries promptly and transparently.

• Support Email: [email protected] — the primary channel for all data protection enquiries, subject access requests, erasure requests, and privacy complaints.
• Response Time: pjokk aims to acknowledge all data protection queries within 24 hours and to provide a substantive response within 30 days. Complex requests may take longer; in such cases we will keep you informed of progress.
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).
• Complaints Process: If you are not satisfied with pjokk's response to a data protection concern, you may escalate the matter by requesting a formal review by a senior member of the pjokk compliance team. Escalation requests must be submitted within 30 days of receiving the initial response.
• Good Faith Commitment: pjokk will handle all privacy-related correspondence in good faith and will not take any adverse action against a user solely for exercising their data protection rights or for submitting a legitimate privacy complaint.