p0k0 Privacy Policy — Your Data, Handled With Care

01 Introduction

This Privacy Policy (hereinafter "Policy") describes how p0k0 (hereinafter "the Company", "we", "us", or "our") collects, processes, stores, and protects personal data relating to individuals (hereinafter "Player", "User", or "you") who access or use the p0k0 online gaming platform at https://p0k0.io and all associated subdomains and mobile applications (collectively, "the Platform").

p0k0 operates as an offshore gaming platform serving English-speaking players, including those based in Bangladesh. We are committed to handling personal data responsibly and in a manner consistent with internationally recognised data-protection principles. By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference into your agreement with p0k0.

02 Data We Collect

p0k0 collects personal data in the following categories. We collect only the minimum data necessary to deliver our services, comply with our legal obligations, and maintain platform security.

p0k0 does not collect sensitive personal data such as biometric data, racial or ethnic origin, political opinions, religious beliefs, or health records, except to the limited extent that a government-issued identity document (submitted for KYC purposes) may incidentally contain such information. In such cases, the sensitive elements are not separately processed or stored.

03 How We Collect Your Data

p0k0 collects personal data through the following channels:

• Direct Provision: Data you provide when creating an account, completing KYC verification, making a deposit or withdrawal, contacting support, or completing any form on the Platform.
• Automated Technologies: Data collected automatically when you access the Platform, including through cookies, web beacons, server logs, and similar tracking technologies. See Section 7 (Cookies & Tracking) for full details.
• Payment Processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and other payment partners when you initiate a deposit or withdrawal. We receive only the data necessary to reconcile the transaction.
• KYC & Identity Verification Partners: Where p0k0 uses a third-party identity verification service to validate documents submitted during the KYC process, that service may return a verification result and related data points to p0k0.
• Game Providers: Aggregated or anonymised gameplay data from game provider systems (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) to support fair-play monitoring and dispute resolution.
• Publicly Available Sources: In limited circumstances related to fraud prevention or AML screening, p0k0 may consult publicly available databases or sanctions lists.

04 How We Use Your Data

p0k0 uses the personal data we collect for the following purposes:

• Account Administration: Creating and managing your p0k0 account, authenticating your identity at login, and enabling you to access Platform features.
• Payment Processing: Processing deposits and withdrawals via your chosen payment method, verifying that payments originate from accounts registered in your name, and reconciling transaction records.
• KYC & AML Compliance: Verifying your age, identity, and payment method ownership as required to comply with our anti-money-laundering and know-your-customer obligations. This includes screening against international sanctions and politically-exposed-person (PEP) lists.
• Customer Support: Responding to your support queries, resolving disputes, and maintaining records of communications as required for quality assurance and legal accountability.
• Responsible Gaming: Monitoring gaming behaviour for indicators of problem gambling, enforcing self-exclusions and deposit limits, and sending responsible gaming alerts where appropriate.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, account takeovers, bonus abuse, collusion, and other prohibited conduct. This includes IP-based risk scoring and device fingerprinting.
• Platform Analytics & Improvement: Analysing aggregated usage data to understand how players use the Platform, identify technical issues, and prioritise product improvements.
• Marketing & Promotions: Sending you information about bonuses, promotions, and platform updates by email or SMS, where you have opted in to receive such communications. You may withdraw your consent at any time by contacting support or using the unsubscribe mechanism in any marketing message.
• Legal & Regulatory Obligations: Complying with requests from law enforcement or regulatory authorities where legally required, and maintaining records for the periods mandated by applicable law.

05 Legal Basis for Processing

Where p0k0 applies internationally recognised data-protection principles, the legal bases on which we rely to process your personal data are as follows:

• Contractual Necessity: Processing required to perform our contract with you — including account registration, payment processing, and customer support — is carried out on the basis that it is necessary to deliver the services you have signed up for.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics is carried out on the basis of p0k0's legitimate interest in operating a secure and sustainable platform, balanced against your rights and interests.
• Legal Obligation: Processing required for AML compliance, KYC verification, sanctions screening, and retention of financial records is carried out to fulfil our legal and regulatory obligations.
• Consent: Processing for direct marketing communications is carried out on the basis of your freely given, specific, and informed consent at the time of opt-in.

06 Data Sharing & International Transfers

p0k0 does not sell, rent, or trade your personal data to third parties. We share personal data only in the following limited circumstances:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other payment partners receive the minimum data necessary to process your transactions (typically your wallet number or card reference and the transaction amount).
• KYC & Verification Services: Third-party identity verification providers receive copies of documents you submit for KYC purposes. These providers are bound by strict data-processing agreements and may not use your data for any purpose other than verification.
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other game studios receive a session token and anonymised player identifier to deliver their games on the Platform. They do not receive your full personal profile.
• IT & Infrastructure Providers: Cloud hosting, content delivery, and database service providers who process data on our behalf under data-processing agreements that restrict their use of your data to service delivery only.
• Legal & Regulatory Authorities: We will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required by law, or where we believe disclosure is necessary to protect the safety of players or the integrity of the Platform.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of p0k0's business assets, player data may be transferred to the acquiring entity, subject to the same privacy protections as set out in this Policy.

International Data Transfers: p0k0 operates as an offshore platform and some of the service providers listed above may be located outside Bangladesh. Where data is transferred internationally, p0k0 takes reasonable steps to ensure that the recipient applies data-protection standards that are substantially equivalent to those described in this Policy, including through the use of contractual clauses and due-diligence assessments of third-party providers.

07 Cookies & Tracking Technologies

p0k0 uses cookies and similar tracking technologies on the Platform to deliver core functionality, maintain session security, and improve the player experience. A cookie is a small text file placed on your device by your browser when you visit a website. The following categories of cookies are used on the Platform:

p0k0 does not use third-party advertising or retargeting cookies. You may manage or delete cookies through your browser settings at any time. Please note that disabling strictly-necessary cookies will prevent you from accessing core Platform features including account login.

08 Data Retention

p0k0 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal, regulatory, or contractual obligations. The general retention periods applied by p0k0 are as follows:

• Active Account Data: Retained for the duration of your account relationship with p0k0 and for a period of 5 years following account closure, to satisfy AML record-keeping obligations.
• KYC Documents: Retained for a minimum of 5 years from the date of verification or from the date of account closure, whichever is later, in compliance with anti-money-laundering requirements.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction.
• Support Communications: Retained for 3 years from the date of the last interaction, unless the communication relates to a dispute or legal matter, in which case it is retained until the matter is fully resolved.
• Marketing Preferences: Retained until you withdraw consent or for a maximum of 2 years from your last interaction with a marketing communication, whichever occurs first.
• Technical & Usage Logs: Typically retained for 12 months in identifiable form, after which they are aggregated and anonymised for analytics purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes, as it can no longer be used to identify any individual.

09 Data Security

p0k0 implements a layered security architecture designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include, but are not limited to:

• SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted using industry-standard TLS 1.2 or TLS 1.3 protocols. Look for the padlock icon in your browser address bar when using p0k0.
• Encryption at Rest: Sensitive stored data, including KYC documents and financial records, is encrypted at rest using AES-256 or equivalent encryption standards.
• Access Controls: Access to personal data by p0k0 employees and contractors is restricted on a strict need-to-know, least-privilege basis. All internal access is logged and audited.
• Two-Factor Authentication: Internal systems holding player data require multi-factor authentication for all staff access.
• Regular Security Assessments: The Platform and its infrastructure are subject to periodic vulnerability assessments and penetration tests conducted by independent security specialists.
• Incident Response: p0k0 maintains a documented incident response plan. In the event of a data breach that affects your personal data, we will notify affected players promptly and take immediate steps to contain and remediate the breach.

10 Your Data Rights

Subject to applicable law and certain legal exemptions (for example, where data must be retained for AML or fraud-prevention purposes), you have the following rights in relation to your personal data held by p0k0:

• Right of Access: You may request a copy of all personal data p0k0 holds about you. We will provide this within 14 calendar days of a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Account details (name, address, contact number) can be updated by contacting support.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected. Note that deletion requests cannot be fulfilled in respect of data that must be retained for AML compliance, fraud prevention, or unresolved dispute records.
• Right to Restrict Processing: You may request that we restrict processing of your data in certain circumstances, for example while a dispute is under investigation.
• Right to Data Portability: Where technically feasible and legally applicable, you may request that your personal data be provided to you in a structured, machine-readable format.
• Right to Object: You may object to processing of your personal data where that processing is based on legitimate interests. We will honour your objection unless we can demonstrate a compelling legitimate ground that overrides your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact us at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 2 business days and provide a substantive response within 14 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 14 days and will inform you accordingly.

11 Children & Minors

The p0k0 Platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. If you are under 21, you must not create a p0k0 account or use the Platform in any way.

If p0k0 discovers or has reasonable grounds to suspect that an account has been registered by a person under the age of 21, that account will be suspended immediately. All personal data associated with the account will be securely deleted to the extent permitted by our AML retention obligations, and any funds held in the account will be handled in accordance with our Terms & Conditions and applicable legal requirements.

p0k0 actively encourages parents and guardians to use parental control software to prevent minors from accessing online gaming content. If you believe a minor may have accessed the Platform using your account or payment details, please contact [email protected] immediately.

12 Third-Party Links & Services

The p0k0 Platform may contain links to third-party services, including game provider portals and payment processor interfaces. This Privacy Policy applies solely to the p0k0 Platform. We are not responsible for the privacy practices of third-party websites or services, and we encourage you to review the privacy notices of any third-party service you access.

Game content delivered by providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi is rendered within the p0k0 Platform environment. These providers may collect limited technical data (such as session identifiers) directly for the purpose of delivering their games. Their data collection is governed by their own privacy policies, and p0k0 has contractual arrangements in place to ensure these providers do not use player data for any purpose beyond game delivery and fair-play integrity.

13 Changes to This Privacy Policy

p0k0 reserves the right to update or revise this Privacy Policy at any time. The "Last Revised" date shown at the top of this document reflects the date on which the most recent changes were made.

Where a change is material — meaning it significantly affects how we collect, use, or share your personal data, or meaningfully alters your data rights — we will notify registered players by email and via an on-platform notice at least 14 calendar days before the change takes effect. Non-material changes (such as clarifications of existing practices or typographical corrections) may take effect immediately upon publication without prior notice.

Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the Platform and contact support to close your account.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how p0k0 has handled your personal data, please contact our support team:

Support Email (plain text — not a clickable link):
[email protected]

Support Hours: 9:00 AM – 11:00 PM BST (UTC+6), Monday to Sunday. A 24/7 automated chatbot is available outside these hours.

Subject Line for Data Requests: Please use "Privacy Policy Query" or "Data Rights Request" in the subject line so your message is routed to the correct team.

We aim to acknowledge all privacy-related queries within 2 business days and to provide a full response within 14 calendar days. Where a matter is complex, we may require up to 28 calendar days in total and will inform you of the extension without delay.