pkoo Privacy Policy — How We Collect, Use, and Protect Your Personal Data

Introduction

This Privacy Policy ("Policy") describes how pkoo ("pkoo", "we", "us", "our"), the operator of the online betting and casino platform accessible at pkoo.io, collects, uses, stores, shares, and protects personal data from individuals ("you", "your", "the Player") who access or use the pkoo platform, including its website, mobile interface, game library, sportsbook, payment channels, customer support services, and promotional communications.

By registering an account on the pkoo platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not register for or use the pkoo platform.

pkoo is committed to protecting the privacy of all players operating from Bangladesh, including those using bKash, Nagad, Rocket, Upay, and other locally supported payment channels. This Policy is intended to be read alongside the pkoo Terms & Conditions, which are incorporated by reference.

Personal Data We Collect

pkoo collects personal data from you in three principal ways: data you provide directly to us, data generated automatically through your use of the platform, and data received from authorised third-party sources. The specific categories of data collected are described below.

2.1 Data You Provide Directly

• Registration Data: Your legal full name, date of birth, gender, email address, mobile phone number, and residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or other).
• Identity Verification Documents: Government-issued photo identification (National ID, passport, or driving licence), proof of residential address, and proof of payment method ownership where required under pkoo's Know Your Customer (KYC) procedures.
• Payment Data: Mobile money account references (bKash, Nagad, Rocket, Upay), card details (Visa, Mastercard), and bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) where applicable. Full card numbers are not stored by pkoo — they are processed directly by PCI-DSS compliant payment processors.
• Support Communications: Messages, complaints, feedback, and attachments you send to the pkoo support team via email at [email protected] or through in-platform support channels.
• Responsible Gaming Preferences: Deposit limit settings, loss limit settings, session timer configurations, time-out requests, and self-exclusion elections made through your account settings.

2.2 Data Collected Automatically

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, games played, bets placed, session duration, click patterns, navigation paths, and feature interactions on the pkoo platform.
• Transaction Logs: A complete record of all deposits, withdrawals, bonus credits, wagering activity, game results, and account balance changes associated with your account.
• Geolocation Data: Approximate location derived from your IP address, used to verify that you are accessing the platform from a permitted jurisdiction and to detect suspicious access patterns.
• Cookie and Tracking Data: Session cookies, persistent cookies, and similar technologies as described in Section 6 of this Policy.

2.3 Data Received from Third Parties

• Payment Processors: Transaction confirmation data, payment status, and dispute notifications from bKash, Nagad, Rocket, Upay, Visa, Mastercard, and affiliated banking partners.
• Identity Verification Providers: Confirmation of identity document authenticity and sanctions screening results from third-party KYC service providers.
• Fraud Prevention Partners: Risk scores, device fingerprint flags, and suspicious activity indicators from pkoo's fraud detection infrastructure providers.
• Game Providers: Game session data, round results, and technical logs from licensed providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe, as required for dispute resolution and game integrity purposes.

How We Use Your Personal Data

pkoo uses the personal data collected from you for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes listed here without first seeking your explicit consent.

pkoo does not use your personal data for automated decision-making that produces significant legal effects without human review. Where automated tools are used in fraud detection or account risk scoring, any consequential decision (such as account restriction) is subject to human review upon the player's request.

Legal Basis for Processing Personal Data

pkoo processes personal data on the following legal grounds, depending on the specific purpose of processing:

• Contract Performance: Processing is necessary to fulfil pkoo's obligations under the player account agreement — including registering your account, processing your bets, crediting winnings, and processing withdrawals via bKash, Nagad, Rocket, or Upay.
• Legal Obligation: Processing is required to comply with applicable laws, including anti-money-laundering (AML) obligations, Know Your Customer (KYC) requirements, record-keeping mandates, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate Interest: Processing is carried out in pkoo's legitimate interests — including fraud detection, platform security, responsible gaming monitoring, business analytics, and resolving customer disputes — provided those interests are not overridden by your fundamental privacy rights.
• Consent: Processing is based on your explicit, freely given, specific, and informed consent — primarily for sending you promotional and marketing communications. You may withdraw consent at any time by contacting [email protected] or updating your communication preferences in the account settings portal.

Data Sharing & Disclosure

pkoo does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. Your data may be shared only in the following limited and controlled circumstances:

5.1 Payment Processors

To process deposits and withdrawals, pkoo shares the minimum necessary payment data with its authorised payment partners including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and affiliated banking institutions. Each payment partner is bound by a data processing agreement and their own applicable privacy regulations.

5.2 Identity Verification Providers

To fulfil KYC obligations, pkoo shares identity document data with third-party verification service providers. These providers operate under strict contractual data protection obligations and are not permitted to use the data for any purpose other than identity verification on pkoo's behalf.

5.3 Game Technology Providers

Session and game result data may be shared with game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe solely for the purposes of game operation, dispute resolution, and technical audit. These providers do not receive registration or payment data.

5.4 Fraud Detection Partners

Device identifiers, IP addresses, and behavioural risk signals may be shared with pkoo's fraud and security infrastructure providers to detect and prevent financial crime, multi-accounting, and platform abuse. These partners operate under data processing agreements with defined access restrictions.

5.5 Legal and Regulatory Disclosure

pkoo may disclose personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts of competent jurisdiction where required by law, court order, or lawful regulatory direction. pkoo will, where legally permitted, notify the affected player of such a disclosure.

5.6 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of pkoo's business, player personal data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer via the registered email address on file prior to the effective date of the transfer.

Cookies & Tracking Technologies

pkoo uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and collect aggregate analytics data that helps us improve the platform experience for all players.

6.1 Types of Cookies Used

• Strictly Necessary Cookies: These cookies are essential for the pkoo platform to function. They enable core functionality such as session authentication, maintaining your account login state across pages, and processing transactions securely. These cookies cannot be disabled without severely impairing platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised data about how players navigate and use the pkoo platform, including which games are most visited, typical session durations, and common navigation paths. This information is used in aggregate to improve platform performance and user experience.
• Functional Cookies: These cookies remember your platform preferences such as language settings, display options, and responsible gaming tool configurations so that you do not need to re-enter them on each visit.
• Security Cookies: These cookies support pkoo's fraud detection infrastructure, helping to identify unusual access patterns, potential account takeover attempts, and suspicious wagering behaviour.

6.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in to and use the pkoo platform. pkoo does not use third-party advertising or retargeting cookies.

Data Retention

pkoo retains personal data for as long as is necessary to fulfil the purposes for which it was collected, as described in this Policy, and for as long as is required by applicable legal, regulatory, accounting, or reporting obligations.

• Active Account Data: Retained for the full duration of your account's active life and for a minimum of five (5) years after account closure, in accordance with anti-money-laundering record-keeping requirements.
• Identity Verification Documents: Retained for a minimum of five (5) years from the date of submission, or longer where required by applicable law.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Support Communications: Retained for three (3) years from the date of the last interaction, or longer where relevant to an ongoing dispute or legal proceeding.
• Marketing Consent Records: Retained for the duration of the consent period and for two (2) years after consent is withdrawn, as evidence of compliance.
• Self-Exclusion Records: Retained indefinitely to prevent re-registration by self-excluded players, regardless of whether the account was subsequently closed.

When personal data is no longer required for any of the above purposes, pkoo will securely delete or anonymise the data in accordance with our internal data lifecycle management procedures.

Your Data Rights

As a player registered on the pkoo platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected]. pkoo will respond to all valid data rights requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of all personal data that pkoo holds about you, along with information about how that data is being used.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate, incomplete, or out of date.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and there is no other legal basis for processing. Note that this right is subject to pkoo's legal obligations to retain certain data for regulatory purposes.
• Right to Restriction: You have the right to request that pkoo restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to pkoo's grounds for processing.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that pkoo transmit that data directly to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where pkoo relies on legitimate interest as its legal basis. pkoo will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

Data Security

pkoo employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction.

• Encryption in Transit: All data exchanged between your browser or device and the pkoo platform is encrypted using 256-bit SSL/TLS protocols. This includes all login sessions, game sessions, payment transactions, and support communications.
• Encryption at Rest: Personal data and transaction records stored on pkoo's servers are encrypted at rest using AES-256 encryption. Database access is restricted to authorised systems and personnel via role-based access controls.
• Password Security: Player passwords are processed using a one-way cryptographic hashing algorithm with salting. pkoo never stores passwords in plaintext and never transmits passwords via unencrypted channels.
• Access Controls: Access to player personal data within pkoo's operations is restricted on a strict need-to-know basis. All internal access is logged and subject to regular audit.
• Intrusion Detection: pkoo operates real-time intrusion detection and prevention systems across its platform infrastructure. Anomalous access patterns trigger immediate security alerts and automated protective responses.
• Incident Response: In the event of a confirmed personal data breach that is likely to result in a risk to the rights and freedoms of affected players, pkoo will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

While pkoo takes all reasonable steps to protect your personal data, no digital platform can guarantee absolute security. Players are reminded to use a strong, unique password for their pkoo account and to notify [email protected] immediately if they suspect unauthorised access.

Children & Minors

The pkoo platform is strictly for adults aged 21 years and above. pkoo does not knowingly collect, process, or store personal data from individuals under the age of 21. All registration applications are subject to mandatory age verification as part of pkoo's KYC procedures.

If pkoo discovers or is notified that personal data has been collected from an individual under the age of 21, that data will be immediately deleted and the associated account permanently closed. Any deposits made by the minor will be refunded to the originating payment method where technically possible.

Third-Party Links

The pkoo platform may contain references or links to third-party payment service providers (bKash, Nagad, Rocket) or game technology providers (Pragmatic Play, Evolution Gaming, etc.) for informational or operational purposes. These third parties maintain their own independent privacy policies and data practices, which pkoo does not control.

pkoo is not responsible for the privacy practices, content, or data security of any third-party service accessed in connection with the use of the pkoo platform, except where pkoo has entered into a specific data processing agreement with that third party governing the handling of player data shared by pkoo. Players are encouraged to review the privacy policies of any third-party service they interact with.

Policy Updates & Amendments

pkoo reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. Material changes to this Policy will be communicated to registered players via the email address on file at least 14 days prior to the effective date of the change, except where immediate amendment is required by law or regulatory direction.

The date of the most recent update to this Policy is displayed at the top of this page. Continued use of the pkoo platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with any updated version of this Policy, you must discontinue use of the pkoo platform and close your account.

The version history of this Policy is maintained internally by pkoo and is available to players upon written request submitted to [email protected].

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way pkoo handles your personal data, please contact the pkoo Data Privacy team using the details below. We aim to respond to all privacy-related enquiries within five (5) business days.

For data rights requests (access, rectification, erasure, portability, objection), please include your registered email address and a description of your specific request. pkoo may request additional verification of your identity before processing any data rights request to protect against unauthorised access to player data.