Your Privacy Matters to pokk

pokk ("pokk", "we", "us", "our") operates the online betting and gaming platform accessible at pokk.net (the "Platform"). We understand that your personal privacy is important, and we are committed to being open and transparent about how we collect, use, store, and protect your personal information.

This Privacy Policy ("Policy") applies to all personal data that pokk processes in connection with your use of the Platform, including when you register an account, make a deposit, place a wager, contact our support team, or interact with any other feature of the pokk service. This Policy also covers data we collect through automated means such as cookies and server logs when you browse pokk.net.

This Policy should be read alongside pokk's Terms & Conditions and Responsible Gaming Policy. Where those documents refer to the treatment of your personal data, this Privacy Policy provides the detailed governing framework.

pokk serves players primarily located in Bangladesh and processes all account balances in Bangladeshi Taka (BDT ৳). References to applicable regulations in this Policy reflect our commitment to operating in a manner consistent with internationally recognised data protection standards, adapted to the context of the Bangladesh market.

For the purposes of this Privacy Policy, pokk acts as the data controller in respect of all personal data collected through or in connection with the Platform. As data controller, pokk determines the purposes for which your personal data is processed and the means by which that processing takes place.

Where pokk engages third-party service providers to process personal data on its behalf — for example, payment processors, identity verification providers, or customer support software vendors — those parties act as data processors and are bound by contractual obligations to process data only on pokk's instructions and to maintain appropriate security standards.

All data protection enquiries and requests to exercise your data rights should be directed to the pokk support team. Contact details are provided in Section 16 (Contact Us) of this Policy.

pokk collects the following categories of personal data in connection with your use of the Platform:

Identity & Contact Data

Financial & Transaction Data

Gaming & Betting Activity Data

Technical & Usage Data

Communications Data

pokk does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health information (beyond responsible gaming self-declarations), or biometric data. Where a player voluntarily discloses sensitive information in the course of a support interaction, that information will be handled with additional care and will not be used for any purpose beyond resolving the immediate support matter.

pokk collects your personal data through the following channels:

• Account Registration: When you create a pokk account, you provide your name, date of birth, email address, mobile number, and residential address directly through the registration form.
• Identity Verification (KYC): During the identity verification process, you upload government-issued documents such as your National Identity Card (NID) or passport. These documents are processed by our verified KYC provider.
• Deposits & Withdrawals: Payment method details are captured when you initiate a transaction. Mobile financial service details (bKash, Nagad, Rocket, Upay) and bank account information are recorded for transaction processing and anti-money laundering compliance.
• Platform Use: As you navigate pokk.net, our servers automatically record technical data including your IP address, device information, browser type, pages visited, and session duration. This data is collected via server logs and cookies.
• Customer Support: When you contact pokk's support team via live chat or email, the content of your communications is recorded for quality assurance, training, and dispute resolution purposes.
• Third-Party Sources: pokk may receive limited personal data from identity verification bureaus, fraud prevention services, and payment processors where this is necessary to validate your account or comply with regulatory obligations.

The table below summarises the primary purposes for which pokk processes your personal data and the corresponding legal basis for each processing activity:

Where pokk relies on legitimate interest as its legal basis, pokk has assessed that its interests are not overridden by your data protection rights. You retain the right to object to processing based on legitimate interest at any time; details of how to exercise this right are set out in Section 11.

Where pokk relies on consent as its legal basis (principally for marketing communications), you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

pokk may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual data protection safeguards:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — for the purpose of processing deposits and withdrawals. These providers receive only the minimum data necessary to complete each transaction.
• Identity Verification Providers: Specialised KYC and age verification services that assist pokk in confirming the identity and age of account holders. These providers are contractually bound to process identity documents solely for verification purposes.
• Fraud Prevention Services: Third-party fraud detection and anti-money laundering screening providers that help pokk identify suspicious account or transaction activity. Data shared with these providers is used solely to protect the integrity of the Platform and comply with regulatory requirements.
• Game Software Providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive limited session and wagering data necessary to deliver their games on the pokk Platform. These providers do not receive your full identity or payment data.
• Customer Support Platforms: Third-party live chat and helpdesk software providers used to operate pokk's support function. These providers process communications data strictly as data processors under pokk's instruction.
• Legal and Regulatory Authorities: pokk will disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required to do so by applicable law, court order, or regulatory directive. pokk will not notify you of such disclosures where prohibited from doing so by law.
• Business Transfers: In the event that pokk undergoes a merger, acquisition, or sale of business assets, personal data held by pokk may be transferred to the acquiring entity as part of that transaction. Affected players will be notified prior to any such transfer where practically possible.

Some of pokk's third-party service providers — including game software studios, cloud infrastructure providers, and fraud detection services — may be located outside Bangladesh. Where personal data is transferred to a country that may not provide the same level of data protection as Bangladesh, pokk takes appropriate steps to ensure your data remains protected.

Safeguards pokk employs for international data transfers include the use of contractual data processing agreements that impose obligations on recipient parties equivalent to those pokk itself observes, and the selection of service providers who maintain internationally recognised security certifications such as ISO 27001 or SOC 2 Type II.

If you wish to obtain further information about the specific safeguards applied to any international data transfer in connection with your pokk account, please contact the support team at the details provided in Section 16.

pokk retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, unless a longer retention period is required or permitted by applicable law. The following general retention periods apply:

When data reaches the end of its applicable retention period, pokk securely deletes or anonymises it in a manner that makes re-identification impossible. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes as it no longer constitutes personal data.

pokk implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. Key security measures in place include:

• 256-bit SSL/TLS Encryption: All data in transit between your browser or app and pokk's servers is encrypted using industry-standard TLS 1.2 or TLS 1.3 protocols.
• Encryption at Rest: Sensitive personal data stored in pokk's databases — including identity documents and payment details — is encrypted at rest using AES-256 encryption.
• Two-Factor Authentication (2FA): pokk offers and strongly encourages 2FA for all player accounts. New-device login alerts notify you immediately of any sign-in from an unrecognised device.
• Access Controls: Access to personal data within pokk's internal systems is restricted on a strict need-to-know basis. Staff with access to sensitive player data undergo background checks and regular data protection training.
• Automated Fraud Detection: pokk's systems continuously monitor account and transaction activity for patterns consistent with fraud, account takeover, or money laundering. Suspicious activity triggers automated alerts for review by pokk's security team.
• Regular Security Audits: pokk conducts periodic security assessments of its Platform infrastructure, including penetration testing by independent security specialists.

Despite these measures, no online system is entirely immune to security risks. pokk encourages all players to use strong, unique passwords, enable 2FA, keep their devices and browsers updated, and log out of their pokk account when using shared devices. If you suspect any unauthorised access to your account, contact support immediately at [email protected].

pokk uses cookies and similar tracking technologies on pokk.net to deliver a functional, personalised, and secure user experience. A cookie is a small text file stored on your device by your web browser when you visit a website.

pokk uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as account login sessions, security tokens, and payment flow management. These cookies cannot be disabled without breaking core Platform functionality.
• Analytical / Performance Cookies: pokk uses analytics cookies to understand how players navigate the Platform — which pages are most visited, how long sessions last, and where users encounter issues. This data is used in aggregated, anonymised form to improve the Platform experience. These cookies are enabled by default but you may disable them via your browser settings.
• Functional Cookies: Functional cookies remember your preferences such as language settings, preferred payment method display, and personalised game lobby layout. Disabling these cookies may reduce your comfort of use but will not prevent access to core features.
• Marketing / Targeting Cookies: Where you have opted in to receive personalised promotions, pokk may use cookies to track which promotional content you have engaged with in order to avoid sending you irrelevant offers. pokk does not use cookies to serve third-party advertising on external websites.

You can control cookies through your browser settings. Most browsers allow you to view, delete, and block cookies on a per-site or global basis. Please note that blocking strictly necessary cookies will prevent you from logging in to or using your pokk account. For detailed guidance on managing cookies in your specific browser, refer to your browser provider's help documentation.

As a pokk account holder, you have the following rights in relation to your personal data. To exercise any of these rights, contact the pokk support team at [email protected] with your registered account username and a description of your request. pokk will respond within 30 calendar days.

• Right of Access: You may request a copy of the personal data pokk holds about you. pokk will provide a structured summary of your data in a readable format at no charge for the first request in any 12-month period.
• Right to Rectification: If any personal data pokk holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For straightforward corrections (such as updating your mobile number), you can make changes directly within your account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing. Please note that pokk is required to retain certain data for defined periods under anti-money laundering and financial regulations, which may limit our ability to fulfil erasure requests in full.
• Right to Restriction of Processing: You may ask pokk to restrict the processing of your data — meaning we store it but do not actively use it — while a dispute about accuracy or lawfulness is resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract with you, you may request that pokk provide your personal data in a structured, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You have the right to object to pokk processing your data on the basis of legitimate interest. pokk will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for legal claims.
• Right to Withdraw Consent: Where pokk processes your data on the basis of consent (e.g., for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before the withdrawal.

pokk's Platform is strictly for adults aged 21 and above. pokk does not knowingly collect personal data from persons under the age of 21. The registration process includes a date-of-birth verification step, and accounts where the registered age is found to be below the minimum threshold are immediately suspended pending identity verification review.

If a parent or guardian believes that a minor has registered a pokk account or has had their personal data collected through the Platform, please contact pokk support immediately at [email protected]. pokk will promptly investigate and, where confirmed, delete all associated personal data and close the account.

pokk strongly encourages parents and guardians in Bangladesh to use parental control software to restrict access to online gambling platforms. If you are concerned about a minor's access to pokk.net, contact our support team for guidance on available access restriction measures.

pokk may send you promotional communications — including bonus offers, seasonal promotions, tournament invitations, and new game announcements — via email or SMS, provided that you have given your explicit consent to receive such communications during account registration or subsequently through your account settings.

pokk will never send you unsolicited marketing messages. All promotional communications from pokk will clearly identify pokk as the sender and will include a straightforward mechanism for you to opt out of future messages of the same type. Opting out of one category of marketing (e.g., SMS promotions) does not automatically opt you out of others (e.g., email newsletters) — you may manage each channel independently within your account dashboard.

Please note that opting out of marketing communications does not affect transactional messages. pokk will continue to send you account-related notifications such as deposit confirmations, withdrawal status updates, security alerts, and important policy change notices regardless of your marketing preferences. These messages are necessary for the operation of your account and cannot be disabled.

Seasonal promotions tied to culturally relevant periods in Bangladesh — such as Eid, Pohela Boishakh (Bengali New Year), Durga Puja, Victory Day (December 16), or Independence Day (March 26) — will only be sent to players who have opted in to marketing communications at the time the campaign is launched.

pokk.net may contain links to third-party websites or services for reference or informational purposes. This Privacy Policy applies solely to data processed by pokk through the pokk Platform. pokk has no control over, and accepts no responsibility for, the privacy practices or content of any third-party website or service that you access via a link on pokk.net.

pokk's game lobby integrates software provided by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game provided by one of these studios, limited session data may be transmitted to the relevant studio's servers to facilitate game delivery. Such transmission is governed by the applicable studio's data processing agreement with pokk and is limited to the minimum data required to operate the game session.

pokk's payment processing integrations with bKash, Nagad, Rocket, and Upay are subject to those providers' own privacy policies in respect of the transaction data they independently collect. pokk encourages you to review the privacy policies of any payment service provider you use in connection with your pokk account.

pokk reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable regulations, or Platform features. When material changes are made to this Policy, pokk will notify registered account holders via the email address on file at least 14 days before the changes take effect, and will update the "Last updated" date at the top of this page.

For non-material changes — such as typographical corrections, clarifications that do not alter the substance of any processing activity, or updates to contact details — pokk may update the Policy without advance notice. We recommend reviewing this Policy periodically to stay informed of how pokk protects your data.

Your continued use of the pokk Platform after a notified Policy update constitutes your acknowledgement of the revised terms. If you do not agree with any updated version of this Privacy Policy, you should cease using the Platform and may request account closure by contacting support.

If you have any questions, concerns, or requests relating to this Privacy Policy or pokk's handling of your personal data, please contact the pokk support team using the details below. All data protection enquiries are handled in English and responded to within 2 business hours during normal operating hours (24/7, Bangladesh Standard Time, UTC+6).

For urgent security concerns — such as suspected unauthorised account access, a potential data breach, or identity theft — please mark your message "URGENT: Security" in the subject line. pokk's security team monitors the support inbox continuously and will prioritise responses to security-related matters.