pokok Privacy Policy — How We Handle Your Data

This Privacy Policy ("Policy") describes how pokok ("we", "us", "our") collects, uses, stores, and protects the personal information of players and visitors ("you", "your") who access or use the pokok platform, available at pokok.today and any associated mobile web pages. This Policy applies to all personal data collected through your registration, use of betting and casino services, deposits, withdrawals, and any communications you have with the pokok support team.

By registering an account with pokok or by continuing to use the pokok platform, you acknowledge that you have read this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with the terms of this Policy, you should not use the pokok platform.

pokok collects personal data that is necessary to provide you with a safe, secure, and functional betting and casino experience. The categories of data we collect include, but are not limited to, the following.

• Identity data: your full name, date of birth, and any government-issued identification documents submitted during KYC verification.
• Contact data: your registered mobile number and any email address associated with your account.
• Financial data: records of all deposits and withdrawals made through your account, including the payment method used (bKash, Nagad, Rocket, Upay) and transaction amounts.
• Technical data: your device type, operating system, browser type, IP address, and session data generated during your use of the platform.
• Usage data: records of your betting activity, game history, session duration, pages visited within the platform, and bonus claims.

pokok uses the personal data we collect for specific, legitimate purposes related to the operation of the platform and the provision of services to our players. We do not use your data for any purpose that is incompatible with the purposes described in this Policy.

• To create and manage your pokok account, verify your identity, and process your registration.
• To process deposits and withdrawals, verify payment method ownership, and maintain accurate financial records for your account.
• To provide access to sports betting markets, live casino games, slots, and all other products available on the pokok platform.
• To detect and prevent fraud, money laundering, bonus abuse, and other prohibited conduct as described in the pokok Terms and Conditions.
• To provide customer support and respond to queries, complaints, or disputes submitted by you to the pokok support team.
• To comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements and data retention obligations.

pokok processes personal data on the following legal bases.

• Contract performance: processing necessary to fulfil pokok's obligations to you as a registered player, including account management and payment processing.
• Legal obligation: processing required to comply with applicable laws, including identity verification, AML obligations, and data retention requirements.
• Legitimate interests: processing carried out in pokok's legitimate interest in operating a safe and secure platform, including fraud prevention, responsible gaming monitoring, and platform improvement.
• Consent: processing based on your explicit consent, including the use of non-essential cookies and the sending of promotional communications where you have opted in.

pokok does not sell your personal data to third parties. We may share your data in limited, controlled circumstances as described below.

• Payment processors: we share transaction data with our payment processing partners (bKash, Nagad, Rocket, Upay) solely for the purpose of processing your deposits and withdrawals. These partners are bound by confidentiality agreements and may only use data for the specific purpose of processing your transaction.
• Game content providers: your account identifier and gaming session data may be shared with our third-party game providers (including Pragmatic Play, Evolution Gaming, JILI Games, and others) for the purpose of delivering game content and maintaining game integrity.
• Legal and regulatory authorities: we may disclose your personal data to relevant authorities where required to do so by law, court order, or regulatory directive, including in connection with anti-money laundering investigations.
• Service providers: we may share data with trusted third-party service providers who assist us in operating the platform (such as IT infrastructure, fraud detection, and customer support tools), subject to strict data processing agreements.

pokok implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include 256-bit SSL encryption for all data in transit, secure data storage with access controls, regular security assessments, and staff training on data protection obligations.

While pokok takes all reasonable steps to protect your personal data, no method of data transmission over the internet or electronic storage is completely immune to security risks. You also have a responsibility to protect your own account credentials by keeping your login details confidential and by logging out of your account when using shared or public devices.

pokok retains your personal data for as long as your account remains active and for a reasonable period thereafter as required to fulfil the purposes described in this Policy or to comply with our legal and regulatory obligations.

• Account data (including identity, contact, and financial data) is retained for a minimum of five years after account closure to satisfy anti-money laundering (AML) record-keeping requirements.
• Transaction records are retained for a minimum of five years from the date of the transaction.
• Where data is no longer required for any of the purposes described in this Policy and there is no legal or regulatory obligation requiring its continued retention, pokok will securely delete or anonymise that data.

pokok uses cookies and similar tracking technologies to improve your experience on the platform. Cookies are small text files stored on your device that allow the platform to recognise your browser and remember your preferences across sessions.

• Essential cookies: these are required for the platform to function correctly. They enable features such as maintaining your login session and keeping your account secure. Essential cookies cannot be disabled.
• Analytics cookies: these help us understand how players interact with the platform, which pages are visited most frequently, and where technical issues may be occurring. This data is used in aggregate and does not identify you individually.
• Preference cookies: these remember your platform settings and preferences (such as language selection) so you do not need to re-enter them on each visit.

As a pokok player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact the pokok support team using the contact details provided at the end of this Policy.

• Right of access: you have the right to request a copy of the personal data that pokok holds about you.
• Right to rectification: you have the right to request that pokok corrects any inaccurate or incomplete personal data held about you.
• Right to erasure: in certain circumstances, you have the right to request that pokok deletes your personal data. This right is subject to pokok's legal and regulatory retention obligations.
• Right to restrict processing: you have the right to request that pokok restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data.
• Right to withdraw consent: where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

pokok will respond to all data rights requests within a reasonable timeframe. Some requests may require identity verification before they can be processed to ensure that data is only disclosed to the account holder.

The pokok platform integrates third-party game content provided by independent game studios. These third-party providers may collect certain technical and session data directly in connection with the delivery of their game content. pokok is not responsible for the privacy practices of third-party game providers, and we encourage you to review the privacy policies of any third-party service providers whose products you use through the pokok platform.

pokok is strictly for players aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under the age of 21, that data will be deleted and the associated account will be closed immediately. Parents and guardians who believe that a minor may have registered an account with pokok are encouraged to contact us immediately at [email protected] so that we can take appropriate action.

pokok reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made to this Policy, we will update the "Last updated" date at the top of this page. Your continued use of the pokok platform after any changes to this Policy constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how pokok protects your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the personal data pokok holds about you, please contact our support team. We are available 24 hours a day, 7 days a week and will endeavour to respond to all privacy-related enquiries promptly.