pojko Privacy Policy — How We Collect, Use, and Protect Your Data

1 Data We Collect

pojko collects personal data from you in order to provide a safe, compliant, and enjoyable gaming experience. We collect information at the point of registration, during the course of your account activity, and through your interactions with the pojko website and platform. The categories of personal data we collect are described below.

1.1 Registration and Identity Data

When you create a pojko account, we collect the information you provide directly, which includes your full legal name, date of birth, email address, mobile phone number (including your bKash, Nagad, or Rocket-registered number where applicable), and the username and password you choose. This data is required to create and administer your pojko account.

1.2 Know Your Customer (KYC) and Verification Data

As part of pojko's responsible gaming and fraud prevention obligations, we may collect copies of identity and verification documents. These may include a Bangladeshi National Identity Card (NID), a passport, a driving licence, a recent utility bill or bank statement, and supporting documentation of your registered payment method. KYC data is collected when you first request a withdrawal above a defined threshold, or when our risk monitoring systems flag an account for review.

1.3 Financial and Transaction Data

pojko records all deposits and withdrawals associated with your account, including the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard), the transaction amount in BDT (৳), the timestamp, and the transaction reference number. We do not store your full card number, bKash PIN, or Nagad PIN at any point. Payment credentials are processed via encrypted, tokenised payment gateways.

1.4 Gaming and Betting Activity Data

pojko logs all gaming and betting activity conducted on your account. This includes game sessions, bet amounts, bet outcomes, bonus activations, wagering history, and casino game participation. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement.

1.5 Technical and Device Data

When you access pojko via a web browser or mobile browser, we automatically collect technical data about your device and connection. This includes your IP address, browser type and version, operating system, device identifiers, screen resolution, referring URL, and session duration. This data helps us maintain platform security, detect suspicious login activity, and improve the user experience for players in Dhaka, Chittagong, Sylhet, and across Bangladesh.

1.6 Communications Data

If you contact pojko's support team via live chat or email, we retain a record of that correspondence, including the content of messages, the date and time of contact, and any resolution reached. This data is used for quality assurance, dispute resolution, and staff training purposes.

2 How We Use Your Data

pojko uses the personal data described in Section 1 for the following specific purposes. We process your data only where we have a lawful basis for doing so — including the performance of a contract with you (your pojko account agreement), compliance with legal obligations, our legitimate interests in operating a safe and fair platform, or your explicit consent where required.

2.1 Marketing Communications

pojko may send you promotional emails or SMS notifications about bonuses, seasonal promotions (including Eid offers, Pohela Boishakh promotions, and BPL betting specials), and new game launches — but only if you have opted in to marketing communications at the point of registration or subsequently in your account settings. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your pojko account or by contacting our support team.

2.2 Automated Decision-Making

pojko's fraud detection and responsible gaming systems use automated analysis of account activity data to flag accounts for human review. These automated processes do not make final binding decisions independently — any account action resulting from an automated flag is reviewed by a member of pojko's security or player protection team before being implemented. You have the right to request human review of any automated decision that has affected your account.

3 Data Sharing & Disclosure

pojko does not sell your personal data to third parties. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

3.1 Payment Service Providers

To process your deposits and withdrawals, pojko shares transaction data with payment service providers including bKash, Nagad, Rocket, Upay, and card network processors for Visa and Mastercard transactions. These providers receive only the data they require to execute the specific transaction. All payment service providers used by pojko are required to handle data securely and in accordance with applicable data protection standards.

3.2 Game Studio Providers

pojko's casino games are delivered by certified third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game delivered by one of these studios, limited session data (such as your game session token and bet history for that session) is transmitted to the studio's servers to render the game. Game studios receive no personally identifiable data beyond what is technically required to operate the game session.

3.3 Legal and Regulatory Obligations

pojko may disclose your personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or regulatory requirement. pojko will disclose the minimum data required to comply with any such obligation and will notify affected users where permitted to do so by law.

3.4 Fraud Prevention Services

pojko may share limited account and transaction data with third-party fraud prevention and identity verification services to detect, investigate, and prevent fraudulent activity on the platform. These services act as data processors on behalf of pojko and are contractually bound to process data only in accordance with pojko's instructions.

4 Cookies & Tracking

pojko uses cookies and similar tracking technologies on its website to deliver core platform functionality, maintain your login session, remember your preferences, and collect anonymised analytics data to improve the platform experience for players across Bangladesh.

4.1 Types of Cookies Used

• Essential cookies: Required for the pojko platform to function. These include session cookies that maintain your logged-in state, security tokens that protect against cross-site request forgery, and load-balancing cookies. These cannot be disabled without impairing core functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the pojko website — including pages visited, session duration, and device type. This data helps us identify and resolve usability issues and improve the platform experience.
• Preference cookies: Store your site preferences such as language settings or notification preferences so you do not need to re-enter them on each visit.
• Security cookies: Used by pojko's fraud detection systems to identify unusual login patterns, including access from new devices or IP addresses that differ from your registered usage pattern.

4.2 Managing Cookies

You can manage your cookie preferences through your web browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling essential cookies will impair your ability to log in to pojko and use core platform features. Disabling analytics or preference cookies will not affect your ability to access games or process transactions.

4.3 Third-Party Tracking

pojko does not permit third-party advertising networks to place tracking cookies on the pojko website for the purpose of building advertising profiles. Any third-party cookies placed by game studio providers are limited to the technical requirements of delivering the game session and are governed by those studios' own data processing agreements with pojko.

5 Data Retention

pojko retains your personal data for as long as your account remains open and for a defined period after account closure, in accordance with our legal and regulatory obligations and our legitimate interest in maintaining accurate historical records for dispute resolution purposes.

5.1 Active Account Data

While your pojko account remains open, we retain all account, transaction, gaming, and communications data associated with your account. You may request a copy of your data at any time using the process described in Section 7.

5.2 Post-Closure Retention

Following account closure — whether by your request or by pojko — we retain your personal data for a minimum period of five (5) years from the date of closure. This retention period exists to satisfy our obligations in relation to financial record-keeping, anti-money laundering compliance, and the resolution of any dispute or regulatory enquiry that may arise after closure.

5.3 KYC Document Retention

Identity verification documents submitted as part of the KYC process are retained for a minimum of five (5) years after the end of the customer relationship. After the applicable retention period has expired, KYC documents are securely deleted or destroyed in accordance with pojko's data disposal procedures.

5.4 Marketing Data

If you have opted in to marketing communications and subsequently opt out, pojko will retain a suppression record of your opt-out preference to ensure that you are not inadvertently re-contacted. This suppression record is retained indefinitely to honour your preference.

6 Data Security

pojko takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction, or alteration.

6.1 Encryption in Transit

All data transmitted between your browser and the pojko platform is encrypted using 256-bit Transport Layer Security (TLS). This is the same encryption standard used by major Bangladeshi financial institutions including Dutch-Bangla Bank, BRAC Bank, and City Bank. You can verify the active TLS certificate via the padlock icon in your browser address bar when visiting pojko.com.

6.2 Encryption at Rest

Sensitive personal data stored on pojko's servers — including KYC documents, payment method references, and account credentials — is encrypted at rest using industry-standard encryption. Passwords are stored using a one-way cryptographic hash function; pojko staff cannot view your plaintext password at any time.

6.3 Access Controls

Access to personal data within pojko's systems is restricted on a need-to-know basis. Staff members can only access the data required to perform their specific role — for example, the customer support team can access your account and communications history but cannot access your raw KYC documents. All internal data access is logged and subject to regular audit.

6.4 Security Monitoring

pojko operates continuous security monitoring across its platform infrastructure. Automated systems flag unusual activity patterns — such as logins from new IP addresses, rapid successive login attempts, and abnormal transaction volumes — for human review. Where a security incident affecting player data is identified, pojko will notify affected players as promptly as practicable.

6.5 Your Responsibility

While pojko takes every reasonable measure to secure its platform, the security of your account also depends on you. You are responsible for keeping your pojko login credentials confidential, using a strong and unique password, and notifying pojko's support team immediately if you suspect that your account has been accessed without your authorisation. pojko will never ask you for your password, your bKash PIN, or your Nagad PIN.

7 Your Privacy Rights

As a pojko player, you hold the following rights in relation to your personal data. pojko is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact pojko's support team via live chat or by email using the plain-text address provided in Section 8.

7.1 Right of Access

You have the right to request a copy of all personal data that pojko holds about you. Upon receipt of a verified access request, pojko will provide a structured summary of your data within 30 calendar days. There is no charge for a standard access request. Where requests are manifestly unfounded or excessive, pojko may charge a reasonable administrative fee or decline to respond, with written reasons provided.

7.2 Right to Rectification

If any personal data that pojko holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update most account information directly via your pojko account settings. For changes to core identity data (legal name, date of birth), you will need to contact our support team and provide supporting documentation.

7.3 Right to Erasure

You may request that pojko delete your personal data in certain circumstances — for example, if you close your account and the applicable retention period has expired, or if pojko has no remaining lawful basis to process your data. Please note that pojko is required to retain certain data for a minimum of five (5) years after account closure for legal and compliance reasons, as described in Section 5. Erasure requests cannot override these mandatory retention obligations.

7.4 Right to Restrict Processing

You have the right to request that pojko restrict the processing of your data in specific circumstances — for example, while a dispute about the accuracy of your data is being resolved. During a processing restriction, pojko will continue to store your data but will not use it for any purpose other than those permitted under the restriction.

7.5 Right to Data Portability

Where pojko processes your data on the basis of your consent or for the performance of your account contract, you have the right to receive a copy of the data you provided to pojko in a structured, commonly used, machine-readable format. This right applies to data you actively provided — such as your registration information and payment details — but not to data derived from pojko's processing activities.

7.6 Right to Object

You have the right to object to pojko processing your personal data where we rely on legitimate interest as our legal basis. You also have an unconditional right to object to your data being used for direct marketing purposes, which you may exercise at any time by updating your marketing preferences in your pojko account settings.

8 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or pojko's handling of your personal data, please contact pojko's support team. Our support team is available 24/7 in English and can be reached via live chat on the pojko website. The average live chat response time is 2–5 minutes.

8.1 Email Contact

You may also contact pojko's data team by email at the following address — please note this is displayed as plain text only and is not a clickable link:

support pojko com

When contacting pojko about a privacy matter by email, please include your registered username, the email address associated with your pojko account, and a clear description of your request or concern. This will help us locate your account and respond accurately and efficiently.

8.2 Complaints

If you are not satisfied with pojko's response to a privacy concern, you have the right to escalate your complaint to pojko's senior privacy team by requesting escalation via live chat. pojko will review escalated privacy complaints within 10 business days and provide a written final response. pojko takes all privacy complaints seriously and uses feedback from complaints to improve its data handling practices.

8.3 Changes to This Privacy Policy

pojko may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or improvements to the pojko platform. When material changes are made, we will notify registered players via the email address associated with their account or via an in-platform notification displayed upon next login. The effective date of the current version is displayed at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how pojko protects your data.