pkoo Privacy Policy

When you register and use the pkoo platform, we collect personal information that is necessary to provide our services, verify your identity, process payments, and comply with our legal obligations. We collect only what is genuinely needed — we do not gather data speculatively or beyond what our operations require.

1.1 Information You Provide Directly

The following information is collected when you create a pkoo account or interact with our services:

• Identity information: Full legal name, date of birth, and national identity number or passport number (collected during KYC verification).
• Contact details: Email address and Bangladeshi mobile number. Your mobile number may be linked to your bKash or Nagad account for payment processing.
• Login credentials: Username and encrypted password. pkoo stores passwords in hashed form — we never store plain-text passwords.
• Financial information: Details of the payment methods you use to deposit and withdraw funds, including mobile wallet numbers (bKash, Nagad, Rocket, Upay) and, where applicable, bank account identifiers for Dutch-Bangla Bank and BRAC Bank transfers.
• KYC documents: Copies of government-issued identity documents such as your National ID Card (NID), passport, or driving licence, submitted to satisfy Know Your Customer requirements.
• Support communications: Any messages, emails, or live chat transcripts exchanged with the pkoo support team at [email protected].

1.2 Information Collected Automatically

When you access pkoo.app, certain technical data is collected automatically by our systems:

• Device and connection data: IP address, device type, operating system, browser type and version, and screen resolution.
• Session data: Login timestamps, session duration, pages visited within pkoo.app, game sessions played, bet history, and navigation flow.
• Geolocation: Approximate geographic location derived from your IP address. pkoo does not collect precise GPS coordinates.
• Cookie and tracker data: Session cookies, preference cookies, and aggregate analytics data. See the Cookies section below for full details.

pkoo processes personal data on the basis of contractual necessity (to provide the services you have signed up for), legal obligation (to comply with KYC and anti-money-laundering requirements), and legitimate interest (to maintain platform security, prevent fraud, and improve user experience). The table below summarises our key processing activities and their legal basis.

pkoo does not use your personal data for automated decision-making that produces significant legal effects on you without human review. Where automated screening tools are used — for example, to flag potentially suspicious account activity — any resulting account restriction is reviewed by a member of the pkoo compliance team before action is taken.

If you have opted in to receive promotional communications from pkoo — such as bonus offers tied to BPL season, IPL, Eid promotions, or Pohela Boishakh campaigns — you may withdraw that consent at any time by contacting [email protected] or following the unsubscribe instructions in any promotional message. Withdrawing consent for marketing communications does not affect your ability to continue using your pkoo account.

pkoo does not sell your personal data. We share personal information only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

3.1 Payment Processors

To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank, pkoo shares the transaction data necessary to complete the payment with the relevant payment service provider. Each payment partner operates under its own data protection obligations. pkoo does not transmit more data to payment processors than is strictly required for transaction completion.

3.2 Game Content Providers

pkoo's gaming library is powered by certified third-party game studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, and Microgaming. These providers may receive a session token and anonymised player identifier to deliver their games. They do not receive your full name, contact details, or payment information.

3.3 Legal and Regulatory Disclosure

pkoo may disclose personal data to relevant authorities, regulators, or law enforcement agencies where it is required to do so by applicable law, a valid court order, or in connection with a legally mandated investigation. In such cases, pkoo will disclose only the data specifically requested and will notify the affected player where it is legally permitted to do so.

3.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of pkoo's business assets, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material changes to how their data is processed as a result.

pkoo.app uses cookies and similar technologies to keep the platform functioning correctly, maintain your login session, remember your preferences, and collect aggregate data about how players navigate the site. We do not use advertising cookies or allow third-party advertising trackers on pkoo.app.

4.1 Types of Cookies We Use

4.2 Managing Cookies

You can control and delete cookies through your web browser settings. Most modern browsers — including Chrome, Firefox, Samsung Internet (widely used on Bangladesh Android devices), and Safari — allow you to block or delete cookies on a per-site or global basis. Please note that disabling essential cookies will affect core platform functionality, including your ability to stay logged in to your pkoo account across pages.

pkoo does not currently respond to browser Do Not Track (DNT) signals due to the absence of a consistent industry standard for DNT interpretation. Our analytics cookies collect only aggregate, non-personally-identifiable data and do not track you across other websites.

pkoo applies industry-standard technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Security measures in place include:

• 256-bit SSL/TLS encryption on all data in transit between your browser or app and pkoo's servers.
• Bcrypt password hashing — plain-text passwords are never stored. If pkoo's database were ever compromised, stored password hashes would not be directly usable by an attacker.
• Access controls: Internal access to player personal data is restricted on a strict need-to-know basis. Support staff access only the data fields required to resolve your specific query.
• Tokenisation of card data: Visa and Mastercard transaction data is tokenised at source by our certified payment processors. pkoo's own servers never receive or store raw card numbers or CVV codes.
• Regular security reviews: pkoo conducts periodic internal security assessments to identify and address potential vulnerabilities in its data handling infrastructure.
• Encrypted backups: All database backups are encrypted and stored in geographically separate secure environments.

5.1 Data Breach Response

In the unlikely event of a personal data breach that poses a risk to affected players, pkoo will take immediate steps to contain the breach, assess its scope, and notify affected players without undue delay. Notification will be sent to the email address registered on the affected account and will include a description of the nature of the breach, the categories of data affected, and the steps pkoo has taken or intends to take in response.

As a pkoo player, you have the following rights in respect of your personal data. To exercise any of these rights, contact the pkoo support team at [email protected] with the subject line "Data Rights Request". pkoo will acknowledge your request within 5 business days and aim to fulfil it within 30 days.

• Right of access: You may request a copy of the personal data pkoo holds about you. We will provide this in a structured, commonly used format.
• Right to rectification: If any personal data pkoo holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most contact details directly within your account settings.
• Right to erasure: You may request the deletion of your personal data where pkoo no longer has a legal or contractual basis to retain it. Please note that certain data — for example, transaction records and KYC documents — must be retained for defined periods to comply with legal obligations, and cannot be deleted on request during those retention periods.
• Right to restriction of processing: You may request that pkoo restrict the processing of your data in certain circumstances — for example, while a rectification request is being resolved.
• Right to data portability: You may request that pkoo provide your personal data in a portable, machine-readable format (such as JSON or CSV) so that it can be transferred to another service provider of your choice.
• Right to object: You may object to the processing of your personal data where pkoo relies on legitimate interest as the legal basis. This includes the right to object to receipt of promotional communications at any time.
• Right to withdraw consent: Where pkoo processes your data on the basis of your consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

pkoo will not charge a fee for handling data rights requests in normal circumstances. If a request is manifestly unfounded or excessive — for example, due to repetitive identical requests within a short period — pkoo reserves the right to either charge a reasonable administrative fee or decline to act on the request, with written reasons provided.

pkoo retains personal data for only as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised data — from which it is not reasonably possible to re-identify any individual — may be retained indefinitely for aggregate analytical purposes.

pkoo reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When material changes are made, pkoo will update the "Last Updated" date shown in the hero section at the top of this page and, where the changes are significant, notify active players by email to the address registered on their account.

We encourage all pkoo players to review this Privacy Policy periodically. Continued use of the pkoo platform after a revised Privacy Policy has been posted constitutes your acceptance of the updated terms. If you disagree with any changes to this policy, you may close your account at any time by contacting [email protected].

For any questions about this Privacy Policy, the data pkoo holds about you, or to submit a data rights request, please contact the pkoo support team at [email protected]. Our team is available 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6).