pk0p Privacy Policy — How We Handle Your Personal Data

1.1 About This Policy

This Privacy Policy ("Policy") describes the practices of pk0p ("the Platform", "we", "us", "our") with respect to the collection, processing, storage, and disclosure of personal data belonging to users of the pk0p website located at pk0p.net (" the Site") and all associated services, games, and features offered through the Platform ("Services").

By registering an account, accessing the Site, or using any of our Services, you acknowledge that you have read, understood, and agree to the data practices described in this Policy. If you do not agree with any part of this Policy, you should discontinue use of the Site and contact [email protected] to request account closure.

1.2 Who This Policy Applies To

This Policy applies to all individuals who interact with the pk0p Platform, including:

• Registered players with an active pk0p account.
• Visitors who browse the Site without registering.
• Individuals who contact pk0p support via email or live chat.
• Individuals who participate in pk0p promotions, tournaments, or surveys.

This Policy is specifically directed at users accessing the Platform from Bangladesh. Players accessing the Site from other jurisdictions do so at their own discretion and are responsible for verifying that their use of the Platform is lawful in their location.

1.3 Data Controller

pk0p operates as the data controller for all personal data collected through the Site and Services. For any queries relating to this Policy, your personal data, or your privacy rights, you may contact our data team directly at [email protected]. We aim to respond to all privacy-related enquiries within 10 business days.

2.1 Registration Data

When you create a pk0p account, we collect the following personal information:

• Full legal name (as it appears on your government-issued identification).
• Date of birth (for age verification — players must be 18 or older).
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postal code.
• Email address.
• Mobile phone number (Bangladesh-registered).
• Chosen username and encrypted password.

All registration data is mandatory. Incomplete or inaccurate registration information may result in your account being suspended or permanently closed.

2.2 Identity Verification Data

To comply with anti-money laundering (AML) obligations and to confirm player age and identity, pk0p may request the following documents at any stage:

• National Identity Card (NID) — front and back scan or photograph.
• Passport data page.
• Proof of address (utility bill, bank statement, or government letter dated within 90 days).
• Proof of payment method ownership (screenshot or statement showing your name linked to the bKash, Nagad, Rocket, or card account used for deposits).
• Selfie photograph for liveness verification.

Identity documents are stored securely and are used exclusively for verification and fraud prevention purposes. They are not shared with third parties except as required by applicable law or as described in Section 4 of this Policy.

2.3 Financial and Transaction Data

pk0p records all financial transactions conducted through the Platform, including:

• Deposit amounts, timestamps, and payment method identifiers (e.g., partial bKash or Nagad account numbers).
• Withdrawal requests, amounts, destinations, and processing status.
• Bonus credits received, wagering activity, and bonus expiry records.
• Account balance history.

pk0p does not store full card numbers or full mobile wallet PINs. Payment transactions are processed through encrypted channels. Only partial identifiers (e.g., the last four digits of a card number) are retained for transaction reference purposes.

2.4 Gameplay and Behavioural Data

When you use pk0p Services, we automatically collect data about your activity on the Platform, including:

• Games played, wager amounts, win/loss records, and session durations.
• Betting history across sports markets (including cricket BPL and T20 events).
• Responsible gaming tool usage (deposit limits set, self-exclusion requests, session reminders activated).
• Pages viewed and features accessed during each session.
• Device type, operating system, browser type and version, and screen resolution.
• IP address and approximate geolocation (country and city level).

2.5 Communications Data

When you contact pk0p support, participate in promotions, or respond to surveys, we collect:

• The content of your communications (emails, live chat transcripts, support tickets).
• Your contact preferences and communication history.
• Survey responses and feedback submitted voluntarily.

3.1 Account Management and Service Delivery

Your registration and account data are used to create and maintain your pk0p account, authenticate your identity when you log in, process deposits and withdrawals, apply bonuses and promotional credits, and provide access to all Platform features. This processing is necessary for the performance of the contract between you and pk0p.

3.2 Age Verification and Identity Confirmation

pk0p is legally and ethically obligated to verify that every player is at least 18 years of age before permitting real-money gameplay. Your date of birth and identity documents are processed for this purpose. This is a non-negotiable condition of using the Platform and constitutes both a contractual requirement and a legal obligation under the responsible gaming commitments made by pk0p.

3.3 Fraud Prevention and Security

pk0p uses technical data, gameplay data, and financial data to detect and prevent fraudulent activity, money laundering, bonus abuse, account sharing, and other prohibited conduct described in our Terms & Conditions. Automated risk-scoring systems may flag unusual patterns for manual review by our compliance team. This processing is carried out in pursuit of pk0p's legitimate interests in maintaining the integrity of the Platform.

3.4 Responsible Gaming Monitoring

Gameplay and behavioural data are used to monitor patterns that may indicate problem gambling behaviour, including escalating wager sizes, extended session lengths, and frequent deposit activity. Where such patterns are detected, pk0p may proactively reach out to the Player with responsible gaming guidance, as part of our commitment to player welfare. Players may opt out of proactive responsible gaming communications by contacting support, though self-exclusion and limit-setting tools remain available to all players at all times.

3.5 Marketing and Promotional Communications

With your consent, pk0p may use your email address and mobile number to send you information about promotions, bonuses, new games, seasonal offers (including Eid, Pohela Boishakh, BPL season specials), and platform updates. You may withdraw your consent to marketing communications at any time by emailing [email protected] with the subject line "Unsubscribe". Withdrawal of marketing consent does not affect the lawfulness of processing conducted prior to the withdrawal.

3.6 Platform Improvement and Analytics

Aggregated and anonymised behavioural data is used to understand how players navigate the Site, which games are most popular, where technical issues occur, and how platform features can be improved. This analytics processing does not identify you as an individual and is conducted solely in pursuit of pk0p's legitimate interest in improving user experience.

3.7 Legal and Regulatory Compliance

Certain personal data — particularly identity verification records and financial transaction logs — must be retained by pk0p to comply with applicable laws relating to anti-money laundering, counter-terrorism financing, and general record-keeping obligations. This processing is carried out to fulfil a legal obligation and cannot be opted out of while your account remains active.

4.1 Our Commitment: No Sale of Personal Data

pk0p does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Your information is a responsibility we take seriously, not a commodity. Any sharing of personal data is strictly limited to the categories described below.

4.2 Game and Software Providers

pk0p integrates games from third-party studios and providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game hosted by a third-party provider, certain technical and gameplay data (such as session tokens, bet amounts, and game outcomes) may be processed by that provider's servers. These providers are contractually bound to use such data only for game delivery and fair-play auditing purposes. They are not permitted to use your data for their own marketing.

4.3 Payment Processing Partners

To process deposits and withdrawals, pk0p shares the minimum necessary financial data with our payment partners, including bKash, Nagad, Rocket, Upay, and the card networks Visa and Mastercard. This data sharing is strictly necessary for transaction execution. Each payment partner operates under its own privacy policy and data security standards. pk0p selects payment partners who maintain robust data security practices.

4.4 Identity Verification Services

pk0p may use third-party identity verification and KYC (Know Your Customer) service providers to assist with document verification and age confirmation. These providers process identity document images and personal details on pk0p's behalf and are contractually prohibited from retaining or using your data beyond the scope of verification.

4.5 Legal and Regulatory Disclosure

pk0p may disclose personal data to law enforcement agencies, regulatory bodies, or other authorised authorities where required to do so by applicable law, court order, or where disclosure is necessary to prevent or investigate fraud, money laundering, or other criminal activity. In such cases, pk0p will disclose only the minimum data required to fulfil the legal obligation.

5.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device on return visits, remember your preferences, maintain your session, and collect analytical data about how the site is used. pk0p uses cookies and similar technologies (such as local storage and session tokens) to operate the Platform effectively.

5.2 Categories of Cookies Used by pk0p

5.3 Managing Your Cookie Preferences

You may control cookie behaviour through your browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please note that disabling strictly necessary or security cookies will impair your ability to use pk0p. Instructions for managing cookies can be found in your browser's help documentation. On mobile devices in Bangladesh, browsers such as Chrome for Android and Samsung Internet offer granular cookie controls in their privacy settings menus.

6.1 Retention Periods

pk0p retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and registration data: Retained for the duration of your account plus a minimum of 5 years after account closure, to comply with AML record-keeping requirements.
• Financial and transaction records: Retained for a minimum of 7 years from the date of each transaction.
• Identity verification documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Support communications: Retained for 3 years from the date of the interaction, unless the communication relates to a dispute or investigation that remains open.
• Gameplay and session logs: Retained for 2 years from the date of each session for fraud detection and responsible gaming monitoring purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

6.2 Security Measures

pk0p employs the following technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure:

• SSL/TLS encryption on all data transmissions between your device and pk0p servers.
• Encrypted storage for passwords (hashed using industry-standard algorithms) and sensitive personal data at rest.
• Access controls — personal data is accessible only to pk0p staff and partners who require it for their specific role, enforced through role-based access permissions.
• Regular security audits of Platform infrastructure, including vulnerability scanning and penetration testing.
• Incident response procedures for detecting, containing, and reporting any data breach in a timely manner.

6.3 Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, pk0p will notify affected individuals without undue delay. Notifications will be sent to the email address registered on your pk0p account and will describe the nature of the breach, the data involved, and the steps pk0p is taking to address the incident and prevent recurrence.

7.1 Right of Access

You have the right to request a copy of all personal data that pk0p holds about you. Upon a verified access request, we will provide a structured summary of your data within 30 days. To submit an access request, email [email protected] with the subject line "Data Access Request" from the email address registered on your account.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Corrections to name, address, and contact details can be requested via [email protected]. Where the correction relates to verified identity data (e.g., name on NID), you may be required to provide updated documentation.

7.3 Right to Erasure ("Right to Be Forgotten")

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. Please note that the right to erasure is not absolute — pk0p may be legally required to retain certain data (such as financial records) for compliance purposes even after account closure. In such cases, we will inform you of the data that must be retained and the reason.

7.4 Right to Restrict Processing

You may request that pk0p restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing pending verification of whether pk0p's legitimate interests override your own. During a processing restriction, your data will be stored but not actively used.

7.5 Right to Data Portability

Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON). This allows you to transfer your data to another service provider if you wish.

7.6 Right to Object to Marketing

You have the absolute right to object to the processing of your personal data for direct marketing purposes at any time. Once you exercise this right, pk0p will cease using your data for marketing and will remove you from all promotional mailing lists within 5 business days. To object, email [email protected] with the subject "Unsubscribe from Marketing".

7.7 How to Exercise Your Rights

All privacy rights requests must be submitted in writing to [email protected]. To protect your data, we will verify your identity before processing any rights request. We aim to respond to all requests within 30 calendar days. If your request is complex or numerous, we may extend this period by a further 30 days, and will notify you accordingly.

8.1 Right to Amend

pk0p reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the Services we offer. The revised Policy will always be published at pk0p.net/privacy-policy with an updated "Last Updated" date at the top of the document.

8.2 Notification of Material Changes

Where a change to this Policy materially affects how we collect or use your personal data, pk0p will notify registered players by email to the address on file at least 14 days before the change takes effect. For non-material clarifications or corrections, we may update the Policy without prior notice — the updated effective date will reflect the revision.

8.3 Continued Use as Acceptance

Your continued use of the pk0p Platform after a Policy update has taken effect constitutes your acceptance of the revised terms. If you do not agree to a material change, you may close your account by contacting [email protected] before the effective date of the change. Outstanding eligible withdrawals will be processed before the account is closed.

8.4 Version History

pk0p maintains an internal record of all previous versions of this Privacy Policy. If you require a copy of a prior version for any reason, please contact [email protected] with the specific version date you require, and our team will provide it upon verified request.