pkop Privacy Policy — How We Collect, Use, and Protect Your Data

This Privacy Policy applies to all personal data collected and processed by pkop in connection with the operation of the online platform accessible at https://pkop.cc. It covers all Players, visitors, and prospective registrants who interact with the Platform in Bangladesh or from any other location where our services are accessible.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, mobile number, date of birth, payment account identifiers, device identifiers, and IP addresses.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, transfer, erasure, or destruction.
• "Player" means any individual who has registered a pkop Account or is in the process of doing so.
• "Platform" means the pkop website, mobile-optimised interface, and any associated applications through which pkop services are accessed.
• "Third-Party Processor" means any external service provider engaged by pkop to process Personal Data on pkop's behalf, subject to data processing agreements that impose obligations equivalent to those in this Policy.

This Policy should be read alongside the pkop Terms & Conditions and the Responsible Gaming Policy. In the event of any conflict between this Policy and those documents on data-related matters, this Privacy Policy takes precedence.

pkop acts as the data controller in respect of all Personal Data collected through the Platform. As data controller, pkop determines the purposes and means of processing Personal Data and is responsible for ensuring that all processing activities are conducted lawfully, fairly, and transparently.

pkop collects Personal Data across several categories depending on your level of interaction with the Platform. The table below sets out the primary data categories, specific data points within each, and the context in which they are collected:

pkop does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than NID photographs required for KYC), or health data, except where a Player voluntarily discloses health-related information in the context of a responsible gaming interaction.

pkop collects Personal Data through the following channels:

• Direct submission: Data you provide actively during account registration, KYC document upload, deposit and withdrawal requests, form submissions, and support communications.
• Automated technical collection: Data collected automatically when you access the Platform, including IP address, device fingerprint, session timestamps, and browser metadata through server logs and first-party cookies.
• Payment processor data: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and card payment processors when you initiate a deposit or withdrawal. pkop does not receive or store full card numbers — only masked identifiers and transaction references.
• Third-party identity verification: Where KYC verification involves cross-referencing submitted documents against national identity databases or verification service providers, pkop may receive confirmation data back from those services.
• In-Platform behaviour: Gameplay data, betting patterns, session lengths, and responsible gaming tool interactions are recorded automatically within the Platform infrastructure to support fraud detection, responsible gaming monitoring, and Platform improvement.

pkop processes Personal Data on one or more of the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual necessity: Processing required to fulfil pkop's obligations under the Terms & Conditions you accepted at registration — including account management, payment processing, and bonus delivery.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money laundering obligations, age verification, and fraud reporting duties.
• Legitimate interests: Processing carried out for pkop's legitimate business interests where those interests are not overridden by your privacy rights — including fraud prevention, Platform security monitoring, product improvement, and responsible gaming analytics.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of non-essential marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing already carried out.

pkop uses the Personal Data it collects for the following purposes:

• Account creation and management: Registering your Account, maintaining your profile, processing OTP verifications, and enabling secure login to the Platform.
• Identity and age verification (KYC): Confirming that you are who you say you are, that you are 21 years of age or older, and that your payment methods are registered in your own name — as required by pkop's Terms & Conditions and applicable law.
• Payment processing: Facilitating ৳ deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other accepted payment methods, and maintaining transaction records for audit and dispute resolution purposes.
• Fraud and security monitoring: Detecting, investigating, and preventing fraudulent account activity, money laundering, bonus abuse, collusion, and other prohibited conduct as defined in the pkop Terms & Conditions.
• Responsible gaming compliance: Monitoring gameplay patterns and account activity to identify signs of problem gambling, enforce self-exclusion requests, apply deposit limits, and provide player welfare interventions where appropriate.
• Customer support: Responding to enquiries, complaints, and account service requests submitted via live chat, email, or WhatsApp.
• Platform improvement: Analysing aggregated, anonymised usage data to improve game performance, navigation, and Platform features for all users.
• Marketing communications: Sending promotional offers, bonus notifications, and seasonal promotions to Players who have consented to receive such communications. You can opt out at any time by contacting [email protected].

pkop does not sell, rent, or otherwise transfer your Personal Data to third parties for their own commercial use. pkop may share your data with the following categories of third party strictly for the purposes described:

• Payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard): Transaction data is shared as necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are responsible for the data they receive in that capacity.
• Identity verification providers: Where KYC verification is performed using a third-party service, your submitted identity documents and associated data may be processed by that provider under a data processing agreement with pkop.
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others): Limited technical data such as session identifiers and bet amounts may be shared with game providers to facilitate gameplay. These providers do not receive your identity or contact data.
• IT infrastructure and cloud hosting providers: pkop's Platform is hosted on secure cloud infrastructure. The hosting provider processes data on pkop's behalf under strict contractual data processing terms and has no independent right to access or use your data.
• Law enforcement and regulatory authorities: pkop will disclose Personal Data to competent authorities where required to do so by law, court order, or a valid regulatory request. pkop will not notify you of such disclosure where doing so is prohibited by law.

pkop uses a limited set of cookies and similar technologies to operate the Platform effectively. The categories of cookies used are as follows:

• Strictly necessary cookies: Session cookies required to maintain your logged-in state, remember your language preference, and enable core Platform functions such as the Wallet and game loading. These cookies cannot be disabled without breaking Platform functionality.
• Performance and analytics cookies: First-party cookies that collect anonymised data about how Players navigate the Platform, which pages are most visited, and where technical errors occur. This data is used solely to improve Platform performance. These cookies do not identify you personally.
• Functional cookies: Cookies that remember your preferences and settings — such as your preferred deposit method or responsible gaming alert configuration — so you do not have to re-enter them on every visit.

pkop does not use advertising cookies, cross-site tracking cookies, or third-party behavioural profiling technologies. Cookie data collected by pkop is not shared with advertising networks, data brokers, or social media platforms.

You can manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging in to your pkop Account and using core Platform features.

pkop implements a layered set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or destruction. These measures include:

• Encryption: All Personal Data is encrypted at rest using AES-256 and in transit using TLS 1.2 or higher. Database access is restricted to authenticated internal systems only.
• Access controls: Access to Player data within the pkop organisation is restricted on a need-to-know basis. Staff with access to Personal Data are subject to confidentiality obligations and regular security training.
• OTP two-factor authentication: All pkop Account logins require OTP verification sent to your registered Bangladesh mobile number, providing an additional layer of protection against unauthorised account access.
• Fraud detection systems: Automated monitoring systems continuously analyse transaction patterns and login behaviour to detect and flag suspicious activity before it can result in account compromise or financial loss.
• Regular security reviews: pkop conducts periodic internal security reviews and vulnerability assessments of its Platform infrastructure to identify and address potential weaknesses proactively.

While pkop takes all reasonable steps to protect your Personal Data, no online platform can guarantee absolute security against all possible threats. In the unlikely event of a data breach that poses a significant risk to affected Players, pkop will notify those Players as promptly as practicable through the contact details held on their Account.

pkop retains Personal Data for as long as is necessary to fulfil the purpose for which it was collected, plus any additional period required by legal or regulatory obligations. The following retention guidelines apply:

• Active Account data: Retained for the full duration of your Account's active status and for a period of five (5) years following permanent account closure, in accordance with financial record-keeping and anti-money-laundering compliance requirements.
• Transaction records: Deposit, withdrawal, and betting transaction records are retained for a minimum of five (5) years from the date of each transaction to support audit, dispute resolution, and regulatory compliance obligations.
• KYC documents: Identity verification documents (NID copies, passport scans) are retained for a minimum of five (5) years following account closure. Originals are stored in encrypted form and accessible only to authorised compliance staff.
• Support communications: Live chat transcripts, support emails, and complaint records are retained for two (2) years from the date of the interaction to support quality assurance and dispute resolution.
• Cookies and session data: Session cookies are deleted when you close your browser. Analytics cookie data is retained in anonymised, aggregated form for up to twelve (12) months.
• Marketing consent records: Records of your marketing consent or opt-out are retained for the duration of your Account and for two (2) years thereafter as evidence of compliance with applicable communications regulations.

Upon expiry of the applicable retention period, Personal Data is either securely deleted from pkop systems or anonymised such that it can no longer be linked to any individual Player.

As a pkop Player, you hold the following rights in relation to the Personal Data pkop holds about you. All requests should be submitted in writing to [email protected] with the subject line "Data Privacy Request" and your registered mobile number for identity verification purposes.

• Right of Access: You may request a copy of all Personal Data pkop holds about you. pkop will provide this within 30 days of a verified request, free of charge for the first request in any 12-month period.
• Right to Rectification: If any Personal Data pkop holds about you is inaccurate or incomplete, you may request that it be corrected. pkop will action verified correction requests within 14 days.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing was unlawful. Note that pkop may be required by law to retain certain data (e.g., transaction records) notwithstanding an erasure request — in such cases, pkop will explain what data must be retained and why.
• Right to Restrict Processing: You may request that pkop restricts the processing of your Personal Data while a correction or objection request is under review.
• Right to Data Portability: You may request a copy of Personal Data you have actively provided to pkop (e.g., account registration data and transaction history) in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object at any time to the processing of your Personal Data for direct marketing purposes. You may also object to processing based on legitimate interests, although pkop may continue processing where it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

The pkop Platform is strictly for adults aged 21 and over. pkop does not knowingly collect Personal Data from any person under the age of 21. If pkop becomes aware that Personal Data has been collected from a minor, that data will be deleted immediately and the associated Account will be permanently closed.

pkop recommends that all adults who share devices with minors make use of available parental control software and browser-level content filtering to prevent access to online gambling platforms. pkop is not responsible for minors who circumvent device-level controls to access the Platform, but will take all practicable steps to prevent and address such access upon being made aware of it.

pkop primarily processes Player data within secure hosting infrastructure. In certain circumstances, Personal Data may be transferred to or processed by systems located outside Bangladesh — for example, where cloud hosting infrastructure or third-party KYC verification services operate from international locations.

Where such transfers occur, pkop ensures that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to that applied within Bangladesh. These safeguards include contractual data processing agreements with international processors that impose data protection obligations consistent with the principles set out in this Privacy Policy.

pkop will not transfer your Personal Data to any jurisdiction that does not provide adequate protections without first ensuring that appropriate contractual safeguards are in place and, where necessary, obtaining your explicit consent for the transfer.

pkop reserves the right to update this Privacy Policy at any time. When material changes are made — for example, changes to the categories of data collected, the purposes of processing, or the third parties with whom data is shared — pkop will notify registered Players via the mobile number or email address held on their Account at least 14 days before the updated Policy takes effect.

The effective date displayed at the top of this page will be updated to reflect the date of the most recent revision. The current version of this Privacy Policy is always available at https://pkop.cc/privacy-policy. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy.

For changes that represent a material reduction in your privacy rights or a significant expansion in the scope of data processing, pkop will seek your explicit consent before the updated terms apply to your Account.

For all privacy-related matters — including data access requests, correction requests, erasure requests, consent withdrawal, and general questions about how pkop handles your Personal Data — please contact the pkop data team through the following channels:

• Email: [email protected] — Subject line: "Data Privacy Request"
• WhatsApp: +880 1700 000000
• Live Chat: Available 24/7 on the Platform, including all public holidays in Bangladesh

pkop will verify your identity before actioning any data request. Verification typically involves confirming your registered mobile number and, for sensitive requests such as full data exports or account deletion, may also require OTP confirmation.

If you are dissatisfied with pkop's handling of a privacy concern or data request, you are entitled to escalate your complaint through the formal complaint process described in the pkop Terms & Conditions. pkop is committed to resolving all data-related complaints fairly and promptly.