Your Privacy Matters — pk0p Data Protection Policy

01 Introduction

pk0p ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who interacts with our platform. This Privacy Policy sets out in clear and plain language what information we collect about you, the purposes for which we process that information, with whom we may share it, and the rights you hold in relation to it.

This policy applies to all players registered on the pk0p platform accessible at pk0p.io, to visitors who browse the platform without registering an account, and to any individuals who contact us through our support channels. It covers data collected through the website, through our live chat system, and through any communications you send to us by email.

pk0p operates its platform primarily for players based in Bangladesh. All personal data processing activities described in this policy are conducted with the security, dignity and rights of Bangladeshi players in mind. We apply industry-standard data protection practices and continuously review our security infrastructure to maintain the trust that players place in us.

02 Data Controller

For the purposes of this Privacy Policy, pk0p acts as the data controller — meaning we determine the purposes and means by which your personal data is processed. As data controller, pk0p bears responsibility for ensuring that all data processing activities comply with applicable data protection principles including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality.

If you have any questions, requests or complaints relating to the handling of your personal data, you may contact our data protection team directly:

• Email: [email protected] (subject line: "Privacy / Data Request")
• Response Time: Within 5 business days for standard requests
• Language: All data-related communications handled in English
• Operating Hours: 24/7, Bangladesh Standard Time (UTC+6)

03 Personal Data We Collect

pk0p collects only the personal data that is necessary for the legitimate purposes described in this policy. The categories of personal data we collect are set out below.

3.1 Registration and Account Data

When you create a pk0p account, we collect the information you provide during the registration process, including your full legal name, date of birth, residential address (including division, district and upazila in Bangladesh), email address, mobile phone number, and the username and password you choose. This information is required to establish and maintain your account.

3.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to verify that all players are aged 21 or above, we may collect copies of identity documents such as your National Identity Card (NID), passport or driving licence. Where required, we may also collect proof of address documentation such as a utility bill or bank statement dated within the past three months.

3.3 Financial and Transaction Data

When you make deposits or withdrawal requests, we collect data relating to those transactions, including payment method details (such as your bKash or Nagad mobile wallet number, or masked Visa/Mastercard card details), transaction amounts, transaction timestamps, and transaction reference numbers. We do not store full card numbers or full mobile banking PINs on our servers.

3.4 Usage and Betting Activity Data

We collect data about how you use the pk0p platform, including the games and betting markets you access, the bets and wagers you place (including stake amounts, odds, selections and outcomes), session start and end times, features you interact with, and your betting history. This data is used for account management, responsible gaming monitoring, and to improve the platform experience.

3.5 Technical and Device Data

When you access the pk0p platform, our servers automatically collect certain technical data, including your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, referring URL, pages visited and time spent on each page, and crash or error logs. This data is collected through standard server logs and analytics tools.

3.6 Communications Data

If you contact pk0p's support team via live chat, email or any other channel, we retain a record of that communication including the content of your messages, the date and time of the interaction, and any resolution or outcome. This data is used for quality assurance, staff training, and to maintain a record of your account history.

04 How We Collect Your Data

pk0p collects personal data through several distinct channels, all of which are described transparently below.

4.1 Directly from You

The majority of personal data we hold is provided directly by you — when you register an account, complete KYC verification, make a deposit or withdrawal, set responsible gaming limits, contact our support team, or respond to a promotional communication. You are always in control of what you share with us through direct interaction.

4.2 Automatically Through Platform Use

When you browse or use the pk0p platform, certain data is collected automatically through server logs, session tracking technologies and analytics tools. This includes your IP address, device information and browsing behaviour on the platform. This automatic collection is standard practice for all web-based services and is necessary for the platform to function correctly and securely.

4.3 From Third-Party Payment Processors

When you use a payment method such as bKash, Nagad, Rocket, Upay, Visa or Mastercard to deposit or withdraw funds, the relevant payment processor may share transaction confirmation data with pk0p for the purpose of crediting your account or confirming receipt of a withdrawal. pk0p does not receive your full payment credentials from these processors — only the information necessary to confirm the transaction.

4.4 From Identity Verification Partners

In certain cases, pk0p may use third-party KYC verification services to assist with the validation of identity documents. These partners process the documents you submit and return a verification result to pk0p. The processing of your identity data by these partners is governed by their own privacy policies, though they are contractually bound to handle your data securely and in accordance with our instructions.

05 Legal Basis for Processing

pk0p processes personal data only where a valid legal basis exists for doing so. The primary legal bases on which we rely are as follows:

• Contractual Necessity: Processing your registration data, KYC information and financial transaction data is necessary for pk0p to fulfil its contractual obligations to you as a registered player — including maintaining your account, processing your deposits and withdrawals, and delivering the betting and gaming services you have requested.
• Legal Obligation: Certain processing activities — particularly KYC verification, anti-money laundering (AML) monitoring, and the retention of financial transaction records — are required by applicable law. pk0p processes the necessary data to comply with these obligations.
• Legitimate Interests: pk0p processes technical and usage data to operate, secure and improve the platform on the basis of its legitimate business interests. We also process communications data for quality assurance and staff training purposes. In each case, we have assessed that our legitimate interests are not overridden by your rights and interests.
• Consent: Where we process your personal data for direct marketing purposes — such as sending promotional emails or SMS messages about bonuses or new games — we do so on the basis of your consent, which you provide during registration or at a later point. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

06 How We Use Your Personal Data

The personal data pk0p collects is used exclusively for the following specific and documented purposes:

1. To create, verify and manage your pk0p player account, including processing login credentials and account settings changes.
2. To verify your age and identity in compliance with our 21+ policy and Know Your Customer requirements before permitting withdrawals.
3. To process deposit and withdrawal transactions via your chosen payment method and to maintain accurate financial records for your account.
4. To deliver the betting, casino, slots, fishing and live dealer gaming services you access on the platform, including settling bets and crediting winnings.
5. To monitor your account activity for signs of problem gambling and to make our responsible gaming tools available to you where needed.
6. To detect, investigate and prevent fraud, money laundering, multiple account abuse and other forms of prohibited conduct as set out in our Terms & Conditions.
7. To provide customer support through our live chat and email channels and to maintain records of support interactions for quality assurance.
8. To send you transactional communications — such as deposit confirmations, withdrawal processing notices, security alerts and account updates — that are necessary for the management of your account.
9. To send you marketing communications about promotions, bonuses, new games and platform features, where you have given your consent to receive such communications.
10. To analyse aggregate, anonymised usage data to understand how players interact with the platform and to guide product improvements and feature development.
11. To comply with applicable legal and regulatory obligations, including the retention of records required under anti-money laundering legislation.

07 Data Sharing and Disclosure

pk0p does not sell, rent or trade your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

7.1 Payment Processing Partners

To process deposits and withdrawals, pk0p shares relevant transaction data with the payment processors you choose — including bKash, Nagad, Rocket, Upay, and card network providers (Visa, Mastercard). These processors receive only the data required to complete the specific transaction and are not permitted to use it for any other purpose.

7.2 Identity Verification and KYC Providers

Where pk0p uses a third-party KYC verification service, your identity documents and verification data are shared with that provider for the sole purpose of completing the age and identity verification process. All KYC partners are subject to strict data processing agreements that prohibit any secondary use of your data.

7.3 Game Content Providers

The casino games, slots, live dealer tables and fishing games available on the pk0p platform are provided by third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi. These providers may receive anonymised session identifiers to facilitate game delivery and to calculate RTP statistics, but they do not receive personally identifiable information such as your name, mobile number or financial details.

7.4 Legal and Regulatory Authorities

pk0p may be required to disclose personal data to law enforcement agencies, regulatory bodies or courts of law where required by a lawful request, court order or applicable legal obligation. We will always seek to verify the legitimacy and legal basis of any such request before disclosing data and will notify affected players where we are legally permitted to do so.

7.5 Anti-Fraud and Security Services

pk0p may share limited technical data — such as IP addresses, device fingerprints and transaction patterns — with third-party fraud prevention services for the purpose of detecting and preventing unauthorised access, fraudulent transactions and multi-account abuse. This sharing is conducted on the basis of our legitimate interests in maintaining a secure and fair platform.

08 Cookies and Tracking Technologies

The pk0p platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to gather anonymised analytics data about how the platform is used. A cookie is a small text file placed on your device when you visit a website.

8.1 Types of Cookies Used

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They manage your login session, keep you authenticated between page loads, and enable core functionality such as the game lobby, cashier and account settings. These cookies cannot be disabled without disrupting platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised data about how visitors use the platform — which pages are most popular, how long sessions last, and where users encounter errors. This data helps us improve the platform experience. No personally identifiable information is included in analytics cookie data.
• Functionality Cookies: These cookies remember your preferences such as your chosen language, display settings and last-used payment method so that you do not need to re-enter them on each visit.
• Responsible Gaming Cookies: These cookies store the status of any responsible gaming limits, session reminders or cooling-off periods you have set, ensuring that these safeguards remain active across sessions and devices.

8.2 Managing Cookies

You may control and delete cookies through your browser settings. Most modern browsers allow you to block or delete cookies entirely or to configure which types of cookies are accepted. Please note that disabling strictly necessary cookies will impair your ability to use the pk0p platform — in particular, you will not be able to remain logged in or access the cashier.

For detailed guidance on managing cookies in your specific browser, refer to the help documentation provided by your browser developer. Disabling performance or functionality cookies will not prevent you from using the core platform features.

09 Data Retention

pk0p retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The general retention periods applied by pk0p are as follows:

Where personal data is no longer required under any of the above retention criteria, it is securely deleted or anonymised so that it can no longer be associated with an individual. Anonymised aggregate data may be retained indefinitely for statistical analysis and platform improvement purposes.

10 Data Security

pk0p implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration or disclosure. Our security infrastructure includes the following key protections:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the pk0p platform is protected by industry-standard 256-bit Secure Socket Layer encryption, ensuring that information cannot be intercepted in transit.
• Encrypted Data Storage: Sensitive data stored on pk0p's servers — including identity documents, financial records and account credentials — is encrypted at rest using AES-256 encryption standards.
• Access Controls: Access to personal data within pk0p's internal systems is restricted to staff who require it to perform their job functions. All staff with data access are subject to confidentiality agreements and receive regular data protection training.
• Two-Factor Authentication: Internal system access by pk0p staff requires multi-factor authentication. We strongly recommend that players also enable 2FA on their own accounts through the Account Settings menu.
• Regular Security Audits: pk0p conducts periodic security reviews and penetration testing to identify and remediate potential vulnerabilities in the platform infrastructure.
• Incident Response: In the event of a data security incident that affects your personal data, pk0p will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

11 Your Privacy Rights

As a player registered on the pk0p platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Request" and include your registered username and email address so we can verify your identity before processing the request.

• Right of Access: You have the right to request a copy of all personal data pk0p holds about you. We will provide this information in a clear, structured format within 5 business days of verifying your identity.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update basic account information (such as your email address or phone number) directly through your Account Settings page.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes it was collected, where you have withdrawn consent, or where it has been processed unlawfully. Erasure requests are subject to our legal retention obligations — data required for regulatory compliance cannot be deleted before the mandatory retention period expires.
• Right to Restrict Processing: In certain circumstances — for example, while a dispute about data accuracy is being resolved — you may request that we restrict our processing of your data to storage only, suspending any active use until the matter is settled.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to pk0p in a structured, commonly used and machine-readable format (such as JSON or CSV), and to transmit that data to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on pk0p's legitimate interests. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent — in particular, direct marketing communications — you may withdraw that consent at any time by contacting [email protected] or clicking the unsubscribe link in any marketing email. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

12 Children and Minors

The pk0p platform is strictly intended for adults aged 21 years and above. pk0p does not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step in the account registration and KYC process, and accounts found to belong to individuals under 21 will be immediately suspended and all balances refunded to the verified payment source.

If you believe that a minor has registered an account on the pk0p platform or that personal data belonging to a minor has been collected, please contact us immediately at [email protected]. We will investigate the report without delay and take all necessary steps to delete the data and close the account.

13 Third-Party Links

The pk0p platform does not include links to external third-party websites for general browsing purposes. However, in the event that any informational or reference links to third-party resources are present on the platform, please be aware that those websites operate under their own independent privacy policies. pk0p has no control over the data collection or processing practices of any third-party website and accepts no responsibility for the privacy practices of such sites.

We recommend that you review the privacy policy of any external website you visit to understand how that site collects and uses your personal data. The inclusion of any link on the pk0p platform does not constitute an endorsement of the linked site's privacy practices.

14 International Data Transfers

pk0p's primary user base is located in Bangladesh. Where personal data is transferred to or processed by third-party service providers — such as game content providers, KYC verification partners or cloud infrastructure providers — located outside of Bangladesh, pk0p takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this policy.

Such safeguards may include data processing agreements with the relevant third party that incorporate standard contractual clauses ensuring an adequate level of data protection, or reliance on the third party's adherence to internationally recognised data protection frameworks.

Where cross-border data transfers are necessary for the delivery of our services — for example, to enable a game session with an international game provider's servers — those transfers are conducted over encrypted connections and only the minimum data required to facilitate the session is transmitted.

15 Policy Amendments

pk0p reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When we make material changes to this policy, we will take the following steps to notify you:

• We will post the revised policy on this page at pk0p.io/privacy-policy with a new "Last Updated" date prominently displayed at the top.
• We will send a notification email to the email address registered to your account at least 7 days before the changes take effect, summarising the key amendments in plain English.
• We will display a prominent notice on the platform homepage informing players of the upcoming policy change for a period of at least 7 days prior to the effective date.

Your continued use of the pk0p platform after the effective date of any revised Privacy Policy constitutes your acknowledgement and acceptance of the updated terms. If you do not agree with the changes, you may close your account by contacting [email protected] before the effective date. We will process your account closure and any outstanding balance withdrawal in accordance with our standard procedures.

Minor amendments — such as typographical corrections, formatting changes or clarifications that do not materially affect the substance of the policy — may be made at any time without individual notification. The "Last Updated" date at the top of the policy will always reflect the most recent revision.

16 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the way in which pk0p handles your personal data, please reach out to our team using the contact details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

• Email: [email protected]
• Subject Line: "Privacy Policy Enquiry" or "Data Request"
• Response Time: Within 5 business days (Bangladesh Standard Time, UTC+6)
• Support Availability: 24 hours a day, 7 days a week
• Language: All privacy communications handled in English

We take every privacy enquiry seriously and will always provide a substantive, clear response to your questions. If you remain dissatisfied with our handling of your personal data after contacting us directly, you may have the right to escalate the matter to a relevant data protection authority.