pjoko Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how pjoko ("pjoko", "we", "us", "our"), operator of the online casino and sports betting platform at pjoko.io (the "Platform"), collects, uses, stores, shares, and protects personal information relating to registered players and visitors ("you", "your") based in Bangladesh and elsewhere.

pjoko is committed to handling your personal data with the highest standards of transparency, security, and fairness. This Policy is designed to give you a clear and complete picture of our data practices so that you can make informed decisions about the information you share with us. Please read this Policy carefully. By registering an account or using the Platform in any capacity, you acknowledge that you have read and understood this Policy.

This Policy should be read alongside the pjoko Terms and Conditions and the Responsible Gaming page, both of which form part of the legal framework governing your use of the Platform.

2. Personal Data We Collect

The categories of personal data that pjoko may collect about you are set out below. The specific data points collected in each category depend on how you interact with the Platform.

2.1 Identity and Contact Data

When you register an account or complete Know Your Customer (KYC) verification, we collect:

2.2 Financial and Transaction Data

To process deposits and withdrawals in Bangladeshi Taka (BDT), we collect:

2.3 Gaming and Behavioural Data

As part of operating a fair and responsible gaming platform, we collect data about your activity on the Platform:

2.4 Technical and Device Data

When you access the Platform through any device, we automatically collect:

2.5 Communications Data

When you contact our support team or participate in any feedback channel, we retain records of:

3. How We Collect Your Data

pjoko collects personal data through the following means:

• Direct interactions: Information you voluntarily provide during account registration, KYC verification, payment setup, support requests, or feedback submissions.
• Automated technologies: Technical and device data collected automatically via cookies, server logs, and similar tracking technologies when you access or use the Platform.
• Third-party sources: Identity and fraud-screening data received from KYC verification service providers, payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and anti-fraud analytics partners, solely for the purpose of verifying your identity and preventing financial crime.
• Game and platform activity: Behavioural and gaming data generated through your use of games, betting markets, and account management features on the Platform.

4. Purposes of Data Processing

The table below sets out the primary purposes for which pjoko processes your personal data:

Purpose	Data Categories Used
Account registration and management	Identity, contact, technical data
Identity verification (KYC) and age confirmation (21+)	Identity, contact, document data
Processing deposits and withdrawals in BDT	Financial, transaction, identity data
Delivering and improving Platform services	Gaming, behavioural, technical data
Fraud prevention and anti-money laundering compliance	Identity, financial, technical, gaming data
Responsible gaming monitoring and intervention	Gaming, behavioural data
Customer support and complaint resolution	Identity, communications data
Personalised game recommendations (opt-in only)	Gaming, behavioural data
Security monitoring and breach detection	Technical, identity data
Legal compliance and regulatory reporting	All categories as required by law

5. Legal Basis for Processing

pjoko processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations to you under the pjoko Terms and Conditions — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and financial record-keeping obligations.
• Legitimate interests: Processing necessary for pjoko's legitimate business interests, such as fraud prevention, platform security, and improving our services — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your explicit consent — for example, for optional marketing communications or personalised content recommendations — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

6.1 Service Partners

pjoko shares personal data with a limited set of trusted third-party service providers who assist us in operating the Platform. These partners are contractually required to process your data only on our instructions and to maintain appropriate security standards. Categories of service partners include:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard — for transaction processing in BDT.
• KYC and identity verification providers — to satisfy age and identity checks.
• Game technology studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — to deliver certified game content.
• Cloud hosting and infrastructure providers — to store data securely.
• Fraud detection and anti-money laundering analytics providers.

6.2 Legal and Regulatory Disclosure

pjoko may disclose your personal data to government authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or lawful request. In such cases, we will disclose only the minimum data necessary to fulfil the legal obligation and will notify you where we are legally permitted to do so.

6.3 Business Transfers

In the event that pjoko undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer and of any material changes to this Privacy Policy that result from it.

6.4 No Sale of Data

pjoko does not, under any circumstances, sell, rent, or exchange your personal data with third parties for their own independent marketing, profiling, or commercial purposes. Data sharing is strictly limited to what is necessary for the purposes described in this Policy.

7. Cookies and Tracking Technologies

pjoko uses cookies and similar technologies (such as pixel tags and local storage) to operate and improve the Platform. The categories of cookies we use are as follows:

• Strictly necessary cookies: Essential for the Platform to function. These include session cookies that maintain your logged-in state, security tokens, and cookies that remember your language and currency preferences. These cannot be disabled without impairing core Platform functionality.
• Performance and analytics cookies: Used to understand how players interact with the Platform — including which pages are visited most frequently, where errors occur, and how long sessions last. This data is aggregated and anonymised wherever possible. We use this data solely to improve Platform performance.
• Functional cookies: Used to remember your preferences — such as your preferred BDT payment method or responsible gaming limit settings — so that you do not need to re-enter them at each visit.

pjoko does not deploy third-party advertising or retargeting cookies. Your browsing activity on pjoko.io is not shared with advertising networks.

Most browsers allow you to control cookie settings via your browser preferences. Please note that disabling strictly necessary cookies may prevent certain parts of the Platform from functioning correctly. For further information on managing cookies in your browser, refer to your browser's help documentation.

8. Data Security

pjoko takes the security of your personal data seriously. We implement a combination of technical and organisational measures to protect your information against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and pjoko servers.
• Encryption of sensitive data at rest within our secure server infrastructure.
• Role-based access controls ensuring that only authorised pjoko personnel with a genuine business need can access personal data.
• Regular security assessments and penetration testing of Platform systems.
• Secure, access-controlled data centres with physical security protocols.
• Staff training on data protection obligations and incident response procedures.

While pjoko employs industry-standard security measures, no system is completely immune to risk. In the unlikely event of a data breach that poses a risk to your rights and freedoms, pjoko will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach. If you believe your account has been compromised, please contact us immediately at [email protected].

9. Data Retention

pjoko retains your personal data for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of your active account relationship with pjoko.
• Post-closure account data: Following voluntary account closure or suspension, identity, transaction, and gaming records are retained for a minimum of five (5) years to comply with anti-money laundering and financial record-keeping legal obligations.
• KYC verification documents: Retained for a minimum of five (5) years following the conclusion of the business relationship, or as otherwise required by applicable law.
• Support and communications records: Retained for three (3) years from the date of the last interaction, unless a longer period is required by ongoing legal proceedings or complaint resolution.
• Technical and device data (server logs): Retained for twelve (12) months for security monitoring purposes, then automatically purged.
• Cookie and analytics data: Aggregated analytics data is retained for up to twenty-four (24) months; session-level cookies expire at the end of your browser session or within the period defined in our cookie settings.

When personal data is no longer required and no legal obligation requires its continued retention, pjoko will securely delete or irreversibly anonymise it so that it can no longer be attributed to an identifiable individual.

10. Your Data Protection Rights

Subject to applicable law, you have the following rights in relation to the personal data that pjoko holds about you:

• Right of access: You may request a copy of the personal data pjoko holds about you, together with information about how it is used.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected or updated.
• Right to erasure: In certain circumstances, you may request that pjoko delete your personal data. This right is subject to exceptions where continued retention is required by law (for example, to satisfy anti-money laundering record-keeping obligations).
• Right to restriction: You may request that pjoko restrict its processing of your personal data in certain circumstances — for example, while a rectification request is being resolved.
• Right to object: You may object to pjoko's processing of your data where that processing is based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before your withdrawal.
• Right to data portability: Where technically feasible and legally applicable, you may request a structured, machine-readable copy of the personal data you provided to pjoko for transfer to another service provider.

To exercise any of these rights, please submit a written request to [email protected]. pjoko will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) calendar days. In complex cases, this period may be extended by a further thirty (30) days, in which case you will be notified of the extension and its reason.

We may need to verify your identity before processing any data rights request. This is to ensure that personal data is only disclosed to the individual to whom it relates.

11. Children's Privacy

The pjoko Platform is strictly intended for adults aged 21 years and above. pjoko does not knowingly collect or process personal data relating to individuals under the age of 21. If you are under 21, you are not permitted to register an account, access the Platform, or provide any personal data to pjoko.

If pjoko discovers or is notified that it has inadvertently collected personal data from an individual under the age of 21, it will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child may have registered on the Platform, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

pjoko reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will provide notice to registered players via email or a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Last updated" date at the top of this document will be revised with each update. We encourage you to review this Policy periodically to stay informed of how pjoko handles your personal data. Your continued use of the Platform following the effective date of any revised Policy constitutes your acknowledgement of those changes.

Previous versions of this Privacy Policy are available upon written request to our support team.

13. Contact and Data Enquiries

If you have any questions, concerns, or complaints relating to this Privacy Policy or to pjoko's data processing practices, please contact our support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly through the Platform.
• Email: [email protected] — responses within 4 hours Bangladesh Standard Time (BST, UTC+6).

All privacy-related enquiries are handled by pjoko's dedicated data protection team. Formal complaints submitted via email will be acknowledged within 24 hours and fully resolved within 30 calendar days wherever possible.

By using the pjoko Platform, you confirm that you have read and understood this Privacy Policy in full and that you agree to the collection and use of your personal data as described herein. This Policy was last updated on 1 January 2026 and is effective from that date.