pojko Privacy Policy

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below unless the context clearly indicates otherwise:

• "pojko", "we", "us", "our" — refers to the pojko platform and its operating entity, providing online sports betting and casino services at pojko.io.
• "Personal Data" — any information that, alone or in combination with other data, can be used to identify a specific living individual. This includes your name, date of birth, contact details, financial information, device identifiers, and account activity records.
• "Processing" — any operation or set of operations performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, and deletion.
• "Data Subject" — the identified or identifiable natural person to whom Personal Data relates. In the context of this policy, this means you, the registered pojko player or website visitor.
• "Third-Party Processor" — an external organisation that processes Personal Data on pojko's behalf under a binding contractual agreement that restricts their use of that data to the defined purposes only.
• "KYC" — Know Your Customer; the identity verification process we are required to conduct to confirm a player's identity, age, and source of funds before permitting withdrawals or upon request at any time.
• "Cookie" — a small text file placed on your device by the pojko website that enables functionality, preferences, and anonymous analytics tracking as described in Section 6 of this policy.

Data We Collect

pojko collects personal data from you in three primary ways: data you provide directly, data generated automatically when you use the platform, and data received from trusted third-party verification partners. The following table summarises the categories of data collected and their source:

pojko does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification purposes under applicable KYC regulations.

How We Use Your Data

pojko uses the personal data collected for the following clearly defined purposes:

• Account management: To create, operate, and maintain your pojko account, including verifying your identity, processing your login, and managing your account settings and preferences.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain an accurate record of your financial activity on the platform.
• Legal and regulatory compliance: To fulfil our KYC, anti-money-laundering (AML), and counter-terrorism financing (CTF) obligations, which may require us to retain certain identity and transaction records for defined statutory periods.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, account takeover attempts, bonus abuse, money laundering, and other conduct prohibited under our Terms and Conditions.
• Platform improvement: To analyse aggregated and anonymised usage patterns to improve the pojko user interface, game catalogue, betting markets, and overall service quality.
• Customer support: To respond to your support enquiries, resolve disputes, process complaints, and provide assistance via live chat and email.
• Responsible gaming: To monitor wagering behaviour for signs of problem gambling, enforce self-exclusion and deposit limit requests, and comply with responsible gaming obligations.
• Promotional communications: Where you have given explicit consent, to send you information about pojko promotions, bonuses, seasonal offers (such as Eid or BPL promotions), and platform updates. You may withdraw this consent at any time by contacting [email protected].

Legal Basis for Processing

pojko processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing is necessary to perform the contract between you and pojko — specifically, to operate your account, process bets and transactions, and deliver the services you have registered to use.
• Legal obligation: Processing is necessary for pojko to comply with applicable legal and regulatory requirements, including KYC, AML, and data retention obligations.
• Legitimate interests: Processing is necessary for pojko's legitimate business interests, such as fraud prevention, platform security, abuse detection, and service improvement, where those interests are not overridden by your own rights and interests.
• Consent: For certain processing activities, such as sending you marketing communications, pojko will seek your express consent. Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing that took place before withdrawal.

Data Sharing and Disclosure

pojko does not sell, rent, or trade your personal data to third parties. We share your data only in the following carefully controlled circumstances:

• Payment processors: We share necessary financial data with bKash, Nagad, Rocket, Upay, and other payment providers to process your deposits and withdrawals. These providers operate under their own privacy policies and regulatory frameworks.
• Identity verification partners: We use regulated third-party KYC and AML compliance services to verify identity documents and screen against sanctions lists. These processors are bound by strict data processing agreements.
• Game providers: To deliver casino and live dealer games, technical data (such as session tokens and stake amounts) is shared with certified game providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These providers do not receive your name or contact details.
• IT and hosting infrastructure: pojko uses secure cloud hosting and infrastructure providers who may process technical and account data on our behalf as data processors. All such providers operate under binding data processing agreements with pojko.
• Legal and regulatory disclosure: pojko may disclose your personal data to relevant authorities where required by law, court order, or where we have a good-faith belief that disclosure is necessary to investigate fraud, protect our legal rights, or ensure the safety of our users.

Cookies and Tracking Technologies

The pojko platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. The following categories of cookies are used:

• Essential cookies: These are strictly necessary for the platform to function. They manage your login session, maintain your account authentication state, and ensure the security of your active session. You cannot opt out of essential cookies without disabling your use of the platform entirely.
• Functional cookies: These remember your preferences, such as preferred language, display settings, and betting market layouts, so that the platform behaves consistently across sessions.
• Analytics cookies: We use anonymised analytics tools to understand how users navigate the pojko platform — which pages are visited most frequently, where users encounter difficulties, and how session flows can be improved. Analytics data is processed in aggregate and is not linked to individual user identities.
• Security cookies: These are used to detect and prevent fraudulent login attempts, bot activity, and credential stuffing attacks. They contribute to the overall integrity of our account security systems.

pojko does not use third-party advertising or retargeting cookies that track your behaviour across websites outside of pojko.io. You can manage cookie preferences through your browser settings; however, disabling essential cookies may prevent you from accessing certain platform features.

Data Retention

pojko retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, and to comply with applicable legal, regulatory, and compliance requirements. The following retention principles apply:

• Active account data: Personal data associated with an active pojko account is retained for as long as the account remains open and in use.
• Closed account data: Following account closure (whether at your request or by pojko), we retain identity and transaction records for a minimum period required by applicable AML and financial record-keeping regulations. This period is typically five years from the date of account closure.
• KYC and verification documents: Copies of identity documents submitted as part of KYC verification are retained for the period required by applicable compliance obligations and are stored with the highest level of encryption and access controls.
• Support communications: Live chat transcripts and email correspondence are retained for up to two years following the closure of the relevant support interaction to enable dispute resolution and quality assurance.
• Analytics data: Anonymised and aggregated analytics data, which cannot be linked to any individual, may be retained indefinitely for platform improvement purposes.

Once a retention period expires, pojko securely deletes or irreversibly anonymises the relevant data so that it can no longer be associated with any identifiable individual.

Your Rights Over Your Personal Data

As a pojko player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and include your registered username and a description of your request.

• Right of access: You have the right to request a copy of the personal data that pojko holds about you. We will respond to verified access requests within 30 calendar days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update certain information directly within your account settings panel.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing was unlawful. Please note that erasure requests may be declined where retention is required by law (such as AML and KYC record-keeping obligations).
• Right to restriction: You may request that pojko restrict the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to data portability: Where processing is based on your consent or on a contract with you, and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time by contacting our support team. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Security Measures

pojko implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and the pojko platform, ensuring that account credentials, payment information, and session data cannot be intercepted in transmission.
• Cryptographic password hashing using industry-standard one-way algorithms. pojko staff cannot read your password. In the event of a data breach, hashed passwords cannot be directly reversed to obtain plaintext credentials.
• Role-based access controls ensuring that pojko staff members can only access the personal data necessary for their specific operational role. Access to sensitive data is logged and regularly audited.
• Continuous infrastructure monitoring for signs of intrusion, denial-of-service activity, or anomalous data access patterns, with automated alerts and a defined incident response procedure.
• Regular security assessments including vulnerability scanning of the pojko platform to identify and remediate security weaknesses before they can be exploited.

In the event of a data security incident that poses a risk to your personal data, pojko will notify affected users without undue delay and will take all reasonable steps to contain and remediate the incident.

Third-Party Services and Links

The pojko platform integrates with third-party services necessary to deliver its full range of features, including certified game providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi), payment processors (bKash, Nagad, Rocket, Upay), and identity verification partners. Each of these third parties operates under its own privacy policy and data protection framework.

pojko has conducted due diligence on all third-party processors to ensure they meet appropriate data protection standards. All third-party processors with whom pojko shares personal data are bound by contractual data processing agreements that restrict their use of your data to the specific purposes for which it was shared.

pojko is not responsible for the privacy practices of third-party websites that may be referenced in content on the platform, nor for any data collected by those third-party game provider interfaces once a game session is initiated within the pojko platform. We encourage you to review the privacy policies of any third-party service you interact with.

Children and Minors

pojko is strictly an adult platform. The minimum age to register and use the pojko platform is 21 years. pojko does not knowingly collect personal data from any individual under the age of 21.

If pojko becomes aware that personal data has been collected from an individual below the minimum age threshold, we will immediately suspend the relevant account, delete all associated personal data, and return any deposited funds to the payment source on record. Age verification is conducted as part of our KYC process and may be triggered at any point during a user's relationship with the platform.

If you are a parent or guardian and believe that your child has registered on the pojko platform, please contact us immediately at [email protected] so that we can take prompt action to close the account and delete all associated data.

Updates to This Privacy Policy

pojko reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, pojko will notify registered users via the registered account email address and/or through a prominent notice displayed on the platform prior to the change taking effect.

The "Effective date" displayed at the top of this document reflects the date on which the current version of the Privacy Policy came into force. We encourage you to review this policy periodically so that you remain informed of how your personal data is being used.

Your continued use of the pojko platform following notification of any update to this Privacy Policy constitutes your acknowledgement and acceptance of the revised terms. If you do not agree to any updated Privacy Policy, you must cease using the platform and may request account closure by contacting [email protected].

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way pojko processes your personal data, please contact our support and data team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Data Rights Request" or "Privacy Enquiry"
• Live Chat: Available 24/7 directly on the pojko platform
• Response time: Under 2 minutes via live chat; within 5 business days via email for standard enquiries; within 30 calendar days for formal data rights requests
• Support language: English
• Support hours: 24 hours a day, 7 days a week, including Bangladesh public holidays