pkko Privacy Policy — How We Handle Your Data

1.1 Information You Provide Directly

When you register an account or use the pkko platform, you may provide the following categories of personal information:

• Identity information: your full name, date of birth, and nationality — collected to verify that you meet the 21+ age requirement and to fulfil identity verification obligations.
• Contact information: your mobile phone number and email address — used to manage your account, send transactional notifications, and respond to support enquiries.
• Account credentials: your chosen username and a hashed version of your password. pkko never stores passwords in plain text. Your password is processed using a one-way cryptographic hash before storage.
• Verification documentation: where KYC verification is required, copies of identity documents such as a National ID Card or passport may be collected and stored for the minimum period required by our compliance obligations.

1.2 Information Collected Automatically

When you access or use the pkko platform, certain data is collected automatically through technical mechanisms including server logs, cookies, and session tracking. This data includes:

• Device and connection data: your IP address, device type, operating system version, browser type and version, mobile network operator, and approximate geographic location derived from your IP address.
• Usage data: pages visited, time spent on each page, games played, bet amounts and outcomes, session duration, and in-app navigation patterns. This data is used to improve the platform experience and to detect unusual activity that may indicate fraud or account compromise.
• Cookie data: session identifiers, preference cookies, and analytics data. See Section 5 of this Policy for full details on cookies.

1.3 Information from Payment Providers

When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, pkko receives transaction confirmation data from the relevant payment service provider. This typically includes a transaction reference number, the amount transferred, the date and time of the transaction, and a partial identifier for the payment instrument used (for example, the last four digits of a card number or the mobile wallet number associated with the transaction). pkko does not receive or store your full payment card number or your mobile banking PIN.

Lawful purposes for processing your data include:

• Account administration: creating and managing your player account, verifying your identity and age, processing deposits and withdrawals, and communicating account-related information such as transaction confirmations and security alerts.
• Platform delivery and improvement: operating the games and betting services available on pkko, analysing usage patterns to identify and fix technical issues, and developing new features that improve the player experience.
• Fraud prevention and security: detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, and other conduct that threatens the integrity of the platform or the safety of other players.
• Responsible gaming compliance: monitoring player activity to identify patterns consistent with problem gambling behaviour, and providing appropriate responsible gaming interventions including deposit limit tools and self-exclusion options.
• Legal and regulatory compliance: meeting our obligations under applicable laws and regulations, including responding to lawful requests from regulatory authorities, law enforcement agencies, and financial intelligence units where required by law.

2.1 Marketing Communications

pkko may send promotional emails or in-platform notifications about bonuses, new game releases, and special offers to players who have registered an account and not opted out of marketing communications. If you do not wish to receive marketing communications from pkko, you may opt out at any time by following the unsubscribe instructions included in any marketing email, or by contacting pkko support via the email address shown on this site. Opting out of marketing communications does not affect transactional notifications related to your account or deposits.

3.1 How Payment Data Is Handled

All deposits and withdrawals on pkko are processed through established third-party payment service providers including bKash, Nagad, Rocket, and Upay for mobile wallet transactions, and Visa and Mastercard for card transactions. pkko does not directly process card payments. When you initiate a card payment, you are redirected to a Payment Card Industry (PCI) compliant payment gateway operated by a third-party provider. pkko receives only a transaction confirmation and a partial payment reference upon successful completion — it does not receive, process, or store your full card number, card verification value (CVV), or any equivalent sensitive authentication data.

3.2 Anti-Money Laundering Obligations

pkko monitors financial transactions on the platform for patterns that may indicate money laundering or other financial crimes. Where pkko identifies suspicious transaction activity, it is required to report that activity to relevant financial intelligence or law enforcement authorities as mandated by applicable law. Such reporting may occur without prior notification to the account holder, as advance notice could compromise the integrity of the investigation. pkko may also be required to freeze an account and hold associated funds pending investigation in these circumstances.

4.1 Service Providers and Data Processors

pkko works with a limited number of third-party service providers who process personal data on our behalf in order to deliver specific platform functions. These providers include:

• Payment processing providers: bKash, Nagad, Rocket, Upay, and card payment gateway operators. These providers receive only the transaction data necessary to process your specific payment request.
• Identity verification providers: where KYC verification is required, identity documentation may be shared with a third-party verification service. Such providers are contractually bound to use your data only for the verification purpose for which it was shared.
• Platform analytics and hosting providers: technical infrastructure and analytics services that help pkko operate and improve the platform. These providers process usage and technical data only, not your financial or identity information.

4.2 Legal Disclosure

pkko may disclose personal data to government authorities, regulatory bodies, law enforcement agencies, or courts where required or permitted to do so by applicable law. This includes disclosures made in response to lawful court orders, subpoenas, regulatory investigations, or requests from financial intelligence units. pkko will disclose only the minimum information required to satisfy the legal obligation and will, where legally permitted to do so, seek to notify the affected player of any such disclosure in advance.

Cookie types used on pkko:

• Essential cookies: strictly necessary for the platform to function. These include session authentication cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without breaking the platform's core functionality.
• Analytics cookies: used to collect aggregated, anonymised data about how players use the pkko platform — for example, which pages are visited most frequently and at what times. This data helps pkko identify areas for improvement. Analytics cookies do not identify you personally.
• Preference cookies: used to remember your platform settings such as language preference and display options, so that your preferences are preserved between sessions without requiring you to reconfigure them each time you log in.

6.1 Retention Periods

pkko retains personal data for as long as it is necessary to fulfil the purpose for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes that may arise. The following general retention periods apply: account data is retained for the lifetime of the account and for a minimum of five years following account closure; transaction records are retained for a minimum of five years from the date of each transaction; KYC documentation is retained for the period required by applicable compliance obligations, typically five years from the end of the business relationship; usage and analytics data is retained in anonymised or aggregated form for up to three years.

6.2 Account Deletion Requests

You may request the closure and deletion of your pkko account by contacting support via the email address shown on this site. Upon receiving a valid account deletion request, pkko will close the account and delete or anonymise personal data that is not subject to a mandatory retention obligation. Data that pkko is legally required to retain (such as transaction records and KYC documentation) will be held for the required retention period and then securely deleted. pkko will confirm the outcome of any deletion request within a reasonable time of receiving it.

Your rights include:

• Right of access: you may request a copy of the personal data that pkko holds about you. pkko will provide this information within a reasonable time of receiving a valid request.
• Right to correction: if you believe that personal data pkko holds about you is inaccurate or incomplete, you may request that it be corrected or updated. Account holders may also update certain personal information directly from within their account settings.
• Right to deletion: you may request the deletion of your personal data, subject to pkko's legal obligations to retain certain categories of data as described in Section 6 of this Policy.
• Right to object to marketing: you may opt out of marketing communications from pkko at any time as described in Section 2 of this Policy. Opting out does not affect essential account communications.
• Right to data portability: upon request, pkko will provide a copy of your personal data in a structured, commonly used format where technically feasible, so that you may transfer it to another service provider if you choose.