pkjo Privacy
Policy

This Privacy Policy describes how pkjo ("we", "us", "our") collects, uses, stores, and discloses personal data when you access and use the pkjo platform at pkjo.onl, including all associated games, features, payment services, and customer support functions.

pkjo is committed to protecting the privacy of all users, with particular attention to the needs and expectations of players based in Bangladesh. This policy has been written in plain English to ensure it is fully understandable, and it reflects our genuine commitment to handling your data with integrity.

By registering an account on pkjo, making a deposit, or otherwise using any feature of the pkjo platform, you confirm that you have read, understood, and agreed to this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact [email protected] to request account closure.

pkjo collects personal data in several broad categories, all of which are described in detail in the Data Inventory table above. In summary, pkjo collects:

• Identity Data: Information that identifies you as an individual, including your full legal name, date of birth, and government-issued identification number (such as your National Identity Card number). This data is essential for account registration and mandatory age and identity verification.
• Contact Data: Your mobile phone number, email address, and — where provided — your residential address in Bangladesh. Contact data is used to communicate with you about your account, transactions, and support queries.
• Financial Data: Details of the payment methods you use to deposit and withdraw funds, including your bKash or Nagad wallet number, Rocket or Upay mobile banking identifier, or bank account details for Dutch-Bangla Bank, City Bank, BRAC Bank, or other supported institutions. pkjo does not store full card numbers or mobile banking PINs.
• Technical Data: Automatically collected data about the device and network used to access pkjo, including your IP address, device model, operating system version, browser type, and session timestamps.
• Usage Data: Records of your activity on the platform, including the games you play, the bets you place, the amounts wagered, win/loss outcomes, and the features you interact with.
• Communications Data: The content of any messages you send to pkjo's support team, including live chat transcripts, email correspondence, and records of any complaints or disputes you raise.
• Verification Documents: Copies of identity documents submitted during the KYC (Know Your Customer) verification process, including NID scans, passport copies, and any liveness verification images.

pkjo collects personal data through the following channels:

• Direct provision by you: When you register an account, complete the KYC verification process, make a deposit or withdrawal request, submit a support ticket, or respond to a survey, you directly provide us with personal data.
• Automated technical collection: When you visit pkjo.onl, our servers automatically collect technical and usage data via server logs, session tracking mechanisms, and standard web analytics. This data is collected passively as part of normal platform operation.
• Payment processing partners: When you initiate a transaction via bKash, Nagad, Rocket, Upay, or a supported bank, our payment processing partners may transmit confirmation data and transaction references to pkjo for reconciliation and fraud prevention purposes.
• Identity verification providers: Where pkjo uses a third-party identity verification service to process your KYC documents, that provider may supply a verification status and risk score to pkjo. The raw document images are handled in accordance with the verification provider's own security standards.
• Fraud and risk detection systems: Automated systems that analyse login patterns, device fingerprints, and transaction behaviour to identify anomalous activity may generate data points associated with your account for security purposes.

pkjo uses the personal data it collects for the following purposes:

• Account creation and management: To register your account, verify your identity, maintain your player profile, and process any changes you request to your account settings.
• Transaction processing: To process deposits, withdrawals, and bonus credits accurately and in a timely manner via your chosen payment method.
• Responsible gaming monitoring: To monitor your gameplay patterns for indicators of problem gambling behaviour, to enforce any deposit limits or self-exclusion periods you have set, and to send responsible gaming reminders where appropriate.
• Customer support: To respond to your enquiries, resolve complaints, investigate disputed transactions, and provide you with accurate and timely assistance in English.
• Security and fraud prevention: To detect and prevent fraudulent activity, unauthorised account access, money laundering, and bonus abuse. This includes automated analysis of behavioural and technical signals.
• Legal compliance: To fulfil record-keeping, age verification, and anti-money laundering obligations applicable to online gaming platforms operating in the Bangladesh market context.
• Platform improvement: To analyse aggregated usage data (stripped of direct identifiers) to improve game selection, platform performance, and user experience for all pkjo players.
• Marketing communications (with consent only): To send you promotional offers, bonus notifications, and platform updates via email or SMS — but only where you have explicitly opted in to receive such communications. You may withdraw this consent at any time by contacting [email protected].

pkjo will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a new lawful basis.

pkjo does not sell or rent your personal data to third parties. We share your data only in the following limited and controlled circumstances:

• Payment processors: Your financial data is shared with the payment processors that facilitate your chosen deposit and withdrawal method (e.g., bKash, Nagad, Rocket, Upay, participating banks). These processors receive only the data necessary to complete the transaction.
• Identity verification providers: KYC documents are shared with our contracted identity verification partner for the sole purpose of verifying your age and identity. These providers are contractually bound to process your data only for verification purposes and are prohibited from using it for any other purpose.
• Game software providers: To facilitate gameplay, technical session identifiers may be shared with certified game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers operate under strict data processing agreements and handle only the session data required to run the game.
• Fraud prevention and security services: Anonymised or pseudonymised technical data may be shared with specialist fraud detection services to protect pkjo and its players from malicious activity.
• Legal and regulatory authorities: Where required by law, court order, or competent authority, pkjo may disclose personal data to relevant authorities. pkjo will notify the affected user of any such disclosure where it is legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or transfer of the pkjo business, personal data held by pkjo may be transferred to the acquiring entity as part of that transaction, subject to the same privacy protections described in this policy.

pkjo uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored on your device by your browser when you visit a website. pkjo uses the following categories of cookies:

• Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, remember your language preference, and ensure secure navigation. These cookies cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: These collect anonymised information about how players use the pkjo platform — which pages are visited most, where errors occur, and how users navigate between features. This data helps pkjo improve the platform experience for all users.
• Functionality cookies: These remember choices you make — such as your preferred game category or display settings — so that pkjo can provide a more personalised experience during and between sessions.
• Security cookies: Used to detect and prevent fraudulent activity, including session hijacking and cross-site request forgery (CSRF) attacks. These cookies are part of pkjo's core security infrastructure.

pkjo does not use advertising or retargeting cookies that track your activity across unrelated third-party websites. You can manage cookie preferences through your browser settings, though disabling certain categories may affect platform functionality.

pkjo implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our security practices include:

• TLS/SSL encryption: All data transmitted between your browser or mobile device and pkjo's servers is encrypted using industry-standard Transport Layer Security (TLS). This ensures that login credentials, payment details, and personal information cannot be intercepted in transit.
• Password hashing: User passwords are never stored in plain text. pkjo uses a strong one-way cryptographic hashing algorithm with salting to store password data, ensuring that even in the unlikely event of a data breach, raw passwords remain protected.
• Access controls: Access to personal data within pkjo's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of data access required for their specific role.
• Intrusion detection and monitoring: pkjo's infrastructure is monitored continuously for signs of unauthorised access, anomalous traffic, and potential security threats. Automated alerts are triggered for suspicious activity patterns.
• Secure document storage: KYC verification documents are stored in encrypted, access-controlled storage environments separate from general account data, with strict access logging.

While pkjo takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. In the event of a data breach that poses a significant risk to your personal data, pkjo will notify affected users and take prompt remedial action in accordance with applicable obligations.

pkjo retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and compliance obligations. The following retention periods apply:

• Active account data: Retained for the full duration that your pkjo account remains open and active.
• Closed account data: Following voluntary account closure or termination by pkjo, core account and transaction records are retained for a minimum period of five (5) years to meet financial record-keeping and anti-money laundering compliance standards.
• KYC verification documents: Retained for a minimum period of five (5) years from the date of verification, or longer if required by applicable law or ongoing investigation.
• Support communications: Chat transcripts and email correspondence are retained for up to three (3) years from the date of the interaction, after which they are securely deleted unless a dispute is ongoing.
• Technical and usage logs: Server logs and session data used for security and analytics purposes are retained for up to twelve (12) months, after which they are either deleted or anonymised such that they can no longer be linked to an individual player.
• Marketing consent records: Records of your marketing preferences and consent decisions are retained for as long as your account is active and for one (1) year following account closure, to provide an audit trail of consent history.

When data reaches the end of its applicable retention period, pkjo securely destroys or permanently anonymises it using industry-standard data disposal methods.

pkjo respects your rights in relation to your personal data. The following rights are available to all pkjo players:

• Right of Access: You may request a copy of the personal data that pkjo holds about you. pkjo will provide this within a reasonable timeframe following identity verification.
• Right to Rectification: If any personal data pkjo holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account details (such as your contact number or email address) directly through your account settings.
• Right to Erasure: You may request the deletion of your personal data where: (a) it is no longer necessary for the purpose it was collected; (b) you withdraw consent and there is no other lawful basis for processing; or (c) the data has been processed unlawfully. Note that erasure requests may be declined where retention is required by law — for example, financial transaction records subject to compliance retention periods cannot be deleted on request.
• Right to Restriction: You may request that pkjo restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is disputed.
• Right to Data Portability: You may request that pkjo provide you with a copy of the personal data you have provided to us in a commonly used, machine-readable format, where technically feasible.
• Right to Withdraw Consent: Where pkjo processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.
• Right to Object: You may object to pkjo's processing of your personal data where that processing is based on legitimate interest, including profiling for responsible gaming monitoring purposes.

To exercise any of these rights, please contact pkjo's support team at [email protected] with your full name, registered account details, and a clear description of your request. pkjo will acknowledge your request promptly and aim to respond fully within thirty (30) calendar days.

pkjo strictly prohibits access to and use of the platform by any person under the age of 21. The pkjo platform is intended exclusively for adults aged 21 and above. We do not knowingly collect personal data from individuals under 21 years of age.

If pkjo discovers or has reasonable grounds to believe that a user is under 21, the account will be immediately suspended, all funds will be frozen pending investigation, and any winnings generated by the underage player will be forfeited. Deposits made by underage players will be returned to the original payment method subject to verification.

If you are a parent or guardian and believe that a person under 21 in your care has registered a pkjo account, please contact us immediately at [email protected] so that we can take prompt action.

The pkjo platform integrates with a number of third-party services that are necessary for its operation. These include game software providers, payment processors, and identity verification services. While pkjo selects these partners carefully and requires them to maintain appropriate data protection standards, pkjo is not responsible for the independent privacy practices of third-party service providers beyond the scope of their services to pkjo.

pkjo does not embed third-party advertising networks, social media tracking widgets, or affiliate tracking pixels on the pkjo.onl platform in a way that would allow those third parties to collect personal data about players without their knowledge.

Where the pkjo platform links to any external informational resource (for example, responsible gaming guidance from an external organisation), those external sites operate under their own separate privacy policies for which pkjo bears no responsibility.

pkjo reserves the right to update or amend this Privacy Policy at any time. When material changes are made, the updated policy will be published at pkjo.onl/privacy-policy with a revised effective date. For significant changes that materially affect the way pkjo processes your personal data, we will endeavour to notify registered players via email or an in-platform notification prior to the change taking effect.

Your continued use of the pkjo platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any change to this policy, you should discontinue use of the platform and contact [email protected] to request account closure and data deletion where applicable.

We encourage all players to review this Privacy Policy periodically to stay informed about how pkjo protects their personal information.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a complaint about the way pkjo has handled your personal data, please contact our support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Response Target: pkjo aims to respond to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6)
• Language: All privacy correspondence is handled in English

When submitting a data rights request, please include your registered account username or email address and a clear description of the right you wish to exercise or the complaint you are raising. pkjo may need to verify your identity before processing any request that involves the disclosure or deletion of personal data.

pkjo is committed to resolving all privacy complaints fairly and promptly through its internal process. For further guidance on responsible gaming and data usage in relation to your gambling activity, please also refer to our Responsible Gaming page and our FAQ page.