Privacy Policy

📋1. Introduction

This Privacy Policy ("Policy") sets out how pok99 ("pok99", "we", "us" or "our") collects, uses, stores, and protects the personal data of individuals ("you", "your") who register for and use the pok99 online gaming platform, including all casino games, sports betting products, live casino services, and any related features accessible via pok99 (collectively, the "Platform"). This Policy forms part of, and should be read together with, the pok99 Terms and Conditions.

By creating a pok99 account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should stop using the Platform and contact pok99 customer support to request account closure. pok99 may update this Policy from time to time; the most current version will always be available on this page.

📥2. Information We Collect

pok99 collects the following categories of personal data, depending on how you interact with the Platform:

pok99 does not collect sensitive special-category data (such as health data, racial or ethnic origin, or political opinions) and does not require such data at any point during registration or ongoing use of the Platform.

⚙️3. How We Use Your Information

pok99 processes your personal data only for specific, defined purposes. We do not use your data for any purpose incompatible with the reasons for which it was originally collected. The principal purposes for which we use personal data are:

• Account administration: creating, managing and verifying your pok99 account, including KYC identity verification required to comply with responsible gaming obligations.
• Payment processing: facilitating deposits via bKash, Nagad, Rocket, Upay and other supported BDT payment methods; processing withdrawal requests; and conducting AML transaction monitoring.
• Customer support: responding to your queries, complaints, account closure requests, and responsible gaming tool activation requests sent via live chat or email.
• Responsible gaming compliance: monitoring account activity to identify signs of problem gambling; enforcing deposit limits, session time limits, time-out periods and self-exclusion restrictions; and contacting players who may be at risk.
• Fraud prevention and security: detecting and preventing fraudulent activity, bonus abuse, money laundering, account takeover, and other prohibited activities defined in the pok99 Terms and Conditions.
• Platform improvement: analysing aggregated and anonymised usage data to improve pok99's games, features, performance, and user interface for Bangladesh players.
• Marketing communications: sending you promotional offers, bonus notifications and platform updates via SMS or email, where you have provided consent to receive such communications. You may opt out at any time by contacting support.

⚖️4. Legal Basis for Processing

pok99 processes your personal data on one or more of the following legal grounds:

• Contractual necessity: processing is necessary to perform the contract between you and pok99 (i.e. operating your account, processing your bets, and facilitating deposits and withdrawals).
• Legitimate interests: processing is necessary for pok99's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring and service improvement, provided those interests are not overridden by your fundamental rights.
• Consent: where you have expressly consented to receive marketing communications or to the processing of optional data categories. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Legal obligation: processing is required to comply with applicable legal requirements, including anti-money laundering regulations, know-your-customer obligations, and any lawful order from a competent authority.

🤝5. Sharing of Personal Data

pok99 does not sell, rent or trade your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment providers: bKash, Nagad, Rocket, Upay and other BDT payment processors receive the minimum data necessary to authenticate and complete deposit and withdrawal transactions on your account.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi and other licensed game studios receive technical session data (e.g. player ID, session token, bet amount) necessary to operate the game, display correct balances, and record results.
• Fraud and compliance partners: third-party identity verification, KYC, and AML screening services that assist pok99 in meeting its anti-fraud and responsible gaming obligations. These partners process data solely on pok99's instructions.
• Authorities: law enforcement agencies, courts, or regulatory bodies, where pok99 is under a legal obligation to disclose personal data, or where disclosure is necessary to protect the rights, property or safety of pok99, its users, or the public.

💳6. Payment Data & Financial Security

pok99 does not store full payment credentials on its own servers. When you make a deposit or request a withdrawal via bKash, Nagad or Rocket, the transaction is handled directly by the relevant payment provider through their own secure API. pok99 receives only a transaction reference number and a confirmation status — it does not have access to your full bKash PIN, Nagad passcode, or bank account password at any stage.

All financial transaction records associated with your pok99 account are retained in encrypted form and are accessible only to authorised pok99 compliance and finance personnel for the purposes described in this Policy. Transaction records are retained for a minimum of five years to satisfy AML record-keeping requirements, after which they are securely deleted or anonymised.

🍪7. Cookies & Tracking Technologies

pok99 uses cookies and similar tracking technologies on the Platform to improve your experience, maintain your session, and analyse Platform usage. Cookies are small text files placed on your device when you visit the pok99 website. The following types of cookies are used:

• Essential cookies: these are strictly necessary for the Platform to function correctly, including maintaining your login session, remembering your language preference, and enabling secure payments. These cannot be disabled without breaking core Platform functionality.
• Analytics cookies: these collect anonymised data about how users interact with pok99 (e.g. pages visited, time on site, games launched) to help us improve Platform performance and content. No personally identifiable information is included in analytics data.
• Functional cookies: these remember your preferences (such as game display settings or deposit method preference) so that you do not have to reconfigure them on every visit.
• Security cookies: these are used to detect and prevent fraudulent access attempts, bot traffic, and other suspicious activities targeting your pok99 account.

Most mobile browsers allow you to refuse or delete cookies through your device settings. Disabling essential cookies may impair the functionality of certain Platform features. pok99 does not use third-party advertising cookies or behavioural retargeting technologies.

🗄️8. Data Retention

pok99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting or reporting obligations. The following general retention periods apply: account data and KYC documents are retained for the duration of the account and for a minimum of five years after account closure; financial transaction records are retained for a minimum of five years in accordance with AML requirements; and marketing preference data is retained until you withdraw consent or close your account.

When retention periods expire, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. pok99 conducts periodic data audits to ensure that data held beyond its necessary retention period is identified and removed promptly.

🛡️9. Data Security

pok99 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include: SSL/TLS encryption for all data transmissions between your device and the pok99 Platform; encryption at rest for sensitive data stored on pok99 servers; strict access controls limiting data access to authorised personnel only; regular security assessments and vulnerability testing; and incident response procedures to address any suspected data breach promptly.

While pok99 takes all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. In the event of a confirmed data breach that is likely to result in a risk to your rights and freedoms, pok99 will notify affected users as soon as reasonably practicable and will take all necessary steps to contain and mitigate the breach.

✅10. Your Data Rights

As a pok99 user, you have the following rights with respect to your personal data. To exercise any of these rights, contact pok99 customer support via live chat or email at [email protected]. pok99 will respond to all valid data rights requests within 30 days:

• Right of access: you may request a copy of the personal data pok99 holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification: if any personal data pok99 holds about you is inaccurate or incomplete, you may request that it be corrected or completed.
• Right to erasure: you may request that pok99 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to pok99's legal obligations to retain certain records (e.g. AML transaction records).
• Right to restrict processing: in certain circumstances, you may request that pok99 restrict the processing of your personal data (e.g. while a rectification request is being assessed).
• Right to data portability: you may request that pok99 provide your personal data in a structured, commonly used, machine-readable format so that you may transfer it to another service provider.
• Right to withdraw consent: where processing is based on your consent (e.g. marketing communications), you may withdraw that consent at any time by contacting pok99 support. Withdrawal of consent does not affect the lawfulness of any processing carried out before withdrawal.

pok99 will not charge a fee for handling routine data rights requests. However, pok99 reserves the right to charge a reasonable administrative fee for requests that are manifestly unfounded, excessive or repetitive. pok99 may also request proof of identity before fulfilling a data rights request to ensure that personal data is not disclosed to an unauthorised third party.

🔞11. Children's Privacy

The pok99 Platform is strictly intended for adults aged 21 years and above. pok99 does not knowingly collect, process or store personal data relating to individuals under the age of 21. If pok99 becomes aware that personal data of a person under 21 has been collected, that data will be deleted immediately and the associated account will be permanently closed without refund of any amounts wagered.

🔗12. Third-Party Links

The pok99 Platform may, from time to time, contain references to or integrations with third-party services, including game provider platforms and payment processing interfaces. pok99 is not responsible for the privacy practices or content of any third-party services accessed in connection with the Platform. This Policy applies solely to data processed by pok99 directly. We encourage you to review the privacy policies of any third-party services you use in connection with the Platform, particularly those of your chosen payment provider (bKash, Nagad or Rocket).

🔄13. Changes to This Policy

pok99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, pok99 will notify registered users via the mobile number or email address associated with their account, or by displaying a prominent notice on the Platform, at least 7 days before the revised Policy takes effect. The date at the top of this page will always reflect when the Policy was last updated. Your continued use of the Platform after a revised Policy takes effect constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must stop using the Platform and request account closure.

📧14. Contact & Data Requests

For any questions about this Privacy Policy, to exercise your data rights, or to raise a privacy-related complaint, please contact the pok99 Data & Privacy team. Our customer support team is available 24/7 via live chat on the Platform and will escalate privacy-specific requests to the appropriate internal team within one business day.

Email (plain text — not a link): [email protected] — Please include your registered mobile number and a brief description of your request so our team can assist you as efficiently as possible.