pojak Privacy Policy — How We Handle Your Data

1Data We Collect

pojak collects personal data in three main ways: information you provide directly, information collected automatically when you use our Services, and information received from third parties involved in delivering those Services. Each category is described below.

Information You Provide Directly

When you register an account, deposit funds, request a withdrawal, contact support, or participate in a promotion, you may provide:

• Full name, date of birth, and contact details (email address and phone number) provided during account registration.
• Identity verification documents (national ID, passport, or other government-issued identification) when requested as part of KYC procedures.
• Financial information including bKash, Nagad, Rocket, or Upay mobile financial service account details, or bank account information for deposit and withdrawal processing.
• Communications you send to pojak support, including the content of your messages and any attachments, for the purpose of resolving your query.

Information Collected Automatically

When you access pojak, we automatically collect certain technical and behavioural data to ensure the platform works correctly and to detect fraud:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and mobile network operator.
• Session and usage data: pages visited, time spent on each page, game sessions started and completed, betting activity, deposit and withdrawal history, and log-in/log-out timestamps.
• Cookie and tracking data: session cookies necessary for platform operation, and analytics cookies that help us understand how players navigate pojak. See Section 8 for full cookie details.

Information From Third Parties

pojak may receive personal data about you from trusted third parties in limited circumstances:

• Payment processors (bKash, Nagad, Rocket, Upay, and partner banks) may share transaction confirmation data with pojak to verify that a deposit or withdrawal has been completed successfully.
• Identity verification service providers used as part of our KYC process may confirm whether the documents you have submitted match the details you provided at registration.
• Fraud prevention and anti-money-laundering screening services may share risk scores or flag information about a player's account if suspicious activity patterns are detected.

3Legal Basis for Processing

pojak processes your personal data on the following legal bases, depending on the nature of the processing activity:

• Contract performance — processing necessary to create and manage your pojak account, to settle bets, and to process deposits and withdrawals under the Terms & Conditions you accepted at registration.
• Legal obligation — processing required to comply with applicable laws, including KYC, anti-money-laundering, and responsible gaming obligations that apply to pojak as an online gaming platform.
• Legitimate interests — processing carried out for pojak's legitimate business interests, including fraud detection, platform security, service analytics, and responsible gaming monitoring, provided these interests are not overridden by your rights.
• Consent — where pojak processes data on the basis of your consent (for example, to send you optional promotional communications), you may withdraw that consent at any time by contacting [email protected].

5Data Sharing and Third Parties

pojak does not sell your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment service providers (bKash, Nagad, Rocket, Upay, partner banks): shared to process your financial transactions. These providers operate under their own privacy policies and security frameworks.
• Game content providers (Evolution Gaming, Pragmatic Play, Ezugi, Spribe, NetEnt, Microgaming): your session and game activity data may be shared with game providers to the extent required for game operation, RNG certification compliance, and fair-play auditing.
• Identity and KYC verification providers: necessary personal and document data shared to fulfil identity verification requirements. These providers are contractually bound to use your data only for verification purposes.
• Legal and regulatory authorities: pojak will disclose personal data to law enforcement, regulators, or other governmental bodies when required to do so by applicable law, court order, or regulatory direction, or where pojak has reasonable grounds to believe disclosure is necessary to prevent fraud or serious crime.

pojak does not transfer your personal data to countries outside Bangladesh for storage or processing without ensuring an equivalent standard of data protection is in place. All third-party service providers used by pojak are required to handle your data with the same level of security and confidentiality that pojak applies itself.

7Your Data Rights

As a pojak player, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with your registered account email address and a description of your request:

• Right of access — you may request a copy of the personal data pojak holds about you. We will provide this within 30 days of receiving your verified request.
• Right to rectification — if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it. Minor updates (such as a change of contact number) can often be made directly within your account settings.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for pojak to retain it, subject to our legal obligations. Note that where pojak is required by law to retain certain records (e.g. financial transaction data), we cannot delete those records until the required retention period has elapsed.
• Right to restrict processing — in certain circumstances (for example, where you contest the accuracy of data we hold) you may request that we restrict our processing of your personal data while the matter is resolved.
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of any processing carried out before the withdrawal.

pojak will respond to all data rights requests within 30 days. In complex cases we may extend this by a further 30 days and will notify you accordingly. We do not charge a fee for exercising your data rights unless a request is manifestly unfounded or excessive.

9Data Security

pojak implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include SSL encryption for all data transmitted between your device and pojak servers, access controls that limit who within the pojak team can access your personal data, secure server infrastructure, and regular security reviews. All staff with access to personal data are subject to confidentiality obligations.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, pojak will take prompt action to contain the breach, assess the impact, and notify affected players as soon as reasonably practicable. Please report any suspected security incidents to [email protected] immediately.

11Updates to This Privacy Policy

pojak may update this Privacy Policy from time to time to reflect changes in our data practices, the Services we offer, or applicable legal requirements. When we make a material change to this Policy, we will update the "Last Updated" date at the top of this page and, where the change is significant, we will make reasonable efforts to notify registered players via their account contact details.

Your continued use of pojak after the updated Privacy Policy has been published constitutes your acceptance of the revised Policy. If you do not agree with any changes, please stop using the Services and contact [email protected] to close your account.