pjko Privacy Policy

This Privacy Policy ("Policy") sets out the basis on which pjko ("the Company", "we", "us", "our") collects, processes, stores, and shares personal data relating to individuals who visit, register on, or otherwise interact with the pjko platform, accessible at https://pjko.lat and all associated sub-pages and mobile web interfaces (collectively, "the Platform").

pjko is committed to handling personal data with transparency, integrity, and responsibility. We recognise that the players who use our platform in Bangladesh are placing trust in us when they provide their personal information, and we take that trust seriously. This Policy is intended to give you a clear and complete picture of how your data is handled throughout your relationship with pjko.

By registering an account on pjko, accessing the Platform, or continuing to use the Platform after this Policy takes effect, you confirm that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not register an account and must not use the Platform.

This Policy should be read alongside pjko's Terms & Conditions and Responsible Gaming policy, both of which are incorporated into your agreement with pjko by reference.

pjko is an online betting and casino platform operated under the brand name "pjko" and accessible at the domain https://pjko.lat. The Platform offers cricket betting, slot games, live casino, bingo, video poker, and related gaming and wagering services, with a primary focus on serving adult players in the Bangladesh market.

For the purposes of this Privacy Policy, pjko is the data controller — meaning we determine the purposes and means of processing your personal data. We are responsible for ensuring that any personal data you provide to us is handled in accordance with applicable data protection principles and this Policy.

If you have any questions about how your personal data is processed by pjko, or if you wish to exercise any of your data rights as described in this Policy, you may contact our Data Privacy team at:

• Email: [email protected] (plain text — this is not a clickable link)
• Subject line: "Privacy Enquiry" or "Data Rights Request"
• Response time: We aim to respond to all privacy-related enquiries within 5 business days.

pjko collects only the personal data that is necessary and proportionate for the purposes described in this Policy. The categories of personal data we may collect include:

pjko does not collect or store sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where specifically required by applicable law or regulatory obligation (for example, a medical certificate submitted in support of a self-exclusion request).

pjko collects personal data through the following channels and mechanisms:

• Direct collection: Data you provide directly to pjko when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, respond to a survey, or submit a responsible gaming request.
• Automated collection: Technical and usage data collected automatically by our servers, analytics tools, and security systems when you visit or interact with the Platform. This includes IP address logging, session duration tracking, and device fingerprinting for fraud prevention purposes.
• Payment processors: Confirmation data and transaction reference information received from our payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard networks) following a deposit or withdrawal transaction.
• Identity verification providers: Where you submit identity documents as part of KYC verification, the document data may be processed by a third-party identity verification service acting as a data processor on our behalf. These providers are contractually bound by strict data security and confidentiality obligations.
• Cookies and tracking technologies: As described in Section 8 of this Policy, pjko uses cookies and similar technologies to collect certain technical and usage data during your sessions on the Platform.
• Third-party game providers: Game providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi may share session and game outcome data with pjko for the purposes of account reconciliation, dispute resolution, and responsible gaming monitoring.

pjko uses personal data collected from you for the following purposes:

• Account creation and management: To register your account, verify your identity, maintain your account records, and administer your ongoing relationship with pjko.
• Payment processing: To process deposits and withdrawals in Bangladeshi Taka (BDT) via your chosen payment method, and to maintain accurate financial records of all transactions on your account.
• KYC and fraud prevention: To verify your identity and age (21+ requirement), to detect and prevent fraudulent activity, money laundering, and the use of the Platform by ineligible persons.
• Platform delivery and improvement: To provide you with access to betting markets, casino games, and other features of the Platform; to diagnose technical issues; and to improve the performance, security, and content of the Platform based on aggregated usage insights.
• Customer support: To respond to your enquiries, resolve disputes, investigate complaints, and provide assistance in relation to your account or transactions.
• Responsible gaming: To monitor your betting and gaming activity for indicators of problem gambling behaviour, to administer responsible gaming tools (deposit limits, cooling-off periods, self-exclusion), and to fulfil our duty of care obligations under applicable policy.
• Legal and regulatory compliance: To comply with applicable legal and regulatory requirements, including financial crime prevention obligations, and to respond to lawful requests from competent authorities.
• Marketing communications: Where you have given explicit consent to receive promotional communications, to send you information about pjko promotions, bonuses, seasonal offers (e.g., Eid, Pohela Boishakh, BPL season offers), and new features. You may withdraw this consent at any time as described in Section 14.

pjko does not use personal data for automated decision-making that produces legal or similarly significant effects on players, except where such processing is necessary for fraud prevention or regulatory compliance, in which case you will be informed and have the right to request human review of any decision.

pjko processes your personal data on the following legal bases:

• Contractual necessity: Processing that is necessary to perform the contract between you and pjko, including account registration, KYC verification, payment processing, and the delivery of betting and gaming services.
• Legitimate interests: Processing carried out in pursuit of pjko's legitimate business interests, including fraud detection and prevention, platform security, analytics, and responsible gaming monitoring, where these interests are not overridden by your fundamental rights and freedoms.
• Legal obligation: Processing that is required to comply with applicable legal and regulatory requirements, including financial crime prevention, record-keeping obligations, and responses to lawful authority requests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, including the sending of marketing communications. Where consent is the legal basis for processing, you have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

pjko does not sell, rent, or trade your personal data to any third party. We may share your personal data with the following categories of recipients, strictly as necessary for the purposes described in this Policy:

• Payment processors: bKash, Nagad, Rocket, Upay, and card payment network operators, for the purpose of processing your deposits and withdrawals. These providers process payment data under their own privacy policies and applicable financial services regulations.
• Identity verification providers: Third-party KYC and identity verification services that assist pjko in verifying the identity and age of players. These providers act as data processors under contractual data processing agreements with pjko.
• Game providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Ezugi, and other game studios whose products are available on the Platform. Game providers receive only the minimum data necessary to operate game sessions and resolve disputes, such as a player session token.
• IT infrastructure and hosting providers: Cloud hosting, content delivery network (CDN), and database service providers used to operate and maintain the Platform's technical infrastructure. These providers are contractually bound to process data only on pjko's instructions.
• Analytics providers: Web analytics service providers that assist pjko in understanding aggregated, anonymised usage patterns on the Platform. These providers do not receive data that could directly identify individual players.
• Legal and regulatory authorities: Law enforcement agencies, financial intelligence units, courts, and other competent authorities, where pjko is legally required or permitted to disclose personal data in connection with an investigation, legal proceeding, or regulatory obligation.

pjko uses cookies and similar technologies (such as local storage and session storage) on the Platform. A cookie is a small text file placed on your device by a web server when you visit a website. pjko uses the following categories of cookies:

pjko does not use third-party advertising or retargeting cookies. We do not allow any advertising network to place tracking cookies on the Platform without your knowledge.

You may manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling essential cookies will impair the functionality of the Platform and may prevent you from logging in or completing transactions. Instructions for managing cookies are available in the help documentation of your specific browser.

pjko retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account being open on the Platform, plus a minimum period of 5 years following account closure, to support legal compliance, financial record-keeping, and dispute resolution obligations.
• KYC and identity documents: Retained for a minimum of 5 years following the completion of the verification process, or longer if required by applicable law.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping requirements applicable to payment service activities.
• Support communications: Retained for 3 years from the date of the last communication, to support ongoing customer service and dispute resolution.
• Marketing consent records: Retained for as long as you hold a registered account with pjko, and for 1 year following account closure, to document the basis on which marketing communications were sent.
• Self-exclusion records: Retained indefinitely to prevent a self-excluded player from re-registering in circumvention of their exclusion.
• Website analytics data: Retained in anonymised, aggregated form for up to 24 months.

When personal data is no longer required to be retained, pjko will securely delete or anonymise it in accordance with our data destruction procedures. Anonymised data (from which you cannot be identified) may be retained beyond these periods for statistical and analytical purposes.

pjko implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and the pjko Platform is encrypted using Transport Layer Security (TLS 1.2 or higher), enforced via SSL certificates. The padlock icon in your browser's address bar confirms this encryption is active.
• Encryption at rest: Sensitive personal data, including identity documents and financial records, is encrypted when stored in our databases using industry-standard encryption algorithms.
• Password security: Account passwords are stored as one-way cryptographic hashes. pjko staff cannot retrieve your plain-text password. If you forget your password, a secure reset link will be sent to your registered email address.
• Access controls: Access to personal data within pjko's internal systems is restricted to authorised personnel whose roles require access to that data. We operate a strict need-to-know access control policy.
• Security monitoring: pjko's platform is monitored continuously for unusual access patterns, intrusion attempts, and other security events. Security incidents are subject to a defined incident response procedure.
• Third-party security audits: pjko periodically engages independent security professionals to conduct reviews of its platform infrastructure and data handling practices.

While pjko takes all reasonable steps to protect your personal data, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You play a role in data security too: keep your login credentials confidential, use a strong and unique password, and contact [email protected] immediately if you suspect your account has been compromised.

As a registered player on the pjko platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within 5 business days of receiving your request.

The pjko Platform is strictly intended for adults aged 21 years and above. pjko does not knowingly collect, solicit, or process personal data relating to individuals under the age of 21.

As part of our registration and KYC process, pjko takes active steps to verify that all registered players meet the 21+ age requirement. Any account found to have been registered by or on behalf of a person under the age of 21 will be immediately suspended, the account balance will be returned to the payment method used for deposits (net of any winnings derived while the account was active), and the account will be permanently closed.

If you become aware that a person under 21 has registered or is using a pjko account, please contact us immediately at [email protected] so that we can take appropriate action. We also strongly encourage parents and guardians to make use of internet filtering and parental control tools to prevent minors from accessing online gambling platforms.

The pjko Platform does not contain links to external third-party websites as a general practice. However, where any reference to a third-party service, payment provider, or game studio is made on the Platform, please be aware that those third parties operate under their own privacy policies and data protection practices, which are entirely independent of this Policy.

pjko accepts no responsibility or liability for the privacy practices or data handling of any third party. If you choose to interact with any third-party service referenced on or accessible through the Platform, you do so at your own discretion and subject to that third party's own terms and privacy policy.

We encourage you to review the privacy policies of any third-party payment providers you use, including bKash, Nagad, Rocket, and Upay, to understand how they handle your financial and personal information in connection with transactions made on the pjko Platform.

pjko may send you promotional communications about bonuses, deposit offers, new game launches, seasonal promotions (such as BPL season offers, Eid specials, Pohela Boishakh promotions, and IPL betting markets), and platform updates, where you have given explicit consent to receive such communications at the time of registration or subsequently through your account settings.

You have the right to withdraw your consent to receive marketing communications at any time, free of charge, and without providing a reason. You may do so by:

• Updating your communication preferences in your pjko account settings;
• Clicking the unsubscribe link included in any marketing email we send you; or
• Contacting our support team at [email protected] with the subject line "Marketing Opt-Out".

Withdrawing consent to marketing communications will not affect your ability to use the Platform or access any of its features. It will also not affect the lawfulness of any marketing communications sent to you prior to your opt-out. Please allow up to 3 business days for your opt-out preference to take effect across all our communication channels.

Please note that even if you opt out of marketing communications, pjko may still send you transactional and service communications that are necessary for the operation of your account, such as deposit confirmations, withdrawal notifications, security alerts, and updates to our Terms & Conditions or this Privacy Policy. These are not marketing communications and cannot be opted out of while your account remains active.

pjko reserves the right to amend, update, or replace this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes in our data processing activities, improvements to our Platform, or adjustments to our business operations.

When material changes are made to this Policy, pjko will notify registered players by:

• Posting a prominent notice on the Platform's homepage or login page for a period of at least 14 days prior to the changes taking effect;
• Sending an email notification to your registered email address where the changes are significant and affect your rights or our obligations.

Minor or non-material amendments (such as corrections of typographical errors, clarifications that do not change the substance of the Policy, or updates to contact details) may be made without prior notice, and the updated Policy will be effective immediately upon publication on the Platform.

The date at the top of this Policy reflects the most recent revision. We encourage you to review this Policy periodically to stay informed about how pjko handles your personal data. Your continued use of the Platform after an updated Policy has taken effect constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which pjko processes your personal data, please contact our Data Privacy team using the details below. We are committed to addressing all privacy-related enquiries promptly, transparently, and in good faith.

• Email: [email protected]
• Subject line: "Privacy Policy Enquiry" or "Data Rights Request"
• Response time: We aim to respond to all privacy-related enquiries within 5 business days of receipt.
• Business hours: Our support team operates 7 days a week, Bangladesh Standard Time (BST, UTC+6).

If you are not satisfied with our response to your privacy enquiry, or if you believe that pjko is not handling your personal data in accordance with this Policy, you have the right to escalate your complaint. pjko takes all escalated privacy complaints seriously and will conduct a thorough internal review of the matter. Where an escalated complaint cannot be resolved to your satisfaction through our internal process, you may seek independent legal advice regarding your data rights.

We value your trust and are committed to being a safe, transparent, and responsible platform for all players in Bangladesh. Protecting your personal data is central to that commitment.