Pokok Privacy Policy – How We Protect Your Personal Data

1 Who We Are

Pokok is an online gaming platform operated for players in Bangladesh. The Pokok platform includes the website at pokok.onl, the Pokok mobile application, and all associated gaming, payment, and support services. When this Privacy Policy refers to "Pokok", "we", "us", or "our", it refers to the operator of the Pokok platform.

Pokok is the data controller for the personal data collected through the platform. This means Pokok is responsible for deciding how and why your personal data is collected and used. If you have any questions about how Pokok handles your data, the first point of contact is our support team at [email protected].

This Privacy Policy applies to all players who register an account on Pokok, visit the Pokok website, or use the Pokok mobile application. It covers all personal data collected through these channels, regardless of the device you use to access Pokok.

2 Personal Data We Collect

Pokok collects personal data in several categories. The table below summarises what we collect and why each category is necessary.

Pokok does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless it is directly relevant to a responsible gaming assessment and you have provided it voluntarily.

3 How We Collect Your Data

Pokok collects your personal data through the following channels:

• Direct registration: When you create a Pokok account, you provide your name, contact details, date of birth, and payment method information directly.
• Account activity: When you deposit, play games, or withdraw funds, Pokok records transaction and activity data automatically as part of operating your account.
• Identity verification: When Pokok requests verification documents, you upload them directly through your account settings or by sending them to support.
• Customer support interactions: When you contact Pokok support by email or live chat, the content of those communications is recorded to help resolve your query and improve our service.
• Cookies and tracking technologies: When you visit the Pokok website or use the app, technical data is collected automatically. See Section 6 for full details on cookies.
• Third-party payment providers: When you make a deposit or withdrawal via bKash or Nagad, those providers may share transaction confirmation data with Pokok to verify the payment.

Pokok does not purchase personal data from data brokers or third-party marketing lists. All data Pokok holds about you comes from your direct interactions with the platform or from service providers who assist in operating it.

4 Why We Use Your Personal Data

Pokok uses your personal data for the following purposes. For each purpose, we have identified the legal basis that justifies the processing.

• Operating your account: We need your identity and contact data to create and manage your Pokok account. This is necessary to perform the contract between you and Pokok.
• Processing payments: We use your payment data to process deposits and withdrawals. This is necessary to perform the contract and to comply with financial regulations.
• Identity verification: We verify your identity to comply with legal obligations around age verification and fraud prevention. This is a legal requirement, not optional.
• Fraud prevention and security: We use technical and transaction data to detect and prevent fraudulent activity on the platform. This is in Pokok's legitimate interest and protects all players.
• Customer support: We use your contact and account data to respond to your support queries. This is necessary to perform the contract and is in our legitimate interest to provide good service.
• Responsible gaming monitoring: We monitor gaming activity to identify patterns that may indicate problem gambling. This is in the legitimate interest of player wellbeing and is a core part of Pokok's responsible gaming commitment.
• Platform improvement: We use anonymised usage data to understand how players use Pokok and to improve the platform. This is in our legitimate interest as a business.
• Legal compliance: We retain certain data to comply with applicable laws and regulations. This is a legal obligation.

Pokok does not use your personal data for automated decision-making that produces significant legal effects on you without human review. If an automated system flags your account for review, a Pokok team member will assess the situation before any action is taken.

5 Who We Share Your Data With

Pokok shares your personal data only in the following limited circumstances:

• Payment processors: bKash, Nagad, and bank partners receive the payment data necessary to process your deposits and withdrawals. These providers are bound by their own privacy obligations and data security standards.
• Identity verification services: Pokok may use third-party identity verification providers to assist with document checks. These providers process your data only for verification purposes and are contractually bound to protect it.
• IT and platform service providers: Companies that provide hosting, security, and technical infrastructure for the Pokok platform may have access to data as part of providing those services. They are not permitted to use your data for any other purpose.
• Legal and regulatory authorities: Pokok will disclose personal data to law enforcement, regulatory bodies, or courts when required to do so by applicable law. Pokok will not disclose more data than is legally required.

All third parties who receive personal data from Pokok are required to handle it in accordance with applicable data protection standards. Pokok does not transfer personal data to countries outside Bangladesh unless adequate data protection safeguards are in place.

6 Cookies and Tracking Technologies

Pokok uses cookies and similar tracking technologies on the website and mobile application. Cookies are small text files stored on your device that help the platform function correctly and allow Pokok to understand how players use the site.

Pokok uses the following types of cookies:

• Essential cookies: These are required for the Pokok platform to function. They manage your login session, keep your account secure, and remember your preferences during a session. You cannot opt out of essential cookies without stopping use of the platform.
• Analytics cookies: These help Pokok understand how players navigate the platform — which pages are visited most, where players encounter difficulties, and how long sessions last. This data is used in aggregate and anonymised form to improve the platform.
• Security cookies: These help Pokok detect and prevent fraudulent activity, including identifying unusual login patterns or suspicious transaction behaviour.

Pokok does not use third-party advertising cookies or tracking pixels that share your data with advertisers. You can manage cookie preferences through your browser settings. Note that disabling essential cookies may affect your ability to use the Pokok platform normally.

7 Data Security

Pokok takes data security seriously and has implemented a range of technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse.

• All data transmitted between your device and Pokok is protected by SSL/TLS encryption.
• Sensitive data stored on Pokok's servers — including payment details and identity documents — is encrypted at rest.
• Access to personal data within Pokok is restricted on a need-to-know basis. Team members can only access the data relevant to their specific role.
• Pokok's systems are monitored continuously for security threats and unusual activity.
• Pokok conducts regular security reviews and updates its security measures in response to emerging threats.

While Pokok takes all reasonable steps to protect your data, no online platform can guarantee absolute security. If you believe your Pokok account has been compromised, contact support immediately at [email protected]. In the event of a data breach that affects your rights, Pokok will notify you promptly and explain what steps are being taken.

8 Data Retention

Pokok retains your personal data for as long as your account is active and for a period after account closure as required by applicable law. The general retention periods Pokok applies are as follows:

• Account and identity data: Retained for the duration of your account and for up to 5 years after account closure, as required for legal and compliance purposes.
• Transaction data: Retained for up to 7 years after the transaction date, in line with standard financial record-keeping requirements.
• Support communications: Retained for up to 3 years after the query is resolved, to assist with any follow-up issues.
• Technical and usage data: Retained in anonymised or aggregated form for platform improvement purposes. Identifiable technical data is deleted within 12 months.

When data is no longer required for the purpose it was collected and no legal retention obligation applies, Pokok securely deletes or anonymises it. You may request early deletion of your data by contacting support, subject to any overriding legal obligations Pokok must comply with.

9 Your Privacy Rights

As a Pokok player, you have the following rights over your personal data. These rights are genuine and Pokok is committed to honouring them promptly.

To exercise any of these rights, contact Pokok at [email protected] with your request. Pokok will respond within a reasonable timeframe and will ask you to verify your identity before processing the request. There is no charge for exercising your data rights.

10 Children's Privacy

Pokok is strictly for players aged 18 and above. Pokok does not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has registered an account on Pokok or provided personal data to Pokok, please contact us immediately at [email protected].

Upon receiving a verified report that personal data has been collected from a minor, Pokok will delete that data promptly and close the associated account. Pokok takes its age verification obligations seriously and applies checks at registration and during account reviews to identify and remove underage accounts.

11 Changes to This Privacy Policy

Pokok may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law, or improvements to our privacy practices. When material changes are made, Pokok will notify registered players by email and will update the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically so you are always aware of how your data is being handled. If you continue to use Pokok after an updated Privacy Policy has been published, you are confirming that you have read and accepted the updated version. If you do not agree with any changes, you should stop using Pokok and contact support to close your account.

12 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or how Pokok handles your personal data, please get in touch. Our support team is available around the clock and will respond to privacy-related queries promptly.