pojoko Privacy Policy — How We Collect, Use, and Protect Your Personal Data

At a Glance — Key Privacy Commitments

Section 1

1 Data Controller Information

For the purposes of this Privacy Policy, the data controller responsible for the personal information of pojoko players is pojoko, the operator of the pojoko.net website and associated platform services. As data controller, pojoko determines the purposes for which, and the means by which, your personal data is processed.

pojoko operates the platform in the Bangladesh market and is responsible for ensuring that any personal data collected from Bangladesh players is handled in accordance with the principles of data minimisation, purpose limitation, storage limitation, accuracy, integrity, and confidentiality.

1.1 Contact Details for Privacy Enquiries

All privacy-related enquiries, data access requests, data correction requests, deletion requests, and objections to processing should be directed to the pojoko support team using the following contact detail:

pojoko takes all privacy enquiries seriously. If you submit a formal data rights request, pojoko will acknowledge receipt within 5 working days and provide a substantive response within 30 calendar days of receipt of the request. Where a request is complex or involves a large volume of data, this period may be extended by a further 30 days, in which case you will be informed of the extension and the reason for it.

Section 2

2 Personal Data We Collect

pojoko collects personal data from players at several stages of the account lifecycle: during registration, during the KYC identity verification process, during normal account operation, and through the technical systems that run the platform. The following table sets out the categories of personal data collected, the source of that data, and the stage at which it is collected.

2.1 Data You Provide Directly

The majority of the personal data pojoko holds about you is information you provide directly: by completing the registration form, by submitting KYC documents, by communicating with the support team, or by updating your account profile. You are responsible for the accuracy of the information you provide. If any details change, please update your account or notify [email protected] promptly.

2.2 Data Collected Automatically

When you access pojoko.net, certain technical data is collected automatically by our servers and analytics systems. This includes your IP address (used for geolocation verification and fraud detection), your device fingerprint, and your in-session behaviour on the platform. This data is collected using server logs and, where applicable, first-party cookies as described in Section 6 of this Policy. pojoko does not use third-party behavioural advertising trackers.

2.3 Data pojoko Does Not Collect

pojoko does not collect or store full payment card numbers, full mobile banking PINs, or any biometric data. Identity documents submitted for KYC purposes are reviewed for the purpose of age and identity verification and are stored in an access-controlled document management system. They are not used for any purpose beyond compliance with pojoko's KYC obligations.

Section 3

3 Lawful Basis for Processing

pojoko processes your personal data on one or more of the following lawful bases, depending on the specific processing activity in question:

Section 4

4 How We Use Your Data

pojoko uses the personal data it collects for the following purposes. Each purpose is tied to a lawful basis as described in Section 3 above. pojoko does not use your data for any purpose that is incompatible with the purposes listed here without first obtaining your explicit consent.

4.1 Account Operations

Your identity data, contact data, and account activity data are used to create and maintain your pojoko player account. This includes processing your registration, authenticating your login sessions, managing your account balance, and maintaining your transaction and wagering history. Without this processing, pojoko cannot provide its core platform services to you.

4.2 Payment Processing

Your financial data — specifically your registered payment method details and transaction history — is used to process deposits and withdrawals accurately and to reconcile your account balance. pojoko transmits the minimum necessary financial identifiers to its payment partners (bKash, Nagad, Rocket, Upay, and partner banks) to complete each transaction. Full payment credentials are never stored on pojoko's own servers.

4.3 Fraud Prevention and Security

Technical data including your IP address, device identifiers, and login behaviour is used to detect and prevent fraudulent activity on the platform. This includes identifying unusual login patterns, detecting the use of multiple accounts from the same device or network, and flagging transactions that deviate from a player's established behaviour profile. This processing protects both pojoko and its players from financial harm.

4.4 Responsible Gaming Monitoring

pojoko monitors account activity data — including deposit frequency, wagering patterns, and session duration — to identify signs of potentially problematic gambling behaviour. Where pojoko's responsible gaming systems flag an account for review, a member of the support team may reach out to the player to offer assistance, information about self-exclusion tools, or deposit limit adjustments. This processing is carried out in the interest of player welfare and is a core component of pojoko's commitment to responsible gaming. For full details of pojoko's responsible gaming tools, please visit pojoko.net/responsible-gaming.

4.5 Customer Support

Communications data — including support chat transcripts and email correspondence — is used to handle your enquiries, resolve disputes, and improve the quality of pojoko's support services. Support records are retained for a period of three years from the date of the last interaction to allow for the resolution of any subsequent disputes.

4.6 Marketing Communications

Where you have opted in to receive promotional communications, pojoko may use your contact data (email address and/or phone number) to send you information about bonuses, seasonal promotions, new games, and platform updates. You can opt out of marketing communications at any time by contacting [email protected]. Opting out of marketing does not affect your ability to continue using your pojoko account.

Section 5

5 Data Sharing and Third Parties

pojoko does not sell or rent your personal data to any third party. However, in the course of operating the platform, pojoko shares certain categories of personal data with a limited set of trusted third-party service providers and partners. All third parties with whom pojoko shares data are required to process that data only in accordance with pojoko's instructions and for the specific purpose for which it was shared.

5.1 Payment Service Providers

To process deposits and withdrawals, pojoko shares the minimum necessary financial identifiers with the following payment partners that you have chosen to use: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and City Bank. Each of these providers operates under its own privacy and data security framework. pojoko is not responsible for the data handling practices of these independent providers; players are encouraged to review the privacy policy of their chosen payment provider.

5.2 Identity Verification Partners

Where pojoko uses a third-party KYC service provider to assist with the verification of identity documents, your submitted documentation may be transmitted to that provider's secure processing environment. All KYC partners are bound by confidentiality obligations and are not permitted to retain your documents beyond the duration required to complete the verification check.

5.3 Game Content Providers

Games available on the pojoko platform are delivered through software integrations with licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These studios may receive anonymised or pseudonymised session data (such as a session token or player ID) to operate the game correctly. Personal identifiers such as your full name, email address, or payment details are not shared with game studios.

5.4 Legal and Regulatory Disclosures

pojoko may disclose personal data to law enforcement agencies, regulatory bodies, or other authorised third parties where required by applicable law, court order, or in response to a lawful request. In such cases, pojoko will disclose only the data that is specifically required by the requesting authority and will, where legally permissible, notify the affected player of the disclosure.

Section 6

6 Cookies and Tracking Technologies

pojoko uses a limited set of cookies and similar tracking technologies on pojoko.net. A cookie is a small text file placed on your device by a website when you visit it. Cookies allow the website to remember certain information about your visit to improve your experience and to support the technical operation of the platform.

6.1 Types of Cookies Used by pojoko

6.2 Third-Party and Advertising Cookies

pojoko does not place third-party advertising cookies or behavioural tracking cookies on its platform. pojoko does not use Google Ads remarketing pixels, Facebook Pixel, or similar cross-site advertising trackers on pojoko.net. The only cookies present are those listed in the table above, all of which are first-party cookies operated directly by pojoko.

6.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to be notified before a cookie is placed. Please note that disabling strictly necessary cookies may prevent you from logging into your pojoko account and will affect the core functionality of the platform. Disabling functional or analytics cookies will not affect your ability to use the platform but may reduce the quality of your experience.

Section 7

7 Data Retention and Storage

pojoko retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by pojoko's legal and compliance obligations. The following retention schedule applies to the main categories of personal data held by pojoko:

Upon expiry of the relevant retention period, personal data is either securely deleted or rendered permanently anonymous so that it can no longer be associated with any individual. Deletion is carried out using secure data erasure procedures appropriate to the medium on which the data is stored.

7.1 Data Storage Location

pojoko's player data is stored on access-controlled servers. Access to player data within pojoko's internal systems is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal player data are bound by confidentiality obligations as a condition of their engagement with pojoko.

Section 8

8 Your Data Rights and Choices

As a pojoko player, you hold a number of rights with respect to the personal data that pojoko processes about you. pojoko is committed to honouring these rights promptly and without undue formality. To exercise any of the rights listed below, contact the pojoko support team at [email protected], clearly stating the nature of your request and providing sufficient information for pojoko to verify your identity before processing the request.

• Right of Access: You have the right to request a copy of the personal data pojoko holds about you. pojoko will provide this information in a readable format within 30 calendar days of a verified request.
• Right to Rectification: If any personal data pojoko holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly through your account profile.
• Right to Erasure: You may request that pojoko delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the processing has no other lawful basis. This right is subject to pojoko's legal retention obligations — pojoko cannot delete data that it is required by law to retain for a specified period.
• Right to Restrict Processing: You may request that pojoko restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or on a contract with you, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on pojoko's legitimate interests, including profiling for responsible gaming purposes. pojoko will assess the objection and cease the relevant processing unless pojoko has compelling legitimate grounds to continue.
• Right to Withdraw Consent: Where processing is based solely on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

8.1 Updates to This Privacy Policy

pojoko may update this Privacy Policy from time to time to reflect changes in the platform's data processing activities, changes in applicable legal requirements, or improvements in pojoko's privacy practices. The effective date at the top of this document will be updated whenever a substantive change is made. Where a change materially affects how pojoko processes your personal data, pojoko will notify registered players by email using the address registered to their account. Continued use of the pojoko platform after the effective date of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not accept the revised Policy, you must cease using the platform and close your account by contacting [email protected].

8.2 Relationship to Other Policies

This Privacy Policy should be read alongside pojoko's Terms and Conditions and Responsible Gaming Policy, all of which form part of the complete agreement between you and pojoko. In the event of any conflict between this Privacy Policy and the Terms and Conditions on a data-related matter, this Privacy Policy shall prevail.