Pokok Privacy Policy

1 Introduction

Pokok ("we", "us", "our") operates the online gaming platform available at pokok.io and through the Pokok mobile application. This Privacy Policy explains how we collect, use, store, and protect the personal data of our members and visitors ("you", "your") in connection with your use of the Pokok platform.

We take your privacy seriously. Every decision we make about how your data is handled is guided by the principle that your personal information belongs to you, and that we are only ever temporary custodians of it. We collect only what we need, use it only for the purposes described here, and protect it with appropriate technical and organisational measures.

This Privacy Policy should be read alongside our Terms and Conditions and our Responsible Gaming policy. Together, these documents form the complete agreement between you and Pokok regarding your use of the platform.

2 Data We Collect

Pokok collects personal data in two broad categories: information you provide to us directly, and information we collect automatically when you use the platform. The table below summarises the main types of data we collect and why.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required by law and with your explicit consent.

3 How We Collect Your Data

Pokok collects your personal data through the following channels:

• Direct interactions: When you register an account, complete your profile, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion.
• Automated technologies: When you browse or use the Pokok platform, we automatically collect technical and usage data through cookies, server logs, and similar tracking technologies.
• Payment providers: When you make a transaction via bKash, Nagad, or Rocket, those providers share transaction confirmation data with us to allow us to credit or debit your account correctly.
• Identity verification services: Where we use third-party services to verify your age or identity, those services may share verification results with us.
• Fraud prevention partners: We may receive data from fraud detection services that help us identify suspicious activity on the platform.

4 Why We Use Your Data

Pokok uses your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was collected. The main purposes for which we use your data are:

• Account management: Creating and maintaining your Pokok account, verifying your identity and age, and managing your account settings and preferences.
• Platform operation: Processing your bets, crediting winnings, managing your balance, and providing access to all games and features on the platform.
• Payment processing: Facilitating deposits and withdrawals via your chosen payment method and maintaining accurate transaction records.
• Customer support: Responding to your enquiries, resolving disputes, and providing assistance when you need it.
• Security and fraud prevention: Detecting and preventing unauthorised access, fraudulent activity, money laundering, and other prohibited conduct.
• Responsible gaming: Monitoring gaming patterns to identify members who may be at risk and providing appropriate support tools.
• Legal compliance: Meeting our obligations under applicable laws and regulations, including record-keeping and reporting requirements.
• Platform improvement: Analysing usage patterns to improve the design, performance, and features of the Pokok platform.
• Communications: Sending you important account notifications, security alerts, and — where you have opted in — promotional messages about Pokok offers.

5 Data Sharing

Pokok does not sell your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment providers (bKash, Nagad, Rocket): We share the minimum necessary transaction data with your chosen payment provider to process deposits and withdrawals.
• Identity verification services: Where required, we share identity data with third-party verification providers to confirm your age and identity. These providers are contractually bound to use your data only for verification purposes.
• Fraud prevention services: We may share technical and behavioural data with fraud detection partners to protect the platform and its members from fraudulent activity.
• IT and platform service providers: We use third-party providers for hosting, data storage, and platform infrastructure. These providers process data on our behalf and are bound by strict data processing agreements.
• Legal and regulatory authorities: We may disclose your data to law enforcement agencies, regulators, or courts where required to do so by applicable law or a valid legal order.

All third parties with whom we share your data are required to handle it in accordance with applicable data protection standards. We do not allow our service providers to use your data for their own purposes beyond the specific service they provide to us.

6 Cookies and Tracking Technologies

Pokok uses cookies and similar tracking technologies to operate the platform, remember your preferences, and understand how members use our services. A cookie is a small text file stored on your device when you visit a website or use an app.

We use the following types of cookies on the Pokok platform:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. You cannot opt out of essential cookies.
• Functional cookies: Remember your preferences such as language settings and display options to provide a more personalised experience.
• Analytics cookies: Help us understand how members navigate the platform so we can identify areas for improvement. Data collected by analytics cookies is aggregated and anonymised where possible.
• Security cookies: Used to detect and prevent fraudulent activity, including identifying unusual login patterns or suspicious betting behaviour.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Pokok platform. Pokok does not use third-party advertising cookies or share cookie data with advertising networks.

7 Data Retention

Pokok retains your personal data for as long as your account is active and for a period after account closure as required by applicable law and our legitimate business interests. The specific retention periods we apply are:

• Account and identity data: Retained for the duration of your account and for a minimum of five years after account closure, in line with standard financial record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Gaming history: Retained for a minimum of three years from the date of each gaming session.
• Support communications: Retained for two years from the date of the last communication in a support thread.
• Technical and usage data: Typically retained for up to 12 months, after which it is aggregated or deleted.

When data is no longer required for any of the purposes described in this policy, it is securely deleted or anonymised so that it can no longer be linked to you as an individual.

8 Data Security

Pokok implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data fields at rest within our databases.
• Strict access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their role.
• Regular security audits and penetration testing of our platform infrastructure.
• Multi-factor authentication options for member accounts.
• Continuous monitoring of our systems for signs of unauthorised access or unusual activity.

While we take every reasonable precaution to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, Pokok will notify affected members as required by applicable law.

9 Your Rights

As a Pokok member, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected]. We will respond to all valid requests within a reasonable timeframe.

10 Children's Privacy

The Pokok platform is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has registered an account on Pokok, please contact us immediately at [email protected]. We will investigate and, if confirmed, close the account and delete all associated personal data without delay.

Pokok uses age verification measures during the registration process to prevent minors from accessing the platform. We take our responsibility to protect young people seriously and continuously review our age verification procedures.

11 Third-Party Services

The Pokok platform integrates with third-party services including payment providers (bKash, Nagad, Rocket), identity verification services, and platform infrastructure providers. Each of these third parties operates under its own privacy policy and data protection practices.

Pokok is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of Pokok. Links to third-party services are provided solely for operational purposes and do not constitute an endorsement of their privacy practices.

All third-party service providers that process personal data on behalf of Pokok are required to enter into data processing agreements with us, ensuring that they handle your data in accordance with applicable data protection standards and only for the purposes we specify.

12 Updates to This Policy

Pokok may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When we make changes, we will update the "Last Updated" date at the top of this page.

Where changes are material — meaning they significantly affect how we use your data or your rights in relation to it — we will notify you by email or through an in-platform notification before the changes take effect. Your continued use of the Pokok platform after an updated Privacy Policy has been published constitutes your acceptance of the revised policy.

We recommend checking this page periodically to stay informed about how Pokok protects your personal data. If you have any concerns about a change to this policy, please contact our support team before continuing to use the platform.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way Pokok handles your personal data, please get in touch with our team. We are committed to resolving all privacy-related enquiries promptly and transparently.

• Email: [email protected]
• Live Chat: Available from within your Pokok account dashboard
• FAQ: Visit our FAQ page for answers to common questions