piok Privacy Policy

Introduction

piok ("we", "our", "us") is an English-language online betting and gaming platform serving players in Bangladesh. This Privacy Policy describes how piok collects, uses, stores, shares, and protects the personal information of players and visitors who interact with the piok website and related services.

This policy applies to all personal data processed in connection with your use of the piok platform — whether you are browsing as a guest, in the process of registering an account, an active registered player, or a former player whose account has been closed. It covers data collected through the website, any communications you send us, and any data generated through your use of our games and betting markets.

piok is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. This policy is written in plain English and is the authoritative version. All communications with piok regarding data privacy are conducted in English.

Data We Collect

piok collects personal data in the categories described below. We collect only what is reasonably necessary for the purposes set out in this policy.

We do not collect special category data such as health information, religious beliefs, or political opinions unless you voluntarily provide such information through a responsible gaming self-assessment or similar process, in which case it is used solely for the responsible gaming purpose it was provided for.

How We Collect Your Data

piok collects personal data through the following channels:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to any survey or promotion.
• Automated Technical Collection: Data collected automatically when you visit the piok website, including IP addresses, browser information, device identifiers, session duration, pages visited, and clickstream data. This is collected through server logs, cookies, and similar tracking technologies described further in Section 07.
• Payment Processors: When you initiate a transaction via bKash, Nagad, Rocket, Upay, or a bank transfer, the payment processor confirms transaction status and associated account reference information back to piok for the purpose of crediting your account or processing your withdrawal.
• Fraud Detection Services: piok works with third-party fraud detection and identity verification providers who may supply or cross-reference certain data points for the purpose of verifying your identity and detecting prohibited activity.
• Publicly Available Sources: In limited circumstances, piok may cross-reference publicly available information (for example, to verify a name against a provided NID) as part of the KYC process.

Purpose of Processing

piok processes your personal data for the following specific and legitimate purposes:

• Account Management: Creating, maintaining, and managing your piok player account, including processing your registration, authenticating your identity at login, and managing account preferences.
• Payment Processing: Processing deposits, withdrawals, and refunds through bKash, Nagad, Rocket, Upay, DBBL, City Bank, BRAC Bank, Islami Bank, and Sonali Bank.
• Age & Identity Verification: Verifying that you meet the minimum age requirement of 21 years and confirming your identity to prevent fraud and comply with responsible gaming obligations.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, money laundering, multiple-account abuse, bonus abuse, and unauthorised access to accounts.
• Responsible Gaming: Monitoring gaming activity patterns to identify signs of problem gambling, implementing deposit limits and self-exclusion requests, and enforcing the 21+ age policy.
• Customer Support: Responding to your queries, resolving disputes, and maintaining records of support interactions.
• Platform Improvement: Analysing aggregate, anonymised usage data to improve the performance, design, and feature set of the piok platform.
• Marketing Communications: Sending you information about promotions, bonuses, and platform updates where you have opted in to receive such communications. You may unsubscribe at any time by contacting [email protected].
• Legal Compliance: Meeting record-keeping and reporting obligations imposed by applicable law, including the retention of financial transaction records.

Legal Basis for Processing

piok processes your personal data on one or more of the following legal bases depending on the category of data and the purpose of processing:

• Contractual Necessity: Processing that is necessary to perform the contract between you and piok — including account creation, bet settlement, payment processing, and customer support — is carried out on the basis of contractual necessity. Without this processing, piok cannot provide you with its services.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics is carried out on the basis of piok's legitimate interests in operating a safe, fair, and functional platform. These interests are balanced against your privacy rights and do not override them.
• Legal Obligation: Processing required for compliance with applicable financial record-keeping, anti-money laundering, and identity verification obligations is carried out on the basis of legal obligation.
• Consent: Processing for direct marketing communications is carried out on the basis of your freely given, specific, and informed consent at the time of account registration or subsequently. You may withdraw this consent at any time.

Data Sharing & Disclosure

piok does not sell, rent, or trade your personal data to third parties for marketing purposes under any circumstances. Your data may be shared with the following categories of recipient only where necessary and in accordance with this policy:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive transactional data necessary to process your deposits and withdrawals. Each processor is subject to its own privacy and data security obligations.
• Identity & Fraud Verification Partners: Third-party KYC and fraud detection service providers receive the minimum necessary identity data to perform verification checks. These providers are contractually bound to process data only for the specified purpose and to maintain appropriate security standards.
• Game Content Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and minimal technical identifiers to authenticate your game session. They do not receive your full identity or financial profile.
• IT Infrastructure Providers: Cloud hosting and content delivery partners who provide the technical infrastructure on which the piok platform operates. These providers process data on our behalf under data processing agreements that bind them to piok's security and confidentiality standards.
• Legal & Regulatory Authorities: Where required by applicable law, court order, or regulatory direction, piok may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities. piok will, where legally permitted, notify you of such a disclosure.

Cookies & Tracking Technologies

piok uses cookies and similar tracking technologies to operate the platform, improve user experience, and support fraud detection. A cookie is a small text file stored on your device by your browser when you visit the piok website.

The following categories of cookies are used on the piok platform:

You can control non-essential cookies through your browser settings. Note that disabling cookies may affect the functionality of the piok platform, including your ability to maintain a logged-in session. piok does not use cookies to deliver third-party advertising.

Data Retention

piok retains personal data for as long as is necessary for the purpose for which it was collected, subject to any longer retention period required by applicable law. The following general retention guidelines apply:

• Active Account Data: Retained for the duration of your account relationship with piok plus a minimum of five years following account closure, to satisfy financial record-keeping obligations.
• Transaction Records: Deposit, withdrawal, and bet settlement records are retained for a minimum of five years following the date of the transaction.
• KYC Documents: Identity verification documents are retained for a minimum of five years following account closure or the completion of the KYC process, whichever is later.
• Support Communications: Customer support tickets and email correspondence are retained for three years from the date of the interaction.
• Technical Logs: Server access logs and fraud detection records are retained for 12 months on a rolling basis, unless a specific event (such as an ongoing investigation) requires retention for a longer period.
• Marketing Data: Email marketing opt-in records are retained until you withdraw consent, plus a reasonable period thereafter to demonstrate compliance with your request.

When personal data reaches the end of its applicable retention period and is no longer required for any other purpose, it is securely deleted or irreversibly anonymised.

Data Security

piok implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the piok platform is encrypted in transit using TLS 1.2 or higher.
• Encryption at Rest: Sensitive data stored on piok's infrastructure — including payment account references and KYC documents — is encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to personal data within piok's systems is restricted to authorised personnel on a strict need-to-know basis. Access privileges are reviewed regularly.
• Two-Factor Authentication: Privileged administrative access to systems containing personal data requires multi-factor authentication.
• Penetration Testing: piok conducts periodic security assessments and penetration tests to identify and remediate vulnerabilities in the platform infrastructure.
• Incident Response: piok maintains a data breach response procedure. In the event of a security incident that poses a material risk to your data, affected players will be notified as soon as reasonably practicable.

Your Data Rights

As a data subject, you hold the following rights in relation to the personal data that piok holds about you. To exercise any of these rights, contact piok support in English at [email protected].

• Right of Access: You may request a copy of the personal data piok holds about you. We will provide this in a structured, readable format within a reasonable timeframe.
• Right to Rectification: If any personal data piok holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account information directly from your account settings area.
• Right to Erasure: In certain circumstances, you may request that piok delete your personal data. This right is subject to piok's legal obligations — we are required to retain certain financial and identity records for a minimum period and cannot erase those records before the retention period expires, even on request.
• Right to Restrict Processing: In certain circumstances, you may request that piok restrict its processing of your data while a complaint or correction request is being resolved.
• Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or contractual necessity, you may request that piok provide your data in a portable, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling. You have an absolute right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

piok will acknowledge all data rights requests within 5 business days (Bangladesh Standard Time, UTC+6) and provide a substantive response within 30 days. Where a request is complex or involves a large volume of data, this period may be extended by a further 30 days, in which case you will be notified.

Children & Minors

The piok platform is strictly intended for adults aged 21 years and above. piok does not knowingly collect, store, or process personal data relating to any person under the age of 21.

If piok becomes aware that personal data has been collected from a person under 21 — whether through a misrepresentation during registration or any other means — the account will be immediately suspended, the data will be reviewed, any funds will be handled in accordance with the Terms & Conditions applicable to underage accounts, and the personal data will be deleted to the extent permitted by law.

If you are a parent or guardian and have reason to believe that a person under 21 in your care has registered a piok account, please contact us immediately at [email protected] so that the matter can be addressed promptly.

International Data Transfers

The piok platform is operated for the Bangladesh market. Some of the third-party service providers piok works with — including cloud infrastructure partners, fraud detection services, and game content studios — may process data outside Bangladesh.

Where personal data is transferred to a third-party processor in another country, piok ensures that appropriate safeguards are in place to protect your data to at least the same standard as required under this Privacy Policy. These safeguards typically include:

• Contractual data processing agreements that bind the recipient to piok's data protection standards.
• Technical security requirements, including encryption in transit and at rest, as a condition of the processing arrangement.
• A restriction on the recipient's ability to use the data for any purpose other than the specific contracted service.

By using the piok platform and accepting this Privacy Policy, you acknowledge that your data may be transferred to and processed in countries outside Bangladesh in the manner described above.

Third-Party Links & Embedded Content

The piok platform may contain links to or embed content from third-party services, including game studio interfaces provided by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others. When you access a game provided by a third-party studio, you are interacting with that studio's software environment, which may operate under its own privacy terms.

piok is not responsible for the privacy practices of third-party game studios, payment processors, or any other external service. We recommend that you review the privacy documentation of any third-party service that you interact with through the piok platform.

Changes to This Privacy Policy

piok may update this Privacy Policy from time to time to reflect changes in our data processing practices, the services we offer, or applicable legal requirements. The version number and effective date shown at the top of this document identify the current version in force.

When material changes are made to this policy, piok will notify registered players by:

• Sending a notification to the email address registered to the player's piok account.
• Displaying a prominent notice on the platform at the time of the player's next login following the change.

Continued use of the piok platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised version. If you do not agree with the changes, you should cease using the platform and may request account closure by contacting [email protected] before the effective date.

Previous versions of this Privacy Policy are available on request from the piok support team.

Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data piok holds about you, please contact our support team. All privacy-related communications must be submitted in English.

Please include your registered account username and a clear description of your request or concern when contacting us. For data rights requests, piok may need to verify your identity before processing the request — this is to ensure that data is only disclosed or modified at the direction of the account holder.