poko's Privacy Policy — Your Data, Your Control

What Information We Collect

We collect the following types of information when you create an account on poko and at various stages of using our services:

1.1 Information You Provide Directly

• Identity Information: Full name, date of birth, national ID or passport number.
• Contact Information: Mobile number, email address, and current address.
• Account Credentials: Username and encrypted password.
• Financial Information: Details of deposit and withdrawal transactions — including bKash, Nagad, Rocket, or Upay numbers.
• Verification Documents: Copies of documents required to verify your identity.

1.2 Information Collected Automatically

• Device Information: IP address, browser type, operating system, and device identifiers.
• Session Logs: Login time, pages visited, session duration, and click activity.
• Cookies and Tracking Data: Cookies are used to improve the user experience and for security purposes.
• Location Signals: General network-based location — no precise GPS tracking.

1.3 Information Received from Third Parties

Information may be verified through trusted third parties when required for identity verification or fraud prevention. Any information obtained through this process is protected to the same privacy standards.

Purpose of Using Your Information

Collected information is used solely to ensure service quality and to meet necessary obligations. The main purposes are listed below:

• Account Management: Handling registration, login, password recovery, and account security.
• Transaction Processing: Correctly managing deposit and withdrawal requests.
• Identity Verification: Confirming the user's age (21+) and identity.
• Fraud Prevention: Detecting and stopping suspicious activity.
• Customer Support: Resolving issues via live chat and email.
• Promotional Communications: Sending bonus offers and service updates — which you can opt out of at any time.
• Service Improvement: Analysing user experience to improve service quality.

Data Storage and Security

3.1 Retention Period

Your information is retained for as long as your account remains active. Even after an account is closed, information may be kept for a defined period for audit and legal purposes. Once that period has passed, the information is securely deleted or anonymised.

3.2 Security Measures

poko has implemented industry-standard technical measures to keep your information secure:

• All data transfers are encrypted via SSL/TLS encryption.
• Passwords are never stored in plain text — only strong hashing algorithms are used.
• Server access is strictly controlled; only authorised staff can view data when necessary.
• Regular security audits and risk assessments are conducted.
• Transaction data is held in a separate, secure environment.

However, no one can guarantee 100% security when transmitting data over the internet. We take every precaution, but users must also keep their login credentials secure.

Sharing Information with Third Parties

poko shares information in limited and specific circumstances. The following situations apply:

4.1 Service Partners

Necessary information is shared with trusted partners for payment processing (bKash, Nagad, Rocket, Upay), identity verification, and technology services. These partners are obligated to use the information only for the specified purpose.

4.2 Legal Obligations

Information may be provided in response to a court order or a lawful request from law enforcement authorities. In such cases, we provide only the minimum information required.

4.3 Business Transfers

In the event of a business merger or acquisition, user information may be transferred to the new operating entity. Advance notice will be given in such cases.

Cookies and Tracking Technologies

5.1 Types of Cookies

poko uses the following types of cookies:

• Essential Cookies: For maintaining login sessions, security verification, and delivering core services.
• Functional Cookies: For remembering language preferences, account settings, and user preferences.
• Analytics Cookies: For understanding which parts of the site are used most — without any personal identification.

5.2 Cookie Controls

Cookies can be blocked or deleted through your browser settings. However, disabling essential cookies may cause some parts of the service to not function properly.

Your Rights and Controls

You have the following rights over the information held about you on your poko account:

• Right to Access: You can request details of the information stored about you.
• Right to Rectification: You can request that incorrect or outdated information be updated.
• Right to Erasure: In certain cases, you can request that your information be deleted — however, due to legal obligations, it may not be possible to delete all information immediately.
• Right to Restrict Processing: You can request that your information not be used for specific purposes.
• Right to Opt Out of Marketing: You can stop receiving promotional messages.
• Right to Data Portability: Where technically feasible, you can receive your information in a structured format.

To exercise these rights, contact our support team. We will endeavour to respond within 30 business days. Reading our Responsible Gaming guidelines will give you further options to control your account.

Protection of Minors

All poko services are intended solely for individuals aged 21 or above. We do not knowingly collect information from anyone under 21. If it comes to our attention that a minor's information has been collected by mistake, it will be deleted immediately and the associated account will be closed.

If you believe a minor has created an account, please notify our support team.

International Data Transfers

Some data may be processed on servers located outside Bangladesh as required to operate the service. In such cases, we ensure that adequate data protection measures are in place in the destination country or at the partner organisation. Sensitive financial data is always encrypted during international transfers.

Changes to the Policy

poko reserves the right to update this privacy policy as needed. Users will be notified via email or through the site before any significant changes take effect. You can find the effective date of the updated policy by checking the "Last Updated" date at the top of the page.

Continued use of the site after a policy change will be taken as acceptance of the new policy. You can visit our Frequently Asked Questions (FAQ) section for answers to any questions about our services.

Scope and Applicability of This Policy

This policy applies to poko's website, mobile app (Android and iOS), and all related services. Third-party sites that may be linked from our platform have their own privacy policies, and our policy does not apply to those sites.

To better understand this policy in the context of our overall service framework, visit our About Us page.