piok Privacy Policy
for Bangladesh Players

Information We Collect

piok collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of our website and services, and from trusted third-party sources where permitted for identity verification and fraud prevention purposes. The categories of data we collect are set out below.

How We Use Your Data

piok uses the personal data we collect for specific, defined purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which piok processes your personal data are as follows.

• Account Management: To create, maintain, and manage your piok player account, including authentication, password recovery, and account preference settings. This includes communicating with you about account status, security alerts, and administrative updates.
• Identity Verification (KYC): To verify your identity and age before processing withdrawals or upgrading account limits, in accordance with our Know Your Customer obligations. Verification is required for all players prior to their first withdrawal.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other accepted payment methods. Financial data is passed to payment processors only to the extent necessary to complete each transaction.
• Service Delivery: To provide you with access to casino games, sports betting markets, live dealer tables, and all other features of the piok platform. Usage data helps us ensure the platform performs correctly on your device and in your network conditions.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, money laundering, underage gambling, and other prohibited activities. Technical and usage data is analysed by automated systems and, where escalated, by our risk and compliance team.
• Responsible Gaming: To monitor for indicators of problem gambling behaviour and to apply responsible gaming tools (deposit limits, cooling-off periods, self-exclusion) that you have requested or that we are obligated to apply based on our duty-of-care obligations.
• Customer Support: To respond to your enquiries, resolve disputes, investigate complaints, and provide technical assistance. Communication records are retained for quality assurance and training purposes.
• Marketing (with consent): To send you promotional emails, SMS notifications, and in-platform messages about bonuses, new games, cricket betting promotions, and other piok offers — but only where you have actively opted in to receive such communications. Marketing consent is separate from the consent required for account operation.
• Platform Improvement: To analyse aggregated usage patterns, test new features, measure the performance of games and betting markets, and improve the overall player experience. Where possible, analytics are conducted on anonymised or pseudonymised data sets.
• Legal and Regulatory Compliance: To meet our obligations under applicable laws, including record-keeping requirements, responding to lawful requests from competent authorities, and maintaining audit trails for financial transactions.

Legal Basis for Processing

Every instance of personal data processing at piok is carried out on one of the following recognised legal bases. We document the applicable basis for each processing activity in our internal data processing register.

• Contract Performance: Processing that is necessary to fulfil the contractual agreement between you and piok — including account creation, game access, payment processing, and support delivery — is based on contract performance. Without this data, piok cannot deliver its services to you.
• Legal Obligation: Certain processing activities — including identity verification, transaction record-keeping, and the application of self-exclusion requests — are required by applicable law. piok must conduct this processing regardless of your preferences.
• Legitimate Interests: piok processes some data on the basis of its legitimate business interests, including fraud prevention, platform security, and aggregated analytics. Where we rely on legitimate interests, we have assessed that those interests are not overridden by your privacy rights.
• Consent: For marketing communications and non-essential cookies, piok relies on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing & Third Parties

piok does not sell, rent, or otherwise trade your personal data. We share data only where it is strictly necessary for the delivery of our services or required by law, and only with trusted partners operating under contractual data protection obligations.

• Payment Processors: Your financial data is shared with payment processing partners — including bKash, Nagad, Rocket, and Upay — solely to execute the deposit or withdrawal transaction you have initiated. These providers operate under their own privacy policies and regulatory frameworks.
• Game Studios and Software Providers: To deliver casino games, certain usage data (such as game session identifiers and bet values) may be transmitted to the relevant game studio — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. This data is used for game delivery, RNG certification, and fairness auditing purposes only.
• Identity Verification Services: For KYC purposes, identity documents and related data may be processed by third-party identity verification providers. These providers are bound by strict data processing agreements and may not use your data for any purpose other than verification on behalf of piok.
• Fraud Prevention and Risk Management: Aggregated and pseudonymised data may be shared with specialist fraud detection services to identify and prevent suspicious activity. These services do not receive personally identifiable data beyond what is necessary for the specific fraud assessment.
• Technology and Hosting Providers: piok's platform is hosted on secure cloud infrastructure. Hosting and technology partners may process your data on our behalf as data processors, under data processing agreements that impose the same data protection standards that piok applies internally.
• Legal and Regulatory Authorities: piok may be required to disclose personal data to law enforcement agencies, regulatory bodies, or courts in response to a lawful request. piok will only make such disclosures where legally compelled and will inform you where legally permitted to do so.

Cookies & Tracking Technologies

piok uses cookies and similar technologies (including local storage and session storage) to operate the platform, remember your preferences, and where you have consented, to understand how players interact with our site. The following table describes the categories of cookies in use.

You can manage or withdraw your cookie consent at any time by adjusting your browser settings to block or delete cookies. Please note that disabling strictly necessary or functional cookies may impair the performance of certain platform features, including maintaining your login state across pages.

Data Retention

piok retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. When data is no longer required, it is securely deleted or anonymised so that it can no longer be attributed to you as an individual.

• Active Account Data: All personal data associated with an active piok account is retained for the full duration of the account relationship, plus a minimum post-closure retention period required for legal compliance.
• Financial Transaction Records: Deposit, withdrawal, and betting transaction records are retained for a minimum of 5 years following the date of the transaction, in accordance with financial record-keeping standards applicable to online gaming operators.
• Identity Verification Documents: KYC documents (copies of National ID, passport, or proof of address) are retained for a minimum of 5 years following account closure or the date of the last verification event, whichever is later.
• Support Communications: Customer support transcripts and email correspondence are retained for up to 3 years from the date of the interaction, to support dispute resolution and quality assurance processes.
• Marketing Data: Where you have opted into marketing, your contact details and consent records are retained until you withdraw consent. Upon withdrawal, your details are removed from active marketing lists within 10 business days.
• Closed and Dormant Accounts: Following account closure — whether player-initiated or piok-initiated — personal data is retained for the legally required period and then securely deleted. Anonymised statistical data derived from your usage may be retained indefinitely for aggregate analytics purposes.

Data Security

piok implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security programme is reviewed and updated regularly to respond to the evolving threat landscape.

• SSL/TLS Encryption: All data in transit between your browser or app and the piok platform is encrypted using Transport Layer Security (TLS). Our SSL certificate is maintained and renewed on a continuous basis. You can verify encryption by the padlock icon in your browser address bar when visiting piok.app.
• Encryption at Rest: Sensitive personal data stored in piok's databases — including payment details, identity documents, and authentication credentials — is encrypted at rest using strong encryption standards. Encryption keys are managed separately from the data they protect.
• Access Controls: Access to personal data within piok's internal systems is restricted on a strict need-to-know basis. Staff with access to player data undergo background checks and receive data protection training. All access is logged and audited.
• Intrusion Detection: piok's infrastructure is monitored continuously by automated intrusion detection systems. Anomalous activity triggers immediate alerts to our security team for investigation.
• Penetration Testing: piok's platform undergoes regular security assessments, including penetration testing by independent security professionals. Identified vulnerabilities are remediated according to a risk-based prioritisation framework.
• Data Breach Response: In the event of a personal data breach that creates a risk to your rights and freedoms, piok will notify affected players without undue delay once the breach has been confirmed and assessed. Our breach response procedure includes containment, assessment, notification, and remediation steps.

Your Privacy Rights

As a piok player, you have a number of rights in relation to the personal data we hold about you. piok is committed to upholding these rights and has established a clear process for handling data subject requests. To exercise any of the rights listed below, please contact us at [email protected] with the subject line "Privacy Rights Request" and your registered account email address.

• Right of Access: You have the right to request a copy of the personal data piok holds about you, together with information about how it is being used. We will provide this information in a structured, commonly used format within 14 days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update basic account information (such as your contact details) directly within your account settings. For changes to identity or verification data, please contact support.
• Right to Erasure: You may request that piok delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Please note that certain data — particularly financial transaction records — must be retained for legally required periods even after an erasure request.
• Right to Restrict Processing: You may request that piok temporarily suspend its use of your personal data — for example, while you contest the accuracy of the data, or while an objection you have raised is under review. During a restriction, we may continue to store your data but will not actively process it beyond what is legally required.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive a copy of the personal data you provided to piok in a structured, machine-readable format. You may also request that we transmit this data directly to another service provider where technically feasible.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for fraud prevention or platform analytics. You also have an absolute right to object to processing for direct marketing purposes, which piok will honour without requiring justification.
• Right to Withdraw Consent: Where processing is based on consent — including for marketing communications and non-essential cookies — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal. You can manage marketing preferences in your account settings or by contacting support.

Marketing Communications

piok sends marketing communications — including emails, SMS messages, and in-platform notifications about bonuses, new games, cricket promotions, and seasonal offers — only to players who have given their explicit consent to receive such communications. We do not send unsolicited marketing messages.

• Consent at Registration: During the account registration process, you will be offered the opportunity to opt in to receiving marketing communications from piok. This opt-in is voluntary and separate from your agreement to the Terms & Conditions. You may register and use the platform without opting into marketing.
• Managing Your Preferences: You can update your marketing preferences at any time from within your piok account settings. Alternatively, every marketing email contains a clearly visible unsubscribe link that will remove you from our mailing list immediately. Unsubscribe requests are processed within 10 business days.
• Types of Marketing Content: piok's marketing communications may include welcome bonus offers, deposit match promotions, free spin offers, cashback promotions, BPL and IPL cricket betting specials, seasonal promotions tied to Eid or Pohela Boishakh, and notifications about new game launches from providers such as Pragmatic Play, Evolution Gaming, and Spribe.
• Transactional vs. Marketing Messages: Opt-out from marketing does not affect transactional communications — these include deposit confirmations, withdrawal notifications, security alerts, account verification requests, and support responses. Transactional messages are sent as a necessary part of the service contract and cannot be opted out of while your account is active.
• No Third-Party Marketing: piok does not share your contact details with third parties for their own marketing purposes. You will only receive marketing messages from piok directly, not from our payment partners, game studios, or any other third party.

Updates to This Policy

piok reviews and updates this Privacy Policy periodically to reflect changes in our data practices, the services we offer, applicable laws, or regulatory guidance. The "Effective Date" shown at the top of this page and in the hero section above indicates when the current version came into force.

When we make a material change to this Privacy Policy — for example, introducing a new category of data collection, changing the basis on which we process your data, or engaging a new category of third-party data processor — we will notify registered players via the email address on their account at least 7 days before the change takes effect.

For minor changes that do not materially affect your rights (such as clarifications of existing practices, formatting updates, or corrections of typographical errors), we may update the policy without individual notification. We therefore encourage you to review this page periodically. The most current version is always available at piok.app/privacy-policy.

Continued use of the piok platform after the effective date of any update to this Privacy Policy constitutes your acknowledgement of the updated version. If you have any questions about changes to this policy, please contact our support team at [email protected] before continuing to use the platform.