Privacy Policy — How poki Collects, Uses, and Protects Your Data

1 Who We Are

poki operates the online betting and casino platform accessible at poki.bar. For the purposes of this Privacy Policy, poki is the data controller responsible for the personal data of registered players and visitors to the platform.

poki operates as an offshore online gaming platform. References in this policy to data processing obligations reflect poki's internal standards and commitments to its players, particularly those based in Bangladesh. If you have any questions about who controls your data or how it is processed, please contact us using the details set out in Section 15 of this policy.

Our designated privacy contact can be reached by email at [email protected]. We aim to respond to all privacy-related enquiries within five business days.

2 Data We Collect

poki collects personal data in the following categories. Not all categories will apply to every player — the specific data collected depends on how you use the platform.

2.1 Identity and Contact Data

• Full legal name
• Date of birth
• Residential address (including city, district, and postal code)
• Email address
• Mobile phone number
• Copies of government-issued identification documents (National ID Card, passport, or driving licence) submitted during KYC verification
• Proof of address documentation (utility bills or bank statements)

2.2 Account Data

• Username and encrypted account credentials
• Account registration date and history
• Communication preferences and marketing opt-in/opt-out status
• Responsible gaming settings (deposit limits, session alerts, self-exclusion status)

2.3 Financial Data

• Deposit and withdrawal transaction records, including amounts, dates, and payment method references
• Mobile financial service account identifiers (e.g., bKash or Nagad account numbers) used to process transactions — stored only in tokenised or partially masked form
• Bank account details where applicable, stored in masked form
• Bonus and promotional credit history

2.4 Transactional and Gaming Data

• Betting history, including markets wagered on, stake amounts, and settlement outcomes
• Casino game play history, including game titles, session durations, and results
• Account balance history

2.5 Technical and Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser information
• Session timestamps and duration
• Pages visited and features used within the poki platform
• Referring URL (the page or link that directed you to poki.bar)
• Device fingerprint data used for fraud detection and duplicate account identification

2.6 Communications Data

• Records of correspondence between you and the poki support team, including support ticket content and resolution history
• Responses to surveys or feedback requests where you choose to participate

3 How We Collect Data

poki collects personal data through the following channels:

3.1 Direct Collection

Data you provide directly to poki includes all information submitted during account registration, identity verification (KYC), deposit and withdrawal requests, support communications, and participation in promotions or surveys.

3.2 Automated Collection

When you use the poki platform, certain technical and usage data is collected automatically through cookies, server logs, and similar tracking technologies. This data is collected each time you visit poki.bar or interact with the platform, regardless of whether you are logged in.

3.3 Third-Party Sources

In limited circumstances, poki may receive data about you from third parties. This includes:

• Identity verification providers: Confirmation of identity or age verification results where poki engages a third-party KYC service.
• Payment processors: Transaction status updates from bKash, Nagad, Rocket, Upay, and banking partners.
• Fraud prevention services: Risk signals or flags associated with an IP address, device, or payment method shared by fraud prevention partners.

4 Legal Basis for Processing

poki processes personal data on one or more of the following legal bases, depending on the nature of the processing activity:

5 How We Use Your Data

poki uses the personal data it collects for the following specific purposes:

5.1 Providing and Operating the Platform

The primary use of your personal data is to create and maintain your account, process your deposits and withdrawals, make betting markets and casino games available to you, and provide the overall poki service as described in the Terms & Conditions.

5.2 Verification and Compliance

poki uses identity and age verification data to confirm that all registered players meet the 21+ age requirement and that the platform is not being used for money laundering, fraud, or other prohibited activities. This processing is a core part of poki's compliance obligations and cannot be opted out of.

5.3 Responsible Gaming

Gaming activity data, including betting frequency, session duration, and deposit patterns, is monitored to identify signs of problem gambling behaviour. Where such patterns are identified, poki may proactively contact the player to offer responsible gaming tools or, in serious cases, to initiate a cooling-off period in the interests of player welfare.

5.4 Fraud Prevention and Security

Technical and usage data, including IP addresses, device fingerprints, and behavioural patterns, is analysed to detect and prevent fraud, account takeover attempts, bonus abuse, and the operation of automated betting systems on the platform.

5.5 Customer Support

Communications data is used to manage and resolve support tickets, account disputes, and complaints. Records of support interactions are retained to allow poki to maintain a history of account activity and to improve the quality of the support service.

5.6 Marketing and Promotions

Where you have provided consent or where poki has a legitimate interest, your contact details and account data may be used to send you information about promotions, bonuses, new game launches, and platform updates. You may opt out of marketing communications at any time by contacting [email protected]. Opting out of marketing does not affect your receipt of transactional communications.

5.7 Platform Improvement and Analytics

Aggregated and anonymised usage data is used to understand how players interact with the poki platform, identify areas for improvement, and inform product development decisions. Where analytics are based on fully anonymised data, they no longer constitute personal data processing.

6 Sharing Your Data

poki does not sell personal data to third parties. Your data may be shared with the following categories of recipients only to the extent necessary for the purposes described in this policy:

6.1 Payment Service Providers

To process deposits and withdrawals, poki shares relevant transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers act as independent data controllers for their own processing activities and are subject to their own privacy policies.

6.2 Identity Verification and KYC Providers

Where poki uses a third-party provider to carry out identity or age verification, your identification documents and personal details will be shared with that provider for verification purposes only. The results of the verification check are returned to poki; the provider does not retain your data beyond the verification process unless required by its own legal obligations.

6.3 Game Software Providers

Third-party game providers (including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming) may receive limited technical data (such as a session token or player identifier) necessary to load and operate their games within the poki platform. These providers do not receive your full identity or financial data.

6.4 Fraud Prevention and Security Services

Technical data may be shared with third-party fraud prevention and cybersecurity services to protect the integrity of the poki platform and its players. Such sharing is governed by data processing agreements that restrict the use of shared data to the fraud prevention purpose only.

6.5 Legal and Regulatory Authorities

poki may be required to disclose personal data to law enforcement agencies, regulatory authorities, or courts where required by applicable law or legal process. In such cases, poki will disclose only the minimum data necessary to comply with the relevant legal obligation and will, where permitted, notify the affected player of such disclosure.

6.6 Business Transfers

In the event that poki undergoes a merger, acquisition, restructuring, or sale of all or part of its business, personal data held by poki may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections being maintained by the acquiring party.

7 Cookies & Tracking Technologies

poki uses cookies and similar technologies (including web beacons and local storage) on the poki.bar platform. By continuing to use the platform after having been presented with this policy, you consent to the use of cookies as described below.

7.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to store information about your preferences or actions.

7.2 Types of Cookies Used by poki

• Strictly necessary cookies: Required for the platform to function. These include session cookies that maintain your logged-in state and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming configurations, so that they persist across sessions.
• Analytics cookies: Used to collect aggregated information about how visitors use the platform, including which pages are visited most frequently and how long users spend on each section. This data helps poki improve the platform experience.
• Fraud prevention cookies: Used to generate a device fingerprint that helps poki identify and prevent fraudulent activity, including duplicate account creation and automated betting software.

7.3 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can instruct your browser to refuse all cookies or to alert you when a cookie is being set. Note that disabling cookies may affect the functionality of the poki platform, including your ability to log in and maintain a session. For detailed guidance on managing cookies, refer to your browser's help documentation.

8 Data Security

poki takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• SSL/TLS encryption for all data in transit between your browser and the poki platform.
• Encryption at rest for sensitive data fields, including passwords (stored as salted hashes) and payment method identifiers.
• Access controls that restrict employee access to personal data on a strict need-to-know basis.
• Regular security reviews of platform infrastructure and third-party integrations.
• Intrusion detection and monitoring systems to identify and respond to potential security incidents.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected players, poki will take appropriate action and notify affected individuals as required.

9 Data Retention

poki retains personal data for as long as is necessary to fulfil the purposes described in this policy, subject to the following retention principles:

• Active accounts: Personal data is retained for the full duration of the account's active status and for a defined period thereafter to accommodate any unresolved disputes, withdrawal requests, or audit requirements.
• Closed accounts: Following account closure, poki retains identity, financial, and transaction data for a minimum period of five years to comply with anti-money-laundering and record-keeping obligations. After this period, data is securely deleted or irreversibly anonymised.
• KYC documents: Identity documents submitted during verification are retained for the same five-year minimum period from the date of submission or account closure, whichever is later.
• Support communications: Support ticket records are retained for three years from the date of resolution.
• Technical and usage data: Server logs and session data are retained for up to 12 months for security and fraud detection purposes, after which they are automatically purged or anonymised.
• Marketing preferences: Records of your consent or opt-out status for marketing communications are retained indefinitely to demonstrate compliance with your expressed preferences.

Where data is no longer required for any of the above purposes and no legal obligation requires its continued retention, poki will securely delete or anonymise it in a timely manner.

10 Your Rights

poki recognises the following rights in relation to the personal data it holds about you. To exercise any of these rights, please contact the poki privacy team at [email protected] with a clear description of your request. We will respond within 30 days of receiving a valid request.

10.1 Right of Access

You have the right to request a copy of the personal data poki holds about you. This is commonly referred to as a Subject Access Request. poki will provide the information in a structured, commonly used, and machine-readable format where technically feasible.

10.2 Right to Rectification

You have the right to request that poki corrects any inaccurate personal data it holds about you, or completes any incomplete data. We may ask you to provide supporting documentation before making any correction to identity-related fields.

10.3 Right to Erasure

You have the right to request that poki deletes the personal data it holds about you, subject to certain conditions. This right does not apply where poki is required by law to retain the data, or where the data is necessary to defend a legal claim. poki will inform you of any grounds on which a deletion request cannot be fulfilled in full.

10.4 Right to Restrict Processing

In certain circumstances, you may request that poki restricts its processing of your personal data — for example, while a dispute about the accuracy of data is being resolved, or pending the outcome of an objection to processing.

10.5 Right to Object

You have the right to object to the processing of your personal data where poki relies on legitimate interests as its legal basis. You also have an unconditional right to object to the processing of your personal data for direct marketing purposes at any time.

10.6 Right to Withdraw Consent

Where poki processes your data on the basis of consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing that took place before the withdrawal.

11 Children & Minors

The poki platform is strictly for adults aged 21 years and above. poki does not knowingly collect personal data from individuals under the age of 21. Account registration is prohibited for minors, and poki employs age verification procedures to enforce this restriction.

If poki becomes aware that personal data has been collected from a person under the age of 21, the account will be immediately suspended, any associated balance will be reviewed in accordance with the Terms & Conditions, and all personal data relating to that individual will be deleted as promptly as possible.

If you believe that a minor has registered an account on the poki platform, please contact [email protected] immediately so that we can investigate and take appropriate action.

12 International Data Transfers

As an offshore platform, poki may process or store personal data in jurisdictions outside Bangladesh. Where personal data is transferred internationally, poki takes steps to ensure that appropriate safeguards are in place to protect the data to a standard equivalent to that described in this policy.

These safeguards may include contractual clauses that require the recipient of the data to process it in accordance with standards comparable to those applied by poki, or the use of third-party processors that have demonstrated compliance with recognised international data protection frameworks.

By registering an account and using the poki platform, you acknowledge that your personal data may be processed in jurisdictions outside Bangladesh in the manner described above.

13 Third-Party Links

The poki platform does not include links to third-party websites as part of its standard design. However, where any third-party content or reference is encountered on the platform, poki is not responsible for the privacy practices of those third parties. This Privacy Policy applies solely to data collected and processed by poki through the poki.bar platform and its associated communications channels.

poki encourages players to review the privacy policies of any third-party payment provider they use to fund their poki account, as those providers operate their own independent data practices.

14 Policy Changes

poki reserves the right to update or amend this Privacy Policy at any time. Material changes to this policy will be communicated to registered players via the email address on file or through a prominent notice on the platform, with reasonable advance notice where practicable.

The updated policy will take effect from the date stated at the top of the revised document. We encourage you to review this Privacy Policy periodically to stay informed about how poki handles your personal data. Your continued use of the poki platform following the effective date of any amendment constitutes your acknowledgement of the updated policy.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way poki handles your personal data, please contact our privacy team using the details below:

• Email: [email protected]
• Subject Line: Please include "Privacy Request" or "Data Rights Request" in the subject line so your message is directed to the appropriate team.
• Response Time: poki aims to acknowledge all privacy-related enquiries within two business days and to provide a substantive response within 30 days.
• Support Hours: 24 hours a day, 7 days a week

Where your enquiry relates to a suspected data breach or urgent security concern, please mark your message as urgent and poki will prioritise its response accordingly.