Privacy Policy — How pzok Protects Your Data

When you register for an account, use the pzok platform, or communicate with our support team, we collect certain categories of personal information. We operate a data minimisation policy: we collect only what is necessary to deliver our services, comply with applicable legal obligations, and maintain a safe gaming environment for all Bangladesh players.

Account Registration Data

• Full legal name as it appears on your national identity document
• Date of birth (for mandatory 18+ age verification)
• Bangladesh mobile phone number (used for login and 2FA verification)
• Email address (for account notifications and support correspondence)
• Preferred username and account password (stored in hashed, salted form — never in plain text)
• Division or city of residence in Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)

Identity Verification Data

To comply with anti-money laundering (AML) obligations and to confirm that all players meet the 18+ age requirement, pzok may request copies of government-issued identification documents, such as a National ID Card (NID), passport, or driving licence. Selfie images or liveness-check data may also be requested through our third-party verification partner. Once verification is successfully completed, document images are stored only for the period required by applicable regulations.

Financial Transaction Data

• Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers registered to your name)
• Bank account details where bank transfer is used (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank)
• Transaction amounts, timestamps, and reference numbers for all deposits and withdrawals
• Payment method type selected for each transaction

Gaming Activity Data

• Bet history, game session logs, wagering amounts, and game outcomes across cricket betting, live casino, and slot games
• Bonus redemptions, wagering requirement progress, and promotion participation records
• Responsible gaming tool usage, including deposit limits set, time-out periods activated, and self-exclusion requests

Technical & Device Data

• IP address and approximate geolocation at the time of login and each session
• Device type, operating system, browser type, and browser version
• Session duration, page navigation patterns, and feature interaction logs
• Cookie identifiers and similar tracking data (see the Cookies section for full details)

Support Communication Data

When you contact the pzok support team by email or live chat, we retain the contents of those communications — including any attachments or screenshots you provide — for quality assurance, training, and dispute resolution purposes.

pzok uses the personal data it collects for specific, clearly defined purposes. We do not use your data in ways that are incompatible with the purposes described in this Privacy Policy.

Marketing Communications. pzok will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, seasonal promotions (such as BPL cricket offers or Eid special campaigns), and new game launches if you have actively opted in to receive such communications. You may withdraw your consent and opt out at any time by updating your communication preferences in account settings or by contacting [email protected]. Opting out of marketing communications does not affect your ability to use the platform.

Every instance of personal data processing carried out by pzok is grounded in at least one of the following lawful bases:

• Contract Performance: Processing necessary to fulfil our obligations to you under the pzok Terms & Conditions — including account management, payment processing, game delivery, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) legislation, age verification requirements, and financial record-keeping obligations.
• Legitimate Interests: Processing carried out in pzok's legitimate interests where those interests do not override your fundamental rights. This covers platform security monitoring, fraud detection, internal analytics for platform improvement, and responsible gaming risk assessment.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and the use of non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of any processing that took place before withdrawal.

Where processing is based on legitimate interests, pzok conducts a balancing assessment to ensure that its interests do not disproportionately override the privacy rights of individual players. If you would like more information about any specific balancing assessment, contact [email protected].

pzok does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Your data is shared only in the limited circumstances described below, and only to the minimum extent necessary for the specific purpose.

Payment Service Providers. When you make a deposit or request a withdrawal, pzok shares the minimum necessary transaction data with your chosen payment provider — bKash, Nagad, Rocket, Upay, or the relevant bank. Each payment provider operates under its own privacy policy and is responsible for the data it handles within its own systems.

Identity Verification Partners. pzok works with a certified identity verification service provider to perform age and identity checks. Your verification documents and biometric liveness data are transmitted to this partner using encrypted channels and are retained by them only for the period required to complete the verification process.

Game Content Providers. Live casino and slot game data (including session identifiers and bet amounts) is exchanged with game providers such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe to enable game delivery, settle game outcomes, and support any game-related disputes. These providers are contractually bound to process your data only for game delivery purposes.

Fraud Prevention & AML Services. Transaction data and account activity may be shared with specialist fraud prevention and AML screening services. This processing is carried out on the basis of legal obligation and legitimate interest in maintaining the security and integrity of the platform.

Legal & Regulatory Disclosure. pzok will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, a valid legal process, or a court order. In all such cases, pzok will disclose only the data specifically required and will notify the affected player where legally permitted to do so.

pzok uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how players interact with the site. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies do not contain executable code and cannot access other files on your device.

You can manage your cookie preferences at any time through your browser settings. Most modern browsers allow you to block or delete cookies, or to receive a notification before a new cookie is set. Please note that blocking essential cookies will prevent certain core features of the pzok platform from functioning correctly, including secure login and session persistence.

pzok does not use third-party advertising networks or cross-site tracking technologies that would allow your behaviour on pzok to be tracked across unrelated external websites.

pzok retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal and regulatory retention requirements. The following retention periods apply:

• Account & Registration Data: Retained for the duration of the active account relationship, plus a minimum of 5 years following account closure, in line with standard financial record-keeping requirements.
• Identity Verification Documents: Retained for the period required to satisfy AML obligations — typically 5 years from the date of the most recent transaction associated with the verified account.
• Transaction & Payment Records: Retained for 7 years from the date of each transaction to satisfy financial record-keeping obligations.
• Gaming Activity Logs: Retained for 3 years from the date of each session, used for dispute resolution and responsible gaming monitoring.
• Support Communications: Retained for 2 years from the date of the most recent interaction in a support thread, or longer if the communication relates to an ongoing dispute or legal matter.
• Marketing Consent Records: Retained for the duration of your marketing opt-in, plus 3 years following any withdrawal of consent, for compliance and audit purposes.
• Technical & Device Logs: Retained for 90 days from the date of the relevant session, after which they are automatically purged or anonymised.

When the applicable retention period expires, pzok will securely delete or anonymise your personal data. Anonymised data (from which you cannot be identified) may be retained beyond these periods for statistical analysis and platform improvement.

As a pzok player, you have a number of rights in relation to the personal data we hold about you. pzok is committed to honouring these rights promptly and without undue delay. To exercise any of the rights listed below, contact the pzok Data Support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a valid request.

• Right of Access: You have the right to request a copy of all personal data pzok holds about you, along with information about how it is used, where it came from, and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay. You may update basic account information (such as your email address or city of residence) directly from your account settings panel.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. This right is subject to any overriding legal retention obligations described in Section 6.
• Right to Restriction of Processing: You may request that pzok restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: Where processing is based on consent or contract performance, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) and to transmit that data to another service.
• Right to Object: You have the right to object to the processing of your personal data on the basis of legitimate interests, including profiling for responsible gaming monitoring or marketing personalisation. Where you object, pzok will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails, analytics cookies), you may withdraw that consent at any time with immediate effect. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

pzok applies industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures are reviewed and updated regularly to reflect evolving best practices and emerging threats.

• Encryption in Transit: All data transmitted between your device and pzok's servers is protected using TLS 1.2 or higher (256-bit SSL encryption). Connections using outdated protocols are rejected.
• Encryption at Rest: Sensitive data fields — including identity document references, payment identifiers, and account passwords — are stored using strong encryption algorithms. Passwords are hashed using a one-way salted hashing function and are never stored or transmitted in plain text.
• Two-Factor Authentication (2FA): All pzok accounts support 2FA via one-time passcodes sent to your registered Bangladesh mobile number. We strongly recommend enabling 2FA on your account for additional protection.
• Access Controls: Access to player data within pzok's internal systems is restricted on a strict need-to-know basis. Support staff see only the minimum data required to resolve a specific query. All internal data access is logged and audited.
• Penetration Testing & Vulnerability Management: pzok conducts regular security assessments of its platform infrastructure, including penetration testing by independent security professionals. Critical vulnerabilities are addressed on an emergency basis; non-critical findings are tracked and remediated within defined SLA timeframes.
• Data Breach Response: In the event of a personal data breach that is likely to result in risk to affected players, pzok will notify affected individuals promptly and take immediate steps to contain the breach and prevent recurrence. A breach report will be documented internally regardless of severity.

While pzok implements robust security measures on its end, the security of your account also depends on the strength of your password and the security of the device you use to access the platform. Never share your pzok login credentials with anyone. pzok staff will never ask for your password.

pzok is strictly an adults-only platform. All gaming services, betting products, and account features offered by pzok are available exclusively to individuals who are 18 years of age or older. This age restriction applies to all players regardless of their location within Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh.

pzok does not knowingly collect, store, or process personal data belonging to individuals under the age of 18. Age verification is a mandatory step in the account registration process. If pzok has reasonable grounds to suspect that an account holder is under 18 years of age, the account will be suspended immediately pending a full identity and age verification review. Any funds held in a suspended minor's account will be returned to the payment method used for deposit, minus any bonus amounts that were conditional on age-verified play.

If you are a parent or guardian and believe that a minor in your household has registered an account on pzok without your knowledge, please contact our support team immediately at [email protected]. Include the registered mobile number or username associated with the account if known. pzok will investigate the report promptly, suspend the account during investigation, and delete all personal data associated with the minor upon confirmation.

pzok reviews and updates this Privacy Policy periodically to reflect changes in our data practices, changes in applicable law, and improvements to how we describe our processing activities. The "Last Updated" date displayed at the top of this page will always reflect the date of the most recent revision.

When we make material changes to this Privacy Policy — for example, changes that affect the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — we will notify all registered players by email to the address on file and by displaying a prominent notice on the platform for a minimum of 14 days before the updated policy takes effect. This advance notice period gives you the opportunity to review the changes and, if you do not accept them, to close your account before the new policy becomes binding.

Minor clarifications, typographical corrections, or updates that do not materially affect your rights or our processing activities may be made without advance notice. In all cases, the updated policy will be published on this page immediately upon revision.

Continued use of the pzok platform after the effective date of any Privacy Policy update constitutes your acknowledgement of the updated policy. We encourage all players to bookmark this page and review it periodically, particularly before making new deposits or activating new account features.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way pzok handles your personal data, our dedicated data support team is available to assist you. All privacy-related enquiries are handled in English and will receive a substantive response within 30 days of receipt.

Data Support Contact:
Email: [email protected]
Subject line for data rights requests: "Data Rights Request"
Subject line for general privacy enquiries: "Privacy Enquiry"
Response time: Within 30 calendar days (BST, UTC+6)
Support hours: 24 hours a day, 7 days a week

When submitting a privacy enquiry or data rights request, please include your registered mobile number (or username) and a brief description of your request so that our team can locate your account and respond efficiently. For data rights requests, identity verification will be required before any personal data is disclosed or actioned.