pkom Privacy
Policy & Data Protection

Section 1

Information We Collect

When you register for, access, or use the pkom platform, we collect certain categories of personal data. The type of information collected depends on how you interact with the platform. We collect only the data that is necessary for the purposes described in this Privacy Policy, and we do not collect sensitive personal data beyond what is required for identity verification and responsible gaming compliance.

Information You Provide Directly

The following data is collected directly from you during registration, KYC verification, support interactions, and use of the platform's features:

Data Category	Examples	When Collected
Identity Data	Full name, date of birth, National ID (NID) number, passport number	Registration & KYC verification
Contact Data	Email address, mobile phone number	Registration
Address Data	Residential address, city (e.g., Dhaka, Chittagong, Sylhet), district	KYC verification
Financial Data	Mobile wallet account number (bKash, Nagad, Rocket, Upay), transaction references	Deposit & withdrawal requests
Account Credentials	Username, hashed password	Registration
Support Communications	Messages sent to [email protected], complaint details	Support interactions
Responsible Gaming Data	Deposit limits set, self-exclusion periods, session time preferences	Account settings & RG tool use

Information Collected Automatically

When you visit or use the pkom platform, certain technical and behavioural data is collected automatically via cookies, log files, and related technologies:

• Device information: device type, operating system, browser type and version, screen resolution.
• Network information: IP address, approximate geographic location derived from IP (country/city level only).
• Usage data: pages visited, time spent on each page, game sessions initiated, bets placed, features used.
• Log data: server access logs, error logs, session identifiers, and timestamps of platform interactions.
• Cookie data: session tokens, preference cookies, and analytics identifiers as described in Section 4.

Section 2

How We Use Your Data

pkom uses the personal data it collects for the following purposes. We process your data only where we have a valid legal basis to do so, as described in Section 3. We do not use your data for purposes incompatible with those listed below without first obtaining your consent.

Account Management & Platform Operation

Your identity, contact, and credential data are used to create and maintain your pkom account, authenticate your login sessions, process deposits and withdrawals via your registered payment method, and deliver the full range of platform features including sports betting, live casino, and slots.

Identity Verification & KYC Compliance

pkom is required to verify the identity and age of all players before processing withdrawals. Your identity documents and financial data are used solely for this KYC process. Verification data is retained for the period required by applicable law and then securely deleted or anonymised.

Fraud Prevention & Security

Device data, IP address, usage patterns, and transaction history are analysed to detect and prevent fraudulent activity, money laundering, account takeover, bonus abuse, and other prohibited conduct described in the Terms & Conditions. This processing is necessary to protect both the platform and its players.

Responsible Gaming

Usage data, session data, and responsible gaming settings are monitored to identify patterns that may indicate problem gambling behaviour. This allows pkom to proactively reach out to players who may benefit from responsible gaming tools and to enforce self-exclusion periods set by players themselves. Full details are available on the Responsible Gaming page.

Customer Support

Communications sent to pkom support are used solely to respond to your enquiry, resolve complaints, and improve the quality of our support services. Support records are retained for a reasonable period to allow for follow-up and dispute resolution.

Service Improvement & Analytics

Aggregated and anonymised usage data is used to understand how players interact with the platform, identify areas for improvement, test new features, and optimise game selection and platform performance. No individual player is identified in analytical reporting.

Marketing Communications

With your explicit consent at registration, pkom may send you promotional communications about new games, bonuses, seasonal offers (such as Eid or Pohela Boishakh promotions), and platform updates via the email address or phone number registered to your account. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting pkom support.

Section 3

Legal Basis for Processing

For each category of personal data that pkom processes, we rely on one or more of the following legal bases. Processing your data without a valid legal basis would be unlawful, and pkom takes its data processing obligations seriously.

Processing Purpose	Legal Basis
Account creation and platform access	Performance of a contract (your registration agreement with pkom)
KYC identity and age verification	Legal obligation (anti-money laundering and age verification requirements)
Processing deposits and withdrawals	Performance of a contract
Fraud detection and prevention	Legitimate interests (protecting pkom and its players from harm)
Responsible gaming monitoring	Legal obligation and legitimate interests (duty of care to players)
Customer support communications	Performance of a contract and legitimate interests
Marketing and promotional emails	Consent (freely given, specific, and withdrawable at any time)
Platform analytics and improvement	Legitimate interests (improving service quality using anonymised data)

Where pkom relies on legitimate interests as a legal basis, we have assessed that those interests are not overridden by your individual rights or interests. You have the right to object to processing based on legitimate interests — see Section 7 for details of how to exercise this right.

Section 4

Cookies & Tracking Technologies

pkom uses cookies and similar technologies to enable core platform functionality, maintain your login session, and understand how players use the site. A cookie is a small text file placed on your device by a website. We do not use cookies for advertising or cross-site behavioural tracking.

Cookie Categories

Category	Purpose	Retention	Can Be Disabled?
Strictly Necessary	Session management, login authentication, CSRF protection, load balancing	Session (deleted on browser close)	No — disabling will break platform functionality
Functional	Remembering your language preference, storing responsible gaming notification dismissals	Up to 12 months	Yes — platform will still work but preferences will not be saved
Analytics	Aggregated, anonymised data on page views, session duration, and feature usage for platform improvement	Up to 24 months	Yes — you can opt out via your browser settings
Security	Fraud detection signals, bot detection, device fingerprint hashing for account protection	Up to 6 months	No — required to protect your account

Managing Cookies

You can manage or delete cookies via your browser settings. Most modern browsers allow you to block all cookies, block third-party cookies only, or delete existing cookies. Please note that disabling strictly necessary or security cookies will impair or entirely prevent your ability to log in and use the pkom platform. Instructions for managing cookies in common browsers are available via each browser's help documentation.

Section 5

Data Sharing & Disclosure

pkom does not sell, rent, or share your personal data with third parties for their own commercial purposes. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for each purpose.

Payment Processors

When you make a deposit or request a withdrawal, your mobile wallet account number and transaction reference are shared with the relevant payment provider — bKash, Nagad, Rocket, or Upay — to process the transaction. Each of these providers operates under their own privacy policy and security standards. pkom does not receive or store your full mobile banking PIN or password.

Game Studio Partners

Game content is delivered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These studios receive limited technical identifiers (such as a session token and anonymised player identifier) necessary to load and operate the game within the pkom platform. They do not receive your full name, NID, address, or payment details.

Legal and Regulatory Disclosure

pkom may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or regulatory directive. In such cases, pkom will disclose only the minimum data required to comply with the legal obligation, and where legally permissible, will notify the affected player.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of pkom's business, player data may be transferred to the acquiring entity as part of that transaction. In such an event, pkom will provide reasonable notice to registered players and ensure that the acquiring entity commits to processing personal data in a manner consistent with this Privacy Policy.

• pkom never sells personal data to data brokers, advertising networks, or marketing companies.
• pkom never shares personal data with other gambling operators or affiliates for marketing purposes.
• All third-party service providers engaged by pkom are contractually required to handle personal data securely and in accordance with applicable data protection standards.

Section 6

Data Retention

pkom retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following table sets out our standard retention periods for each category of personal data.

Data Category	Retention Period	Basis
Account & identity data	Duration of account plus 5 years after closure	Legal obligation (AML / KYC record-keeping)
Transaction records	7 years from the date of the transaction	Legal obligation (financial record-keeping)
KYC documents (NID, passport)	5 years from account closure or last verification date	Legal obligation
Support communications	3 years from the date of the communication	Legitimate interests (dispute resolution)
Session and usage logs	12 months from the date of collection	Legitimate interests (security and analytics)
Marketing consent records	Until consent is withdrawn plus 2 years	Legal obligation (proof of consent)
Anonymised analytics data	Up to 24 months	Legitimate interests (platform improvement)

When a retention period expires, personal data is either securely and permanently deleted from pkom's systems or anonymised in a manner that makes it impossible to re-identify the individual. Where data is anonymised rather than deleted, it may be retained indefinitely for statistical and analytical purposes.

Section 7

Your Data Rights

As a player registered on the pkom platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact pkom support via the email address displayed in the footer of every page. We will respond to all verified requests within 30 days. In some cases, a longer period may be required — we will notify you if this applies.

• Right of Access: You may request a copy of the personal data pkom holds about you, along with information about how it is processed and with whom it is shared.
• Right to Rectification: If any personal data pkom holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain data directly from within your account settings.
• Right to Erasure: You may request that pkom delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing is unlawful. This right is subject to legal retention obligations as described in Section 6.
• Right to Restriction: You may request that pkom restrict the active processing of your personal data while a dispute about its accuracy or lawfulness is being resolved.
• Right to Object: Where pkom processes your data based on legitimate interests, you have the right to object to that processing. pkom will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to Data Portability: You may request that pkom provide your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider.

Section 8

Data Security

pkom implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures are reviewed and updated regularly to keep pace with evolving security standards.

Technical Measures

• All data in transit is protected using TLS 1.2 or higher (256-bit SSL encryption).
• Passwords are stored as irreversible hashed values using a modern adaptive hashing algorithm — pkom staff cannot read your password.
• Access to personal data is restricted to pkom staff members who require it to perform their job function, on a strict need-to-know basis.
• Production databases containing personal data are isolated from public-facing network interfaces and accessible only via authenticated, encrypted internal connections.
• Security and access logs are retained and reviewed regularly to detect anomalous activity.

Organisational Measures

• All pkom staff with access to personal data receive training on data protection obligations and security best practices.
• Third-party service providers are vetted for security compliance before being granted access to any pkom system that processes personal data.
• pkom maintains a data breach response procedure. In the event of a breach that is likely to affect your rights or interests, pkom will notify you without undue delay.

Section 9

Third-Party Services

The pkom platform integrates with third-party services to deliver payments, games, and platform analytics. Each of these integrations involves a limited and controlled exchange of data. This section describes the nature of those integrations and your options with respect to third-party data processing.

Payment Partners

Deposits and withdrawals on pkom are processed via bKash, Nagad, Rocket, and Upay. When you initiate a transaction, pkom passes your registered mobile wallet number and the transaction amount to the relevant provider via a secure API connection. The payment provider then processes the transfer and returns a transaction confirmation to pkom. Your full mobile banking credentials (PIN, password) are entered directly on the payment provider's interface and are never transmitted to or stored by pkom.

Game Content Providers

Live casino, slots, and sports betting content is supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To load a game session, pkom passes an anonymised session token and a hashed player identifier to the game studio. This allows the studio to record the outcome of the game session and return results to pkom for account balance updates. No personally identifiable information (name, NID, address, phone number) is shared with game studios.

Analytics Services

pkom uses internal analytics tools to monitor platform performance and usage patterns. Analytical data is collected in aggregated form and does not identify individual players. Where any third-party analytics tool is used, it is configured to anonymise IP addresses and to refrain from sharing data with the tool provider's advertising networks.

Section 10

Changes to This Policy

pkom reserves the right to update or revise this Privacy Policy at any time. The most current version of the Privacy Policy will always be available at https://pkom.app/privacy-policy. The effective date displayed at the top of this page and the last-updated bar below the hero section will be updated to reflect the date of any revision.

Where a change to this Privacy Policy is material — for example, a change that affects how pkom uses your data, who it shares your data with, or the rights available to you — pkom will make reasonable efforts to notify registered players via the email address associated with their account at least 14 days before the change takes effect. Non-material changes, such as corrections of typographical errors or clarifications of existing provisions, may be made without prior notice.

Your continued use of the pkom platform after the publication of any revision to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with any revision, you should cease using the platform and may request voluntary account closure as described in the Terms & Conditions.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a complaint about how pkom has handled your personal data, please contact the pkom support team by sending a written message to the email address displayed in the footer of every page on this site. pkom aims to acknowledge all privacy-related enquiries within 2 business days and to resolve complaints within 14 business days of acknowledgement.

If you are not satisfied with pkom's response to your complaint, you may have the right to escalate the matter to a relevant data protection authority in your jurisdiction. pkom is committed to resolving all privacy complaints fairly and transparently, and encourages players to contact us directly in the first instance so that we have the opportunity to address any concern before escalation.