pejok Privacy Policy

pejok operates an online sports betting and casino platform accessible at https://pejok.io, serving players across Bangladesh. For the purposes of this Privacy Policy, pejok is the data controller responsible for the personal data collected through the platform.

Our platform provides cricket betting (including BPL and T20 World Cup markets), live casino games powered by providers including Evolution Gaming, Pragmatic Play, and Ezugi, slot titles from NetEnt, Microgaming, and other studios, and crash game titles including Mines and 24 Hour Grand Prix. All services are delivered in BDT and are accessible via local payment channels including bKash, Nagad, and Rocket.

This Privacy Policy applies to all personal data collected from registered players, visitors to the pejok website, and individuals who contact pejok via any of our support channels. It should be read together with our Terms & Conditions and Responsible Gaming policy.

pejok collects the following categories of personal data in connection with the operation of the platform:

pejok does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (except where directly relevant to a responsible gaming self-exclusion request), or biometric data for identification purposes beyond standard KYC photo matching.

pejok collects personal data through the following channels and mechanisms:

• Direct registration: When you create a pejok account, you voluntarily provide identity, contact, and payment data as part of the sign-up and KYC process.
• Platform activity: As you use the pejok platform — browsing odds, placing bets, playing casino or crash games — usage, betting, and technical data are collected automatically by our platform systems.
• Payment transactions: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a bank transfer, our payment processing partners transmit transactional data to pejok for reconciliation and AML monitoring purposes.
• Support interactions: When you contact pejok via live chat, email, or WhatsApp, we retain records of those communications for quality assurance, compliance, and dispute resolution purposes.
• Cookies and similar technologies: The pejok website uses cookies and browser storage to maintain session state, remember preferences, and gather anonymised analytics data. See Section 7 for full details.
• Third-party KYC providers: If you submit identity documents during the verification process, those documents are processed by a trusted third-party KYC provider whose systems share verification outcomes with pejok.

pejok uses the personal data it collects for the following clearly defined purposes:

• Account administration: Creating and managing your registered player account, verifying your identity and age (21+), processing login and security requests, and maintaining account records.
• Service delivery: Processing bets and game rounds, calculating and crediting winnings to your wallet, and delivering the core platform features you have requested.
• Payment processing: Facilitating deposits and withdrawals through your chosen payment method, reconciling transactions, and maintaining financial records as required by applicable accounting standards.
• Fraud prevention and security: Detecting and investigating suspicious account activity, preventing multi-accounting, identifying unauthorised access attempts, and protecting the integrity of the platform for all players.
• Anti-money laundering (AML) compliance: Monitoring transaction patterns, reviewing source-of-funds declarations where required, and maintaining records for compliance reporting purposes.
• Responsible gaming: Monitoring betting patterns for signs of potential problem gambling behaviour, implementing deposit limits and self-exclusion requests, and providing targeted responsible gaming support where warranted.
• Customer support: Responding to your queries, resolving complaints and disputes, and maintaining support records for quality and compliance purposes.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with the platform and to prioritise feature development and user experience improvements.
• Marketing communications (opt-in only): Where you have given explicit consent, sending promotional communications about bonus offers, new game launches, cricket betting events such as BPL, and seasonal promotions. You may withdraw this consent at any time.

pejok processes your personal data on one or more of the following legal grounds, depending on the specific purpose of processing:

• Contractual necessity: Processing that is necessary to provide the services you have requested — including account management, bet settlement, and payment processing — is carried out on the basis that it is required to perform our contract with you.
• Legal obligation: Processing required to comply with applicable legal requirements — including KYC identity verification, AML transaction monitoring, and record-keeping obligations — is carried out on the basis of legal compliance.
• Legitimate interests: Processing carried out for fraud detection, security monitoring, platform integrity, and aggregated analytics is conducted on the basis of pejok's legitimate business interests, balanced against your rights as a data subject.
• Consent: Processing for optional marketing communications is carried out solely on the basis of your explicit, freely given, and revocable consent. You may withdraw marketing consent at any time without affecting the lawfulness of processing based on any other ground.

pejok does not sell, rent, or otherwise transfer your personal data to third parties for commercial or marketing purposes. Personal data may be shared with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other approved payment partners receive transaction data necessary to process your deposits and withdrawals.
• KYC and identity verification providers: A trusted third-party KYC service provider receives your identity documents solely for the purpose of performing age and identity verification checks on our behalf.
• Game content providers: Game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier to manage your game session. These providers do not receive your full personal profile.
• IT and hosting partners: Data hosting, security monitoring, and platform infrastructure providers may have access to encrypted data for the purpose of maintaining and securing the platform.
• Law enforcement and regulatory authorities: pejok will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by a valid legal request, court order, or applicable law, without prior notice to you where legally required.
• Professional advisors: Lawyers, auditors, and compliance consultants engaged by pejok may access personal data where necessary and are bound by strict confidentiality obligations.

All third-party service providers acting on behalf of pejok are required to process data in accordance with their contractual obligations to us and applicable data protection standards.

The pejok platform uses cookies and similar browser-based technologies to operate the website, maintain your session, remember your preferences, and gather anonymised analytical data about how the platform is used. The following types of cookies are used:

• Essential cookies: Required for core platform functionality including session authentication, maintaining your logged-in state, and security token management. These cookies cannot be disabled without disrupting your ability to use the platform.
• Functional cookies: Store your preferences such as language settings and display options to provide a more personalised experience across sessions.
• Analytics cookies: Collect anonymised, aggregated data about how visitors interact with the pejok website — such as which pages are visited most frequently and how long sessions last. This data is used to improve the platform and is not linked to your personal identity.
• Security cookies: Assist in detecting and preventing fraudulent activity, CSRF attacks, and session hijacking attempts.

pejok does not use third-party advertising cookies or tracking pixels that would transmit your behavioural data to external advertising networks. You may manage non-essential cookies through your browser settings, though disabling certain cookies may affect platform functionality.

pejok retains personal data only for as long as is necessary for the purposes for which it was collected, or as required to comply with applicable legal obligations. The following retention guidelines apply:

• Active account data: Retained for the duration of your account being active on the platform, plus a minimum post-closure retention period required for legal, financial, and AML compliance purposes.
• Financial transaction records: Retained for a minimum of seven years following the date of the transaction, in line with standard accounting and AML record-keeping requirements.
• KYC identity documents: Retained for the duration of your account plus the applicable post-closure compliance period. Copies of ID documents are securely deleted once the mandatory retention period has elapsed.
• Support and communication records: Retained for a minimum of two years from the date of the interaction, or longer if the communication relates to an open dispute or compliance investigation.
• Marketing consent records: Retained for as long as necessary to demonstrate that consent was lawfully obtained and to honour any opt-out requests.
• Technical and usage logs: Typically retained for rolling periods of 90 to 180 days, after which they are anonymised or deleted.

When personal data is no longer required for any applicable purpose, pejok will securely delete or irreversibly anonymise it in accordance with our internal data disposal procedures.

As a player on the pejok platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at support at pejok.io with the subject line "Data Rights Request".

pejok will respond to all data rights requests within 30 days of receipt. Where a request is complex or numerous, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.

Please note that some rights may be limited where processing is necessary for legal compliance obligations — for example, AML record-keeping requirements may prevent immediate erasure of financial transaction data.

The pejok platform is strictly intended for adults aged 21 and above. pejok does not knowingly collect personal data from any individual under the age of 21. The platform applies mandatory age verification as part of the account registration and KYC process to prevent access by minors.

If pejok becomes aware that personal data has been collected from a person under the age of 21 without verified parental or guardian consent, that data will be promptly deleted, the associated account will be permanently closed, and any funds held in the account will be handled in accordance with applicable legal requirements.

pejok implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport layer security: All data transmitted between your browser or device and the pejok platform is encrypted using TLS 1.2 or higher with 256-bit SSL certificates.
• Password security: User passwords are never stored in plain text. They are processed using a strong, salted one-way hashing algorithm. pejok staff members cannot retrieve your password — only a reset is possible.
• Access controls: Access to systems containing personal data is restricted to authorised pejok personnel on a strict need-to-know basis. All administrative access is logged and monitored.
• Two-factor authentication: Players are encouraged to enable two-factor authentication (2FA) via SMS on their pejok accounts for an additional layer of login security.
• Intrusion detection: pejok's infrastructure is monitored continuously for suspicious activity, attempted intrusions, and unusual access patterns.
• Third-party security audits: pejok engages independent security professionals to conduct periodic assessments of platform security controls.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a high risk to your rights, pejok will notify affected players without undue delay and take all reasonable steps to contain and remediate the breach.

The pejok platform integrates with third-party services for the purpose of delivering its core features. These integrations involve limited data sharing as described in Section 6. The following categories of third-party service are used:

• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other studios provide game content streamed directly within the pejok platform. Each provider operates its own RNG-certified and independently audited game environment.
• Payment gateway partners: bKash, Nagad, Rocket, Upay, and participating local banks process payment transactions. These partners operate under their own privacy and data protection policies. pejok recommends that you review the privacy policy of your chosen payment provider.
• KYC verification service: A contracted identity verification partner processes KYC documents submitted during account registration. The partner is bound by strict data processing agreements with pejok and does not use your documents for any purpose beyond the verification service.
• Infrastructure and hosting: pejok's platform is hosted on secure cloud infrastructure. Hosting providers have no operational access to account-level personal data and handle only encrypted system-level data.

pejok is not responsible for the privacy practices of independent third-party websites that may be referenced in content on the platform. This Privacy Policy applies solely to data collected and processed by pejok directly or through its contracted service providers.

pejok reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable legal requirements, or the features and services offered on the platform. The current version of the Privacy Policy will always be accessible at https://pejok.io/privacy-policy.

When material changes are made to this Privacy Policy — changes that materially affect how we collect, use, or share your personal data — we will notify registered players via their registered contact details (mobile number or email address) at least 14 days before the changes take effect. Minor updates that do not affect the substance of how your data is processed may be made without individual notification.

Your continued use of the pejok platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should stop using the platform and contact support at pejok.io to request account closure and data handling in accordance with your rights under Section 9.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how pejok has handled your personal data, please contact our support team using the details below:

• Email: support at pejok.io — use subject line "Privacy Enquiry" or "Data Rights Request"
• WhatsApp: +880 1700 000 000
• Live Chat: Available within your account dashboard, 08:00 – 00:00 BST (UTC+6) daily

pejok will acknowledge all privacy-related requests within two business days and provide a substantive response within 30 days. Where a request requires additional time, we will inform you of the extension within the initial 30-day window.

If you are unsatisfied with how pejok has responded to your privacy concern, you have the right to escalate your complaint to the relevant data protection authority or seek independent legal advice on your rights under applicable law.