jkok Privacy Policy — How We Handle Your Personal Data

For the purposes of this Privacy Policy, jkok acts as the data controller in respect of all personal data collected from players and visitors to jkok.io. As the data controller, jkok determines the purposes for which personal data is processed and the means by which that processing takes place.

All data protection enquiries, subject access requests, and requests to exercise any data rights described in this Policy should be directed to the jkok data protection contact at [email protected]. We aim to acknowledge all privacy-related correspondence within 2 business days (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 30 calendar days of receipt.

References in this Policy to "jkok", "we", "us", or "our" refer to the jkok platform and its operators. References to "you" or "your" refer to any individual whose personal data is processed under this Policy, including registered players, account applicants, and visitors to jkok.io who have not created an account.

jkok collects personal data across several categories, depending on how you interact with the platform. The table below summarises the categories of personal data we process:

jkok does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data unless specifically required by responsible gaming obligations (for example, where a player discloses a gambling problem in the context of requesting self-exclusion).

jkok collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or submitting a responsible gaming request.
• Automated collection: Technical and usage data collected automatically when you access jkok.io, including through cookies, server logs, and analytics tools. See Section 8 for full details of our cookie practices.
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and card processing partners when you make a deposit or withdrawal. jkok does not receive or store full card numbers — only masked identifiers provided by the payment provider.
• Identity verification services: Where jkok uses a third-party KYC service to verify the authenticity of identity documents, that provider may return verification results and risk-scoring data to jkok as part of the verification process.
• Game providers: Aggregated gameplay and session data provided by third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) in connection with games played via jkok. This data is used for dispute resolution, fairness auditing, and responsible gaming monitoring.

jkok processes personal data only where a lawful basis exists for doing so. The primary purposes and their corresponding legal bases are as follows:

• Account creation and management — necessary for the performance of the contract between you and jkok (our Terms & Conditions).
• Payment processing and transaction verification — necessary for the performance of the contract and compliance with financial record-keeping obligations.
• Identity and age verification (KYC) — necessary for compliance with jkok's internal policies requiring verification that players are 21 years of age or older, and for fraud prevention purposes.
• Fraud detection and prevention — necessary for jkok's legitimate interests in protecting the platform and its players from fraudulent activity, money laundering, and match-fixing.
• Responsible gaming monitoring — necessary for jkok's legitimate interests and, in some cases, legal obligations related to player protection and harm minimisation.
• Customer support — necessary for the performance of the contract and jkok's legitimate interests in resolving player queries and disputes efficiently.
• Platform security and technical operations — necessary for jkok's legitimate interests in maintaining a secure, functional, and reliable platform.
• Marketing communications — based on your consent, where you have opted in to receive promotional emails or messages from jkok. You may withdraw this consent at any time via your account settings or by emailing [email protected].
• Legal compliance and dispute resolution — necessary for compliance with applicable legal obligations and jkok's legitimate interests in defending legal claims.

jkok does not use automated decision-making or profiling that produces legally significant effects on individual players without human review. Where jkok uses risk-scoring tools for fraud detection, flagged accounts are reviewed by a member of the jkok compliance team before any consequential action is taken.

jkok may share personal data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment service providers (bKash, Nagad, Rocket, Upay, Visa/Mastercard processing partners): to process deposits, withdrawals, and transaction verification. These providers act as independent data controllers for their own services and are subject to their own privacy policies.
• KYC and identity verification providers: to verify the identity, age, and address of players as part of jkok's compliance obligations. These providers process data strictly as processors under jkok's instruction.
• Game software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others): to deliver game sessions, resolve disputes, and conduct fairness audits. Providers receive the minimum data necessary to authenticate your session and record game outcomes.
• IT infrastructure and cloud hosting providers: to store and process platform data on secure servers. These providers act as processors under data processing agreements with jkok and may not use your data for their own purposes.
• Legal and regulatory authorities: where jkok is required to disclose personal data in response to a lawful request from a court, regulator, law enforcement agency, or other public authority. jkok will, where legally permissible, notify affected players of such disclosures.
• Fraud prevention and anti-money-laundering databases: to check player details against industry-shared fraud and financial crime indicators where jkok has a legitimate interest or legal obligation to do so.

All third-party processors engaged by jkok are required to handle personal data in accordance with confidentiality obligations and security standards consistent with this Privacy Policy. jkok does not authorise processors to sub-process personal data without jkok's prior written consent.

jkok retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, taking into account applicable legal retention obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of the account relationship plus a minimum of 5 years following account closure, to satisfy financial record-keeping and anti-money-laundering obligations.
• Transaction and financial records: Retained for a minimum of 5 years from the date of the transaction, in line with standard financial compliance requirements.
• Gameplay records: Retained for a minimum of 2 years from the date of the relevant game session, for dispute resolution and responsible gaming monitoring purposes.
• Customer support communications: Retained for 2 years from the date of the last interaction in a support thread, unless a related dispute or legal claim requires longer retention.
• Marketing consent records: Retained for as long as the consent remains active plus 1 year following withdrawal, as evidence that communications were lawfully sent.
• Technical and log data: Retained for up to 13 months on a rolling basis for security monitoring and platform analytics purposes.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for statistical and platform improvement purposes, as it can no longer be linked to any identifiable individual.

jkok employs a multi-layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key measures include:

• SSL/TLS encryption on all data transmitted between your browser or device and jkok's servers, protecting your login credentials, payment details, and personal information in transit.
• Encryption at rest for sensitive data categories including identity documents, financial records, and authentication credentials stored on jkok's infrastructure.
• Role-based access controls limiting access to personal data to jkok personnel who require it to perform specific, defined functions. Access rights are reviewed regularly and revoked upon role changes or departures.
• Two-factor authentication enforced for jkok administrative systems that handle personal data.
• Regular security assessments including vulnerability scanning and penetration testing conducted by qualified security professionals.
• Incident response procedures enabling jkok to detect, contain, and respond to data security incidents promptly and to notify affected players where required.

While jkok takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your jkok login credentials and for ensuring that your own device and network are adequately secured. If you suspect that your account has been compromised, contact jkok support immediately at [email protected].

jkok uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and analyse how the site is used so that we can improve it over time. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These include session cookies that keep you logged in during a visit and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: Remember your preferences such as display language, preferred payment method, and responsible gaming settings so you do not need to re-enter them on each visit.
• Analytics cookies: Collect aggregated, anonymised information about how visitors use jkok.io — for example, which pages are visited most frequently and where users typically exit. This data helps jkok improve the platform experience. No personally identifiable information is contained in analytics cookies.
• Fraud prevention cookies: Assist jkok's security systems in detecting unusual activity patterns that may indicate fraudulent access attempts or bot activity.

jkok does not use third-party advertising or behavioural targeting cookies. You can control cookie settings through your browser. Note that disabling strictly necessary cookies will affect your ability to use core platform features including login and payment processing.

As a jkok player, you have the following rights in relation to your personal data. To exercise any of these rights, contact jkok at [email protected] with the subject line "Data Rights Request" and your registered account username.

• Right of access: You may request a copy of the personal data jkok holds about you, together with information about how it is processed.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected or updated.
• Right to erasure ("right to be forgotten"): You may request that jkok delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to any legal retention obligations that override this right.
• Right to restriction of processing: You may request that jkok temporarily suspend processing of your personal data in certain circumstances — for example, while the accuracy of data is disputed.
• Right to data portability: You may request that jkok provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to object: You may object to processing carried out on the basis of jkok's legitimate interests where you believe your interests or rights override those of jkok.

jkok will respond to all valid data rights requests within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.

jkok will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case jkok may charge a reasonable administrative fee or decline to respond, providing written reasons for that decision.

jkok requires all players to confirm their age at registration and to submit identity documentation as part of the KYC verification process. Where jkok has reasonable grounds to believe that a registered player is under 21 years of age, the account will be immediately suspended pending verification. If verification confirms the player is under 21, the account will be permanently closed, and any balance will be handled in accordance with jkok's Terms & Conditions.

If you are a parent or guardian and believe that a minor has created a jkok account or submitted personal data to the platform without your knowledge or consent, please contact jkok support at [email protected] immediately. jkok will investigate and take appropriate action, including deletion of the minor's data, as quickly as possible.

jkok's primary platform infrastructure is operated to serve players in Bangladesh. However, some of the third-party service providers engaged by jkok — including game studios, KYC providers, and cloud infrastructure partners — may process personal data in jurisdictions outside Bangladesh.

Where personal data is transferred internationally, jkok takes steps to ensure that appropriate safeguards are in place to protect the data in transit and at the destination. These safeguards may include contractual data processing agreements that impose obligations on recipients equivalent to those described in this Privacy Policy, or reliance on the privacy practices of providers who are certified under recognised international data protection frameworks.

If you have questions about the international transfer of your personal data, including the specific safeguards applied in any particular case, contact jkok at [email protected].

jkok reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. The current version of this Policy is always available at jkok.io/privacy-policy, with the effective date displayed prominently in the page header.

Where we make material changes to this Policy — that is, changes that affect how we collect, use, or share your personal data in a way that is meaningfully different from the previous version — we will notify registered players by email at least 7 days before the changes take effect. Minor updates that do not affect the substance of our data practices (such as formatting corrections or clarifications) may be made without advance notice.

Your continued use of jkok after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you have the right to close your account and request deletion of your personal data in accordance with Section 9 of this Policy before the changes take effect.

For all data protection matters — including subject access requests, consent withdrawals, data deletion requests, or general privacy enquiries — please contact the jkok data protection team through the following channel:

We take privacy complaints seriously. If you submit a privacy concern and are not satisfied with our response, you have the right to escalate the matter through any applicable dispute resolution process or regulatory channel available in your jurisdiction.