Privacy Policy — How kjok Collects, Uses, and Protects Your Data

This Privacy Policy ("Policy") describes how kjok ("kjok", "We", "Us", "Our") collects, uses, stores, shares, and protects the personal information of individuals ("You", "Your", "Player") who access or use the kjok platform at kjok.io and all associated services. This Policy forms part of the kjok Terms & Conditions and should be read alongside them. By registering a kjok account or using our platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

1 Overview and Scope

This Policy applies to all personal data collected by kjok in connection with the operation of the kjok online betting and casino platform, including data collected through the kjok website (kjok.io), mobile browser interfaces, customer support channels, and any other touchpoint through which you interact with kjok services.

This Policy does not apply to third-party websites, services, or applications that may be linked from or integrated with the kjok platform. kjok is not responsible for the privacy practices of any third party. You are encouraged to review the privacy policies of any external services you access independently of kjok.

kjok's platform and services are directed exclusively at adults aged 21 and above who are resident in Bangladesh. If you do not meet these criteria, you must not use the kjok platform or provide any personal data to kjok.

2 Data Controller Information

kjok acts as the data controller in respect of all personal data collected and processed through the kjok platform. As data controller, kjok determines the purposes for which and the means by which your personal data is processed. If you have any questions or concerns regarding the processing of your personal data, you may contact kjok using the details provided in Section 13 of this Policy.

kjok processes personal data in accordance with applicable data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. kjok does not process personal data in ways that are incompatible with the purposes for which it was originally collected.

3 Personal Data We Collect

kjok collects the following categories of personal data from players and prospective players:

3.1 Identity and Contact Data

• Full legal name as it appears on your official Bangladesh identity document;
• Date of birth (to verify that you are aged 21 or above);
• Residential address in Bangladesh (including district, division, and postal code);
• Mobile phone number registered to your personal SIM in Bangladesh;
• Email address used to register and communicate with kjok.

3.2 Identity Verification (KYC) Data

• Copy of your National Identity Card (NID) of Bangladesh, valid passport, or Bangladesh driving licence;
• Proof of residential address (such as a utility bill or bank statement dated within 90 days);
• Proof of payment method ownership (such as a screenshot of your registered bKash or Nagad account).

3.3 Financial and Transaction Data

• bKash, Nagad, Rocket, or Upay mobile banking account numbers used for deposits and withdrawals;
• Visa or Mastercard details where card payments are used (card numbers are not stored by kjok — they are processed directly by our certified payment processor);
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method used;
• Account balance history and wagering records in BDT (৳).

3.4 Technical and Usage Data

• IP address and approximate geographic location at time of login;
• Device type, operating system, and browser version;
• Session duration, pages visited, and features used within the kjok platform;
• Betting and gaming activity logs, including game selections, stake amounts, and outcomes.

3.5 Communications Data

• Records of communications between you and the kjok support team via email or live chat;
• Responses to surveys, promotions, or feedback requests where you voluntarily participate.

4 How We Collect Your Data

kjok collects your personal data through the following means:

• Direct collection: Data you provide when registering a kjok account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion;
• Automated collection: Technical and usage data collected automatically when you access the kjok platform, including via cookies, log files, and session tracking technologies (see Section 6);
• Third-party sources: Identity verification data provided by KYC service providers, fraud prevention databases, and payment processors where necessary to comply with legal obligations or to verify the accuracy of information you have provided.

5 Purposes and Legal Basis for Processing

The table below sets out the specific purposes for which kjok processes your personal data and the legal basis relied upon in each case:

Purpose	Data Categories Used	Legal Basis
Account registration and management	Identity, contact, KYC data	Performance of contract
Age and identity verification (21+ compliance)	Identity, KYC data	Legal obligation
Processing deposits and withdrawals in BDT	Financial, transaction data	Performance of contract
Fraud detection and anti-money-laundering checks	Identity, financial, technical data	Legal obligation / Legitimate interests
Delivering games, betting markets, and platform features	Technical, usage data	Performance of contract
Customer support and dispute resolution	Identity, communications data	Performance of contract / Legitimate interests
Sending promotional offers and bonus notifications	Identity, contact, usage data	Consent (withdrawable at any time)
Responsible gaming monitoring and intervention	Usage, transaction, communications data	Legal obligation / Legitimate interests
Platform security and abuse prevention	Technical, usage, identity data	Legitimate interests
Legal compliance and record-keeping	All categories as required	Legal obligation

Where kjok relies on your consent as the legal basis for processing (for example, sending marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent, contact kjok Support at [email protected].

6 Cookies and Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device when you access a website. kjok uses cookies and similar technologies (such as local storage and session tokens) to operate the platform correctly, remember your preferences, keep your session active while you are logged in, and understand how players interact with kjok features.

6.2 Types of Cookies Used by kjok

• Strictly Necessary Cookies: Required for the kjok platform to function. These include session authentication cookies and security tokens. They cannot be disabled without breaking core platform functionality.
• Performance and Analytics Cookies: Used to understand how players navigate the kjok platform — which pages are visited most frequently, where errors occur, and how long sessions last. This data is aggregated and anonymised.
• Functional Cookies: Used to remember your language preference, display settings, and other personalisation choices so you do not need to reconfigure them each time you visit.
• Responsible Gaming Cookies: Used to enforce deposit limits, session time limits, and cooling-off periods you have set in your kjok account settings.

6.3 Managing Cookies

You may control or disable cookies through your browser settings. Please be aware that disabling strictly necessary cookies will prevent the kjok platform from operating correctly and may result in your inability to log in or access your account. Disabling other cookie categories will not affect your ability to access kjok but may reduce personalisation and performance monitoring capabilities.

7 Data Sharing and Third Parties

kjok does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing agencies. kjok may share your personal data with the following categories of third parties only where necessary and proportionate:

• Payment Processors: bKash, Nagad, Rocket, Upay, and card payment processors receive the minimum data necessary to execute your deposit and withdrawal transactions. These processors operate under their own privacy policies and data protection obligations.
• KYC and Identity Verification Providers: Third-party KYC service providers may receive copies of identity documents submitted during account verification. These providers are contractually bound to process such data solely for the purpose of identity verification on behalf of kjok.
• Game Software Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive game session data (stake amounts, outcomes, session timestamps) necessary to operate and audit the games you play. These providers do not receive your full identity profile.
• Fraud Prevention and Security Services: kjok may share technical data (IP address, device fingerprint, transaction patterns) with fraud detection services to protect the integrity of the platform and comply with anti-money-laundering obligations.
• Legal and Regulatory Authorities: kjok may disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law or by a valid legal order. kjok will notify you of such disclosure where permitted by law.
• Corporate Successors: In the event of a merger, acquisition, or corporate restructuring, your personal data may be transferred to the successor entity, subject to the same or equivalent data protection commitments as set out in this Policy.

8 Data Retention Periods

kjok retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or accounting obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your active kjok account plus a minimum of five years following account closure, to comply with anti-money-laundering record-keeping requirements;
• KYC documents: Retained for a minimum of five years from the date of submission or from the date of account closure, whichever is later;
• Transaction and wagering records: Retained for a minimum of five years from the date of each transaction, in line with standard financial record-keeping practice;
• Support and communications records: Retained for a minimum of three years from the date of the relevant communication, to support dispute resolution;
• Technical and usage logs: Retained for a maximum of 24 months from the date of collection, after which they are anonymised or deleted;
• Marketing consent records: Retained for the duration of your kjok account plus two years following account closure or consent withdrawal, to demonstrate compliance.

When personal data is no longer required for any of the above purposes and no legal retention obligation applies, kjok will securely delete or irreversibly anonymise it.

9 Data Security Measures

kjok implements a range of technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and the kjok platform;
• Encryption at rest for all sensitive personal data stored on kjok servers, including identity documents and payment account details;
• Role-based access controls ensuring that kjok employees can only access personal data to the extent required for their specific job function;
• Regular internal security reviews and vulnerability assessments of the kjok platform infrastructure;
• Incident response procedures to detect, investigate, and report data security breaches in a timely manner;
• Staff training on data protection obligations and secure handling of personal information.

While kjok takes all reasonable and appropriate measures to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your kjok login credentials and for notifying kjok immediately if you suspect unauthorised access to your account.

10 Your Data Rights

As a kjok player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact kjok at [email protected]. kjok will respond to all valid requests within 30 calendar days:

• Right of Access: You may request a copy of all personal data kjok holds about you, along with information about how it is being used and with whom it has been shared;
• Right to Rectification: You may request correction of any personal data held by kjok that is inaccurate or incomplete;
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations that may require kjok to retain certain data for a minimum period;
• Right to Restriction of Processing: You may request that kjok restricts the processing of your data in certain circumstances, for example while a dispute regarding accuracy is being resolved;
• Right to Data Portability: You may request that kjok provides your personal data in a structured, commonly used, machine-readable format so that it may be transferred to another data controller;
• Right to Object: You may object to the processing of your personal data where kjok relies on legitimate interests as its legal basis. You may also withdraw consent to marketing communications at any time;
• Right Not to be Subject to Automated Decision-Making: Where kjok uses automated processes to make decisions about your account (for example, fraud detection flags), you have the right to request human review of any such decision that significantly affects you.

11 Children and Minors

The kjok platform is strictly restricted to adults aged 21 and above. kjok does not knowingly collect, process, or store personal data belonging to persons under the age of 21. If kjok becomes aware that personal data belonging to a minor has been collected, it will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered a kjok account or provided personal data to kjok, please notify us immediately at [email protected].

kjok implements age verification checks as part of the account registration and KYC process specifically to prevent minors from accessing the platform. Players must be aged 21 or above. For adults aged 21 and above only.

12 Changes to This Policy

kjok reserves the right to amend, update, or replace this Privacy Policy at any time. Where changes to this Policy are material — for example, where we introduce a new category of personal data processing or share data with a new category of third party — kjok will notify registered players via email to the address registered on their kjok account, or via a prominent in-platform notification, at least 14 calendar days before the change takes effect.

The revised Policy will be published on the kjok website with an updated effective date. Your continued use of the kjok platform after any amendment takes effect constitutes your acknowledgement of the revised Policy. If you do not agree to the amended Policy, you must cease using the platform and may request closure of your account by contacting [email protected].

We encourage you to review this Policy periodically so that you remain informed about how kjok is protecting your personal information. The current version of this Policy is always accessible at kjok.io/privacy-policy.

13 Contact and Complaints

If you have any questions, concerns, or complaints about how kjok collects, uses, or protects your personal data, or if you wish to exercise any of your data rights as described in Section 10, please contact the kjok Data Protection team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Response Language: English
• Response Time: Within 30 calendar days of receipt of your request
• Operating Hours: 24 hours a day, 7 days a week, including Bangladesh public holidays
• Platform: kjok.io

kjok takes all data privacy complaints seriously and will investigate each one thoroughly and in good faith. If you remain unsatisfied with kjok's response to a privacy complaint, you may have the right to escalate the matter to an appropriate authority in your jurisdiction.