jpok Privacy Policy

jpok collects personal information through several channels: directly from you during registration and account management, automatically through your use of the Platform, and from third-party service providers such as payment processors and identity verification services. The categories of data we collect are described below.

Information you provide directly:

• Registration data: Full name, date of birth, Bangladeshi mobile number, email address, and chosen username and password.
• Identity verification (KYC) documents: A copy of your National Identity Card (NID), passport, or driving licence, and in some cases a recent utility bill or bank statement for proof of address. These documents are used solely for age and identity verification and fraud prevention.
• Payment information: When you make a deposit or withdrawal, we collect details associated with your chosen payment method — such as your bKash or Nagad registered mobile number, or the last four digits and expiry date of a linked Visa or Mastercard. jpok does not store full card numbers on its own servers; card data is handled directly by our PCI-DSS compliant payment processor.
• Communications: Any messages you send to our support team via live chat, email ([email protected]), or WhatsApp, including the content of those messages and any attachments you provide.
• Responsible gaming submissions: If you use our self-exclusion, deposit limit, or time-out tools, we record your preferences and the dates on which restrictions were applied or modified.

Information collected automatically:

• Device and technical data: IP address, browser type and version, operating system, device model, screen resolution, and time zone setting.
• Usage data: Pages visited within jpok, games played, bets placed (including stake amounts, selections, and outcomes), session start and end times, and in-Platform navigation paths.
• Cookies and similar technologies: Session identifiers, preference tokens, and analytics identifiers. Full details are provided in the Cookies section of this Policy.

Information received from third parties:

• Payment providers: Transaction status updates (success, failure, pending) and fraud-screening signals from bKash, Nagad, Rocket, Upay, Visa, and Mastercard gateway processors.
• Identity verification services: Confirmation of document authenticity and age from third-party KYC verification partners.
• Fraud and risk management services: Risk scores and alerts from fraud-detection providers that help jpok identify suspicious account activity.

jpok processes your personal data only where we have a lawful basis for doing so. The primary purposes for which we use your information are set out in the table below:

jpok will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, obtaining your consent. You may withdraw consent for marketing communications at any time through the Account Settings section of the jpok dashboard or by contacting our support team.

jpok does not sell your personal data. We share your information only with the following categories of recipients, and only to the extent necessary to fulfil the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, and card gateway processors receive the minimum information required to authorise and settle your transactions. These providers operate under their own privacy policies and are independently responsible for data they hold.
• Identity verification partners: Third-party KYC and age-verification providers receive copies of the identity documents you submit. These partners are contractually bound to process your data only for verification purposes and to maintain appropriate security standards.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe may receive a pseudonymous player identifier and game-session data to deliver their games through the jpok Platform. They do not receive your name, contact details, or payment information.
• Fraud and security services: Risk management and fraud-detection providers receive device fingerprint data and transaction signals to help identify and prevent fraudulent activity.
• Analytics providers: Aggregated, anonymised usage data may be shared with analytics services to help jpok understand Platform performance. Individually identifiable data is not shared for analytics purposes.
• Legal and regulatory authorities: jpok will disclose personal data to law enforcement agencies, regulators, or courts where required to do so by applicable law, or where such disclosure is necessary to protect the rights, property, or safety of jpok, its players, or the public.

All third parties with whom jpok shares personal data are required to maintain appropriate technical and organisational security measures and to process data only in accordance with jpok's instructions and the purposes described in this Policy. jpok conducts due diligence on key data processors before engaging them and reviews these relationships periodically.

jpok uses cookies and similar technologies (including local storage tokens and session identifiers) to operate the Platform effectively, personalise your experience, and understand how the Platform is used. A cookie is a small text file placed on your device by our web server. The following categories of cookies are used on jpok:

jpok does not use third-party advertising cookies or serve behavioural advertising. Cookies set by game providers (such as Pragmatic Play or Evolution Gaming) within their embedded game frames are governed by those providers' own cookie policies.

You can manage functional and analytics cookies through the Cookie Preferences section in your Account Settings after logging in. Please note that disabling strictly necessary or fraud-prevention cookies will impair the Platform's ability to function correctly and may prevent you from logging in or placing bets.

jpok implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures in place include:

• TLS/SSL encryption: All data in transit between your browser or mobile device and jpok's servers is encrypted using Transport Layer Security (TLS) with a minimum of 256-bit encryption.
• Password hashing: Account passwords are stored as irreversible cryptographic hashes. jpok employees cannot retrieve your plaintext password and will never ask you to reveal it.
• Two-factor authentication (2FA): jpok uses OTP (One-Time Password) verification via your registered Bangladeshi mobile number for account login and for sensitive account changes such as withdrawal method updates.
• Access controls: Access to personal data within jpok's internal systems is restricted on a strict need-to-know basis. All internal access is logged and subject to periodic review.
• PCI-DSS compliance: Card payment processing is handled by PCI-DSS certified payment processors. Full card numbers are never stored on jpok's own infrastructure.
• Penetration testing: jpok conducts periodic security assessments of its Platform infrastructure to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a material risk to your rights, jpok will notify affected users without undue delay and will take prompt steps to contain and remediate the breach.

You are also responsible for the security of your jpok account. Choose a strong, unique password, never share your login credentials with any other person, and contact jpok support immediately if you believe your account has been compromised.

jpok retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

After the applicable retention period has elapsed, personal data is either permanently deleted from jpok's systems or anonymised so that it can no longer be associated with any identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

Where you request deletion of your data (see Your Rights section below) and no overriding legal obligation requires us to retain it, jpok will action the deletion request within 30 days of verification.

As a jpok player, you have the following rights with respect to your personal data. To exercise any of these rights, contact the jpok support team via live chat in your account dashboard or by emailing [email protected]. We will verify your identity before processing any request and will respond within 30 days.

• Right of access: You may request confirmation of whether jpok holds personal data about you, and if so, a copy of that data along with information about how it is processed.
• Right to rectification: If any of the personal data jpok holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Some corrections (such as name changes) require supporting documentation.
• Right to erasure: You may request that jpok delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other lawful basis applies, or where the data has been processed unlawfully. This right is subject to jpok's legal obligations to retain certain data for defined periods (see Data Retention above).
• Right to restrict processing: You may ask jpok to suspend active processing of your data — for example, while the accuracy of data you have disputed is being verified.
• Right to data portability: Where processing is based on your consent or on a contract with you, you may request a structured, machine-readable copy of the personal data you have provided to jpok, for the purpose of transferring it to another service provider.
• Right to withdraw consent: Where jpok processes your data on the basis of consent (primarily for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.
• Right to object: You may object to processing carried out on the basis of legitimate interest, including profiling for responsible gaming risk assessment. jpok will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

jpok reviews this Privacy Policy at least annually and updates it whenever there are material changes to how we collect, use, or protect personal data. When material changes are made, we will notify registered players via their registered email address or via an on-screen notification at login. The updated Policy will display a revised effective date at the top of this page.

Your continued use of the jpok Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you disagree with material changes to this Policy, you should stop using the Platform and contact our support team to arrange account closure and withdrawal of any available real-money balance.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way jpok handles your personal data, please contact us through any of the following channels:

• Email: [email protected] — please use the subject line "Privacy Query" for faster routing. Responses within 24 hours BST.
• Live Chat: Available 24 hours a day, 7 days a week, from within the jpok account dashboard after login.
• WhatsApp: +880 1700 000000, available daily from 08:00 to 24:00 Bangladesh Standard Time (BST, UTC+6).

This Privacy Policy was last reviewed and updated on 1 January 2026. All previous versions are superseded by this document.