Your Privacy Matters at jkpk — Full Transparency

1. Data We Collect

1.1 Registration Data

When you create a jkpk account, we collect the following personal data that you provide directly:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (to verify that you meet the 18+ age requirement)
• Residential address, including division, district, and postal code (Bangladesh)
• Mobile phone number registered in Bangladesh (used for OTP two-step verification and account recovery)
• Email address (used for account notifications and correspondence)
• Chosen username and encrypted password

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) programme, jkpk may request and collect copies of identity and address verification documents, including:

• National Identity Card (NID) — front and back
• Passport biodata page
• Driver's licence
• Proof of address (utility bill, bank statement, or government correspondence dated within the last three months)
• Proof of payment method (screenshot or statement confirming ownership of the bKash, Nagad, Rocket, or bank account used for deposits)
• Selfie photograph for liveness check, where required

KYC documents are processed by jkpk's internal compliance team and, where applicable, by our vetted third-party identity verification provider. Documents are stored securely and are not used for any purpose beyond identity and eligibility verification.

1.3 Transaction Data

jkpk records all financial transactions carried out through the Platform, including:

• Deposit and withdrawal amounts in Bangladeshi Taka (৳ BDT)
• Payment method identifiers (e.g., the registered mobile number associated with a bKash or Nagad wallet, or the last four digits of a bank account)
• Transaction timestamps in Bangladesh Standard Time (BST, UTC+6)
• Transaction reference numbers and payment provider confirmation codes
• Bonus allocations, bonus playthrough records, and promotional participation history

1.4 Gaming Activity Data

We collect detailed records of your activity on the Platform, including:

• Games played, bet amounts, wager outcomes, and session durations
• Sports betting selections, odds accepted, stake amounts, and settlement results
• Instant game activity (Win Drop, Ocean Lord) including round outcomes and win/loss records
• Responsible gaming tool usage — deposit limits set, session time limits, cooling-off periods, and self-exclusion requests

1.5 Technical and Device Data

When you access the Platform, our servers and analytics tools automatically collect certain technical data, which may include:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Referring URL and navigation path within the Platform
• Session start and end timestamps
• Cookie identifiers and similar tracking technology data (see Section 4)

1.6 Communications Data

If you contact jkpk via live chat, email, or any other support channel, we retain records of that correspondence. This includes the content of your messages, the date and time of contact, and any resolution or follow-up action taken. These records are maintained for quality assurance, dispute resolution, and compliance purposes.

2. How We Use Your Data

jkpk processes your personal data on the following lawful bases and for the following purposes:

jkpk does not use your personal data for automated decision-making that produces significant legal or similarly significant effects on you, without providing you with the opportunity to request human review of that decision.

3. Data Sharing & Third Parties

jkpk does not sell, rent, or trade your personal data to third-party advertisers or marketers under any circumstances. We share your data only where necessary, with the following categories of recipients:

3.1 Payment Service Providers

To process deposits and withdrawals, jkpk shares the minimum necessary transaction data with our payment partners — including bKash, Nagad, Rocket, Upay, BRAC Bank, and City Bank. These providers act as independent data controllers for their own services and are subject to their own privacy policies and applicable Bangladesh financial regulations.

3.2 Game Providers

Games on the jkpk Platform are powered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To enable gameplay, certain session and player identifiers are shared with the relevant game provider's Remote Game Server (RGS). Game providers are contractually prohibited from using this data for any purpose other than delivering the game session and providing technical support.

3.3 Identity Verification Providers

Where jkpk uses a third-party KYC provider to assist with identity document verification and liveness checks, your KYC documents and associated personal data are transmitted to that provider via encrypted channels. The provider processes your data solely for the purpose of identity verification on behalf of jkpk and is bound by a data processing agreement.

3.4 Legal and Regulatory Authorities

jkpk may be required by applicable law, court order, or the direction of a competent regulatory or law enforcement authority to disclose certain player data. In such cases, jkpk will disclose only the minimum data required to comply and will, where legally permissible, notify you of such a disclosure request before complying.

3.5 Corporate Transfers

In the event of a merger, acquisition, reorganisation, or sale of all or part of jkpk's business, your personal data may be transferred to the acquiring or successor entity. You will be notified of any such transfer and any material change to the data controller's identity via a prominent notice on the Platform.

4. Cookies & Tracking Technologies

jkpk uses cookies and similar tracking technologies (such as pixel tags, local storage, and session identifiers) on the Platform to enable core functionality and to improve your experience. The following categories of cookies are used:

Strictly necessary cookies cannot be disabled as they are essential to the Platform's operation. You may manage your preferences for functional, analytics, and marketing cookies via your browser settings or by contacting jkpk support. Note that disabling certain cookies may affect Platform functionality, such as the ability to stay logged in across sessions.

jkpk does not use cookies to build cross-site behavioural profiles for third-party advertising networks. Analytics data collected via cookies is aggregated and anonymised before being used for Platform improvement decisions.

5. Data Retention

jkpk retains your personal data for as long as your account is active and for a defined period thereafter, depending on the category of data and the purpose for which it was collected. The following retention periods apply as a general guide:

• Account registration data: Retained for the lifetime of the account plus a minimum of 5 years after account closure, to comply with anti-money laundering (AML) record-keeping obligations.
• KYC documents: Retained for a minimum of 5 years following the end of the business relationship, consistent with international AML best practices.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, for financial compliance and dispute resolution purposes.
• Gaming activity logs: Retained for a minimum of 3 years from the date of each session, for responsible gaming monitoring and dispute resolution.
• Customer support communications: Retained for a minimum of 2 years from the date of the last interaction.
• Cookie and technical data: Retained in accordance with the specific cookie duration stated in Section 4 above. Anonymised analytics data may be retained indefinitely.

When the applicable retention period expires, jkpk will securely delete or anonymise your personal data. Where deletion is not immediately technically feasible (for example, in backup archives), the data will be isolated and protected from further active processing until deletion is carried out.

6. Data Security Measures

jkpk takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include:

• Transport security: All data in transit is encrypted using TLS 1.2 or higher, enforced across the entire jkpk.app domain.
• Storage encryption: Sensitive personal data — including KYC documents, payment identifiers, and passwords — is encrypted at rest using AES-256 encryption.
• Password security: Passwords are never stored in plaintext. jkpk uses a strong cryptographic hashing algorithm (bcrypt with a high work factor) to store password credentials.
• Access controls: Role-based access control (RBAC) ensures that internal staff can only access player data relevant to their specific job function. All access to sensitive data stores is logged, timestamped, and subject to periodic audit.
• Two-factor authentication: OTP-based two-step verification is available for all player accounts and is strongly recommended for accounts with significant balances.
• Penetration testing: jkpk's Platform undergoes periodic security assessments, including vulnerability scanning and penetration testing by qualified security professionals.
• Incident response: jkpk maintains a data breach response plan. In the event of a confirmed data breach that poses a risk to player rights, affected players will be notified promptly in accordance with applicable data protection obligations.

Despite these measures, no system is completely immune to security threats. Players are encouraged to use a strong, unique password for their jkpk account, enable OTP verification, and contact support immediately if they suspect their account has been compromised.

7. Your Privacy Rights

As a player on the jkpk Platform, you have the following rights in relation to your personal data. jkpk will respond to all verified requests within 30 calendar days of receipt, and at no charge unless the request is manifestly unfounded or excessive:

• Right to access: You may request a copy of the personal data jkpk holds about you, along with information about how that data is being processed.
• Right to rectification: If any personal data jkpk holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Many details can be updated directly within your account settings.
• Right to erasure ("right to be forgotten"): You may request that jkpk delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other lawful basis applies), or where the data has been unlawfully processed. Note that erasure requests may be declined where jkpk is required to retain data by law (for example, under AML record-keeping obligations).
• Right to restriction of processing: You may request that jkpk restrict the processing of your data in certain circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is being considered.
• Right to data portability: Where processing is based on your consent or on the performance of a contract and is carried out by automated means, you may request that jkpk provide your data in a structured, commonly used, and machine-readable format (such as JSON or CSV), or transmit it directly to another controller where technically feasible.
• Right to object: You have the right to object to processing based on jkpk's legitimate interests, including profiling for personalised marketing purposes. jkpk will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based solely on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

8. Contact & Data Enquiries

If you have any questions, concerns, or complaints about this Privacy Policy or about the way jkpk processes your personal data, please contact us using the following channels:

• Live chat: Available 24/7 on the jkpk Platform — our fastest support channel for data-related enquiries.
• Email: [email protected] — for formal data rights requests or detailed privacy queries. We aim to respond to all email enquiries within 24 hours (Bangladesh Standard Time, UTC+6).

jkpk is committed to resolving all privacy-related concerns promptly and transparently. If you are dissatisfied with our response to a privacy complaint, you retain the right to escalate the matter to the relevant data protection or consumer protection authority in your jurisdiction.

jkpk reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, Platform features, or applicable legal requirements. When material changes are made, we will update the "Last Updated" date at the top of this Policy and, where appropriate, notify active account holders via a notice displayed on the Platform. Your continued use of the Platform following any update constitutes your acceptance of the revised Policy. We recommend reviewing this page periodically to stay informed.