jkpk Privacy Policy — How We Protect Your Personal Data

jkpk is an internationally operated online betting and casino platform accessible at https://jkpk.io. The platform offers sports betting (including cricket, football, and kabaddi markets), live casino games, slot games, and fishing games to registered adult players. jkpk serves a substantial player base across Bangladesh, with active users in Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

For the purposes of this Privacy Policy, jkpk is the data controller — the entity that determines the purposes and means by which your personal data is processed. Any questions about how jkpk handles your personal information should be directed to our Data Protection contact at [email protected].

jkpk collects personal data across several categories. The table below summarises the types of data we process and the reason each category is required:

jkpk does not collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) except where directly necessary for identity verification or responsible gaming purposes and only with your explicit consent.

jkpk collects personal data through the following mechanisms:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit, contacting support, or updating your account profile.
• Automated collection: Technical and usage data collected automatically when you access the jkpk platform, including via server logs, session cookies, and analytics tools.
• Third-party sources: Identity and fraud-check data received from KYC verification providers and payment processors (bKash, Nagad, Rocket, Upay) who verify transaction authenticity. jkpk only receives the minimum data needed from these sources to confirm your identity and payment method ownership.
• Game studios: Anonymised game session data (round IDs, RNG seeds, outcomes) received from certified studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi for the purpose of dispute resolution and audit trails.

jkpk uses the personal data it collects for the following specific purposes:

• Account creation and management: To register your account, authenticate your identity, and maintain your player profile throughout your time on the platform.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to reconcile transaction records accurately.
• KYC and age verification: To confirm that you are at least 21 years of age and to verify your identity in accordance with our age-restriction policy.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and unauthorised account access.
• Customer support: To respond to your enquiries, investigate complaints, and resolve disputes in a timely and accurate manner.
• Platform improvement: To analyse how players interact with the jkpk platform and to optimise the user experience, game selection, and performance.
• Marketing communications: To send you promotional offers, seasonal bonuses (such as Eid specials or BPL promotions), and platform updates — but only where you have provided explicit consent to receive such communications. You may withdraw marketing consent at any time.
• Responsible gaming: To implement and enforce deposit limits, session limits, self-exclusion periods, and other player protection tools you have activated.
• Legal and regulatory compliance: To fulfil any legal obligations applicable to jkpk as an internationally operated platform, including record-keeping, audit trail maintenance, and cooperation with lawful authority requests.

jkpk processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to fulfil the service agreement between you and jkpk — including account registration, payment processing, and game access.
• Legitimate interests: Processing that is in jkpk's or a third party's legitimate interests, where those interests are not overridden by your rights — including fraud prevention, security monitoring, and platform analytics.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including identity verification and transaction record-keeping.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and optional personalisation features. You may withdraw consent at any time without affecting the lawfulness of prior processing.

jkpk does not sell, rent, or trade your personal data. We may share personal data with the following categories of recipients, strictly on a need-to-know basis and under binding data processing agreements:

• Payment processors: bKash, Nagad, Rocket, and Upay receive transaction-specific data solely to process your deposit and withdrawal instructions.
• KYC and identity verification providers: Third-party identity verification services receive your identity documents and biometric confirmation data to complete the KYC process required before withdrawals are processed.
• Game technology providers: Certified game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) receive anonymised session identifiers to enable game delivery and dispute resolution.
• IT and hosting infrastructure: Cloud hosting and content delivery providers that process data on jkpk's behalf under strict confidentiality and security obligations.
• Legal and regulatory authorities: Where required by applicable law, court order, or lawful authority request, jkpk will disclose the minimum necessary personal data to comply with that legal obligation.

All third-party data processors engaged by jkpk are required to implement security standards consistent with or exceeding jkpk's own standards, and to process data only for the specific purposes described above.

jkpk uses cookies and similar tracking technologies to enable core platform functionality, maintain your session state, and analyse platform usage. The categories of cookies used are as follows:

• Strictly necessary cookies: Essential for the platform to function — including session authentication tokens, security tokens, and load-balancing identifiers. These cannot be disabled without impacting platform functionality.
• Functional cookies: Store your preferences such as language settings, display preferences, and last-visited game category to improve your experience on return visits.
• Analytics cookies: Collect anonymised usage data (pages visited, session duration, click paths) to help jkpk understand how players navigate the platform and where improvements can be made. No personally identifiable information is included in analytics data.
• Security cookies: Used to detect fraudulent activity, bot traffic, and suspicious login patterns to protect your account and the integrity of the platform.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to log in and use the jkpk platform. jkpk does not use third-party advertising cookies or cross-site tracking technologies for commercial advertising purposes.

jkpk implements a layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, and destruction. Our technical and organisational security measures include:

• SSL 256-bit TLS 1.3 encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data at rest, including identity documents and financial data.
• Salted cryptographic hashing (bcrypt) for all stored passwords — your password is never stored in recoverable form.
• Multi-factor authentication (OTP via registered Bangladeshi mobile number) for account login.
• Role-based access controls ensuring that jkpk staff can only access personal data relevant to their specific operational function.
• Regular security assessments, penetration testing, and vulnerability scanning of the jkpk platform infrastructure.
• Automated anomaly detection systems that flag unusual login patterns, transaction volumes, or account access attempts for immediate review.

Despite these measures, no online platform can guarantee absolute security. If you believe your jkpk account has been compromised, contact our support team immediately at [email protected] or via 24/7 live chat. jkpk will never ask for your password, PIN, or OTP via email or live chat.

jkpk retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations. Our standard retention periods are as follows:

• Active account data: Retained for the full duration of your active account relationship with jkpk.
• Post-closure account data: Retained for a maximum of 5 years following permanent account closure to satisfy legal record-keeping obligations and to enable resolution of any late-arising disputes.
• Transaction records: Retained for 7 years from the date of each transaction in accordance with standard financial record-keeping requirements.
• KYC and identity documents: Retained for the duration of the account relationship and for 5 years post-closure. Originals are deleted; only necessary reference data is retained.
• Support communications: Live chat transcripts and email correspondence are retained for 3 years from the date of the interaction.
• Marketing consent records: Retained for the period of consent and for 2 years thereafter as evidence of the consent given.

When personal data reaches the end of its applicable retention period, jkpk will securely delete or anonymise it using industry-standard data destruction methods. Anonymised statistical data (from which no individual can be identified) may be retained indefinitely for analytical purposes.

As a data subject, you hold the following rights in relation to your personal data processed by jkpk. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". jkpk will respond within 30 days of receiving a valid request, free of charge.

• Right of Access: You may request a copy of the personal data jkpk holds about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: If any personal data jkpk holds about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where processing is unlawful. This right is subject to jkpk's legal obligations to retain certain records.
• Right to Restrict Processing: You may request that jkpk restrict the processing of your data in certain circumstances — for example, while a rectification request is being resolved.
• Right to Data Portability: You may request that jkpk provide your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Object: You may object at any time to processing of your personal data based on legitimate interests, including profiling for marketing purposes. You may also withdraw marketing consent at any time via your account settings.
• Rights Related to Automated Decision-Making: Where jkpk makes decisions about your account using automated processes (such as fraud detection), you may request human review of any decision that significantly affects you.

The jkpk platform is strictly restricted to individuals who are 21 years of age or older. jkpk does not knowingly collect, process, or store personal data from any person under the age of 21. Age verification via OTP linked to a Bangladeshi mobile number is a mandatory step during the registration process.

If jkpk becomes aware that personal data has been submitted by a person under 21, the associated account will be immediately suspended and all personal data submitted will be permanently deleted within 72 hours. If you have reason to believe that a minor has registered on jkpk, please contact us immediately at [email protected]. Parents and guardians concerned about access to gambling platforms are strongly encouraged to make use of parental control software available on all major devices and browsers.

jkpk operates as an internationally hosted platform. In the course of delivering its services, personal data may be transferred to and processed in countries outside Bangladesh. These transfers are necessary to operate the platform, process payments, deliver games from certified studios, and maintain platform security.

Where personal data is transferred internationally, jkpk ensures that appropriate safeguards are in place — including contractual data processing agreements with receiving parties — to ensure that your data receives an equivalent level of protection to that which it receives within Bangladesh. jkpk does not transfer personal data to parties in countries that do not offer adequate data protection safeguards without implementing appropriate contractual or technical measures to bridge any protection gap.

jkpk reserves the right to update or modify this Privacy Policy at any time. When material changes are made, the updated policy will be published on this page with a revised effective date. Where changes are significant, jkpk will notify registered players via their registered email address or via an in-platform notification prior to the changes taking effect.

Your continued use of the jkpk platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this page periodically to stay informed about how jkpk protects your personal information. The version of the Privacy Policy currently in force is always accessible at https://jkpk.io/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to jkpk's handling of your personal data, please contact our Data Protection team using the following channels:

• Email: [email protected] with the subject line "Privacy Enquiry" or "Data Rights Request"
• Live Chat: Available 24 hours a day, 7 days a week, directly within the jkpk platform
• Response Time: jkpk aims to acknowledge all privacy-related enquiries within 2 hours and to resolve data rights requests within 30 days (BST, UTC+6)

If you are dissatisfied with jkpk's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. jkpk is committed to resolving all privacy concerns fairly and transparently, and we encourage players to reach out before escalating to external authorities so that we have the opportunity to resolve the matter directly.