Data Protection & Privacy
Privacy Policy — How popok Collects, Uses, and Protects Your Personal Data
Your privacy matters to popok. This Privacy Policy explains in plain, formal English exactly what personal data we collect from players in Bangladesh, why we collect it, how we use and protect it, and what rights you hold over your own information.
Contents
- 1. Overview
- 2. Data Controller
- 3. Data We Collect
- 4. How We Collect Data
- 5. Purposes of Processing
- 6. Legal Basis
- 7. Data Sharing
- 8. Data Retention
- 9. Security Measures
- 10. Cookies & Tracking
- 11. Your Rights
- 12. Protection of Minors
- 13. International Transfers
- 14. Policy Changes
- 15. Contact Us
Last updated: 1 Jan 2026
GDPR-aligned practices
1 Overview
popok is Bangladesh's trusted online betting and casino entertainment platform. In the course of providing our services — including cricket sports betting, live casino games, slot machine entertainment, crash games, and associated promotional offers — we necessarily collect and process personal data relating to our players and platform visitors.
We take this responsibility seriously. popok is committed to handling personal data with transparency, care, and in a manner that respects the privacy rights of every individual whose information we process. This Privacy Policy sets out our data practices in full, written in clear formal English so that every popok player understands exactly what happens to their information.
This policy covers all personal data processed in connection with:
- Account registration and identity verification (KYC)
- Deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banks
- Sports betting activity (cricket, football, kabaddi, and other markets)
- Casino and slot game activity on the popok platform
- Bonus and promotional campaign participation
- Customer support and dispute resolution interactions
- Website visits and browsing behaviour at popok.pro
2 Data Controller
For the purposes of this Privacy Policy, the data controller responsible for your personal data is the entity operating the popok platform. References to "popok", "we", "us", or "our" throughout this policy refer to the data controller in its capacity as the operator of the popok.pro platform and all associated services.
If you wish to exercise any of your privacy rights, raise a data-related concern, or request information about how your personal data is handled, you may contact our designated Data Protection contact at the email address provided in Section 15 of this policy. We aim to respond to all privacy-related enquiries within five business days.
3 Data We Collect
popok collects several categories of personal data in connection with the operation of our platform. The specific data we collect depends on how you interact with popok and what services you use. The categories are as follows:
3.1 Identity and Registration Data
When you create a popok account, we collect: your full legal name, date of birth, residential address (including division, district, upazila, and postal code in Bangladesh), mobile phone number, and email address. This information is required to create and maintain your account.
3.2 Identity Verification (KYC) Data
As part of our Know Your Customer process, we may collect copies or images of identity documents you submit to verify your account. This may include your National Identity Card (NID) issued by the Bangladesh Election Commission, your passport, your birth certificate, and proof of residential address such as a recent utility bill or bank statement. We may also collect a photograph or selfie for liveness verification purposes.
3.3 Financial and Transaction Data
We collect data relating to your deposits and withdrawals, including the payment method used (such as your bKash mobile number, Nagad mobile number, or bank account details), transaction amounts in BDT, transaction timestamps, and payment reference numbers. We do not store full bank card numbers or mobile banking PINs — these are handled exclusively by the relevant payment service provider.
3.4 Gaming Activity Data
We maintain records of your betting and gaming activity on the popok platform, including bet amounts, game selections, odds accepted, wager outcomes, bonus usage, session durations, and game provider interactions. This data is necessary for account management, dispute resolution, bonus calculation, and responsible gaming monitoring.
3.5 Technical and Device Data
When you access popok.pro, our servers automatically collect certain technical information including your IP address, browser type and version, operating system, device type (mobile or desktop), screen resolution, referring URL, and time zone setting. This data is used for security monitoring, fraud prevention, and platform optimisation.
3.6 Communication Data
If you contact our support team, we retain records of those communications — including live chat transcripts, email correspondence, and any attachments you submit — for quality assurance, training, dispute resolution, and regulatory compliance purposes.
| Data Category | Examples | Required? |
|---|---|---|
| Identity & Registration | Full name, date of birth, address, phone, email | Mandatory |
| KYC Documents | NID, passport, address proof, selfie | Mandatory for withdrawals |
| Financial & Transaction | bKash number, deposit amounts, withdrawal history | Mandatory for payments |
| Gaming Activity | Bets placed, game sessions, bonus usage | Automatic |
| Technical & Device | IP address, browser, OS, device type | Automatic |
| Communication | Support chat logs, email history | When contacting support |
4 How We Collect Your Data
popok collects personal data through several distinct channels depending on the nature of your interaction with the platform:
- Directly from you: When you complete the account registration form, submit KYC documents, make a deposit or withdrawal request, contact support, or participate in a promotion.
- Automatically: Through our servers, cookies, and analytics tools as you browse popok.pro or use the platform — see Section 10 for our full Cookies policy.
- From payment partners: Our payment processing partners (including bKash, Nagad, and Rocket) may share transaction confirmation data with us to reconcile your account balance.
- From identity verification services: Where we engage a third-party KYC service provider to assist with document verification, that provider may share the outcome and associated data with us.
- From fraud prevention tools: Our fraud detection systems may gather behavioural signals (such as login patterns, device fingerprints, and session behaviour) to identify and prevent fraudulent activity on your account.
5 Purposes of Processing
popok processes your personal data for the following specific purposes. We do not process personal data for any purpose not listed here without first obtaining your explicit consent or being required to do so by applicable law.
- Account creation and management: To create, maintain, and administer your popok player account, including verifying your eligibility to register.
- Identity verification and KYC compliance: To confirm your identity, verify your age (minimum 21 years), and comply with our anti-money laundering obligations.
- Payment processing: To process your BDT deposits and withdrawals via bKash, Nagad, Rocket, and partner banking channels accurately and securely.
- Service delivery: To provide you with access to cricket betting, live casino games, slots, crash games, and all other popok products.
- Bonus and promotional administration: To calculate, credit, and manage bonus entitlements, wagering requirements, and promotional campaign participation.
- Responsible gaming monitoring: To track your gaming behaviour against any deposit limits, loss limits, or cooling-off periods you have set, and to identify potential signs of problem gambling.
- Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, account takeover attempts, and any misuse of the popok platform.
- Legal and regulatory compliance: To meet our obligations under applicable law, including cooperation with any lawful request from Bangladeshi authorities.
- Customer support: To investigate and resolve your queries, complaints, and disputes promptly and accurately.
- Platform improvement: To analyse aggregated usage data and improve the performance, features, and content of the popok platform.
- Marketing (with consent only): To send you promotional communications about new games, offers, and platform features — only where you have actively opted in and only via the communication channel you have authorised.
6 Legal Basis for Processing
popok processes your personal data on one or more of the following legal bases depending on the specific purpose of the processing activity:
- Contract performance: Processing that is necessary to fulfil the contract between you and popok — including account management, payment processing, and game access.
- Legal obligation: Processing required to comply with applicable law, including KYC identity verification, anti-money laundering record-keeping, and responding to lawful authority requests.
- Legitimate interests: Processing necessary for popok's legitimate business interests, including security monitoring, fraud prevention, platform analytics, and dispute resolution — provided those interests are not overridden by your fundamental privacy rights.
- Consent: Processing that is based on your freely given, specific, and informed consent — primarily for direct marketing communications. You may withdraw this consent at any time by contacting [email protected], and withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
7 Data Sharing and Disclosure
popok does not sell your personal data to any third party under any circumstances. We may share your data with third parties only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.
7.1 Payment Service Providers
We share relevant transaction data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank solely for the purpose of processing your deposits and withdrawals. These providers are contractually bound to handle your data securely and only for the purposes we specify.
7.2 Identity Verification Partners
Where we use a third-party KYC service provider to assist with the verification of identity documents, we share the relevant documents and data with that provider solely for that purpose. Results are returned to popok and the provider does not retain or use your data for any other purpose.
7.3 Game Content Providers
Game suppliers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe receive a player session token and game result data necessary to run the game in your browser. They do not receive your full name, address, payment details, or NID data.
7.4 Fraud Prevention and Security Services
We may share technical data (including IP address, device fingerprint, and session behaviour data) with fraud prevention service providers to identify and block fraudulent activity. These providers process data as data processors on our behalf under strict contractual obligations.
7.5 Legal and Regulatory Disclosure
We may disclose your personal data where required to do so by applicable law, court order, or a lawful request from a competent Bangladeshi authority or international law enforcement body. In such cases we will disclose only the minimum data required to satisfy the request.
8 Data Retention
popok retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account & registration data | Duration of account plus 5 years after closure | Legal obligation, dispute resolution |
| KYC documents | Duration of account plus 5 years after closure | Anti-money laundering compliance |
| Financial transaction records | 7 years from transaction date | Financial record-keeping obligations |
| Gaming activity logs | 3 years from last activity | Responsible gaming, dispute resolution |
| Customer support records | 3 years from last interaction | Quality assurance, dispute resolution |
| Technical & device logs | 90 days rolling | Security monitoring, fraud prevention |
| Marketing consent records | Until consent is withdrawn plus 1 year | Demonstrating lawful basis for marketing |
When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Anonymised aggregated data may be retained indefinitely for statistical and platform improvement purposes.
9 Security Measures
popok implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes the following key controls:
- SSL/TLS encryption: All data transmitted between your browser and the popok platform is encrypted using industry-standard SSL/TLS protocols. The padlock indicator in your browser confirms this connection is secure.
- Encrypted data storage: Sensitive data fields, including payment account identifiers and KYC document images, are stored in encrypted form on our servers. Encryption keys are managed separately from the data they protect.
- Access controls: Access to personal data within popok's internal systems is restricted on a strict need-to-know basis. Staff are granted the minimum level of data access required for their specific role. All access is logged and audited.
- Two-factor authentication: We support two-factor authentication for player accounts and enforce it for all internal staff accounts with access to player data.
- Regular security assessments: Our platform undergoes periodic security reviews to identify and remediate potential vulnerabilities before they can be exploited.
- Incident response: popok maintains a formal data breach response procedure. In the event of a breach affecting player data, we will notify affected players and take all appropriate remedial steps as quickly as practicable.
Despite these measures, no online platform can guarantee absolute security. You are responsible for keeping your own account credentials confidential and for notifying us immediately at [email protected] if you suspect any unauthorised access to your popok account.
10 Cookies and Tracking Technologies
popok uses cookies and similar tracking technologies on the popok.pro website. A cookie is a small text file placed on your device by a website you visit. It is used to remember information about your visit and to distinguish you from other users.
10.1 Types of Cookies We Use
- Essential cookies: These are strictly necessary for the platform to function. They enable core functionality such as maintaining your logged-in session, remembering your language preference, and keeping your account balance updated. These cookies cannot be disabled without breaking core platform functions.
- Analytics cookies: We use analytics tools to understand how players use the popok platform — which pages are visited most, how long sessions last, and which features are used. This data is collected in aggregated, anonymised form and is used solely to improve platform performance and user experience.
- Security cookies: These cookies support our fraud detection and security monitoring systems. They help us identify unusual login patterns, detect account takeover attempts, and enforce session timeouts.
- Preference cookies: These remember your platform preferences such as your chosen payment method, display settings, and notification preferences, so you do not have to reconfigure them on every visit.
10.2 Managing Cookies
You may control non-essential cookies through your browser settings. Most modern browsers allow you to refuse all cookies, accept only certain types, or delete existing cookies at any time. Please note that disabling certain cookies may limit the functionality available to you on the popok platform. Essential cookies cannot be disabled without affecting your ability to use the platform.
11 Your Privacy Rights
As a popok player, you have a number of rights in relation to your personal data. popok respects and actively facilitates the exercise of these rights. To exercise any of the rights below, please contact us at the email address provided in Section 15, quoting your popok account username and the specific right you wish to exercise.
Right of Access
You may request a copy of all personal data popok holds about you. We will provide this within 30 days in a clear, readable format.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it promptly.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Right to Restrict Processing
You may request that we pause processing your data in certain circumstances — for example, while the accuracy of the data is being contested.
Right to Data Portability
You may request your personal data in a structured, machine-readable format so that it can be transferred to another service provider of your choice.
Right to Object
You may object to processing carried out on the basis of our legitimate interests, including any direct marketing communications you did not intend to opt into.
12 Protection of Minors
The popok platform is strictly for adults aged 21 and over. popok does not knowingly collect personal data from anyone under the age of 21. Our registration process includes an age declaration and is backed by our KYC identity verification programme, which requires players to confirm their date of birth using a government-issued document.
If we discover — through our own monitoring or through a report — that a player account has been registered by or on behalf of a person under the age of 21, we will close that account immediately. Any real-money balance held in that account will be handled in accordance with our Terms & Conditions and applicable law. All personal data associated with the under-age account will be securely deleted.
If you are a parent or guardian and believe that your child has created a popok account without your knowledge, please contact us immediately at [email protected]. We will investigate and act promptly.
13 International Data Transfers
popok's platform is designed primarily for the Bangladesh market and the majority of data processing takes place within or in connection with Bangladesh-based systems and service providers. However, certain technology infrastructure components — including server hosting, game delivery networks, and fraud prevention tools — may involve the transfer of data to servers or processors located outside of Bangladesh.
Where such transfers occur, popok takes steps to ensure that an adequate level of data protection is maintained. This includes implementing contractual safeguards with all international data processors, requiring them to handle your data with standards no less protective than those described in this Privacy Policy.
Your personal data will not be transferred to any international third party for commercial exploitation, sale, or use beyond the specific purpose for which the transfer is made.
14 Changes to This Privacy Policy
popok reserves the right to update or modify this Privacy Policy at any time. Where changes are material — meaning they meaningfully affect how we collect, use, or share your personal data, or reduce your privacy rights in any way — we will notify all registered players via their registered email address at least 14 days before the changes take effect.
For non-material changes, such as editorial corrections, structural reorganisation without substantive change, or the addition of clarifying language, we may update this page without individual notice. The effective date shown at the top of this policy and in the Table of Contents will always reflect the date of the most recent revision.
We encourage you to review this Privacy Policy periodically to stay informed of how popok is protecting your information. Your continued use of the popok platform after any revised version of this policy takes effect constitutes your acceptance of the changes.
15 Contact Us
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or wish to raise a concern about how popok handles your personal data, please contact us using the details below. All privacy enquiries will be acknowledged within two business days and fully responded to within 30 days.
Data Privacy Contact — popok
Email: [email protected]
Support Hours: 24/7 Live Chat & Email (BST, UTC+6)
Response Time: Within 5 business days for standard queries; within 30 days for formal data subject requests
Please include your popok account username, the nature of your request, and any relevant reference numbers in your correspondence so we can locate your records and respond accurately. All privacy communications must be made in English.
Why Trust popok
Six Pillars of popok Data Protection
Our commitment to your privacy goes beyond a policy document. These six principles are embedded in how the popok platform is designed, operated, and monitored every day.
SSL Encryption by Default
Every connection between your browser and popok.pro is protected by SSL/TLS encryption. Your personal data, payment details, and account credentials are never transmitted in plain text — the padlock in your browser confirms this at all times.
No Data Selling — Ever
popok does not sell, rent, or trade your personal data to advertisers, data brokers, or any third party for commercial gain. The data you share with us stays within the popok ecosystem and its carefully vetted service providers, bound by strict contractual obligations.
Minimal Data Collection
We collect only the data that is genuinely necessary to deliver our services safely and compliantly. If a piece of information is not required for account management, payment processing, KYC, or security purposes, we do not ask for it.
Verified KYC Process
Our identity verification process protects both you and the wider player community. By confirming that every account holder is who they say they are, we prevent fraud, protect your funds, and ensure the platform remains a fair environment for all popok players.
Full Control Over Your Data
You have the right to access, correct, export, restrict, and in many cases delete the personal data popok holds about you. These rights can be exercised at any time by contacting our support team — no bureaucratic barriers, no unreasonable delays.
Transparent Policy Updates
When our Privacy Policy changes in a way that materially affects your rights, we notify you by email at least 14 days in advance. We do not make silent or retroactive changes that reduce your privacy protections without giving you adequate notice and opportunity to respond.
Ready to Play Safely?
Your Data Is Protected — Now Enjoy the Platform
With your privacy secured by SSL encryption, strict KYC, and a no-data-selling commitment, you can focus on what matters — cricket betting, live casino, and 500+ slots, all in BDT via bKash and Nagad.