qjok Privacy Policy

qjok collects personal data through several channels: directly from you when you register or interact with the platform, automatically as you use the Service, and from trusted third-party verification providers during the KYC process. Below is a comprehensive breakdown of the categories of personal data we collect.

1.1 Registration and Identity Data

When you create a qjok account, we collect your full legal name, date of birth, residential address in Bangladesh (including district and division), email address, and mobile phone number. This information is required to verify your identity, prevent underage gambling, and satisfy our Know Your Customer (KYC) obligations.

1.2 Identity Verification Documents

As part of our KYC process, we may collect scanned copies or photographs of government-issued identity documents including your National Identity Card (NID), passport, or birth certificate. We may also request proof of address (such as a utility bill or bank statement issued within the past three months) and proof of payment method (such as a screenshot of your bKash or Nagad wallet registration screen).

1.3 Financial and Transaction Data

We collect records of every deposit and withdrawal you make on qjok, including the transaction amount in BDT, the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, bank transfer), the transaction timestamp (Bangladesh Standard Time, UTC+6), and the transaction reference number issued by the payment provider. We do not store full payment card numbers or mobile banking PINs.

1.4 Gaming Activity Data

We maintain logs of all bets placed on the qjok platform, including the game or market selected, the stake amount, the outcome, and the resulting balance change. This data is used to calculate bonus wagering progress, investigate disputes, detect fraudulent patterns, and support responsible gaming monitoring.

1.5 Technical and Device Data

When you access qjok, we automatically collect certain technical data including your IP address, browser type and version, operating system, device type (desktop, mobile, or tablet), screen resolution, referring URL, and session duration. This information helps us optimise the platform, detect security anomalies, and comply with geographic access restrictions.

1.6 Communications Data

If you contact qjok's customer support team by email or live chat, we retain a record of that correspondence, including the content of your messages and the resolution reached. These records are kept to ensure quality of service, training purposes, and as evidence in the event of a dispute.

qjok processes your personal data on the basis of one or more of the following legal grounds: performance of a contract (i.e., operating your player account and delivering the Service), compliance with a legal obligation (KYC, anti-money-laundering record-keeping), our legitimate interests (fraud prevention, platform security, service improvement), and your consent where explicitly given (for example, for optional marketing communications).

qjok does not use your personal data for automated decision-making that produces significant legal effects without human review, except where automated screening is a mandatory component of our anti-money-laundering compliance programme. In all other circumstances, consequential decisions affecting your account — such as account suspension, withdrawal holds, or bonus voidance — involve human review.

If you have opted in to receive marketing communications from qjok (for example, notifications about BPL special odds, Eid bonus offers, or new slot title releases), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal, nor does it affect qjok's right to send you essential transactional communications (such as deposit confirmations and withdrawal notifications).

qjok does not sell, rent, or trade personal data to third parties for commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.

3.1 Payment Service Providers

To process deposits and withdrawals, qjok shares relevant transaction data with approved payment partners including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. Each partner receives only the data necessary to execute and record the specific transaction and is contractually bound to handle it securely.

3.2 Game Technology Providers

The casino games and sports data feeds available on qjok are powered by third-party technology studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited technical data (such as a pseudonymous player session token) to authenticate game sessions and calculate outcomes. They do not receive your full identity details unless required by their own regulatory obligations.

3.3 Identity Verification Services

qjok may engage specialist KYC and identity-verification providers to assist with document checks and sanctions screening. These providers process identity document data on qjok's behalf and are contractually prohibited from using it for any purpose beyond the specific verification task.

3.4 Legal and Regulatory Disclosure

qjok may be required by law, court order, or direction from a competent authority to disclose personal data. In such cases, qjok will disclose only the minimum data necessary to satisfy the legal requirement. Where legally permitted, qjok will notify the affected player before making such a disclosure.

3.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of qjok's assets, personal data held by qjok may be transferred to the acquiring entity as part of that transaction. qjok will notify affected players by email prior to any such transfer and will ensure the receiving entity is bound by data-protection obligations no less protective than those set out in this Policy.

qjok uses cookies and similar tracking technologies (such as web storage and pixel tags) to operate core platform functionality, understand how players navigate the site, and improve the overall user experience. This section explains the types of cookies we use and how you can manage them.

qjok does not deploy third-party advertising cookies or cross-site tracking pixels. You can manage or delete cookies at any time through your browser settings. Please note that disabling strictly necessary cookies may prevent you from logging into your qjok account or accessing certain platform features. Instructions for managing cookies in popular browsers are available through each browser's own help documentation.

qjok's analytical tracking uses anonymised and aggregated data only. Individual player identities are not passed to our analytics systems. No personal data is transmitted to external analytics platforms in a form that could identify you individually.

qjok retains personal data for the minimum period necessary to fulfil the purpose for which it was collected and to comply with applicable legal retention obligations. The following retention periods apply:

• Active account data (registration details, KYC documents, transaction history): Retained for the full duration of the account relationship and for a minimum of five years after account closure, to comply with anti-money-laundering record-keeping requirements.
• Gaming activity logs (bet history, game sessions): Retained for five years after the activity date for dispute resolution and regulatory compliance.
• Customer support correspondence: Retained for three years after the matter is resolved, for service-quality and legal-protection purposes.
• Technical and device logs (IP addresses, session data): Retained for twelve months for security monitoring and fraud-investigation purposes.
• Analytical data: Retained in anonymised, aggregated form indefinitely for platform improvement purposes. This data cannot be linked back to any individual player.
• Marketing consent records: Retained for three years after consent is withdrawn, as evidence that the processing was lawfully based on consent at the relevant time.

When personal data reaches the end of its retention period, qjok securely destroys or anonymises it in a manner that makes recovery impossible. Destruction records are maintained internally for audit purposes.

qjok implements a layered security architecture designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, and unlawful disclosure. Our security measures include, but are not limited to, the following:

• Transport security: All data exchanged between your device and qjok's servers is encrypted using TLS 1.2 or higher with 256-bit AES symmetric encryption, enforced via HSTS headers to prevent protocol downgrade attacks.
• Data-at-rest encryption: Sensitive fields in qjok's databases (including identity document metadata and financial records) are encrypted at rest using AES-256 block cipher.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data receive data-protection training, and access is logged and audited regularly.
• Penetration testing: qjok's platform undergoes periodic third-party security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: qjok maintains a documented data-breach response plan. In the event of a security incident that poses a risk to your personal data, qjok will notify affected players by email without undue delay and will describe the nature of the incident, the data affected, and the remediation steps taken.
• Two-factor authentication: qjok offers optional two-factor authentication (2FA) via mobile OTP for all player accounts. Enabling 2FA is strongly recommended and can be configured from your account security settings.

While qjok takes all reasonable precautions to protect your data, no electronic system is completely immune to all possible threats. You also have a role to play in keeping your account secure: use a strong, unique password for your qjok account, never share your login credentials with anyone, and contact [email protected] immediately if you suspect your account has been compromised.

As a player on the qjok platform, you hold a number of rights in respect of the personal data we hold about you. qjok is committed to facilitating the exercise of these rights promptly and without placing unnecessary barriers in your way. To exercise any of the rights described below, please contact us at [email protected] with the subject line "Privacy Rights Request" and include your registered account username and the specific right you wish to exercise.

• Right of access: You have the right to request a copy of all personal data that qjok holds about you, together with information about how it is used and with whom it is shared. qjok will respond to access requests within 30 days of receipt.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You may also update certain account details directly through your qjok profile settings.
• Right to erasure: In certain circumstances (for example, where data is no longer necessary for the purposes for which it was collected, or where you withdraw consent), you may request that qjok deletes your personal data. Please note that this right is subject to overriding legal retention obligations — for example, we cannot delete transaction records during the mandatory five-year anti-money-laundering retention period.
• Right to restrict processing: You may request that qjok restricts the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to data portability: Where processing is based on contract performance or consent and is carried out by automated means, you may request a machine-readable copy of the personal data you have provided to qjok, suitable for transfer to another service provider.
• Right to object: You have the right to object to the processing of your personal data where qjok relies on legitimate interests as the legal basis. qjok will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw marketing consent: If you have opted in to receive promotional communications from qjok, you may withdraw that consent at any time by emailing [email protected]. Withdrawal does not affect the lawfulness of prior processing.

If you have any questions, concerns, or complaints about how qjok handles your personal data, or if you wish to exercise any of your privacy rights, please contact our support team using the details below. All privacy enquiries are handled by trained staff and are treated as confidential.

Email: [email protected] (subject line: "Privacy Enquiry")
Response time: Acknowledgement within 48 hours; full response within 30 calendar days.
Support hours: 24 hours a day, 7 days a week, including Bangladesh public holidays.

qjok reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this Policy, we will publish the updated version on this page with a revised "Last updated" date, and we will notify registered players by email where the changes are significant. The version of this Policy published on this page at any given time is the version currently in force.

We encourage you to revisit this page periodically to stay informed about how qjok protects your personal data. Your continued use of the qjok platform after any Policy update constitutes your acknowledgement of the revised terms.