playtok Privacy Policy

1. Data We Collect

playtok collects personal data from players through several mechanisms: directly during registration and account usage, automatically through your interaction with the Platform, and from trusted third parties as part of our verification and fraud-prevention obligations. The categories of data we collect include the following:

Identity & Contact Information

• Full legal name, date of birth, and gender (collected at registration).
• Email address and mobile phone number (used for account communications and two-factor authentication).
• Residential address and postcode (collected as part of KYC verification).

Identity Verification Documents

• Copies of government-issued photo identification (National Identity Card, passport, or driving licence).
• Proof of address documents such as utility bills or bank statements dated within the last three months.
• Selfie or live photograph where required for enhanced identity verification checks.

Financial Information

• Deposit and withdrawal transaction records, including amounts, dates, timestamps, and payment method identifiers.
• Mobile financial service account references (e.g., bKash, Nagad, Rocket, Upay wallet numbers) used for transactions — stored in tokenised format only.
• Bank account details where bank transfer is selected as the payment method.
• Card type and last four digits where Visa or Mastercard is used — full card numbers are never stored on our systems.

Gameplay & Betting Data

• Records of all bets placed, games played, wagers staked, outcomes received, and winnings credited to your account.
• Session durations, login timestamps, and gameplay frequency data used for responsible gaming monitoring.
• Bonus participation history, promotional opt-ins, and wagering progress records.

Technical & Device Data

• IP address, device type, operating system, browser type and version, and screen resolution.
• Geolocation data at the city or region level, derived from your IP address, to support fraud prevention and regulatory compliance.
• Cookie identifiers, session tokens, and similar technical identifiers — described in detail in the Cookies section below.

Communications Data

• Content of live chat conversations and email exchanges with our support team, retained for quality assurance and dispute resolution purposes.
• Records of promotional communications you have received, opened, or engaged with.

2. How We Use Your Data

playtok processes personal data only for defined, legitimate purposes. We do not use your data for purposes that are incompatible with the reason it was originally collected. The primary purposes for which we process your data are set out in the table below:

playtok does not use automated decision-making processes that produce legal or similarly significant effects on players without human review. Where automated tools are used for fraud detection or responsible gaming flagging, flagged cases are reviewed by a human compliance team member before any account action is taken.

3. Legal Basis for Processing

Every instance of personal data processing carried out by playtok rests on one of the following legal bases. We will specify the relevant basis on request for any specific processing activity.

Contractual Necessity

Processing your identity, contact, financial, and gameplay data is necessary for us to fulfil the contract we hold with you as a registered player. Without this processing, we would be unable to provide account services, accept deposits, pay winnings, or deliver customer support.

Legal Obligation

Certain processing activities — particularly KYC identity verification, transaction record-keeping, and anti-money-laundering checks — are required by applicable laws and regulations. We are obligated to carry out this processing regardless of your preferences, and we cannot offer you the ability to opt out of it while you remain a registered player on the Platform.

Legitimate Interests

playtok processes certain categories of technical, device, and usage data on the basis of its legitimate interests in operating a secure, fair, and commercially viable platform. This includes fraud prevention analytics, session security monitoring, and internal performance reporting. We have assessed that our legitimate interests in these activities are not overridden by your fundamental privacy rights.

Consent

Where we rely on consent as a legal basis — primarily for sending promotional emails, SMS notifications, and personalised marketing communications — we will obtain your explicit consent at the point of registration or opt-in. You may withdraw your consent at any time by adjusting your communication preferences in your account settings, or by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

4. Data Sharing & Third Parties

playtok does not sell, lease, or trade your personal data to third parties for their independent marketing purposes. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

Game Technology Providers

To deliver casino and sportsbook content, playtok integrates with third-party game studios and platform providers including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi. These providers receive limited technical session data necessary to operate game sessions on your behalf. They are contractually prohibited from using this data for any purpose other than game delivery and integrity monitoring.

Payment Processors

Transaction processing is handled by third-party payment service providers including the operators of bKash, Nagad, Rocket, Upay, and card network processors. These providers receive the payment data necessary to execute your deposit or withdrawal instruction. All payment partners are required to maintain industry-standard data security practices and are prohibited from retaining your data beyond the period required for transaction processing and regulatory record-keeping.

Identity Verification Services

For KYC and enhanced due-diligence checks, playtok may share identity document images and personal details with accredited third-party identity verification service providers. These providers process your data solely for the purpose of verifying your identity and returning a verification result to playtok. They do not retain your documents beyond the period required for verification.

Fraud Prevention & Security Partners

playtok uses specialised fraud detection and cybersecurity service providers who process technical and behavioural data to detect and prevent fraudulent activity, multi-accounting, and platform abuse. Data shared with these providers is pseudonymised wherever feasible.

Legal & Regulatory Disclosure

playtok may disclose personal data to law enforcement agencies, financial intelligence units, or other public authorities where we are legally compelled to do so by a valid court order, subpoena, or equivalent legal instrument. In such cases, we will disclose only the specific data requested and will inform the affected player where we are legally permitted to do so.

Business Transfers

In the event that playtok undergoes a corporate restructuring, merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to the privacy practices that would affect your data.

5. Cookies & Tracking Technologies

playtok uses cookies and similar tracking technologies to operate the Platform, maintain your session, understand how players use our services, and improve the overall experience. A cookie is a small text file stored on your device by your web browser when you visit a website.

Types of Cookies We Use

Managing Cookies

You can control cookie behaviour through your browser settings. Most modern browsers allow you to block or delete cookies, set preferences for specific sites, and receive notifications when a cookie is set. Please note that disabling strictly necessary cookies will impair the functionality of the playtok platform and may prevent you from logging in or completing transactions.

Do Not Track

Some browsers transmit a "Do Not Track" (DNT) signal to websites. playtok acknowledges DNT signals and, where technically feasible, suppresses non-essential analytical data collection for sessions where a DNT header is detected. Strictly necessary cookies are not affected by DNT signals.

6. Data Retention

playtok retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. When a retention period expires, data is securely deleted or irreversibly anonymised.

Active Account Data

While your account remains active, playtok retains all account, identity, financial, and gameplay data necessary to deliver services to you and to maintain the integrity of your account history. You may request a full export of your personal data at any time while your account is active.

Closed Account Data

Following the closure of a player account — whether initiated by the player, by playtok, or through a self-exclusion request — we are required to retain identity verification records, transaction histories, and KYC documentation for a period of no less than five (5) years from the date of closure. This retention period exists to satisfy anti-money-laundering record-keeping obligations and to support any regulatory enquiries that may arise after account closure.

Support Communications

Records of customer support interactions, including live chat transcripts and email correspondence, are retained for a period of three (3) years from the date of the interaction, after which they are deleted unless they form part of an ongoing dispute or regulatory investigation.

Analytical & Technical Data

Anonymised analytical data used for platform performance monitoring is retained indefinitely in aggregate form, as it no longer constitutes personal data once anonymised. Raw technical logs containing identifiable information such as IP addresses are retained for a maximum of ninety (90) days before being purged or anonymised.

7. Your Rights & Choices

As a player whose personal data is processed by playtok, you hold the following rights in relation to your information. To exercise any of these rights, contact the playtok support team and clearly specify the right you wish to exercise and the data concerned. We will respond within 30 calendar days.

Right of Access

You have the right to request a copy of the personal data we hold about you, along with information about how it is processed, the legal basis for processing, and any third parties with whom it has been shared. We will provide this information in a structured, commonly used, and machine-readable format.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For identity data, corrections may require supporting documentation to verify the accuracy of the updated information.

Right to Erasure

You may request the deletion of your personal data in circumstances where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you believe the processing is unlawful. Please note that playtok cannot fulfil erasure requests where data must be retained to comply with legal obligations, such as anti-money-laundering record-keeping requirements.

Right to Restriction of Processing

In certain circumstances — for example, while a dispute about the accuracy of your data is being resolved — you may request that we restrict our processing of your personal data to storage only, without any further use.

Right to Data Portability

Where processing is based on consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a portable format and to request that it be transferred to another data controller where technically feasible.

Right to Object to Marketing

You have the right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of an objection, playtok will cease all marketing communications directed at your account within five (5) business days. To opt out, adjust your preferences in account settings or contact the support team at: [email protected]

8. Data Security

playtok employs a multi-layered approach to data security, combining technical controls, organisational policies, and ongoing staff training to protect personal data against unauthorised access, loss, alteration, and disclosure.

Technical Safeguards

• All data in transit between your browser and playtok.pro is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained with a recognised certificate authority.
• Passwords are stored using strong cryptographic hashing algorithms with per-user salting. Plain-text passwords are never stored or accessible to any staff member.
• Payment data is tokenised at the point of entry. Full card numbers, bKash wallet credentials, and Nagad PINs are never stored within playtok's own systems.
• Access to production systems containing personal data is restricted to authorised personnel only, using role-based access controls and multi-factor authentication.
• Our infrastructure is monitored continuously for anomalous activity. Security patches are applied on a defined schedule to minimise exposure to known vulnerabilities.

Organisational Safeguards

• All playtok staff members who handle personal data receive mandatory data protection training as part of their onboarding and on an annual basis thereafter.
• Access to personal data is governed by a strict need-to-know principle. Staff members access only the data categories required for their specific operational role.
• Third-party vendors who process personal data on behalf of playtok are subject to contractual data processing agreements that impose equivalent security obligations.

Data Breach Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, playtok will notify affected individuals without undue delay after becoming aware of the breach. Notifications will be sent to the email address registered on your account and will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps playtok has taken in response.

Contact for Privacy Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by playtok, please contact our support team. The support email address is: [email protected] (plain text — not a clickable link). Privacy and data protection enquiries are treated as high-priority and will receive a response within 5 business days.