This document sets out how Poko Bet collects, processes and protects your personal data when you use our website or mobile application. We act as the controller of the personal data described herein and are responsible for its lawful handling. This policy covers all services we offer to you, including account registration, deposit and withdrawal transactions and the playing of games. It applies regardless of the device or browser you use to access our services.

We may update this Privacy Policy from time to time to reflect changes in our operations or the law. When we make a material change, we will notify you via the contact details you provided to us. The version of the policy that is live on our website at the time of your use is the one that governs your relationship with us. You are responsible for reviewing this policy periodically to stay informed of any changes.

This Privacy Policy forms part of the legal relationship between you and Poko Bet. It works alongside our Terms and Conditions and the Cookies Policy to set out the full framework for how we handle your information. By using our services, you confirm that you have read and understood the contents of this document. We expect you to treat this policy as a binding reference point for our data practices.

We distinguish between personal data and anonymous data in our operations. This policy applies only to information that identifies you or can be linked to you. Anonymous data that cannot be traced back to you falls outside the scope of this document. We process anonymous data for internal analytics and business improvement without restriction under this policy.

We share your personal data only with organisations that require access to perform specific functions for us. These include payment providers, identity verification services, fraud prevention agencies and game suppliers. We also share information with regulators and law enforcement authorities when required by law. We do not sell your personal data to third parties for their own commercial use.

Payment providers receive financial data necessary to process your deposits and withdrawals. Identity verification services receive your identification documents to confirm your identity. Fraud prevention agencies receive transaction data to detect and prevent fraudulent activity. Game suppliers receive gameplay records to deliver the services you have requested. Each recipient has strict contractual obligations to protect your data.

Some of our data processors are located outside the European Economic Area. We ensure that international transfers comply with applicable data protection laws. We use standard contractual clauses or other appropriate safeguards for these transfers. These measures provide adequate protection for your personal data when it moves across borders. We review these arrangements periodically to ensure ongoing compliance.

We require all recipients to maintain confidentiality and implement appropriate security measures. Processing agreements define the scope, purpose and duration of data handling. We audit these arrangements to ensure continued compliance with our obligations. Any breach of these obligations by a recipient is treated as a serious matter. We hold recipients accountable for their handling of your information.

We retain your personal data for as long as necessary to fulfil the purposes for which we collected it. This period is determined by legal obligations, regulatory requirements and our operational needs. We do not retain data longer than needed for these specified purposes. Once the retention period expires, we securely delete or anonymise the data.

Account data is retained for ten years after you close your account. This period satisfies our regulatory obligations to maintain records of customer interactions. Transaction records are kept for seven years following the last transaction. This duration aligns with financial services regulations and tax requirements. Verification documents follow the same retention schedule as account data.

Marketing consent data is retained until you withdraw your permission. Once consent is withdrawn, we cease processing data for marketing purposes. We may retain limited information to record your preference not to receive communications. This ensures we do not inadvertently contact you after your withdrawal request.

We review retention schedules annually to ensure they remain current with legal requirements. Changes to legislation may affect our retention periods for certain data categories. We update our records accordingly to maintain compliance with applicable laws. This ongoing review process helps us avoid unnecessary retention of your information.

We implement appropriate technical and organisational measures to protect your personal data. These include encryption, access controls and regular security assessments. We limit access to your data to authorised personnel only. All staff receive training on data protection and security best practices.

We conduct regular vulnerability assessments and penetration testing of our systems. Our security infrastructure is reviewed and updated to address emerging threats. We maintain incident response procedures to handle any security breaches promptly. You are notified promptly in the event of a significant data breach.

If you have concerns about how we handle your data, you may raise a complaint with us. We encourage you to contact us first so we can address your concerns directly. Our contacts page provides the information needed to reach our data protection team. We aim to resolve complaints at this stage wherever possible.

If we cannot resolve your complaint to your satisfaction, you have the right to complain to the relevant supervisory authority. In the United Kingdom, this is the Information Commissioner's Office. You may also seek resolution through alternative dispute resolution mechanisms where available. We provide full cooperation with any regulatory investigation.