1
Introduction
Piko (piko.bio) is a trusted online gaming platform. Protecting your privacy is one of our most important responsibilities. This Privacy Policy explains what information piko collects, why we collect it, and how your data is kept secure.
This Privacy Policy applies to the piko.bio website and all its services. By using our platform, you are considered to have read and accepted this Privacy Policy.
We believe transparency is the foundation of trust. That is why this policy is written in plain language so you can clearly understand exactly what happens with your data.
In Summary: piko never sells your data, uses it for advertising, or shares it with any unauthorized party.
2
What Information We Collect
Piko collects three types of information — what you provide directly, what is collected automatically, and what is received from third parties.
a) Information you provide directly:
- Name, date of birth, gender
- Mobile Number & Email Address
- BKash, Nagad, or Rocket number (for payment verification)
- National ID or passport (for KYC verification)
- Account password (stored in encrypted form)
- Messages and information you send through support chat
b) Automatically Collected Information:
| Data Type |
Why It Is Collected |
| IP Address |
Security Verification & Location Detection |
| Device Type & OS |
Quality of Service Enhancement |
| Browser Information |
To improve your experience |
| Login time and session details |
Security & Fraud Prevention |
| Gaming History & Transactions |
Accounting and legal compliance |
| Cookies & Tracking Data |
To deliver a personalized experience |
c) Information Received from Third Parties:
- Transaction confirmation data from payment gateways
- KYC results from identity verification services
- Risk assessments from fraud prevention services
3
How We Use Your Information
Piko uses your data only for specific, defined purposes. We never use your information beyond what has been authorized.
- Account Management: To create, verify, and manage your account.
- Payment Processing: To process deposits and withdrawals securely.
- Gaming Services: To power all gaming features including slots, casino, and betting.
- Customer Support: To resolve your questions and complaints.
- Security: To prevent fraud, money laundering, and illegal activities.
- Legal Obligations: To meet regulatory requirements.
- Service Improvement: To improve overall platform quality and user experience.
- Promotional Communications: To notify you of offers and bonuses with your consent (unsubscribe at any time).
Our commitment: Your data will never be used for third-party advertising or marketing.
4
Data Sharing Policy
Piko does not sell your data. However, it may be shared with trusted partners in limited circumstances to deliver our services:
- Payment Processors: Mobile banking services such as bKash, Nagad, and Rocket — to complete transactions.
- KYC Services: Internationally recognized identity verification companies — used solely for verification purposes.
- Game Providers: Licensed game studios — minimum data required to deliver games.
- Legal Authorities: When a valid order is received from a court or regulatory authority.
- Security Analysts: To prevent fraud and ensure cybersecurity.
Important: Before sharing data with any partner, we ensure they meet appropriate privacy standards. Our agreements include strict data protection clauses.
5
Cookie Policy
Piko uses cookies on its website. Cookies are small data files stored in your browser. We use the following types of cookies:
| Cookie Types |
Purpose |
Duration |
| Essential Cookies |
To maintain login sessions and security |
Cleared at end of session |
| Functional Cookies |
To remember language preferences and settings |
1 year |
| Analytics Cookies |
To analyze user behavior |
6 months |
| Performance Cookies |
To improve site speed and performance |
3 months |
You can disable all non-essential cookies at any time through your browser settings. Note that doing so may limit certain features of the service.
6
Security Measures
Piko protects your data using industry-leading security technology:
- TLS/SSL Encryption: All data transmissions are encrypted with 256-bit SSL.
- Password Hashing: Your password is never stored in plain text — bcrypt hashing is always used.
- Two-Factor Authentication (2FA): OTP verification for an extra layer of account security.
- Firewall & DDoS Protection: Advanced firewall protection to defend servers against cyberattacks.
- Regular Security Audits: Regular system audits conducted by third-party experts.
- Data Backup: Your data is backed up across multiple secure servers.
- Access Controls: Only authorized personnel have access to data on a need-to-know basis.
Our security practices are operated in accordance with the international ISO 27001 standard.
7
Data Retention Period
Piko does not retain your data longer than necessary. Retention periods by data type are listed below:
- Account Information: Up to 5 years after account closure (as required by law).
- Transaction History: 7 years (as required by financial regulatory guidelines).
- KYC Documents: 5 years after verification.
- Support Chat History: 2 years.
- Login & Session Logs: 1 year.
- Analytics Data: 1 year (anonymized).
After the retention period, data is permanently and securely deleted.
8
Your Rights
You have full control over your personal data at piko. You can exercise the following rights at any time:
- Right to Access: You can find out what information we hold about you.
- Right to Rectification: You may request corrections to any inaccurate or outdated information.
- Right to Erasure: You may request deletion of your data under certain circumstances.
- Right to Restrict Processing: You can opt out of having your information used for certain purposes.
- Right to Data Portability: You can receive your data in a machine-readable format.
- Right to Object: You can object to the processing of certain data.
- Right to Opt Out of Marketing: You can opt out of promotional messages at any time.
To exercise these rights, email us at [email protected] or reach out via live chat. We aim to respond within 30 days.
In some cases, legal obligations may prevent us from deleting your data. If that happens, we will explain the reasons in detail.
9
Minor Protection
Piko is strictly for adults (18+). We do not knowingly collect data from anyone under the age of 18.
- Age verification is mandatory at registration.
- If we become aware that a minor has opened an account, that account will be closed immediately.
- Any data found to belong to a minor will be deleted immediately.
- If a parent or guardian believes their child is using our platform, please contact us immediately.
For parents: Monitor your child's internet use and consider using parental control software.
10
International Data Transfers
Some of piko's partners operate internationally. Your data may be processed on servers outside Bangladesh when necessary.
- Equivalent or higher protection is guaranteed for all international data transfers.
- Data transfer agreements include strict confidentiality clauses.
- We only transfer data to countries that are GDPR-compliant or offer equivalent protection.
- Cloud storage is encrypted and accessible only to authorized personnel.
11
Privacy Policy Updates
Piko may update this Privacy Policy as needed. When changes are made, we will:
- We will publish the updated policy on this page with a revised date.
- We will notify you of significant changes via email or platform notifications.
- Continued use of the platform after any changes constitutes acceptance of the updated policy.
- If you object to the updated policy, you may request to close your account.
All changes from previous versions will always be clearly documented.