potoja Privacy Policy
At potoja, protecting your personal data is a fundamental part of how we operate. This Privacy Policy explains exactly what information we collect when you use potoja.net, why we collect it, how we use and store it, and what rights you hold over your own data. We are committed to transparency, security, and treating your information with the respect it deserves.
How potoja Keeps Your Data Safe
All data transmitted between your device and potoja.net is protected by industry-standard SSL (Secure Socket Layer) encryption. This ensures that your personal details, payment information, and login credentials cannot be intercepted in transit.
Your personal data is stored on secure servers with restricted access controls. potoja applies technical and organisational measures to guard against unauthorised access, accidental loss, or destruction of any data we hold about you.
potoja does not sell, rent, or trade your personal data to third-party marketers. We share data only where strictly necessary to deliver the Platform's services, comply with legal obligations, or prevent fraud — never for commercial gain by third parties.
You have the right to access, correct, and request deletion of the personal data potoja holds about you. We provide a straightforward process for exercising these rights via our support team, and we respond to all verified requests promptly.
potoja uses cookies and similar technologies only for legitimate operational purposes: keeping you logged in, remembering your preferences, analysing Platform performance, and preventing fraud. You can manage cookie preferences via your browser settings.
Promotional communications from potoja are sent only to players who have opted in. You may withdraw your consent to receive marketing emails or SMS messages at any time by updating your account preferences or contacting support at [email protected].
1. Information We Collect
potoja collects personal data from you in order to provide, maintain, and improve the services available on potoja.net. The categories of personal data we collect are described in detail below. We collect only the data that is necessary for the purposes set out in this Privacy Policy and do not retain it for longer than is required.
1.1 Information You Provide Directly
When you register an account on potoja.net, you provide us with certain personal information including:
- Your full legal name as it appears on official government-issued identification.
- Your date of birth (for age verification purposes — potoja operates a strict 18+ policy).
- Your residential address, including city (for example, Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi) and postal details.
- Your email address and mobile phone number.
- A username and password chosen by you at the point of registration.
- Payment account information relevant to your chosen deposit method, including mobile financial service identifiers for bKash, Nagad, Rocket, or Upay, or card details for Visa or Mastercard transactions.
You may also provide us with additional information when you communicate with our support team, submit a complaint, respond to a survey, or participate in any promotional activity conducted by potoja.
1.2 Information We Collect Automatically
When you access and use potoja.net, our systems automatically collect certain technical and behavioural data, including:
- Your IP address and approximate geographic location (city or region level).
- Device type, operating system, and browser version.
- Pages visited on potoja.net, time spent on each page, and navigation path through the Platform.
- Referring URL (the page or link that brought you to potoja.net).
- Bet and game activity, including bet amounts, game selections, outcomes, and session duration.
- Login timestamps and account activity logs.
1.3 Identity Verification Documents
As part of our Know Your Customer (KYC) and anti-money laundering obligations, we may collect copies of identity documents including your National Identity Card (NID), passport, driving licence, or utility bills. These documents are used solely for verification purposes and are handled with the highest level of security and confidentiality.
Minimum Data Principle: potoja collects only the personal data that is strictly necessary for the purposes described in this Policy. Where we require data beyond the registration essentials — for example, source-of-funds documentation — we will explain the reason for the request at the time it is made.
1.4 Data from Third Parties
In certain circumstances, potoja may receive personal data about you from third-party sources. This includes identity verification data from KYC service providers, fraud detection signals from payment processors, and regulatory screening results from compliance databases. We use such third-party data only to the extent necessary to fulfil our legal and contractual obligations.
2. How We Use Your Data
potoja uses the personal data we collect for the following purposes. In each case, we process your data only to the extent required and in a manner consistent with the legal basis described in Section 3 of this Privacy Policy.
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and administering your potoja account, including processing your registration, verifying your identity, and managing account settings. |
| Service Delivery | Processing deposits and withdrawals via bKash, Nagad, Rocket, Visa, Mastercard, and bank transfer; settling bets and game outcomes; crediting bonuses and promotional rewards. |
| Age and Identity Verification | Confirming that you meet the 18+ age requirement and that your identity matches the information provided at registration, in compliance with our responsible gaming obligations. |
| Fraud and Security | Detecting, investigating, and preventing fraudulent transactions, unauthorised account access, money laundering, and other illegal or prohibited activities on the Platform. |
| Legal Compliance | Meeting our obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), data protection, and responsible gaming regulations. |
| Customer Support | Responding to your support enquiries, processing complaints, and communicating with you about your account status, withdrawals, or Platform changes. |
| Platform Improvement | Analysing usage patterns to improve the design, functionality, and performance of potoja.net, including personalising your experience where you have consented to this. |
| Marketing Communications | Sending promotional offers, bonus notifications, and Platform updates to players who have opted in to receive marketing communications. You may opt out at any time. |
| Responsible Gaming | Monitoring betting patterns to identify signs of problem gambling behaviour and fulfilling our duty of care obligations, including applying self-exclusion measures where requested. |
No Automated Decision-Making: potoja does not use fully automated decision-making processes that produce legal or similarly significant effects on you without human oversight. Where automated tools are used (for example, fraud detection systems), a human review is conducted before any account action is taken based on those signals.
3. Legal Basis for Processing
potoja processes your personal data only where a legitimate legal basis exists for doing so. The primary legal bases on which we rely are described below:
- Contractual Necessity: Processing your registration data, managing your account, processing deposits and withdrawals, and settling bets are all necessary to perform the contract between you and potoja (the Terms and Conditions you agreed to at registration). Without this processing, we could not provide the services you have signed up to receive.
- Legal Obligation: Certain processing activities — particularly identity verification, KYC checks, AML screening, and retaining financial transaction records — are required by law. potoja is obligated to carry out these activities regardless of consent.
- Legitimate Interests: We process certain technical and behavioural data (such as IP address, device data, and usage logs) based on our legitimate interest in maintaining Platform security, preventing fraud, and improving our services. We apply a balancing test to ensure that our legitimate interests do not override your privacy rights.
- Consent: For marketing communications — including promotional emails, SMS messages about bonuses, and personalised offers — we rely on your explicit consent given at the time of registration or subsequently. You have the right to withdraw this consent at any time by contacting [email protected] or updating your account notification preferences.
Where we rely on consent as our legal basis, withdrawal of that consent will not affect the lawfulness of any processing that took place before the withdrawal. It will, however, mean that we cease the specific processing activity (such as sending marketing emails) going forward.
Processing for Multiple Purposes: In some cases, the same data is processed under more than one legal basis. For example, your financial transaction records are processed both under contractual necessity (to settle your bets) and legal obligation (to meet AML record-keeping requirements). This is normal and does not represent any inconsistency in how we apply this Policy.
4. Data Sharing and Disclosure
potoja does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the specified purpose.
4.1 Service Providers and Data Processors
We engage carefully selected third-party service providers who process personal data on our behalf as data processors. These providers are bound by contractual obligations to process your data only on our instructions and in accordance with appropriate security standards. Categories of service providers we use include:
- Payment processors and mobile financial service operators (bKash, Nagad, Rocket, Upay, SureCash, Visa, Mastercard, and partner banks) — to facilitate deposits and withdrawals.
- Identity verification and KYC providers — to verify your identity, age, and address in compliance with our obligations.
- Fraud detection and cybersecurity providers — to protect the Platform and your account from unauthorised access and fraudulent activity.
- Game content providers (including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Play'n GO, and Spribe) — who may receive anonymised session data necessary to deliver their games within the Platform.
- Cloud hosting and infrastructure providers — to store Platform data and ensure service availability and disaster recovery.
- Email and communications platforms — to deliver transactional messages (such as account confirmations and withdrawal notifications) and, where you have opted in, marketing communications.
4.2 Legal and Regulatory Disclosure
potoja may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where we are required or permitted to do so by applicable law. This includes disclosures made in response to lawful requests, court orders, or for the purposes of preventing or investigating suspected criminal activity including money laundering, fraud, or match fixing.
4.3 Business Transfers
In the event that potoja undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will endeavour to notify affected players of any such transfer and the privacy implications via the email address associated with their account.
No Third-Party Marketing: potoja will never share your personal data with third-party advertisers, data brokers, or marketing agencies for the purpose of those parties sending you their own promotional communications. Any marketing you receive from potoja will relate solely to our own products and services and will be sent only where you have provided explicit consent.
4.4 Aggregate and Anonymised Data
potoja may share aggregated, anonymised, or de-identified data — data from which all personal identifiers have been removed — with third parties for analytical, research, or business intelligence purposes. Such data cannot be used to identify you individually and is not subject to the same restrictions as personal data under this Privacy Policy.
5. Cookies and Tracking Technologies
potoja.net uses cookies and similar tracking technologies to provide you with a reliable, secure, and personalised experience. A cookie is a small text file placed on your device by a website when you visit it. Cookies allow us to recognise your device on subsequent visits, remember your preferences, and gather analytical data about how the Platform is used.
5.1 Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Essential for the Platform to function. These include session authentication cookies that keep you logged in, security tokens, and load-balancing identifiers. These cookies cannot be disabled. | Session / up to 24 hours |
| Functional | Remember your preferences such as preferred language, odds format, and display settings. These improve your experience but are not essential to Platform operation. | Up to 12 months |
| Analytical / Performance | Help us understand how players navigate potoja.net — which pages are most visited, where users exit, and how Platform performance can be improved. Data is aggregated and anonymised. | Up to 24 months |
| Fraud Prevention | Used to detect and prevent suspicious activity, including bot traffic, account takeover attempts, and payment fraud. These are classified as strictly necessary for security purposes. | Session / up to 30 days |
5.2 Managing Cookies
You can control and manage cookies through your web browser settings. Most modern browsers allow you to view, block, or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to use potoja.net — you may not be able to log in or complete financial transactions if essential session cookies are blocked. Blocking analytical or functional cookies will not prevent you from using the Platform but may affect your experience.
For guidance on managing cookies in your specific browser, refer to your browser's help documentation. Note that cookie settings are device-specific — if you use potoja.net on multiple devices, you will need to manage cookie preferences on each device separately.
Third-Party Cookies: Certain third-party services integrated into potoja.net — such as game providers including Pragmatic Play, Evolution Gaming, and Spribe — may set their own cookies within game iframes. These cookies are governed by those providers' privacy policies and are used solely for delivering the game experience. potoja does not have direct control over third-party cookies.
6. Data Retention and Storage
potoja retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes that may arise. The specific retention periods we apply are set out below.
- Active account data: Retained for the full duration of your account's active status on the Platform.
- Financial transaction records: Retained for a minimum of five years following the date of the transaction, in accordance with applicable anti-money laundering record-keeping requirements.
- Identity verification documents (KYC): Retained for a minimum of five years from the date of the last transaction on your account, or from account closure — whichever is later.
- Customer support communications: Retained for up to three years from the date of the most recent interaction, to allow us to reference prior communications in the event of a follow-up enquiry or complaint.
- Marketing consent records: Retained for the duration of your account plus a reasonable period thereafter, as evidence of your consent and any subsequent opt-out actions.
- Technical and analytical log data: Retained for up to 24 months from the date of collection, after which it is anonymised or deleted.
Where data is no longer required for any of the above purposes, potoja will securely delete or anonymise it. Secure deletion means that the data is rendered permanently unrecoverable using industry-standard data destruction methods.
6.1 Data Storage Location
Your personal data is stored on secure servers. potoja uses reputable cloud infrastructure providers with data centres that maintain high standards of physical and technical security. Where data is processed by a third-party service provider located outside Bangladesh, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection principles.
Data Security Measures: potoja applies the following technical and organisational security measures to protect your data: end-to-end SSL/TLS encryption for all data in transit; encryption of sensitive data fields at rest; role-based access controls limiting staff access to personal data on a need-to-know basis; regular security audits and vulnerability assessments; and multi-factor authentication requirements for administrative access to production systems.
7. Your Privacy Rights
potoja recognises and respects the privacy rights of all players. As a player on potoja.net, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with your registered username and a description of your request.
7.1 Right of Access
You have the right to request a copy of the personal data potoja holds about you. We will provide this information in a clear, structured format within a reasonable timeframe following a verified request. There is no fee for a standard access request. If a request is manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or decline the request, providing written reasons for doing so.
7.2 Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update basic account information — such as your email address or contact number — directly within your account settings. For corrections to identity or KYC data, please contact [email protected] and provide the corrected information along with supporting documentation where applicable.
7.3 Right to Erasure
You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Please note that this right is not absolute — potoja may be required to retain certain data for legal compliance purposes (such as AML record-keeping) even following a valid erasure request. We will explain which data can be deleted and which must be retained at the time we respond to your request.
7.4 Right to Restrict Processing
You have the right to request that potoja restricts the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or where you have objected to processing based on legitimate interests and we are assessing whether our grounds override yours. During a restriction period, we will continue to store your data but will not actively process it beyond what is strictly necessary.
7.5 Right to Data Portability
Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format. You may also request that we transmit this data directly to another service provider where technically feasible.
7.6 Right to Object
You have the right to object to the processing of your personal data where potoja relies on legitimate interests as its legal basis. We will stop the processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defence of legal claims. You may also object at any time to the use of your data for direct marketing purposes — we will act on such objections immediately.
7.7 Withdrawing Consent
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing that took place before withdrawal. To withdraw marketing consent, update your preferences in your account or contact [email protected].
Identity Verification for Rights Requests: To protect the security of your personal data, potoja will verify your identity before fulfilling any data rights request. We may ask you to confirm details associated with your account. We will not fulfil a data rights request where we cannot reasonably verify that the request was made by, or on behalf of, the account holder.
8. Contact and Complaints
If you have any questions about this Privacy Policy, wish to exercise any of the rights described in Section 7, or have a concern about how potoja handles your personal data, please contact our support team using the details below. Our English-language team is available 24 hours a day, 7 days a week.
- Email: [email protected] (plain text — not a clickable link)
- Live Chat: Available 24/7 via the potoja.net Platform
- Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days of receiving a verified request.
8.1 Updates to This Privacy Policy
potoja reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform functionality. Where material changes are made, we will notify registered players via the email address associated with their account. The updated Privacy Policy will be published on this page with a revised effective date. Your continued use of potoja.net following the publication of an updated Policy constitutes your acceptance of the revised terms.
This Privacy Policy was last reviewed and updated in January 2026. If you have any concerns about any aspect of this document or the way in which potoja handles your personal information, please do not hesitate to reach out — we are committed to resolving privacy concerns promptly, transparently, and in good faith.
Policy Scope: This Privacy Policy applies exclusively to personal data processed in connection with your use of potoja.net. It does not apply to third-party websites or services that may be linked to or from the Platform. We encourage you to review the privacy policies of any third-party services you access through or alongside potoja.
Your Data is Safe — Now Enjoy the Platform
Now that you understand how potoja protects your privacy, explore everything the Platform has to offer — live BPL cricket odds, world-class casino tables, thousands of slots, and fast bKash and Nagad deposits. Play responsibly. 18+ only.
18+ potoja.net operates for entertainment purposes only. Please gamble responsibly. Bangladesh players must be 18 years of age or older.