Privacy Policy

1. Information we collect

Account information. Your email address, and a password which is stored only as a secure one-way hash — we never see or store your actual password. If you sign in with Google, we receive your email address and basic profile information from Google; we never receive your Google password.

Payment information. For manual bKash payments we store the mobile number you paid from and the bKash Transaction ID you submit, so an administrator can verify your payment. We do notcollect or store your bKash PIN, OTP, card numbers or banking credentials. When automated payment gateways are enabled, payment details are entered on the gateway's own secure page and never reach our servers.

Purchase records. Which episodes you have bought, the amount paid, and the date, so we can unlock your content.

Technical data. Standard server logs generated when you use the site, including IP address, browser type and pages requested, used for security, fraud prevention and diagnosing faults.

2. How we use your information

• To create and secure your account and keep you signed in
• To verify your payment and unlock the episodes you purchased
• To display an on-screen watermark containing your email address while you watch a paid episode, which discourages unauthorised copying and lets us trace leaked recordings
• To prevent fraud, such as the reuse of a Transaction ID
• To respond to your support messages

We do not sell, rent or trade your personal information, and we do not use it for advertising or send marketing messages.

3. Service providers

We rely on the following providers, who process data only to deliver the service:

• Supabase — account authentication and database hosting
• Vercel — website hosting and delivery
• Bunny.net — secure video streaming
• YouTube (Google) — free episodes are embedded from our YouTube channel; when you play one, YouTube may set its own cookies under its own privacy policy
• bKash and, where applicable, licensed payment gateways — payment processing

4. Payment security

Online payments are processed by SSLCommerz, a payment gateway licensed by Bangladesh Bank. When you choose to pay online you are taken to SSLCommerz's own secure checkout page to enter your bKash, Nagad, Rocket, internet banking or card details.

• We never see, handle or store your card number, PIN, OTP, wallet password or any banking credential.Those are entered on the gateway's page and held by the gateway.
• All traffic to this site and to the gateway is encrypted in transit using HTTPS/TLS.
• What we receive back from SSLCommerz and keep is limited to the transaction reference, the amount, the currency and the payment status — enough to prove what you bought and to handle refunds.
• Every payment is confirmed by contacting SSLCommerz directly server-to-server before an episode is unlocked, so a payment result cannot be faked by anyone in between.
• Transactions flagged as high risk by the gateway are held for manual review before access is granted.

If you pay manually by bKash Send Money instead, we store only the mobile number you paid from and the Transaction ID you give us, so an administrator can match it against our received-payments record. We never ask for your bKash PIN or OTP, and no member of our team will ever request them — treat any such request as fraud.

5. Cookies policy

Cookies are small files stored by your browser. We use them only for the purposes below — we do not use advertising cookies, and we do not sell or share cookie data with advertisers.

• Strictly necessary cookies. Keep you signed in between pages, protect your session, and hold a randomly generated device identifier used to limit how many devices can stream one account at the same time. The site cannot work without these.
• Preference cookies. Remember small choices such as whether you picked the light or dark theme.
• Third-party cookies.When you press play on a free episode, YouTube may set its own cookies under Google's privacy policy; we use YouTube's privacy-enhanced mode so nothing is set until you press play. During checkout, SSLCommerz may set cookies on their own page under their privacy policy.

We use privacy-friendly, cookie-less analytics to count page views and measure loading speed. It does not profile you or track you across other websites.

You can delete or block cookies in your browser settings at any time. Blocking strictly necessary cookies will sign you out and prevent playback of purchased episodes.

6. Data retention and your rights

We keep your account and purchase records for as long as your account exists, so you retain access to the episodes you paid for, and as long as needed afterwards for accounting and fraud prevention.

You may request a copy of your data, correction of inaccurate data, or deletion of your account at any time by contacting us. Deleting your account also removes your access to purchased episodes, and purchases are not transferable.

7. Security

All traffic is encrypted with HTTPS. Passwords are hashed, video is served through expiring signed links that only work for viewers who have paid, and administrative functions require a separate administrator login. No system can be guaranteed perfectly secure, but we work to protect your information and will inform affected users if a breach materially affects them.

8. Where your information is stored

Our database, authentication and video hosting are operated by the providers named above, whose servers are located outside Bangladesh. By using the service you understand that your information is transferred to and processed in those countries. We only use providers that offer recognised security and data-protection standards, and we require them to process your data only on our instructions.

9. Links to other websites

The service links to places we do not control — most often our YouTube channel, and the payment page hosted by SSLCommerz. Once you follow such a link, that site's own privacy policy applies. We are not responsible for how other websites handle your information, and we encourage you to read their policies.

10. Protecting yourself from phishing

We will never ask you for your password, your bKash or card PIN, an OTP, or a full card number — not by email, phone, SMS, WhatsApp or social media. Our staff have no way to see those details and no reason to ask for them.

We only send email from addresses ending in @prankkingott.com, and we only take payments on https://www.prankkingott.com or on the SSLCommerz payment page. If you receive a message asking for those details, or a payment link from anywhere else, treat it as fraudulent, do not respond, and report it to us at support@prankkingott.com.

11. Children

The service is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has created an account, contact us and we will remove it.

12. Changes and contact

We may update this policy; the date at the top always shows the current version. For any privacy question or request, email support@prankkingott.com, message +8801733350311 on WhatsApp, or see our contact page.