ck224 Privacy Policy

1. Introduction

ck224 ("ck224", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with our platform at ck224.io. This Privacy Policy describes our practices regarding the collection, use, storage, sharing, and protection of personal data in connection with our online casino and sports betting services.

This policy applies to all registered players, prospective users who browse our platform, and anyone who contacts our support team. It covers data collected through our website, mobile experience, customer support channels, and payment processing integrations.

We recognise that our players in Bangladesh and other regions have a legitimate expectation that their personal information will be handled with care, transparency, and integrity. This policy reflects that commitment. We encourage you to read it in full and to contact us at [email protected] if any part is unclear.

2. Data Controller

For the purposes of this Privacy Policy, ck224 acts as the data controller in respect of all personal data collected from players and users of the platform. As data controller, ck224 determines the purposes for which and the manner in which personal data is processed.

All data protection enquiries, access requests, and complaints should be directed to our dedicated support contact at [email protected]. We aim to acknowledge all privacy-related correspondence within 48 hours and to provide a substantive response within 14 calendar days.

3. Data We Collect

3.1 Information You Provide Directly

When you register an account, contact our support team, or interact with our platform, you may provide us with the following categories of personal data:

• Identity data: Full legal name, date of birth, national identification number, passport details.
• Contact data: Email address, mobile phone number, residential address (including district and division within Bangladesh).
• Financial data: Payment method details (bKash account number, Nagad number, Rocket number, Upay number, bank account references, card details where applicable). Note: full card numbers are never stored by ck224 — they are processed directly by our PCI-compliant payment partners.
• Account credentials: Username and encrypted password hash.
• KYC documentation: Copies of government-issued identity documents, utility bills, and source-of-funds declarations where required during verification.
• Support communications: The content of messages, emails, and live chat transcripts exchanged with our support team.

3.2 Data Collected Automatically

When you access or use the ck224 platform, we automatically collect certain technical and behavioural data, including:

• Device and connection data: IP address, browser type and version, operating system, device identifiers, screen resolution, and time zone setting.
• Usage data: Pages visited, games played, betting history, session duration, click-stream data, search queries within the platform, and deposit/withdrawal patterns.
• Cookie data: Data stored via cookies and similar tracking technologies as described in Section 7 of this policy.
• Geolocation data: Approximate geographic location derived from your IP address, used for jurisdictional compliance purposes.

3.3 Data Received from Third Parties

We may receive supplementary data about you from the following third-party sources:

• Identity verification and KYC service providers, who confirm the authenticity of documents you submit.
• Payment processors and mobile money operators (bKash, Nagad, Rocket, Upay), who confirm transaction status and flag potentially fraudulent activity.
• Fraud prevention and anti-money laundering screening services, which may flag your details against sanctions lists or known fraud databases.

4. How We Use Your Data

ck224 uses your personal data for the following purposes:

Purpose	Data Categories Used
Creating and managing your player account	Identity, contact, account credentials
Processing deposits and withdrawals	Financial data, identity data
Verifying your age and identity (KYC)	Identity data, KYC documentation
Preventing fraud, money laundering, and prohibited conduct	All categories including usage and device data
Providing customer support	Contact data, support communications, account data
Sending service notifications (security alerts, policy updates)	Contact data
Sending promotional communications (where consented)	Contact data, usage data
Improving platform performance and user experience	Usage data, cookie data, device data
Complying with legal and regulatory obligations	Identity, financial, KYC, transaction data
Enforcing our Terms & Conditions	All categories as relevant

5. Legal Basis for Processing

ck224 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our contract with you — including operating your account, processing transactions, and providing access to games and betting markets.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and tax reporting obligations.
• Legitimate interests: Processing carried out for ck224's legitimate business interests, such as fraud prevention, platform security, and improving our services, where those interests are not overridden by your rights and freedoms.
• Consent: Processing carried out based on your explicit consent, such as the sending of promotional emails and SMS communications. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Data Sharing

6.1 Service Providers

ck224 shares personal data with carefully selected third-party service providers who assist us in operating the platform. These providers are bound by contractual data processing agreements that restrict their use of your data to the specific services they provide to ck224. Categories of service providers include:

• Payment processing partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Visa, Mastercard.
• Identity verification and KYC platform providers.
• Cloud infrastructure and data hosting providers.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi. These providers may receive anonymised session data to facilitate game delivery but do not receive your full identity profile.
• Customer support software providers.
• Fraud detection and anti-money laundering screening services.

6.2 Legal Disclosure

ck224 may disclose your personal data to law enforcement agencies, regulatory bodies, or other authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of ck224, its players, or the public.

6.3 No Sale of Data

ck224 does not sell, rent, or otherwise trade your personal data to third parties for their own independent marketing or commercial purposes. Any sharing of data is strictly limited to the purposes described in this policy.

7. Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit, such as your preferred settings and whether you are logged in. ck224 uses cookies and similar technologies (including local storage and session storage) to provide, secure, and improve the platform.

7.2 Types of Cookies We Use

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in securely and cookies that remember your preferences within a session. These cannot be disabled without impairing platform functionality.
• Analytical cookies: Used to collect aggregated, anonymised data about how players navigate and use the platform. This data helps us identify performance bottlenecks and improve the user experience. These cookies do not identify you personally.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and unauthorised login attempts.

7.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the ck224 platform, including your ability to maintain a logged-in session or access certain game features. Instructions for managing cookies vary by browser — refer to your browser's help documentation for guidance.

8. Data Retention

ck224 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: Retained for a minimum of five years following the date of account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction and financial data: Retained for a minimum of five years from the date of each transaction.
• KYC documentation: Retained for a minimum of five years from the date of submission or the date of account closure, whichever is later.
• Support communications: Retained for two years from the date of the last communication, unless the communication relates to a dispute or legal matter, in which case it is retained until the matter is fully resolved.
• Analytical and usage data: Retained in anonymised or aggregated form indefinitely for platform improvement purposes. Individual-level usage logs are retained for 12 months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data destruction procedures.

9. Data Security

ck224 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data fields at rest within our database infrastructure.
• bcrypt hashing of all user passwords — passwords are never stored in recoverable plaintext.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Regular penetration testing and vulnerability assessments of our platform infrastructure.
• Multi-factor authentication required for all internal staff accounts with access to player data systems.
• Comprehensive audit logging of all access to personal data records.

While ck224 takes all reasonable precautions to safeguard your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ck224 will notify affected players promptly and take all appropriate remedial action.

10. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by ck224:

• Right of access: You may request a copy of all personal data we hold about you, free of charge, within 30 days of your request.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal obligations that require us to retain certain records.
• Right to restriction of processing: You may request that we restrict the processing of your data in certain circumstances, such as while the accuracy of your data is being contested.
• Right to data portability: You may request a machine-readable copy of personal data you have provided to us, where processing is based on your consent or on a contract.
• Right to object: You may object to processing carried out on the basis of our legitimate interests, including profiling for marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact us at [email protected]. We may need to verify your identity before processing your request. We will respond within 30 calendar days; for complex or multiple requests, we may extend this period by a further 30 days and will inform you accordingly.

11. International Data Transfers

Some of ck224's third-party service providers — including cloud hosting infrastructure, KYC verification platforms, and game content providers — may process or store data in countries outside Bangladesh. Where such transfers occur, ck224 takes steps to ensure that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under this policy.

These safeguards may include standard contractual clauses, data processing agreements incorporating binding privacy obligations, and reliance on adequacy determinations where applicable. If you would like further information about the safeguards applied to a specific international transfer, please contact us at [email protected].

12. Children's Privacy

The ck224 platform is strictly intended for adults aged 21 and above. We do not knowingly collect, store, or process personal data relating to individuals under the age of 21. If we become aware that a user under this age threshold has registered an account or provided personal data, we will immediately close the account, void any activity associated with it, and securely delete all related personal data.

If you believe that a minor has registered on the ck224 platform, please notify us immediately at [email protected] so that we can take prompt action. Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms.

13. Third-Party Links

The ck224 platform does not include links to external third-party websites. In the event that any informational content on the platform references a third-party service or organisation by name, ck224 is not responsible for the privacy practices of those organisations. This Privacy Policy applies solely to data processed by ck224 through the ck224.io platform and its associated services.

14. Marketing Communications

With your prior consent, ck224 may send you promotional communications via email or SMS, including information about new games, bonuses, seasonal promotions (such as those coinciding with Eid, Pohela Boishakh, or the Bangladesh Premier League season), and platform updates.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email.
• Replying STOP to any promotional SMS message.
• Updating your communication preferences in your ck224 account settings.
• Contacting our support team at [email protected] with an opt-out request.

Please note that opting out of marketing communications will not affect the delivery of essential service notifications, such as transaction confirmations, security alerts, and policy update notices, which are sent on the basis of contractual necessity rather than consent.

15. Policy Amendments

ck224 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. Where amendments are material — meaning they substantially affect how your data is collected or used — we will notify registered players via email and display a prominent notice on the platform at least 7 days before the changes take effect.

The "Last Updated" date displayed at the top of this policy indicates the date of the most recent revision. We encourage you to review this policy periodically. Your continued use of the ck224 platform following the effective date of any amendment constitutes your acceptance of the updated policy.

16. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a complaint about how ck224 has handled your personal data, please contact us using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week
• Response Time: Privacy-related requests acknowledged within 48 hours; substantive response within 14 calendar days (Bangladesh Standard Time, UTC+6)

We take all privacy complaints seriously and will investigate your concern thoroughly. If you are not satisfied with our response to your complaint, you may have the right to escalate the matter to a relevant data protection authority in your jurisdiction.