ck44l Privacy Policy

Welcome to ck44l. We are committed to protecting the personal data of every player who uses our platform. This Privacy Policy sets out in clear terms how ck44l collects, uses, stores, shares, and safeguards your personal information when you visit ck44l.io, register an account, make deposits or withdrawals, play games, or interact with our customer support team.

ck44l serves players across Bangladesh, including those in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. We recognise that privacy is a fundamental right, and we have built our data practices around principles of transparency, purpose limitation, and data minimisation.

This document should be read together with our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the overall agreement governing your use of the ck44l platform.

By creating an account or continuing to use ck44l.io, you acknowledge that you have read and understood this Privacy Policy. If you have questions about any section, please contact us at [email protected] before proceeding.

For the purposes of applicable data protection principles, ck44l acts as the Data Controller in respect of the personal data it collects and processes through the ck44l.io platform and its associated Services.

As Data Controller, ck44l determines the purposes for which personal data is processed and the means by which that processing is carried out. ck44l is responsible for ensuring that all data processing activities comply with the principles set out in this Privacy Policy.

If you wish to exercise any of your data rights, or if you have a concern about how your personal data is being handled, you may contact ck44l directly using the details provided in Section 16 of this Policy.

ck44l collects only the personal data that is necessary to provide you with a safe, secure, and personalised gaming experience. The categories of data we may collect include:

• Identity and Verification Data: Full legal name, date of birth, nationality, National Identity Card (NID) number, passport number, and scanned copies of government-issued identification documents. This data is required for KYC (Know Your Customer) compliance and for enforcing our 21+ age policy.
• Contact Data: Email address, mobile phone number, and residential city or district (e.g., Dhaka, Chittagong, Sylhet). This is used for account communications, support responses, and responsible gaming outreach.
• Financial and Payment Data: Your registered bKash, Nagad, Rocket, or Upay mobile number; bank account reference details for Dutch-Bangla Bank, City Bank, BRAC Bank, or other supported institutions; and a full record of your deposit and withdrawal transactions on the platform. Note: ck44l does not store full card numbers. Card payments via Visa and Mastercard are processed through PCI-DSS compliant payment gateways and card data is tokenised.
• Account and Gaming Data: Your chosen username, hashed password, account status, login history, game session records, bet history, bonus utilisation records, and any self-exclusion or responsible gaming limit settings applied to your account.
• Technical and Device Data: IP address, device identifier, browser type and version, operating system, screen resolution, timezone, and referring URL. This data is collected automatically when you visit the Platform and is used primarily for security and fraud detection purposes.
• Communications Data: Records of all communications between you and the ck44l support team, including live chat transcripts, email exchanges, and any documents or screenshots you submit as part of a support or dispute resolution process.

ck44l collects personal data through the following channels:

• Direct collection: Information you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically through cookies, web beacons, server logs, and analytics tools as you browse and interact with the Platform. See Section 9 for full details on our Cookies Policy.
• Third-party sources: Identity verification and fraud prevention providers may supply additional data points to help confirm the accuracy of information you have submitted. Payment processors (bKash, Nagad, Rocket, Upay) transmit transaction confirmation data to ck44l following each deposit or withdrawal instruction.
• Game studio integrations: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may transmit game session data, round results, and RTP (Return to Player) statistics to ck44l for account reconciliation and responsible gaming monitoring purposes.

ck44l processes your personal data only for specific, documented purposes and always on a defined legal basis. The primary purposes and their corresponding bases are as follows:

• Account registration and management — necessary for the performance of the contract between you and ck44l.
• Identity verification and age compliance (21+) — required by our legal obligations as an online gaming operator and by our commitment to responsible gaming.
• Processing deposits and withdrawals — necessary for the performance of the contract; also required to fulfil anti-money laundering (AML) and counter-terrorism financing (CTF) obligations.
• Fraud detection and platform security — based on ck44l's legitimate interest in protecting the Platform, its players, and its financial integrity from malicious activity, chargebacks, and account takeover attacks.
• Customer support — necessary for the performance of the contract and based on legitimate interest in resolving player disputes fairly and efficiently.
• Responsible gaming monitoring — based on our legal and ethical obligation to identify and support players who may be displaying signs of problem gambling behaviour, in accordance with our Responsible Gaming Policy.
• Personalisation and platform improvement — based on legitimate interest in delivering a relevant, high-quality experience. Usage data (game preferences, session patterns) is analysed in aggregate where possible.
• Marketing and promotional communications — based on your explicit consent given at registration or at any subsequent opt-in point. You may withdraw this consent at any time (see Section 13).
• Legal and regulatory compliance — required where ck44l must respond to lawful requests from competent authorities, courts, or regulatory bodies.

ck44l will not process your personal data for any purpose that is incompatible with the purposes listed above without first seeking your consent or establishing a separate legal basis.

ck44l does not sell, rent, or trade your personal data. We share your data only where it is strictly necessary to deliver the Services or to meet a legal obligation. The categories of recipients with whom we may share data include:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard processing partners receive the minimum data required to execute your financial transactions and to fulfil AML reporting obligations.
• Identity and KYC verification providers: Specialist third-party KYC platforms that verify the authenticity of identity documents and cross-reference data against sanctions and PEP screening databases. These providers act as data processors under contractual data processing agreements with ck44l.
• Game studio partners: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game providers receive your account identifier and session tokens to enable you to play their games. They do not receive your full personal profile or financial data.
• Fraud prevention and cybersecurity providers: Specialist vendors that help ck44l detect and block fraudulent account activity, suspicious login attempts, and payment fraud patterns.
• Legal and regulatory authorities: ck44l will disclose personal data to competent courts, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or legal process. Where permitted, ck44l will inform you of such disclosure.
• Corporate successors: In the event of a merger, acquisition, or sale of all or part of ck44l's business, personal data held by ck44l may be transferred to the acquiring entity. Players will be notified prior to any such transfer and their rights under this Policy will be preserved.

ck44l retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Active account data — retained for the duration of your account and for a minimum of 5 years following account closure, in order to meet AML and record-keeping obligations.
• KYC verification documents — retained for a minimum of 5 years from the date of submission, in accordance with financial crime prevention standards.
• Transaction records — retained for a minimum of 7 years following the transaction date to support financial audit and regulatory reporting obligations.
• Customer support communications — retained for 3 years from the date of the last interaction, to support dispute resolution and service improvement.
• Marketing consent records — retained for the duration of your consent and for 2 years following withdrawal of consent, as evidence of your preference history.
• Technical and usage logs — retained for up to 12 months in active storage, then archived for a further 24 months for security and fraud investigation purposes before secure deletion.

When your personal data is no longer required and there is no legal basis for continued retention, ck44l will securely delete or anonymise it in accordance with our data disposal procedures. Anonymised, aggregated data (which cannot identify you) may be retained indefinitely for statistical and platform improvement purposes.

ck44l takes the security of your personal data seriously. We implement a comprehensive set of technical and organisational security measures designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser or device and the ck44l servers, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encrypted storage for all sensitive data at rest, including identity documents, financial records, and account credentials. Passwords are stored using industry-standard one-way hashing algorithms and are never stored in plaintext.
• Access controls: Personal data is accessible only to authorised ck44l personnel and contracted service providers who have a documented business need to access it. All internal access is logged and subject to periodic review.
• Regular security assessments: ck44l conducts periodic internal security reviews and vulnerability assessments of its platform infrastructure to identify and remediate potential weaknesses before they can be exploited.
• Incident response procedures: In the event of a confirmed data security incident that poses a risk to your rights or freedoms, ck44l will notify affected players without undue delay via the email address registered to their account, and will take immediate steps to contain and remediate the incident.

ck44l uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit a website. They help the Platform remember your preferences, maintain your session, and gather anonymous analytical data.

We use the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as account login, session management, fraud detection, and navigation between pages. These cookies cannot be disabled without significantly impairing your ability to use the Platform.
• Performance and Analytics Cookies: These cookies collect anonymous information about how players use the Platform — which pages are visited most frequently, how long sessions last, and where errors occur. This data is used solely to improve the Platform's reliability and user experience. No personally identifiable information is collected via these cookies.
• Functional Cookies: These cookies allow the Platform to remember choices you have made (such as your preferred language or display settings) and to provide enhanced, more personalised features. Disabling these cookies may affect the quality of your experience.
• Marketing Cookies: ck44l does not use third-party advertising or retargeting cookies. We do not permit advertising networks to place tracking cookies on ck44l.io. Any cookies related to promotional communications are first-party cookies used only to track which ck44l promotions you have seen or engaged with, for the sole purpose of avoiding repetitive messaging.

You can manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to or using the Platform. For guidance on managing cookies in popular browsers, consult your browser's help documentation.

As a person whose data is processed by ck44l, you hold a set of rights in relation to your personal information. ck44l is committed to upholding these rights in a timely and transparent manner. Your rights include:

• Right of Access: You have the right to request a copy of the personal data ck44l holds about you, along with information about how it is being used. We will provide this within 30 days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic contact information directly through your account settings, or contact support for more substantial corrections.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis exists), or where processing is unlawful. Note: ck44l may be required to retain certain data for legal, regulatory, or fraud prevention purposes even following an erasure request. We will inform you of any such limitations.
• Right to Restriction of Processing: You may request that ck44l restrict the processing of your data in certain circumstances — for example, while the accuracy of the data is being contested, or where processing is unlawful but you prefer restriction to deletion.
• Right to Object: You have the right to object to processing based on legitimate interest, including profiling for personalisation purposes. Where you object, ck44l will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Data Portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you may request that ck44l provide your personal data in a structured, commonly used, machine-readable format so that you may transfer it to another service provider.
• Right to Withdraw Consent: Where ck44l processes your data on the basis of consent (e.g., marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We may ask you to verify your identity before processing your request to protect against unauthorised access to your data. We will respond within 30 days of receiving a complete and verified request.

ck44l operates an online gaming platform that is strictly intended for adults aged 21 years and above. The Platform is not directed at, and does not knowingly collect personal data from, any person under the age of 21.

As part of our registration and KYC process, all players are required to provide proof of age and identity. Where ck44l has reasonable grounds to suspect that a registered player is under 21 years of age, the account will be immediately suspended pending verification. If it is confirmed that the player is underage, the account will be permanently closed and any deposits will be returned in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that your child has registered an account with ck44l, please contact us immediately at [email protected]. We will investigate the matter promptly and take appropriate action, including the deletion of any personal data collected from an underage user where no legal obligation requires its retention.

The ck44l platform may, from time to time, contain references to or integrations with third-party services, game providers, and payment processors. While ck44l takes care to work only with reputable partners, this Privacy Policy applies solely to data processed by ck44l directly through ck44l.io.

When you interact with third-party game studio interfaces (such as a Pragmatic Play or Evolution Gaming game window embedded within the Platform), that provider's own privacy policy and data practices will govern data processed within their environment. ck44l encourages you to review the privacy policies of all third-party providers whose services you access through the Platform.

Similarly, when you initiate a payment via bKash, Nagad, Rocket, or another payment provider's interface, you are subject to that provider's terms and privacy practices for the duration of that transaction. ck44l is not responsible for the data handling practices of external payment service providers once a transaction has been redirected to their platform.

ck44l does not control and is not responsible for the content, privacy policies, or practices of any third-party websites or services referenced in connection with the Platform. We strongly recommend that you read the privacy policy of every third-party service you use.

ck44l will send you marketing communications — including promotional offers, bonus notifications, tournament announcements, and seasonal campaign messages (such as Eid, Pohela Boishakh, or BPL season promotions) — only where you have given your explicit prior consent to receive such communications.

Consent is obtained at the point of registration via an opt-in checkbox. This checkbox is unchecked by default; you must actively select it to indicate your consent. You may also update your marketing preferences at any time through your account settings panel.

To withdraw consent for marketing communications at any time, you may:

• Use the "Unsubscribe" link included in every promotional email sent by ck44l.
• Update your notification preferences in your account settings.
• Contact our support team at [email protected] with the subject line "Marketing Opt-Out".

Withdrawal of marketing consent will not affect the delivery of transactional communications that are essential to your account, such as deposit confirmations, withdrawal notifications, security alerts, KYC status updates, and responsible gaming notifications. These service communications are sent based on contract performance and legitimate interest, not on consent, and cannot be disabled while your account remains active.

ck44l does not engage in cold-call telephone marketing, does not send SMS marketing without explicit consent, and does not share your contact details with third-party marketing agencies.

ck44l's core platform infrastructure is hosted on servers designed to serve the Bangladesh market. However, certain third-party service providers — including game studios, KYC verification platforms, and fraud prevention vendors — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred to a third country for processing, ck44l ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. Such safeguards may include:

• Contractual data processing agreements incorporating standard data protection clauses.
• Transferring data only to providers who maintain recognised international security certifications (such as ISO 27001 or SOC 2 Type II).
• Ensuring that data is transferred only for the specific, limited purpose for which it was collected and is not subject to onward transfer without equivalent protections.

By using the ck44l Platform and accepting this Privacy Policy, you acknowledge that your personal data may be transferred to and processed in countries outside Bangladesh as described above. If you have concerns about international data transfers, please contact us at [email protected].

ck44l reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the structure of our Platform. All changes will be posted on this page at ck44l.io/privacy-policy with a revised effective date clearly indicated at the top of the document.

Where changes are material — meaning they significantly affect your rights or the way we use your personal data — ck44l will provide advance notice via email to the address registered to your account at least 14 days before the changes take effect. Your continued use of the Platform following the effective date of the revised Policy constitutes your acceptance of those changes.

If you do not accept the updated Privacy Policy, you must stop using the Platform and may request account closure by contacting our support team. We will process your closure request in accordance with our Terms & Conditions and retain your data only to the extent required by applicable legal or regulatory obligations.

We encourage you to review this Privacy Policy periodically to stay informed about how ck44l protects your personal data. The date at the top of this page will always reflect the most recent version in force.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way ck44l handles your personal data, please do not hesitate to contact us using the details below:

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week
• Response Time: We aim to respond to all data-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6)
• Preferred Subject Lines:
  • "Data Privacy Request" — for access, rectification, erasure, or portability requests
  • "Marketing Opt-Out" — to withdraw consent for promotional communications
  • "Data Security Concern" — to report a suspected security incident or breach
  • "Underage Account Report" — to report suspected use by a minor

ck44l is committed to resolving all privacy-related concerns fairly, promptly, and in accordance with the principles set out in this Policy. Our support team serves players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar, and we are here to help you 24 hours a day.