cckkk Privacy Policy — How We Protect Your Data

This Privacy Policy ("Policy") describes how cckkk ("the Platform", "we", "us", "our") collects, uses, stores, and protects personal data relating to users ("you", "your") of the cckkk website and associated services available at cckkk.org. By registering an account or using the cckkk Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read in conjunction with the cckkk Terms and Conditions, which together form the complete agreement governing your use of the Platform.

cckkk collects personal data through several channels: directly from you when you register an account, make a deposit, or contact support; automatically through your use of the Platform (device data, usage patterns, session logs); and from third-party service providers where necessary to verify your identity or process payments. The following table summarises the main categories of data collected:

cckkk does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for KYC identity verification purposes. Where biometric-style document verification is used (e.g., facial comparison with a government-issued photo ID), the verification is performed by a third-party KYC provider under a data processing agreement, and the raw biometric data is not retained by cckkk following successful verification.

cckkk uses the personal data it collects for the following purposes, each of which is necessary for the proper operation of the Platform and the provision of a safe, compliant gaming service to users in Bangladesh:

1. Account creation and management: to establish and maintain your cckkk account, verify your identity, process your registration, and authenticate your access to the Platform.
2. Payment processing: to process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Islami Bank, Sonali Bank, City Bank, Visa, and Mastercard; to reconcile financial records; and to detect and investigate suspicious transactions.
3. Legal and regulatory compliance: to comply with applicable anti-money laundering (AML) obligations, KYC requirements, fraud prevention duties, and any other legal obligations applicable to the operation of the cckkk Platform.
4. Responsible gaming: to monitor account activity for indicators of problem gambling, enforce deposit limits and self-exclusion requests, and provide targeted responsible gaming communications where patterns of concern are identified.
5. Customer support: to respond to your queries, complaints, and requests; to investigate disputes relating to your account, transactions, or game outcomes; and to maintain records of support interactions for quality assurance purposes.
6. Platform improvement and analytics: to analyse aggregated and anonymised usage data to understand how users interact with cckkk, which features are used most frequently, and where improvements to the user experience can be made. Individual user profiles are not used for this analytical purpose.

cckkk does not use personal data to make automated decisions that produce significant legal or similarly significant effects on users without a process for human review. Where automated systems flag an account for review (e.g., suspicious activity detection), a human member of the cckkk compliance team reviews the flagged information before any account action is taken.

The legal bases cckkk relies upon for processing your personal data are:

• Contractual necessity: processing that is necessary to provide the services you have requested by creating a cckkk account and agreeing to the Terms and Conditions — including account management, payment processing, and game access.
• Legal obligation: processing required to comply with AML regulations, KYC identity verification requirements, responsible gaming obligations, and any other applicable legal or regulatory duties.
• Legitimate interests: processing for fraud prevention, platform security, responsible gaming monitoring, and analytics that do not override your fundamental rights and interests as a data subject.
• Consent: where cckkk sends you promotional communications about bonuses, new games, or seasonal offers (such as BPL cricket promotions or Eid offers), this is done only where you have consented to receive such communications. You may withdraw consent and opt out at any time by contacting cckkk support.

cckkk does not sell, rent, trade, or otherwise disclose your personal data to third parties for their own commercial purposes. Your personal data may be shared with third parties only in the following circumstances:

1. Service providers acting as data processors: third-party providers who process data on cckkk's behalf under strict data processing agreements. This includes KYC identity verification providers, payment gateway operators (bKash, Nagad, and other BDT payment processors), cloud infrastructure providers, and customer support platform operators. These providers are contractually prohibited from using your data for any purpose other than providing their specific service to cckkk.
2. Game software providers: game providers such as Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, Spribe, and Ezugi receive the minimum technical data necessary to deliver their games to your device (e.g., session token, game history for result verification). No financial or identity data beyond a session reference is shared with game providers.
3. Legal and regulatory authorities: where cckkk is required by applicable law, court order, or regulatory directive to disclose personal data to government bodies, law enforcement agencies, financial intelligence units, or other authorities, cckkk will comply with that requirement. Where legally permissible, cckkk will endeavour to notify the affected account holder of such a disclosure prior to making it.
4. Business transfers: in the event of a merger, acquisition, or sale of all or substantially all of cckkk's assets, personal data held by cckkk may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and of any material changes to how your data will be processed as a result.

In all cases where personal data is shared with third parties, cckkk takes reasonable steps to ensure that the recipient handles that data securely and in a manner consistent with this Privacy Policy. cckkk does not authorise any third party to use your data for direct marketing, profiling, or any purpose unrelated to the specific service being performed on cckkk's behalf.

cckkk processes payment data — including mobile wallet numbers (bKash, Nagad, Rocket, Upay), partial bank account details, and transaction records — for the sole purpose of processing your deposits and withdrawals in BDT and maintaining the financial records required by applicable law. cckkk uses industry-standard encryption and tokenisation where available to minimise the exposure of raw financial data. Full card numbers and full bank account numbers are never stored by cckkk; only partial references sufficient for transaction matching are retained.

Financial transaction data is retained for a minimum of five years from the date of the transaction in accordance with anti-money laundering record-keeping requirements . This retention period applies regardless of whether the account is active or closed at the time the retention period expires.

cckkk retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law. The following general retention periods apply: account data and identity verification records are retained for the duration of the account's active life plus a minimum of five years following permanent account closure; transaction records are retained for a minimum of five years from the date of each transaction; customer support interaction records are retained for three years from the date of the interaction; and technical logs (IP address, session data) are retained for twelve months unless a longer period is required for an ongoing investigation or legal proceeding.

When personal data is no longer required for any legitimate purpose and no legal retention obligation applies, cckkk will securely delete or anonymise that data. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes without restriction, as it no longer constitutes personal data.

The cckkk Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly and to improve your experience. The categories of cookies used are:

• Essential cookies: strictly necessary for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without preventing core Platform functionality.
• Analytics cookies: used in aggregated, anonymised form to understand how users navigate cckkk, which pages are visited most frequently, and where errors occur. This data informs Platform improvements. Individual user behaviour is not profiled using analytics cookies.
• Preference cookies: used to remember your display preferences and session settings (such as language selection) so that you do not need to re-enter them on each visit. These are non-essential and can be cleared through your browser settings.

You can control and delete cookies through your browser settings at any time. Please note that disabling essential cookies will impair the functionality of the cckkk Platform and may prevent you from logging in or completing transactions. cckkk does not use third-party advertising cookies or cross-site tracking pixels.

As a user of the cckkk Platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact cckkk customer support with a description of your request. cckkk will acknowledge receipt within 5 business days and provide a substantive response within 30 days.

To exercise any of the above rights, contact cckkk customer support by email at [email protected], clearly stating your full name, registered account email or phone number, and the specific right you wish to exercise. cckkk will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied.

cckkk implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include SSL/TLS encryption for all data transmitted between users' devices and the cckkk Platform; encryption of sensitive data fields at rest within cckkk's databases; role-based access controls ensuring that personal data is accessible only to staff members who genuinely require it to perform their job functions; regular security assessments and penetration testing of the Platform's infrastructure; and audit logging of all access to personal data records.

Despite these measures, no internet-based platform can guarantee absolute security against all possible threats. If cckkk becomes aware of a security breach that is likely to result in a high risk to your rights and freedoms, cckkk will notify you without undue delay and will take immediate steps to contain the breach, assess its scope, and mitigate any potential harm. If you suspect that your cckkk account has been compromised, contact cckkk support immediately at [email protected].

The cckkk Platform is strictly intended for adults aged 21 and above. cckkk does not knowingly collect, store, or process personal data relating to any individual under the age of 21. If cckkk becomes aware that personal data relating to a person under the age of 21 has been collected — whether through a false declaration of age during registration or otherwise — cckkk will immediately suspend the associated account, delete the collected personal data, and reverse any financial transactions to the extent technically possible. If you are a parent or guardian and believe that your child has registered on cckkk, please contact cckkk support immediately.

cckkk reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they substantively affect how your personal data is collected, used, or shared — cckkk will provide reasonable advance notice by posting a notice on the Platform or by sending a notification to your registered contact details. The date of the most recent revision is displayed at the top of this page.

Your continued use of the cckkk Platform following the publication of any revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree with the changes, you must cease using the Platform and may request closure of your account. cckkk recommends that you review this Policy periodically to stay informed of how your personal data is being handled.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how cckkk handles your personal data, please contact the cckkk support team. All privacy-related queries will be acknowledged within 5 business days and fully addressed within 30 days of receipt.

Email: [email protected]