ck48 Privacy Policy — Your Data, Our Responsibility

01 Introduction

ck48 ("ck48", "we", "us", "our") operates the online betting and casino platform accessible at ck48.io. This Privacy Policy describes how ck48 collects, uses, stores, shares, and protects personal data obtained from players, visitors, and prospective customers who interact with our platform, including from within Bangladesh.

We are committed to handling your personal data lawfully, fairly, and transparently. This policy is written in plain English so that every player can understand exactly what happens to their information. By registering an account or otherwise using the ck48 platform, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. Where any conflict arises between documents, the Terms & Conditions shall prevail except where this Privacy Policy expressly states otherwise.

02 Data Controller

For the purposes of applicable data protection legislation, ck48 is the data controller responsible for the personal data of players and visitors to the ck48 platform. As data controller, ck48 determines the purposes and means of processing your personal data.

You may contact our data protection team at any time using the details set out in Section 14 (Contact Us) of this policy. All data-related enquiries, access requests, and complaints will be handled by our dedicated privacy team.

Where ck48 engages third-party service providers to process personal data on its behalf — for example, payment processors, identity verification providers, or analytics vendors — those providers act as data processors under instruction from ck48 as the data controller. ck48 remains responsible for ensuring that such processing is conducted in accordance with this policy and applicable law.

03 Data We Collect

ck48 collects the following categories of personal data from players and platform visitors:

ck48 does not collect or process special category data (such as health information, biometric data, or racial/ethnic origin data) except where strictly required by law or explicitly consented to by you in writing.

04 How We Collect Data

ck48 collects personal data through the following channels:

• Direct interactions: Data you provide when creating your account, completing KYC verification, making deposits or withdrawals, contacting customer support, or responding to surveys or promotions.
• Automated technologies: Data collected automatically when you visit or use the ck48 platform, including IP address, device identifiers, browser information, and session activity logs. This data is collected via cookies, web server logs, and similar tracking technologies described in Section 8.
• Third-party sources: Identity and fraud screening data received from our KYC and AML verification partners; transaction data received from payment processors (bKash, Nagad, Rocket, Upay); and analytics data aggregated by our analytics service providers.
• Publicly available sources: In limited circumstances, ck48 may supplement your profile with information from publicly available sources — for example, to verify an address or to conduct enhanced due diligence as required by anti-money laundering obligations.

05 How We Use Your Data

ck48 uses your personal data for the following purposes:

• Account management: To create, maintain, verify, and administer your ck48 player account, including processing registration details and managing your account preferences and settings.
• Service delivery: To process your deposits and withdrawals, settle your bets and casino game results, credit and manage your bonus balances, and deliver the core betting and casino services you use on the platform.
• Identity and age verification: To verify that you meet the minimum age requirement of 21 years and that the identity information you have provided is accurate, as required to comply with our responsible gaming and anti-money laundering obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and any other conduct prohibited under our Terms & Conditions. This includes automated fraud screening of transactions and account activity patterns.
• Customer support: To respond to your enquiries, resolve complaints, and manage your support tickets. Communications data is retained to ensure continuity of service and to train our support team.
• Legal compliance: To fulfil our obligations under applicable anti-money laundering, counter-terrorism financing, and data protection legislation, including maintaining the transaction records and identity documents required by law.
• Platform improvement: To analyse aggregated usage patterns, diagnose technical issues, test new features, and improve the overall quality and performance of the ck48 platform.
• Responsible gaming: To monitor player behaviour for signs of problem gambling and to apply responsible gaming tools (deposit limits, cooling-off periods, self-exclusion) in accordance with our Responsible Gaming Policy.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided explicit consent to receive such communications. You may withdraw marketing consent at any time via your account settings or by contacting support.

ck48 will not use your personal data for any purpose that is incompatible with the purposes listed above without providing prior notice and, where required, obtaining your consent.

06 Legal Basis for Processing

ck48 processes your personal data on the following legal bases:

• Contract performance: Processing your identity data, contact data, and financial data is necessary to fulfil our contractual obligations to you as a registered ck48 player — specifically, to operate your account, process your transactions, and deliver the services you have subscribed to.
• Legal obligation: Processing identity data, financial data, and verification data is required to comply with applicable anti-money laundering legislation, age verification requirements, and other legal obligations to which ck48 is subject.
• Legitimate interests: Processing technical data and usage data for fraud prevention, platform security, and service improvement is carried out on the basis of ck48's legitimate interests in operating a safe and fair platform, provided those interests are not overridden by your privacy rights.
• Consent: Processing your data for direct marketing communications is carried out only on the basis of your explicit, freely given, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

07 Data Sharing & Disclosure

ck48 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: bKash, Nagad, Rocket, and Upay receive the transaction data necessary to process your deposits and withdrawals. Each payment provider is subject to its own privacy policy and data protection obligations.
• Identity verification providers: Third-party KYC and AML screening providers receive identity data (name, date of birth, national ID details) to conduct age and identity verification and fraud screening on ck48's behalf.
• Game providers: Software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe receive limited technical and gameplay data necessary to deliver their games within the ck48 platform. These providers are not authorised to use player data for their own marketing purposes.
• IT and hosting providers: Cloud infrastructure, platform hosting, and cybersecurity service providers may access technical data in the course of providing contracted services to ck48. All such providers operate under data processing agreements.
• Analytics providers: Aggregated, anonymised usage data may be shared with analytics platforms to help ck48 understand how players use the platform and to identify areas for improvement. No individual player is identifiable in these analytics reports.
• Law enforcement and regulators: ck48 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or regulatory requirement. ck48 will notify you of such disclosure where legally permitted to do so.

08 Cookies & Tracking Technologies

ck48 uses cookies and similar technologies — including web beacons, pixel tags, and local storage — to operate, secure, and improve the ck48 platform. The following types of cookies are used:

• Strictly necessary cookies: These cookies are essential for the ck48 platform to function. They enable core features such as user authentication, session management, and security verification. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: These cookies remember your preferences — such as your preferred language, odds format, or display settings — so that you do not need to re-enter them on each visit.
• Performance and analytics cookies: These cookies collect aggregated, anonymised information about how visitors use the ck48 platform, including which pages are visited most frequently and how long sessions typically last. This data is used solely to improve the platform and is never linked to individual player identities.
• Security cookies: These cookies help ck48 detect and prevent fraudulent login attempts, credential stuffing attacks, and other malicious activity. They record device fingerprints and session anomalies for security monitoring purposes.

ck48 does not deploy cross-site behavioural advertising cookies, social media tracking pixels, or retargeting cookies. Your browsing activity on the ck48 platform is not shared with advertising networks.

Most web browsers allow you to control cookies through their settings. You may choose to block or delete cookies; however, disabling strictly necessary cookies will affect your ability to use core platform features including account login. For detailed guidance on managing cookies in your browser, consult your browser's help documentation.

09 Data Security

ck48 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the ck48 platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. Look for the padlock icon in your browser's address bar when using ck48.
• Encrypted data storage: Sensitive personal data and financial records are stored in encrypted form on secure servers. Encryption keys are managed under strict access controls and rotated regularly.
• Access controls: Access to personal data is restricted to ck48 staff and authorised service providers who have a legitimate operational need. All staff with data access undergo security training and are bound by confidentiality obligations.
• Intrusion detection and monitoring: ck48's platform infrastructure is continuously monitored for security anomalies, unauthorised access attempts, and data exfiltration indicators.
• Incident response: ck48 maintains a documented security incident response procedure. In the event of a data breach that poses a risk to player rights and freedoms, ck48 will notify affected players and relevant authorities within the timeframes required by applicable law.

While ck48 takes all reasonable steps to protect your data, no electronic transmission or storage system is completely immune to security risks. We encourage all players to use strong, unique passwords for their ck48 accounts and to ensure that their devices are protected with up-to-date security software.

10 Data Retention

ck48 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply:

Once the applicable retention period expires, personal data is either securely deleted from ck48's systems or anonymised such that it can no longer be linked to an individual player. Anonymised, aggregated data may be retained indefinitely for statistical and business analysis purposes.

Where you request deletion of your personal data before the end of the standard retention period, ck48 will comply with that request except where retention is required by law. In such cases, ck48 will inform you of the legal basis for continued retention and will restrict processing of that data to the minimum necessary.

11 Your Rights

As a player whose personal data is processed by ck48, you have the following rights regarding your personal data:

• Right of access: You have the right to request a copy of the personal data ck48 holds about you, together with information about how it is being used. ck48 will provide this information within 30 days of receiving your request.
• Right to rectification: If any of the personal data ck48 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update basic account information directly within your ck48 account settings.
• Right to erasure ("right to be forgotten"): You have the right to request that ck48 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where processing is unlawful. This right is subject to ck48's legal obligations to retain certain data as described in Section 10.
• Right to restriction of processing: You have the right to request that ck48 restrict processing of your personal data while the accuracy of that data is contested, while a complaint is under investigation, or where you have objected to processing pending verification of ck48's legitimate interests.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to request that this data be transferred directly to another data controller where technically feasible.
• Right to object: You have the right to object to processing of your personal data carried out on the basis of ck48's legitimate interests, including profiling for fraud prevention purposes. You also have an absolute right to object to processing for direct marketing purposes, which ck48 will honour immediately upon receipt of your objection.
• Right not to be subject to automated decisions: Where ck48 makes decisions about your account based solely on automated processing (including fraud risk scoring), you have the right to request human review of that decision, to express your point of view, and to contest the outcome.

To exercise any of the rights described above, please submit a written request to [email protected] with the subject line "Data Rights Request". Please include your registered username and a description of the right you wish to exercise. ck48 will acknowledge your request within 48 hours and respond substantively within 30 days. In cases of complexity or high volume, this period may be extended by a further 30 days, in which case ck48 will notify you of the extension and the reason for it.

12 Children & Minors

The ck48 platform is strictly restricted to adults aged 21 years and above. ck48 does not knowingly collect personal data from any individual under the age of 21. Age verification is conducted as part of the mandatory Know Your Customer (KYC) process that every player must complete before deposits and withdrawals are enabled on their account.

If ck48 becomes aware that it has inadvertently collected personal data from an individual under the age of 21, it will immediately suspend the relevant account, delete all associated personal data, and reverse any financial transactions processed for that account. Any individual who has reason to believe that a minor has successfully registered on the ck48 platform is urged to report this immediately to [email protected].

Parents and guardians concerned about underage gambling are encouraged to review our Responsible Gaming Policy for information about tools and resources available to help prevent minors from accessing online gambling platforms.

13 Policy Updates

ck48 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — meaning they significantly affect the way your personal data is collected, used, or shared — ck48 will provide advance notice to registered players via email or an in-platform notification at least 14 days before the changes take effect.

Minor updates — such as corrections to typographical errors, clarifications that do not change the substance of the policy, or updates to contact information — may be made without advance notice. The "Last Updated" date at the top of this document will always reflect the date of the most recent revision.

Your continued use of the ck48 platform after the effective date of any revised Privacy Policy constitutes your acknowledgement that you have read the updated policy and that you accept its terms. If you do not agree with a revised policy, you should cease using the platform and request account closure before the effective date of the change. Data already collected under the previous policy version will continue to be governed by the terms applicable at the time of collection.

14 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way ck48 handles your personal data, please contact our privacy team through any of the following channels:

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate. Responses are typically provided within 24–48 hours.
• Live Chat: Available 24/7 directly within the ck48 platform. Live chat is the fastest channel for urgent privacy-related queries.
• WhatsApp: +880 1700 000000 — available during Bangladesh Standard Time (UTC+6) business hours for non-urgent privacy enquiries.

Formal data rights requests and privacy complaints must be submitted in writing via email to [email protected]. Please include your full registered username, a clear description of your request or complaint, and any relevant supporting documentation. ck48 will acknowledge all formal privacy requests within 48 hours and provide a substantive response within 30 days.

ck48 is committed to resolving all privacy concerns promptly, fairly, and transparently. We take every data protection query seriously and will work with you to address your concerns in a timely manner.