Privacy Policy — How ck22w Collects, Uses, and Protects Your Personal Data

Data We Collect

1.1 Information You Provide Directly

When you register an account on ck22w, make a deposit or withdrawal, contact our support team, or participate in any promotion, you provide us with personal information directly. The categories of data you provide include:

• Identity data: full legal name, date of birth, gender, national identification number or passport number;
• Contact data: residential address (including city, district, and postcode), email address, and mobile telephone number (including bKash, Nagad, or Rocket registered numbers);
• Account credentials: username and encrypted password (ck22w stores only a hashed representation of your password — the plaintext is never retained);
• Financial data: payment method details necessary to process deposits and withdrawals, including mobile financial service account references for bKash, Nagad, Rocket, and Upay; bank account details for Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank transfers; and masked card details for Visa and Mastercard transactions;
• Verification documents: copies of government-issued photographic identification, proof of address, and source-of-funds documentation submitted during our Know Your Customer (KYC) process;
• Support correspondence: records of all communications between you and the ck22w support team, whether conducted via live chat, email, or any other channel we make available.

1.2 Information We Collect Automatically

When you access and use the ck22w platform, certain data is collected automatically through technical means. This includes:

• Device and technical data: IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, and time-zone setting;
• Usage data: pages visited, game sessions played, betting history, session duration, click-through paths, and feature interactions within the platform;
• Location data: approximate geographic location derived from your IP address, used to verify that you are accessing the platform from an eligible location;
• Transaction data: records of all deposits, withdrawals, wagers, winnings, and bonus transactions associated with your account, including timestamps and amounts in BDT (৳).

1.3 Information from Third Parties

In limited circumstances, ck22w may receive personal data about you from third-party sources, including:

• Identity verification agencies and KYC service providers used to validate the documents you submit;
• Payment processors and mobile financial service operators (bKash, Nagad, Rocket, Upay) who confirm transaction completion and account ownership;
• Fraud detection and anti-money laundering screening services that flag accounts associated with known financial crime patterns;
• Advertising and affiliate partners who referred you to ck22w, where you consented to data sharing with those partners at the point of referral.

How We Use Your Data

2.1 Lawful Bases for Processing

ck22w processes your personal data on one or more of the following lawful bases: (a) the processing is necessary to perform the contract between you and ck22w (i.e., to operate your account and deliver the services you requested); (b) the processing is necessary to comply with a legal obligation to which ck22w is subject; (c) the processing is in ck22w's legitimate interests, and those interests are not overridden by your rights; or (d) you have given your explicit consent to a specific processing activity, which you may withdraw at any time.

2.2 Specific Purposes

The table below summarises the key purposes for which ck22w uses your personal data, together with the lawful basis applicable to each purpose:

2.3 Marketing Communications

Where you have opted in to receive marketing communications from ck22w, we may contact you by email or SMS with information about promotions, bonuses, seasonal offers, and new games. You may withdraw your marketing consent at any time by contacting the support team or by following the unsubscribe instructions in any marketing email. Withdrawing marketing consent does not affect ck22w's right to send you service-related communications (such as account notifications, deposit confirmations, and security alerts), which are sent on the basis of contract performance and do not require separate consent.

Data Sharing & Disclosure

3.1 Service Providers and Data Processors

ck22w engages a number of third-party service providers who process personal data on our behalf in order to deliver the ck22w platform and its associated services. These processors are contractually bound to process data only on ck22w's documented instructions, to implement appropriate technical and organisational security measures, and not to engage sub-processors without ck22w's prior written authorisation. Categories of processors include:

• Payment processing partners — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — who process transaction data necessary to complete deposits and withdrawals;
• Identity verification and KYC service providers who validate player-submitted identification documents;
• Cloud infrastructure and data hosting providers who store platform data in secure, access-controlled environments;
• Game technology providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — who may receive anonymised session data necessary to deliver game content;
• Fraud detection and cyber-security firms who process device and behavioural data to identify suspicious account activity;
• Customer support software providers who host the live chat and ticketing infrastructure used by our support team.

3.2 Legal and Regulatory Disclosure

ck22w may disclose personal data to law enforcement agencies, regulatory authorities, or other governmental bodies where we are required to do so by applicable law, court order, or binding regulatory directive. In all such cases, ck22w will disclose only the minimum amount of data necessary to satisfy the legal requirement and will, where legally permissible, notify the affected player of the disclosure.

3.3 Business Transfers

In the event that ck22w undergoes a merger, acquisition, restructuring, or sale of all or a material portion of its assets, personal data held by ck22w may be transferred to the successor entity as part of that transaction. Prior to any such transfer, ck22w will notify affected players and ensure that the successor entity is bound by privacy obligations no less protective than those set out in this Policy.

3.4 No Sale of Personal Data

ck22w does not sell, rent, or otherwise commercially transfer your personal data to third-party advertisers, data brokers, or marketing organisations. Any sharing of data is limited to the service-delivery and legal-compliance purposes described in this Section.

Cookies & Tracking Technologies

4.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device across sessions and to store certain preferences or state information. ck22w uses cookies and similar technologies (including local storage and session storage) to keep the platform functioning correctly, to understand how players use the platform, and to deliver a more relevant experience.

4.2 Categories of Cookies Used by ck22w

4.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies on a per-site basis. Please note that disabling strictly necessary or security cookies will impair your ability to use the ck22w platform. Detailed instructions for managing cookies in the most common browsers are available in each browser's help documentation.

Data Retention

5.1 Retention Principles

ck22w retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal, regulatory, or contractual obligations. Once the relevant retention period has elapsed, personal data is either securely deleted or anonymised in a manner that permanently prevents re-identification.

5.2 Key Retention Periods

5.3 Post-Closure Deletion

When an account is closed — whether at your request, due to inactivity, or by ck22w's decision — the personal data associated with that account enters a post-closure retention period as set out above. During this period the data is restricted from active use and access is limited to authorised personnel with a documented need. At the end of the retention period, the data is permanently deleted or anonymised.

Your Privacy Rights

6.1 Rights Available to You

As a data subject, you have the following rights in relation to the personal data ck22w holds about you. These rights may be subject to certain exceptions or limitations under applicable law, but ck22w will always handle requests in good faith and will explain the basis for any limitation that applies in a particular case.

• Right of access: You may request a copy of the personal data ck22w holds about you, together with information about how it is used and with whom it is shared. We will respond to access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it. We will act on well-founded rectification requests without undue delay.
• Right to erasure: In certain circumstances — for example, where data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other lawful basis — you may request that we delete your personal data. This right is subject to our legal retention obligations as described in Section 5.
• Right to restriction: You may request that we restrict the processing of your data in specific circumstances, such as while a rectification request is under review or where you contest the lawfulness of processing.
• Right to data portability: Where processing is based on consent or contract and is carried out by automated means, you may request a copy of the data you provided to us in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests at any time. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

6.2 How to Exercise Your Rights

To exercise any of the rights listed above, please contact the ck22w support team via 24/7 live chat or by emailing us at [email protected]. Please describe your request clearly and include sufficient information to allow us to verify your identity before acting on the request — this is necessary to protect the security of your data and to prevent unauthorised access by third parties. We will acknowledge your request within 5 business days and provide a substantive response within 30 days of receipt.

Data Security Measures

7.1 Technical Safeguards

ck22w implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS 1.2 / 1.3 encryption for all data in transit between your device and ck22w's servers;
• AES-256 encryption for sensitive data stored at rest, including payment method references and KYC documents;
• One-way cryptographic hashing (bcrypt) for all stored account passwords — ck22w employees cannot read your password;
• Role-based access controls ensuring that ck22w staff access only the personal data necessary for their specific job function;
• Multi-factor authentication requirements for all ck22w staff accessing systems that contain player personal data;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• 24/7 automated monitoring of platform infrastructure for anomalous activity, intrusion attempts, and data exfiltration signals.

7.2 Organisational Measures

Beyond technical controls, ck22w maintains a suite of organisational measures designed to embed privacy and security into everyday operations. All staff who handle personal data receive regular training on data protection obligations and information security practices. Access to player personal data is subject to strict need-to-know controls and is logged for audit purposes. ck22w maintains a documented incident response plan that is tested at least annually.

7.3 Security Incident Response

In the event of a personal data breach that poses a risk to affected players, ck22w will notify affected individuals without undue delay, providing clear information about the nature of the incident, the categories of data involved, the likely consequences, and the measures ck22w has taken or proposes to take to address the breach. ck22w will also notify relevant authorities as required by applicable law. If you suspect that your ck22w account has been compromised, please contact our support team immediately.

7.4 Player Responsibilities

While ck22w takes extensive steps to secure the data it holds, the security of the platform also depends in part on players maintaining secure account practices. You are responsible for keeping your login credentials confidential, using a strong and unique password, enabling any additional account security features offered by the platform, and notifying ck22w immediately if you suspect unauthorised access to your account. ck22w will never ask for your password through any communication channel.

Policy Updates & Contact

8.1 Changes to This Privacy Policy

ck22w reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. When material changes are made, we will notify registered players by email and by displaying a prominent notice on the platform for a period of at least 14 days prior to the updated Policy taking effect. The effective date at the top of this page will be updated to reflect the date on which the revised Policy comes into force. We encourage you to review this Policy periodically to remain informed about how ck22w protects your data. Continued use of the platform after a revised Policy takes effect constitutes your acceptance of the updated terms.

8.2 Contact Information

For any questions, concerns, or formal requests relating to this Privacy Policy or to ck22w's handling of your personal data, please contact us through any of the following channels:

• Live Chat: Available 24/7 directly within the ck22w platform — the fastest route for urgent privacy concerns;
• Email: [email protected] — for formal data subject access requests or written privacy enquiries;
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6).

When submitting a privacy enquiry by email, please include your registered account username and a brief description of your request so we can route it to the correct team and respond as efficiently as possible. We aim to acknowledge all privacy-related emails within 2 business days.

8.3 Governing Law

This Privacy Policy is governed by and construed in accordance with the laws applicable to ck22w's operations in the Bangladesh market. Any dispute arising from this Policy or from ck22w's processing of your personal data shall be subject to the dispute resolution procedures set out in ck22w's Terms & Conditions. For the full Terms & Conditions, please visit the Terms & Conditions page.