Your Privacy Matters at cckkk — Our Commitment to You

This Privacy Policy ("Policy") is published by cckkk, the operator of the online casino and sports betting platform at https://cckkk.io. It describes our practices regarding the collection, use, storage, disclosure, and protection of personal data belonging to users ("you", "Player") of the cckkk platform.

We take your privacy seriously. This Policy is written in plain, accessible English so that every player — regardless of their legal background — can understand what happens to their personal information when they use cckkk. We encourage you to read it carefully alongside our Terms & Conditions and Responsible Gaming Policy.

1 Introduction and Scope

This Policy applies to all personal data processed by cckkk in connection with the operation of https://cckkk.io, including data collected through the website, any associated mobile web experience, customer support channels, email communications, and any promotional activities conducted by cckkk.

This Policy does not apply to third-party websites, payment processors, or game providers that you may interact with through the cckkk platform. Those third parties operate their own privacy policies, which we encourage you to review independently. cckkk is not responsible for the data practices of any third party, even where that third party's service is embedded within or linked from the cckkk platform.

The primary audience of this platform is English-speaking adults aged 21 and above located in Bangladesh, including players in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. References to "applicable law" throughout this Policy refer to the laws and regulations relevant to cckkk's operating jurisdiction.

2 Data Controller Identity

cckkk acts as the data controller in respect of the personal data it collects from players and visitors to https://cckkk.io. As data controller, cckkk determines the purposes for which personal data is processed and the means by which that processing is carried out.

For all privacy-related enquiries, data access requests, and complaints, the designated point of contact is:

• Platform Name: cckkk
• Website: https://cckkk.io
• Privacy Contact Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)

3 What Personal Data We Collect

The following table summarises the categories of personal data that cckkk may collect from you, along with examples of the specific data points within each category:

cckkk does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, genetic data, or biometric data for the purpose of uniquely identifying a natural person, except where this is incidentally included in KYC documentation submitted by the player.

4 How We Collect Your Data

cckkk collects personal data through the following channels and mechanisms:

• Registration Form: When you create a cckkk account, you directly provide identity, contact, and account data.
• KYC Verification: When you submit identity documents to complete the Know Your Customer process required prior to withdrawals.
• Deposits and Withdrawals: When you initiate a financial transaction, your payment provider shares transaction reference data with cckkk to facilitate the transfer.
• Platform Usage: Gaming activity data and technical data are collected automatically as you navigate and interact with the cckkk platform.
• Customer Support: When you contact our support team by email or live chat, the content of those communications is collected and stored.
• Cookies and Similar Technologies: cckkk uses cookies and web beacons to collect technical data, session data, and analytics information. See Section 10 for full details.
• Third-Party Verification Services: cckkk may use third-party identity verification services to cross-reference the information you have provided during registration or KYC. These services supply a verification result but do not retain copies of your data on cckkk's behalf beyond the verification transaction.

5 Why We Use Your Data

cckkk processes your personal data for the following clearly defined purposes:

• Account Management: To create, maintain, and administer your cckkk player account, including enforcing the single-account rule and managing account settings.
• Identity Verification and KYC Compliance: To verify that you are who you say you are, that you are at least 21 years of age, and that you are eligible to use the platform under our Terms & Conditions.
• Payment Processing: To facilitate deposits and withdrawals via your chosen payment method, and to maintain accurate financial records for your account.
• Game and Betting Services: To deliver the casino games and sports betting services you use, to record betting outcomes, to settle wagers, and to maintain your betting and transaction history.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, underage gambling, and any other prohibited activities on the platform.
• Legal and Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering (AML) laws, responsible gaming regulations, and any other legal requirements applicable to the operation of an online gambling platform.
• Customer Support: To respond to your enquiries, resolve complaints, and provide technical assistance.
• Responsible Gaming: To monitor your gaming activity for indicators of problem gambling behaviour and to enforce any responsible gaming tools you have activated (deposit limits, self-exclusion, session limits).
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the performance, design, and content of the cckkk platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about cckkk — but only where you have given your explicit consent to receive such communications. You may withdraw this consent at any time.

6 Legal Basis for Processing

cckkk processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and cckkk — i.e., to operate your player account, process transactions, and deliver gaming services.
• Legal Obligation: Processing that is required to comply with applicable law, including AML obligations, age verification requirements, and record-keeping mandates.
• Legitimate Interests: Processing that is necessary for cckkk's legitimate business interests — such as fraud detection, platform security, and service analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily applicable to marketing communications and to the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7 Sharing Your Data with Third Parties

cckkk does not sell your personal data. We share personal data with third parties only in the circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive the transaction data necessary to process your deposits and withdrawals. These providers operate their own privacy policies and are independent data controllers for the data they receive.
• Identity Verification Partners: Third-party KYC and AML screening services receive the identity data necessary to verify your eligibility and screen against sanctions and watchlists. These partners are bound by contractual data processing obligations.
• Game Technology Providers: Game studios and platform providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) receive the technical session data necessary to deliver their games within the cckkk environment. These providers do not receive your full identity profile.
• IT and Infrastructure Providers: Hosting, content delivery, and cybersecurity service providers who support the operation of the cckkk platform. All such providers are required to process data only on cckkk's instructions and subject to appropriate data security obligations.
• Legal and Regulatory Authorities: cckkk will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, or where disclosure is necessary to protect the rights, property, or safety of cckkk, its players, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of cckkk's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights in relation to it.

8 Data Retention

cckkk retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any longer retention period required by applicable law or regulation. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted, destroyed, or irreversibly anonymised so that it can no longer be associated with any individual. Where data must be retained beyond the standard period due to an ongoing legal dispute, regulatory investigation, or compliance hold, affected players will be notified where practicable.

9 Security Measures

cckkk implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• Encryption in Transit: All data transmitted between your device and cckkk's servers is encrypted using TLS 1.2 or higher (256-bit SSL). HTTPS is enforced across the entire platform with HTTP Strict Transport Security (HSTS) enabled.
• Encryption at Rest: Sensitive data — including passwords, financial data, and KYC documents — is encrypted at rest using AES-256 encryption. Passwords are never stored in plaintext; they are hashed using a modern, salted hashing algorithm.
• Access Controls: Access to personal data within cckkk's systems is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security training.
• Network Security: cckkk employs firewalls, intrusion detection systems, and DDoS mitigation measures to protect platform infrastructure from external threats.
• Regular Security Audits: cckkk conducts periodic internal security assessments and engages third-party security specialists to perform vulnerability assessments and penetration testing.
• Incident Response: cckkk maintains a documented data breach incident response plan. In the event of a confirmed breach, affected players will be notified without undue delay where the breach poses a risk to their rights and freedoms.

10 Cookies and Tracking Technologies

cckkk uses cookies and similar tracking technologies (including web beacons and local storage objects) to enhance your experience on the platform, maintain session state, prevent fraud, and analyse platform usage. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the platform to function correctly. They maintain your login session, store your language preference, and enable core security features. These cookies cannot be disabled without significantly impairing your ability to use the platform.
• Functional Cookies: These cookies remember your preferences and personalisation choices — such as your preferred game categories, display settings, and responsible gaming tool configurations — so you do not need to re-enter them on each visit.
• Analytical Cookies: cckkk uses anonymised analytical cookies to understand how players navigate the platform, which pages are most visited, and where technical errors occur. This data is used solely to improve the platform and is not linked to individual player profiles.
• Security and Fraud Prevention Cookies: These cookies help cckkk detect suspicious activity, enforce single-account rules, identify automated access attempts, and protect the integrity of the platform's financial systems.

cckkk does not use advertising tracking cookies, cross-site tracking pixels, or third-party behavioural profiling technologies. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect platform functionality and may prevent you from logging in.

11 Your Rights Over Your Personal Data

Subject to applicable law and certain limited exceptions, you hold the following rights in relation to the personal data cckkk holds about you:

• Right of Access: You have the right to request a copy of the personal data cckkk holds about you, along with information about how it is used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For account data, some corrections can be made directly through your account settings.
• Right to Erasure ("Right to Be Forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (for consent-based processing), or where the data has been unlawfully processed. This right is subject to overriding legal retention obligations — for example, financial records that must be kept for 7 years cannot be erased on request alone.
• Right to Restriction of Processing: You have the right to request that cckkk restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is contested, or where you have objected to processing pending verification of legitimate grounds.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling. You also have an absolute right to object to processing for direct marketing purposes, including any profiling related to marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please submit a written request to [email protected] with the subject line "DATA RIGHTS REQUEST". Include your full name, account username, and a description of the right you wish to exercise. cckkk will respond within 30 calendar days. We may request additional identification to verify that the request is being made by the account holder.

12 Children and Minors

The cckkk platform is strictly for adults aged 21 years and above. cckkk does not knowingly collect personal data from any person under the age of 21. If we discover or are credibly informed that a player who has registered an account is under the age of 21, we will immediately close the account, forfeit any balances in accordance with our Terms & Conditions, and delete all personal data associated with that account to the extent permitted by our legal retention obligations.

If you are a parent or guardian and you believe that a minor in your care has registered a cckkk account, please contact us immediately at [email protected]. We take underage gambling very seriously and will act without delay on credible reports.

13 International Data Transfers

In the course of operating the cckkk platform, your personal data may be transferred to and processed in countries outside Bangladesh. This may occur when we use game technology providers, cloud hosting infrastructure, or identity verification services whose servers are located outside Bangladesh.

Where personal data is transferred internationally, cckkk takes steps to ensure that your data receives an adequate level of protection equivalent to the safeguards described in this Policy. These steps may include entering into appropriate data transfer agreements with the recipient, ensuring the recipient is subject to equivalent data protection laws, or relying on other legally recognised transfer mechanisms.

By using the cckkk platform and providing your personal data, you acknowledge and consent to the possibility of your data being transferred and processed internationally as described in this section.

14 Changes to This Privacy Policy

cckkk reserves the right to amend this Privacy Policy at any time. Material changes — such as new categories of data being collected, new purposes for processing, or new categories of third parties with whom data is shared — will be communicated to registered players via the email address on file at least 7 calendar days before the changes take effect.

Minor changes — such as clarifications of existing provisions or updates to contact information — may be made without advance notice. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. Continued use of the platform after an amendment constitutes acceptance of the revised Policy.

We encourage you to review this Policy periodically. Archived versions of previous policies are available on request by emailing [email protected].

15 Contact and Data Requests

For all privacy-related enquiries, data subject rights requests, and complaints relating to cckkk's data practices, please contact us using the details below:

• Privacy Contact Email: [email protected]
• Subject Line for Data Requests: "DATA RIGHTS REQUEST"
• Subject Line for Privacy Complaints: "PRIVACY COMPLAINT"
• Response Time: Within 30 calendar days for data rights requests; within 5 business days for general privacy enquiries
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)

We are committed to resolving all privacy concerns promptly and fairly. If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the appropriate regulatory authority in your jurisdiction.