ckpk Privacy Policy

1. Introduction

ckpk ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all individuals who interact with our services. This Privacy Policy ("Policy") describes in detail how ckpk collects, uses, stores, shares, and safeguards personal information in connection with the operation of our online casino and sports betting platform, accessible at ckpk.io and through any associated mobile or web applications.

This Policy applies to all registered players, prospective players who browse the ckpk website without registering, and any other individuals whose personal data is processed by ckpk in the course of providing its services to the Bangladesh market and beyond.

By creating a ckpk account, completing the registration process, or continuing to use the platform after this Policy has been published or updated, you signify your informed consent to the collection and use of your personal data as described herein. If you are accessing the platform on behalf of another person, you represent that you have authority to bind that person to the terms of this Policy.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, all of which together form the complete agreement governing your use of the ckpk platform. In the event of any conflict between this Policy and our Terms & Conditions in relation to data processing matters, this Policy shall take precedence.

2. Data We Collect

ckpk collects personal data across several categories depending on the nature of your interaction with the platform. The categories of personal data we may collect include, but are not limited to, the following:

2.1 Identity Data

Full legal name, date of birth, gender, nationality, and copies of government-issued identification documents such as a national identity card, passport, or driving licence submitted during the Know Your Customer (KYC) verification process.

2.2 Contact Data

Email address, Bangladeshi mobile phone number, residential address (including city, district, and postal code), and any other contact details provided during registration or subsequent account updates.

2.3 Financial Data

Payment method details including bKash account numbers, Nagad wallet identifiers, Rocket numbers, Upay credentials, bank account information for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and masked card details for Visa and Mastercard transactions. We do not store full card numbers on our servers; these are tokenised by our payment processing partners.

2.4 Transaction Data

Records of all deposits, withdrawals, bonus credits, wagers placed, game results, and any other financial transactions conducted through your ckpk account, including timestamps, amounts in Bangladeshi Taka (BDT), and transaction reference identifiers.

2.5 Technical Data

IP address, device type and model, operating system version, browser type and version, screen resolution, time zone (Bangladesh Standard Time, UTC+6), session duration, login timestamps, and unique device identifiers.

2.6 Usage Data

Clickstream data, pages visited, games played, bet history, feature interactions, navigation paths through the ckpk interface, and search queries submitted within the platform.

2.7 Communications Data

Records of all communications between you and ckpk's customer support team, including live chat transcripts, email correspondence, and WhatsApp message logs where applicable, along with any complaints, dispute submissions, or feedback provided.

3. How We Collect Data

ckpk collects personal data through a number of distinct mechanisms:

• Direct submission: Data you provide voluntarily when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, submitting a complaint, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access and interact with the ckpk website or application.
• Payment processors: Transaction confirmation data and payment method identifiers provided by our payment partners (such as bKash, Nagad, and card processing networks) in connection with deposit and withdrawal transactions.
• Game providers: Aggregated game-play data and technical logs provided by our licensed game content partners including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Ezugi in connection with game integrity and dispute resolution.
• Identity verification services: Where ckpk uses third-party identity verification providers to assist with KYC compliance, those providers may return identity confirmation data to ckpk for account verification purposes.
• Fraud prevention tools: Risk scoring data generated by our anti-fraud and responsible gaming monitoring systems based on observed platform behaviour.

4. Purpose of Processing

ckpk processes your personal data for the following specific purposes:

• Account management: To create, verify, maintain, and close your ckpk player account, including processing your registration information and authenticating your identity at login.
• Service delivery: To provide access to casino games, live dealer tables, sports betting markets, and all other platform features available to registered ckpk players.
• Transaction processing: To facilitate deposits via bKash, Nagad, Rocket, Upay, and bank transfers, process withdrawal requests, apply bonus credits, and maintain accurate account balances denominated in Bangladeshi Taka.
• Identity verification and KYC compliance: To verify player age (21+), identity, and source of funds in accordance with responsible gaming obligations and anti-money-laundering requirements.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, match-fixing, and other prohibited conduct as defined in our Terms & Conditions.
• Customer support: To respond to enquiries, investigate complaints, resolve disputes, and provide technical assistance through live chat, email, and WhatsApp support channels.
• Responsible gaming: To monitor gaming patterns for signs of problem gambling, enforce deposit limits and self-exclusion requests, and deliver responsible gaming tools and communications.
• Marketing and promotions: To send eligible players information about ckpk promotions, seasonal bonuses (Eid, Pohela Boishakh, BPL season offers, T20 World Cup campaigns), and platform news, where the player has not opted out of marketing communications.
• Legal and regulatory compliance: To comply with applicable legal obligations, respond to lawful requests from regulatory or law enforcement authorities, and maintain records as required by law.
• Platform improvement: To analyse usage patterns, conduct A/B testing, and improve the functionality, design, and content of the ckpk platform through aggregated and anonymised analytics.

5. Legal Basis for Processing

ckpk processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform our contract with you, including account registration, transaction processing, game access, and customer support.
• Legal obligation: Processing necessary to comply with applicable laws and regulations, including KYC verification, anti-money-laundering checks, and record-keeping requirements.
• Legitimate interests: Processing carried out in pursuit of ckpk's legitimate business interests, including fraud prevention, platform security, analytics, and responsible gaming monitoring, where these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — in particular, the sending of direct marketing communications. You may withdraw your consent to marketing at any time by contacting support.

6. Data Sharing & Disclosure

ckpk does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients only where necessary and proportionate for the purposes described in this Policy:

6.1 Payment Service Providers

We share relevant transaction and identity data with payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard to facilitate deposits and withdrawals. These providers process data under their own privacy policies and are bound by contractual data protection obligations.

6.2 Game Content Providers

Game providers such as Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Ezugi may receive your player identifier and game-play data for the purposes of delivering game content, maintaining game integrity, and resolving technical disputes. These providers do not receive your full identity or financial data.

6.3 Identity Verification Partners

Where ckpk uses third-party KYC and identity verification services, your identity documents and related data may be shared with those partners solely for the purpose of completing your verification. Such partners are contractually prohibited from using your data for any other purpose.

6.4 Legal and Regulatory Authorities

ckpk may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of ckpk, its players, or the public.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ckpk's business assets, your personal data may be transferred to the acquiring or successor entity as part of that transaction. You will be notified of any such transfer and the applicable privacy terms via email prior to the transfer taking effect.

7. Data Retention

ckpk retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, regulation, or legitimate business need. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status plus a minimum of five (5) years after account closure, to comply with financial record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of submission, or longer if required by applicable anti-money-laundering regulations.
• Transaction records: All deposit, withdrawal, and betting records are retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for three (3) years from the date of the last communication, unless the communication relates to an unresolved dispute or legal matter.
• Technical and usage logs: Server logs and usage analytics are retained for up to twelve (12) months, after which they are aggregated and anonymised for statistical analysis.
• Marketing consent records: Retained for as long as the consent remains active, and for three (3) years after withdrawal of consent as evidence of historical compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ckpk's internal data deletion procedures. Where deletion is not technically feasible (e.g., data held in backup archives), the data is isolated from active processing until it can be securely destroyed.

8. Data Security

ckpk takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All data transmitted between your browser or app and our servers is protected using TLS 1.3 encryption with 256-bit key strength.
• Encryption at rest: Sensitive personal data and financial records stored in our databases are encrypted using AES-256 encryption.
• Access controls: Access to personal data is restricted to ckpk staff and contractors who require it to perform their job functions. All access is governed by role-based access control and logged for audit purposes.
• Password security: Player account passwords are stored as salted cryptographic hashes. ckpk staff cannot retrieve your plaintext password and will never ask you to disclose it.
• Two-factor authentication: ckpk supports and encourages the use of two-factor authentication (2FA) for player accounts to provide an additional layer of login security.
• Penetration testing: ckpk's platform undergoes regular security assessments and penetration testing by independent security professionals to identify and remediate vulnerabilities.
• Incident response: In the event of a confirmed data breach that poses a risk to player rights and freedoms, ckpk will notify affected players within 72 hours of becoming aware of the breach, describing the nature of the incident and the steps being taken to address it.

9. Cookies & Tracking Technologies

ckpk uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage objects) to operate the platform effectively, personalise your experience, and analyse usage patterns. The following categories of cookies are used on the ckpk platform:

9.1 Strictly Necessary Cookies

These cookies are essential for the operation of the ckpk platform. They enable core functions such as maintaining your login session, preserving your account balance display, and securing form submissions. These cookies cannot be disabled without breaking core platform functionality.

9.2 Performance and Analytics Cookies

These cookies collect aggregated, anonymised data about how players use the ckpk platform — including which pages are visited most frequently, how long players spend on specific game categories, and where errors occur. This data is used exclusively to improve platform performance and user experience.

9.3 Functional Cookies

These cookies remember your preferences, such as your preferred language setting, last-used game category, and any responsible gaming limits you have configured. They improve the convenience and personalisation of your ckpk experience.

9.4 Fraud Prevention and Security Cookies

These cookies support ckpk's fraud detection and anti-bot systems by tracking login patterns, device fingerprints, and behavioural signals. They are essential for the security of your account and the integrity of the platform.

9.5 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies, or to receive a notification before a cookie is placed. Please note that disabling strictly necessary cookies will affect your ability to use certain features of the ckpk platform. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

10. Your Privacy Rights

As a player on the ckpk platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within thirty (30) calendar days.

• Right of Access: You have the right to request a copy of all personal data ckpk holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain information directly through your account settings.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ckpk's legal obligations to retain certain records (such as financial and KYC data).
• Right to Restriction: You have the right to request that ckpk restricts the processing of your personal data in certain circumstances, for example while a dispute about accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis, you have the right to receive your personal data in a structured, machine-readable format and to transfer it to another service provider.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for direct marketing purposes. Upon receiving a valid objection, ckpk will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (in particular, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

11. Third-Party Services & Links

The ckpk platform integrates with a number of third-party services to deliver its full range of features. These include game content delivery networks operated by licensed providers such as Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Ezugi; payment processing infrastructure for bKash, Nagad, Rocket, Upay, and card networks; and customer support tooling.

Each third-party service provider operates under its own privacy policy and data processing terms. ckpk undertakes contractual due diligence to ensure that all third-party partners who process personal data on ckpk's behalf do so in accordance with appropriate data protection standards and under binding data processing agreements.

Where the ckpk platform contains any reference to a third-party brand name (such as a game provider or payment method), this does not constitute an endorsement of that party's privacy practices, and ckpk accepts no responsibility for the data handling practices of third parties once data has left ckpk's direct control in accordance with this Policy.

12. Minors & Age Restriction

The ckpk platform is strictly intended for adults aged 21 and above. ckpk does not knowingly collect, process, or store personal data relating to individuals under the age of 21. The 21+ age requirement is enforced through mandatory age verification during registration and through ongoing KYC checks.

If ckpk becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete the personal data in question, and void any transactions associated with that account. We encourage parents and guardians to monitor the online activities of minors and to use appropriate parental control software to prevent access to gambling platforms.

13. Changes to This Privacy Policy

ckpk reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we provide. When material changes are made, we will notify registered players via email and/or an in-platform notification at least seven (7) calendar days before the changes take effect.

Non-material changes (such as typographical corrections or clarifications that do not alter the substance of the Policy) may be made without advance notice. The effective date at the top of this Policy will always reflect the date on which the current version was last revised.

Your continued use of the ckpk platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must stop using the platform and contact support to initiate account closure and a request for data deletion.

We recommend reviewing this Privacy Policy periodically. Previous versions of this Policy are available upon request by contacting [email protected].

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to ckpk's handling of your personal data, please contact our Data Support team through any of the following channels:

When submitting a privacy-related enquiry, please include your registered email address, your ckpk username, and a clear description of your question or request so that our team can assist you as efficiently as possible. All privacy enquiries are treated with strict confidentiality.