ck22 Privacy Policy

Welcome to the ck22 Privacy Policy. ck22 (accessible at ck22.bar) is Bangladesh's trusted online betting and casino platform, offering sports wagering, live casino games, slots, and related entertainment services to adults aged 21 and above. This Privacy Policy applies to all users of the ck22 Platform, including registered account holders, visitors who browse without registering, and anyone who communicates with ck22 through any channel including live chat, email, or support tickets .

At ck22, we take data privacy seriously. We recognise that our users share sensitive personal and financial information with us as part of the registration, verification, and payment processes, and we are committed to handling that information responsibly. This policy has been written in plain English so that every Bangladesh player can clearly understand how their data is managed.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which form part of the overall agreement between you and ck22. Where this Privacy Policy uses defined terms (such as "Platform", "Account", "Services", or "User"), those terms carry the same meaning as in the ck22 Terms & Conditions unless otherwise stated.

2.1 Identity. For the purposes of this Privacy Policy, ck22 acts as the data controller in respect of personal data collected from users of the Platform. The data controller is responsible for determining the purposes and means of processing your personal data.

2.2 Contact Details. If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, you may contact the ck22 Data Privacy team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Channel: Live chat available 24/7 within the ck22 Platform
• Subject Line: Please use "Privacy Request — [your registered username]" for faster routing

2.3 Data Protection Officer. ck22 has designated an internal Data Protection Officer (DPO) responsible for overseeing compliance with data protection obligations. The DPO can be reached through the same contact channels listed above by specifying "Attention: DPO" in your communication.

ck22 collects personal data from users through multiple touchpoints. The categories of data we collect are set out below.

3.1 Registration Data. When you create a ck22 Account, we collect the following information:

• Full legal name
• Date of birth (to verify you are aged 21 or above)
• Registered mobile number (used for OTP verification and account communications)
• Email address (where provided)
• Preferred username and password (password is stored in hashed form — never in plaintext)
• Residential district or city (e.g., Dhaka, Chittagong, Sylhet, Rajshahi, Khulna)

3.2 KYC and Identity Verification Data. As part of our mandatory Know Your Customer (KYC) process, we may collect:

• National Identity Card (NID) number and a copy of the NID document
• Passport number and copy (where used as the primary ID document)
• Proof of residential address (e.g., utility bill, bank statement)
• Selfie or live photograph for biometric identity confirmation

3.3 Financial and Transaction Data. To process deposits and withdrawals, we collect:

• Mobile Financial Services (MFS) account identifiers (e.g., bKash number, Nagad number, Rocket number, Upay number)
• Bank account details where bank transfer is selected
• Transaction history including deposit amounts, withdrawal requests, dates, and payment method used
• Wagering history, game session data, and Account balance records

3.4 Technical and Device Data. When you access the Platform, we automatically collect certain technical data:

• IP address
• Device type and operating system
• Browser type and version
• Referring URL and session duration
• Pages visited and clickstream data within the Platform
• Time zone setting (Bangladesh Standard Time, UTC+6, is the reference)

3.5 Communications Data. When you contact ck22 customer support, we retain:

• Live chat transcripts
• Email correspondence
• Support ticket content and resolution records

3.6 Responsible Gaming Data. If you use our responsible gaming tools, we record:

• Deposit limit settings and any modifications made
• Self-exclusion requests and their duration
• Session time reminder preferences
• Any voluntary disclosures you make to the support team regarding problem gambling concerns

The table below summarises the key purposes for which ck22 processes your personal data, together with the category of data used for each purpose.

4.1 Marketing Communications. ck22 may send you promotional emails or Platform notifications about bonuses, seasonal offers (such as BPL season promotions, Eid offers, or Pohela Boishakh specials), and new features. You will only receive marketing communications if you have provided explicit consent during registration or via your Account settings. You may withdraw consent at any time by updating your notification preferences in the Account settings panel or by contacting support.

4.2 Automated Decision-Making. ck22 uses automated systems to monitor for fraud, bonus abuse, and Prohibited Conduct as defined in our Terms & Conditions. These systems may result in automated account flags or temporary restrictions. Where a significant decision affecting your account is made by an automated process, you have the right to request human review of that decision by contacting our compliance team.

ck22 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract Performance: Processing necessary to provide the ck22 Services you have requested — including account management, transaction processing, and customer support — falls under the legal basis of contract performance.
• Legal Obligation: ck22 is required to collect and retain certain data to comply with anti-money laundering regulations, age verification requirements, and record-keeping obligations. This processing is mandatory and cannot be opted out of.
• Legitimate Interests: Where ck22 processes data to protect the security of the Platform, prevent fraud, improve our Services, or enforce our Terms & Conditions, we rely on our legitimate business interests as the legal basis, provided those interests are not overridden by your privacy rights.
• Consent: Where ck22 sends marketing communications or uses non-essential cookies and tracking technologies, we rely on your freely given, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before your withdrawal.

6.1 General Principle. ck22 does not sell, rent, or trade your personal data to third parties for commercial purposes. Data sharing is limited strictly to the circumstances described in this section.

6.2 Payment Processors. To process your deposits and withdrawals, ck22 shares the minimum necessary financial and identity data with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank (DBBL), and international card networks (Visa, Mastercard). These partners process your data solely to execute the payment transaction and are bound by their own data protection obligations.

6.3 Identity Verification Providers. ck22 may use third-party KYC and identity verification services to process and validate the documents you submit as part of account verification. These providers act as data processors under our instruction and are contractually prohibited from using your data for any purpose beyond identity verification.

6.4 Game Providers. When you access games provided by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe — your session data (including Account identifiers, game selections, and wager amounts) is shared with the relevant provider to the extent necessary to deliver the gaming experience. Game providers are bound by data processing agreements with ck22.

6.5 Analytics and Platform Security Providers. ck22 may use third-party analytics and cybersecurity tools that process technical and behavioural data to help us improve Platform performance, detect fraud, and maintain security. These providers operate as data processors under strict contractual controls and do not receive directly identifiable personal data beyond what is technically necessary.

6.6 Regulatory and Law Enforcement Disclosure. ck22 may disclose personal data to competent authorities, regulators, or law enforcement agencies where required by law or where we determine in good faith that disclosure is necessary to: (a) comply with a legal obligation; (b) protect the rights or property of ck22; or (c) act in urgent circumstances to protect the personal safety of users or the public.

7.1 Retention During Account Lifetime. ck22 retains all personal data associated with your Account for the full duration that your Account remains open and active. This includes registration data, KYC documents, transaction records, wagering history, and communications data.

7.2 Retention After Account Closure. Following the closure of your ck22 Account — whether initiated by you or by ck22 — certain categories of personal data are retained for defined periods as follows:

7.3 Secure Deletion. Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Anonymised or aggregated data may be retained indefinitely for statistical analysis purposes.

8.1 Technical Measures. ck22 implements a comprehensive set of technical security measures to protect your personal data against unauthorised access, loss, or disclosure:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the ck22 Platform is encrypted using industry-standard 256-bit SSL/TLS protocols.
• Password Hashing: User passwords are stored using a strong one-way cryptographic hashing algorithm. ck22 staff cannot retrieve or view your password in plaintext form.
• OTP Authentication: Sensitive account actions — including login, password reset, and withdrawal confirmation — require one-time password (OTP) verification sent to your registered mobile number.
• Data Encryption at Rest: Sensitive personal and financial data stored on ck22 servers is encrypted at rest using AES-256 encryption.
• Firewall and Intrusion Detection: ck22's server infrastructure is protected by enterprise-grade firewall systems and continuously monitored intrusion detection tools.
• Access Controls: Access to personal data within ck22 is restricted on a strict need-to-know basis. Staff access to user data is logged and subject to regular audit review.

8.2 Organisational Measures. In addition to technical safeguards, ck22 maintains organisational security measures including regular data protection training for all staff who handle personal data, internal data handling procedures, and incident response protocols.

8.3 Data Breach Response. In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, ck22 will notify affected users without undue delay via their registered mobile number or email address, and will take all reasonable steps to contain and remediate the breach.

8.4 Your Responsibility. While ck22 implements robust security on the Platform side, you are responsible for maintaining the security of your own login credentials. Do not share your password or OTP codes with anyone. ck22 staff will never ask you for your password under any circumstances.

9.1 What Are Cookies. Cookies are small text files that a website stores on your device when you visit. They allow the Platform to recognise your device on subsequent visits and to remember certain preferences or session states.

9.2 Types of Cookies Used by ck22. The ck22 Platform uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They manage your login session, maintain your authenticated state while you navigate the site, and enable core features such as account balance display and bet placement. These cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: These cookies remember your preferences — such as display settings and session reminders — to personalise your experience on return visits. They are not strictly necessary but improve usability.
• Analytical Cookies: ck22 uses analytical cookies to understand how users navigate the Platform — which pages are most visited, where users drop off, and how different features are used. This data is processed in aggregated form to help us improve the Platform. Analytical cookies require your consent.
• Anti-Fraud Cookies: Certain cookies are used by our security systems to detect unusual patterns of behaviour that may indicate fraudulent activity. These operate as part of our legitimate interest in protecting the security of the Platform and all its users.

9.3 Managing Cookies. You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to use the ck22 Platform. Detailed instructions for managing cookies on major browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help documentation.

9.4 Local Storage. In addition to cookies, the ck22 Platform may use browser local storage to save session state and user preferences locally on your device. Local storage data does not leave your device unless explicitly transmitted as part of a Platform request.

As a ck22 user, you hold a number of rights with respect to your personal data. ck22 is committed to facilitating the exercise of these rights in a timely and transparent manner. Your rights are summarised below.

• Right of Access: You have the right to request a copy of the personal data that ck22 holds about you. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain registration details directly within your Account settings; for KYC data corrections, please contact support.
• Right to Erasure: In certain circumstances, you have the right to request that ck22 delete your personal data. This right is not absolute — where ck22 is required by law to retain data (e.g., for AML compliance), we are unable to fulfil erasure requests for those specific data categories within the mandatory retention period.
• Right to Restrict Processing: You have the right to request that ck22 restrict the processing of your personal data in certain circumstances, such as while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to request that it be transmitted to another controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data that is based on legitimate interests, including profiling. You also have an unconditional right to object to the processing of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right Against Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing that produces a significant legal or similarly significant effect on you, and to request human review of any such decision.

To exercise any of these rights, please contact the ck22 Data Privacy team at [email protected] with the subject line "Privacy Rights Request — [your registered username]". We may need to verify your identity before processing your request. We will respond within 30 days of receiving a complete and verified request.

11.1 Age Restriction. The ck22 Platform is strictly for adults aged 21 years and above. ck22 does not knowingly collect personal data from anyone under the age of 21, and we take active steps to prevent underage users from accessing the Platform through our KYC age verification process.

11.2 Discovery of Underage Data. If ck22 discovers or is notified that personal data has been collected from a user who is under 21 years of age, we will immediately suspend the relevant Account, delete the personal data associated with it (to the extent permitted by law), and take any other remedial steps necessary to address the situation.

11.3 Parental Guidance. If you are a parent or guardian and you believe that your child has registered an Account on ck22 or submitted personal data to the Platform, please contact us immediately at [email protected]. We will investigate and respond within 48 hours.

11.4 Device Controls. If you share a device with a minor, ck22 strongly recommends activating device-level parental controls and ensuring that your ck22 login credentials are stored securely and are not accessible to anyone under the age of 21.

12.1 Cross-Border Processing. Some of the third-party service providers used by ck22 — including game providers, analytics platforms, and security tools — may process personal data in jurisdictions outside Bangladesh. Where data is transferred internationally, ck22 takes steps to ensure that appropriate safeguards are in place, including contractual protections that require the receiving party to apply a standard of data protection equivalent to or higher than that applied by ck22.

12.2 Game Provider Data Flows. Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe operate global platforms. Session and wagering data shared with these providers in the course of gameplay may be processed on servers located outside Bangladesh. All such providers operate under data processing agreements with ck22.

12.3 Your Rights on Transfers. Where your data is transferred internationally, your rights as described in Section 10 of this policy continue to apply in full. You may request information about the specific safeguards in place for any particular transfer by contacting the ck22 Data Privacy team.

13.1 Right to Update. ck22 reserves the right to update or revise this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes in our data processing practices, or improvements to the Platform and its features.

13.2 Notification of Material Changes. Where changes to this Privacy Policy are material — meaning they significantly affect how your data is collected, used, or shared — ck22 will notify registered users via their registered mobile number or Platform notification prior to the changes taking effect. The effective date of the updated policy will be clearly stated at the top of this page.

13.3 Continued Use. Your continued use of the ck22 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you should cease using the Platform and contact support to request Account closure in accordance with the Terms & Conditions.

13.4 Version History. ck22 maintains an internal version history of this Privacy Policy. If you wish to review a previous version, you may request it from the Data Privacy team using the contact details in Section 14.

14.1 General Enquiries. For any general questions about this Privacy Policy or about how ck22 handles your personal data, please contact our Data Privacy team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, directly within the ck22 Platform
• Subject Line: Please use "Privacy Enquiry — [your registered username]" to ensure your message is routed to the correct team

14.2 Formal Privacy Rights Requests. To submit a formal request to exercise any of the rights described in Section 10 of this policy — including access, rectification, erasure, restriction, portability, or objection — please email [email protected] with the subject line "Privacy Rights Request — [your registered username]". Please include your full name, registered mobile number, and a clear description of the right you wish to exercise. We will acknowledge your request within 5 business days and provide a full response within 30 calendar days.

14.3 Complaints. If you believe that ck22 has handled your personal data in a manner that does not comply with this Privacy Policy or applicable data protection obligations, we encourage you to contact us in the first instance so that we can investigate and seek to resolve your concern directly. ck22 takes all privacy complaints seriously and will respond to every complaint received in writing within 15 business days.

14.4 Escalation. If you are not satisfied with our response to your complaint, you have the right to escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction. ck22 will cooperate fully with any investigation initiated by a competent supervisory authority.