ck44m Privacy Policy — How We Handle Your Personal Data

1 Who We Are

ck44m is an internationally licensed online casino and sports betting platform operating at https://ck44m.io. We serve players in the Bangladesh market, offering casino games, live dealer tables, sports betting markets (including BPL, IPL, and T20 World Cup cricket), and related entertainment services. For the purposes of this Privacy Policy, ck44m acts as the data controller in respect of all personal data collected from registered players and visitors to the platform.

Our platform is operated and maintained in accordance with the terms of an international gaming licence. As a licensed operator, we are subject to ongoing regulatory obligations that require us to collect, verify, and retain certain categories of personal data. Compliance with these obligations is a condition of our licence and cannot be waived at a player's request.

All queries, data access requests, and privacy-related complaints should be directed to our dedicated support team at [email protected]. We aim to respond to all privacy-related communications within 30 calendar days of receipt.

2 Data We Collect

ck44m collects several categories of personal data depending on the nature of your interaction with the platform. The categories below describe the data we may hold about you at any given time:

We do not intentionally collect sensitive special-category data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where identity document photographs are required for KYC age verification purposes. Such images are used solely for identity confirmation and are not processed for any other purpose.

3 How We Collect Your Data

ck44m collects personal data through the following mechanisms:

• Direct interactions: Data you provide when completing the registration form, submitting KYC documents, making deposits or withdrawal requests, contacting support via live chat or email, or responding to any account-related communication from ck44m.
• Automated technologies: Technical and usage data collected automatically when you access the platform, including cookies, server logs, pixel tags, and session tracking technologies. These are described in greater detail in Section 7 (Cookies & Tracking).
• Payment processors: Transaction confirmation data received from payment processing partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard when you initiate a financial transaction on the platform.
• Third-party game providers: Aggregated game session data (e.g., game title, session duration, wager outcome) received from licensed game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi for the purposes of account management, dispute resolution, and responsible gaming monitoring.
• Identity verification services: Confirmation data from third-party identity verification providers used to cross-check the authenticity of KYC documents submitted during the account verification process.

4 Why We Use Your Data

ck44m processes your personal data for the following specific purposes. Each purpose is paired with its corresponding legal basis in Section 5 below:

• Account creation and management: To register your player account, maintain your profile, authenticate your identity on login, and administer your account settings and preferences.
• Transaction processing: To process deposits and withdrawal requests via bKash, Nagad, Rocket, and other supported payment methods, and to maintain an accurate record of your financial activity on the platform.
• KYC and age verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity as required under our gaming licence obligations. Unverified accounts are restricted from withdrawing funds.
• Anti-money laundering (AML) compliance: To detect, investigate, and report suspicious financial activity in accordance with applicable international AML standards. This may involve profiling transaction patterns and sharing data with regulatory authorities where legally required.
• Fraud prevention and platform security: To detect and prevent unauthorised account access, multi-accounting, bonus abuse, collusion, and other forms of fraudulent activity that could harm the platform or other players.
• Responsible gaming monitoring: To identify early indicators of problem gambling behaviour (e.g., rapid deposit escalation, long unbroken session durations, self-exclusion history) and to apply appropriate safeguards in compliance with our responsible gaming obligations.
• Customer support: To respond to your enquiries, investigate complaints, and resolve disputes in a timely and documented manner.
• Platform improvement: To analyse aggregate usage patterns and technical performance data to improve the stability, speed, and feature set of the ck44m platform over time.
• Marketing communications (where consent is given): To send you promotional offers, bonus notifications, and event announcements relevant to your gaming preferences, where you have explicitly opted in to receiving such communications. You may withdraw marketing consent at any time by contacting [email protected].

5 Legal Basis for Processing

ck44m processes your personal data on the following legal bases, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing required to deliver the services described in our Terms & Conditions — including account management, transaction processing, and customer support — is carried out on the basis that it is necessary for the performance of the contract between you and ck44m.
• Legal obligation: Processing required to comply with our gaming licence conditions, KYC/AML obligations, and any lawful request from a regulatory or law enforcement authority is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics is carried out on the basis of ck44m's legitimate interests as a licensed gaming operator, provided those interests are not overridden by your fundamental privacy rights.
• Consent: Processing for direct marketing communications is carried out solely on the basis of your explicit, freely given, and withdrawable consent. Where consent is the legal basis, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Data Sharing & Disclosure

ck44m does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients where strictly necessary for the purposes described in this Policy:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard receive the minimum personal and financial data required to authorise and process your deposit or withdrawal transactions. Each provider operates under its own privacy policy and data security standards.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios receive anonymised or pseudonymised session data required to operate their games within the ck44m platform. These providers do not receive your full identity data.
• Identity verification services: Third-party KYC verification providers receive copies of your identity documents solely for the purpose of confirming authenticity and cross-checking against watchlists as required by our AML obligations.
• Regulatory and law enforcement authorities: ck44m will disclose personal data to competent regulatory authorities or law enforcement agencies where legally required to do so, including in response to a valid court order, regulatory investigation, or statutory reporting obligation. We will notify you of any such disclosure where legally permitted to do so.
• Professional advisors: Legal counsel, auditors, and compliance consultants engaged by ck44m may access personal data on a strictly need-to-know basis subject to professional confidentiality obligations.

All third-party recipients of your personal data are contractually required to process that data only for the specified purpose, to maintain appropriate technical and organisational security measures, and to handle it in a manner consistent with the principles described in this Privacy Policy.

7 Cookies & Tracking Technologies

ck44m uses cookies and related tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device by the ck44m web server when you access the platform. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged in during your visit, and security cookies that protect against cross-site request forgery (CSRF). These cookies cannot be disabled without preventing core platform functionality from operating.
• Functional cookies: Store your account preferences (e.g., preferred deposit method, responsible gaming settings, notification preferences) so that you do not need to reconfigure them on each visit.
• Analytics cookies: Collect aggregated, anonymised data about how players interact with the ck44m platform — including which pages are visited most frequently, session duration, and error occurrences — to help us identify performance issues and prioritise improvements.
• Security and fraud-detection cookies: Track behavioural signals (e.g., mouse movement patterns, page interaction timing, device fingerprint components) to distinguish legitimate player sessions from automated bot activity and to detect multi-accounting attempts.

You may manage cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from accessing the ck44m platform, but may affect the quality of your user experience. Disabling strictly necessary cookies will prevent login and core platform functionality from operating correctly.

8 Data Retention

ck44m retains personal data for no longer than is necessary for the purpose for which it was collected, subject to the following minimum retention periods required by our gaming licence and applicable AML regulations:

• Account and identity data: Retained for a minimum of 5 years following account closure or the last transaction date, whichever is later. This retention period reflects standard international gaming licence obligations for KYC record-keeping.
• Transaction records: Retained for a minimum of 5 years following the date of each transaction. This includes deposit confirmations, withdrawal records, bet histories, and bonus activity logs.
• Customer support communications: Retained for 3 years from the date of the communication, or for the duration of any open dispute or regulatory investigation, whichever is longer.
• Marketing preference records: Retained until you withdraw your marketing consent. Once withdrawn, your opt-out preference is retained indefinitely to ensure we do not inadvertently re-contact you following a system update.
• Self-exclusion records: Retained indefinitely to prevent self-excluded individuals from creating new accounts on the ck44m platform, regardless of the original exclusion period requested.
• Technical and analytics data: Aggregated anonymised analytics data is retained for up to 24 months. Raw server log data is retained for 12 months for security and fraud investigation purposes, then securely deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Data that has been anonymised is no longer considered personal data and may be retained indefinitely for statistical purposes.

9 Data Security

ck44m implements a layered, defence-in-depth approach to data security. The following technical and organisational measures are in place to protect your personal data against unauthorised access, loss, destruction, or alteration:

• Encryption in transit: All data transmitted between your device and the ck44m platform is encrypted using 256-bit TLS (Transport Layer Security). The platform operates exclusively over HTTPS. Unencrypted HTTP connections are automatically redirected to HTTPS.
• Encryption at rest: Sensitive personal and financial data stored on ck44m servers is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data and are rotated on a scheduled basis.
• Access controls: Access to personal data within ck44m's systems is restricted on a strict need-to-know basis using role-based access control (RBAC). All internal access to player data is logged and subject to periodic audit.
• Intrusion detection and monitoring: ck44m operates 24/7 automated intrusion detection and anomaly monitoring systems. Suspicious access patterns trigger immediate alerts to our security operations team.
• Penetration testing: The ck44m platform undergoes regular independent penetration testing to identify and remediate security vulnerabilities before they can be exploited.
• Staff training: All ck44m personnel who handle personal data undergo mandatory data protection and security training as part of onboarding and annually thereafter.

Despite these measures, no internet-based system can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, ck44m will notify affected players by email to their registered address as promptly as practicable, and will provide details of the breach, the categories of data affected, and the steps we are taking to address it.

10 Your Rights as a Data Subject

Subject to applicable data protection law and the conditions of our gaming licence, you hold the following rights in respect of your personal data held by ck44m. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and your registered account username:

• Right of access: You may request a copy of the personal data ck44m holds about you, along with information about how it is processed, the legal basis for processing, and who it has been shared with.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held about you. Where data accuracy is disputed, we will investigate and correct confirmed inaccuracies within 10 business days.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where processing is unlawful. This right is subject to our legal retention obligations — we cannot delete data we are required to retain under our gaming licence or AML regulations.
• Right to restriction of processing: You may request that we restrict the active processing of your data while a rectification request or objection is being investigated, or where processing is unlawful but you prefer restriction over deletion.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a structured, machine-readable copy of the personal data you have provided to ck44m.
• Right to object: You may object to processing carried out on the basis of legitimate interests (including profiling for fraud prevention or responsible gaming monitoring) where you believe your individual rights and freedoms override ck44m's interests. You have an unconditional right to object to direct marketing processing at any time.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal date.

ck44m will respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or involves a high volume of data, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.

11 Third-Party Links & External Services

The ck44m platform may contain references to third-party services — primarily payment providers (bKash, Nagad, Rocket, Visa, Mastercard) and game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). When you interact with these services — for example, by initiating a bKash deposit or launching a Pragmatic Play game — you are subject to that provider's own privacy policy and data practices in addition to this Policy.

ck44m is not responsible for the privacy practices of third-party providers. We recommend that you review the privacy policies of any third-party service with which you interact. ck44m does not endorse, review, or assume responsibility for the data practices of any third party, including payment processors and game studios integrated into the platform.

12 Children, Minors, and the 21+ Policy

Upon receiving a credible report that a registered account is held by an individual under 21 years of age, ck44m will immediately suspend the account, initiate an investigation, and — upon confirmation — permanently close the account. Any real-money balance held by an underage account will be returned to the original deposit source. All personal data associated with a confirmed underage account will be securely deleted, except where retention is required for regulatory reporting purposes.

ck44m employs age verification as part of the KYC process to reduce the risk of underage registration. Accepted identity documents for Bangladesh-based players — including the National Identity Card (NID), passport, and driving licence — all carry date-of-birth information that enables our verification team to confirm age compliance before an account is fully activated.

13 Updates to This Privacy Policy

ck44m reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable regulations, or gaming licence obligations. When material changes are made to this Policy, we will notify registered players by email to their registered address and will update the "Last Updated" date displayed at the top of this page and in the hero section above.

Your continued use of the ck44m platform following the effective date of any amended Privacy Policy constitutes your acknowledgment of, and agreement to be bound by, the revised Policy. If you do not agree with any material change to this Policy, you should cease using the platform and contact [email protected] to request account closure.

We encourage you to review this Privacy Policy periodically. Minor clarifications or corrections that do not affect the substance of your rights or our data practices may be made without individual notification. The version of this Policy published on this page at any given time is the current, operative version.

14 Contact Us

For all privacy-related queries, data rights requests, or complaints, please contact the ck44m Data Protection team using the details below. All formal communications regarding this Privacy Policy must be submitted in English.

This Privacy Policy was last reviewed and updated in January 2026. The version published on this page supersedes all prior versions of the ck44m Privacy Policy. Players are advised to review this document periodically to remain informed of how their personal data is collected, used, and protected.