ck34 Privacy Policy — Your Data, Your Rights

1 Overview

This Privacy Policy applies to all users of the ck34 platform accessible at ck34.io, including the website, any related mobile-optimised interfaces, and all associated products and services offered by ck34 — including sports betting, cricket wagering, live casino games, slot games, and account management features.

ck34 is committed to the responsible and transparent handling of your personal data. We collect only the data we genuinely need to deliver our services, protect the integrity of our platform, meet our legal and compliance obligations, and continuously improve the player experience for our users across Bangladesh, including players based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

By registering a ck34 account or continuing to use the ck34 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this policy, please discontinue use of the platform and contact our support team to arrange account closure.

2 Data We Collect

ck34 collects personal data in the following categories. The specific data points collected depend on how you interact with the platform and the services you use.

2.1 Identity Data

Full legal name, date of birth, national identity card (NID) number, passport number, or other government-issued identification number as provided during account registration or Know Your Customer (KYC) verification. This category also includes any identity documents uploaded to verify your eligibility to use the platform.

2.2 Contact Data

Email address, mobile phone number, and residential address (including city, district, and postcode). These details are collected at registration and may be updated by you at any time through your account settings. Contact data is used to communicate with you about your account, transactions, and platform updates.

2.3 Financial Data

Payment method identifiers — including bKash mobile wallet numbers, Nagad account references, Rocket wallet numbers, Upay account references, bank account numbers (where used for bank transfer deposits or withdrawals via Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank), and masked card numbers (Visa, Mastercard). ck34 does not store full card numbers on its own servers; card payment data is tokenised and handled exclusively by PCI-DSS compliant payment processing partners.

2.4 Transaction Data

Records of all deposits, withdrawals, bet placements, bet settlements, bonus credits, bonus usage, and account balance adjustments. Transaction data includes amounts in Bangladeshi Taka (৳ / BDT), timestamps in Bangladesh Standard Time (UTC+6), payment method references, and transaction status records. This data is retained for compliance and audit purposes.

2.5 Technical Data

IP address, browser type and version, operating system, device type, screen resolution, session duration, page-view sequences, referring URL, and unique device identifiers. Technical data is used for fraud prevention, platform security, and the optimisation of the ck34 user experience.

2.6 Usage Data

Records of games played, betting markets accessed, sports and leagues viewed, bonus offers interacted with, promotional content clicked, and other behavioural data generated during your use of the ck34 platform. Usage data helps ck34 understand player preferences and deliver a more relevant experience.

2.7 Communications Data

Records of correspondence between you and ck34, including support chat transcripts, support ticket exchanges, and any formal complaints or requests submitted to the ck34 team. These records are retained for quality assurance, dispute resolution, and compliance purposes.

2.8 Responsible Gaming Data

Records of any responsible gaming tools you have activated on your account, including deposit limits, loss limits, session time limits, cooling-off periods, and self-exclusion requests. This data is treated with the highest sensitivity and is used solely to enforce the protections you have requested and to fulfil ck34's duty of care obligations.

3 How We Collect Data

3.1 Directly From You

The majority of personal data ck34 holds is provided directly by you during the account registration process, when completing KYC verification, when making a deposit or withdrawal, when contacting our support team, or when responding to a promotional offer. You are in control of what information you provide to ck34 at these touchpoints.

3.2 Automatically During Platform Use

Technical and usage data is collected automatically when you access the ck34 platform via your browser or device. This includes standard web server logs (IP address, request timestamps, page paths), cookies placed on your device (see Section 9), and analytics event tracking generated as you navigate the platform. Automatic data collection begins from the moment your browser loads any ck34.io page, regardless of whether you are logged into an account.

3.3 From Third-Party Service Partners

ck34 may receive supplementary data from third-party service partners where this is necessary to verify your identity, process a payment, or assess fraud risk. For example, our KYC verification partner may confirm the validity of an identity document you have submitted; our payment processor may confirm the registered name associated with a bKash or Nagad account. ck34 only receives the minimum data necessary from these partners and does not purchase personal data from data brokers or marketing list providers.

4 How We Use Your Data

ck34 uses your personal data for the following purposes. In every case, data use is proportionate to the specific purpose and limited to what is strictly necessary.

• Account management: Creating, maintaining, and securing your ck34 player account, including authentication, password management, and account settings updates.
• Age and identity verification: Confirming that all registered players are aged 21 or above and that account details are accurate, in accordance with our responsible gaming and anti-fraud obligations.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card networks (Visa, Mastercard), and reconciling transaction records.
• Bet and game management: Recording wagers, settling bets, crediting winnings, applying bonuses, and maintaining a full transaction history accessible from your account dashboard.
• Fraud prevention and security: Detecting and preventing fraudulent account activity, unauthorised access, money laundering, bonus abuse, and the use of automated tools that violate ck34's Terms & Conditions.
• Regulatory and legal compliance: Meeting our anti-money-laundering (AML) obligations, responding to lawful requests from competent authorities, and maintaining audit records as required.
• Responsible gaming enforcement: Honouring deposit limits, loss limits, self-exclusion requests, and other player welfare tools that you have activated on your account.
• Customer support: Responding to your enquiries, resolving disputes, and managing complaints through our support team.
• Platform improvement: Analysing aggregated and anonymised usage data to improve the ck34 platform, fix technical issues, and develop new features that benefit Bangladeshi players.
• Marketing communications: Where you have provided explicit consent, sending you information about ck34 promotions, bonus offers, and new game launches relevant to the Bangladesh market. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting support.

5 Legal Basis for Processing

ck34 processes your personal data on the following legal bases, depending on the specific purpose of the processing activity:

• Contractual necessity: Processing that is required to deliver the ck34 service to you under the terms of your player account agreement — including account creation, payment processing, bet settlement, and customer support.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including age verification, anti-money-laundering checks, fraud prevention, and the retention of financial records.
• Legitimate interests: Processing carried out in ck34's legitimate interests (or those of third parties) where these interests are not overridden by your fundamental rights — including fraud detection, platform security, system analytics, and the prevention of bonus abuse.
• Consent: Processing activities for which ck34 has obtained your explicit prior consent, specifically the sending of marketing communications and the use of non-essential cookies and tracking technologies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Data Sharing

6.1 Who We Share Data With

ck34 does not sell your personal data to any third party. Data is shared only in the following strictly defined circumstances and only with parties who are contractually bound to protect it:

• Payment processors: Your financial and transaction data is shared with payment service providers — including the operators of bKash, Nagad, Rocket, and Upay integrations, and card payment gateway partners — to the extent strictly necessary to process your deposits and withdrawals.
• KYC and identity verification partners: Identity documents and personal details may be shared with our contracted KYC verification service provider for the purpose of confirming your age and identity. This provider is prohibited from using your data for any purpose other than identity verification on behalf of ck34.
• Fraud prevention and AML partners: Technical and transaction data may be shared with third-party fraud detection and anti-money-laundering screening services where this is necessary to assess and mitigate financial crime risk.
• Game and technology providers: Where you play games supplied by third-party studio partners (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), limited technical data (such as session tokens and game results) may be exchanged between ck34 and those providers to deliver the game service and settle outcomes.
• Legal and regulatory authorities: ck34 will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by law, court order, or lawful regulatory request. ck34 will notify affected players of any such disclosure where it is legally permissible to do so.
• Business successors: In the event of a merger, acquisition, or sale of ck34's business or assets, player data may be transferred to the acquiring entity. Affected players will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

6.2 International Data Transfers

Some of ck34's service partners — including technology infrastructure providers, KYC verification services, and game studio partners — may process data in locations outside Bangladesh. In all cases where personal data is transferred internationally, ck34 ensures that appropriate contractual safeguards are in place to protect your data to a standard equivalent to or greater than the protections described in this policy.

7 Data Retention

ck34 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and compliance obligations. The following retention periods apply as a general guide:

When the applicable retention period expires, ck34 will securely delete or irreversibly anonymise the relevant data. Anonymised, aggregated data (from which no individual player can be identified) may be retained indefinitely for analytical and statistical purposes.

8 Data Security

ck34 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes the following key controls:

• 256-bit SSL/TLS encryption: All data transmitted between your browser or device and ck34's servers is protected by industry-standard 256-bit SSL/TLS encryption. The ck34.io domain enforces HTTPS across all pages and connections.
• Password security: Account passwords are stored using a one-way cryptographic hashing algorithm (bcrypt with a high work factor). ck34 staff cannot retrieve your plain-text password — if it is lost, it must be reset.
• Two-factor authentication (2FA): ck34 supports optional two-factor authentication for player accounts, providing an additional layer of protection against unauthorised login even if your password is compromised.
• Access controls: Access to personal data within ck34's internal systems is restricted to authorised personnel on a strict need-to-know basis. All access is logged and audited.
• PCI-DSS compliant payment processing: Card payment data is processed exclusively by PCI-DSS Level 1 certified payment partners. Full card numbers are never stored on ck34's own servers.
• Regular security assessments: ck34 conducts regular vulnerability assessments and penetration testing of its platform infrastructure to identify and remediate security weaknesses proactively.
• Incident response: In the event of a confirmed personal data breach that poses a risk to affected players, ck34 will notify affected individuals as promptly as practicable, providing details of what data was affected and what steps are being taken to address the incident.

9 Cookies & Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember certain information about your visit — such as your login session, language preference, and browsing behaviour — and to provide a more personalised experience on subsequent visits.

9.2 Cookies Used by ck34

ck34 uses the following categories of cookies on the ck34.io platform:

• Strictly necessary cookies: These cookies are essential for the core functionality of the ck34 platform, including maintaining your login session, remembering items in your bet slip, and ensuring the security of your account. These cookies cannot be disabled without breaking core platform features.
• Functional cookies: These cookies remember your preferences (such as display settings and notification choices) so that you do not have to re-enter them on each visit. Functional cookies can be disabled, but doing so may affect your platform experience.
• Analytics cookies: ck34 uses analytics cookies to collect aggregated, anonymised data about how players navigate and interact with the platform. This data is used solely to improve the ck34 platform and user experience. Analytics cookies require your consent before they are placed.
• Fraud prevention cookies: These cookies support ck34's fraud detection systems by generating a device fingerprint that helps identify unusual or potentially fraudulent account activity. They operate as a security control and are treated as strictly necessary for platform integrity.

9.3 Managing Cookies

On your first visit to ck34.io, you will be presented with a cookie preference centre where you can choose which non-essential cookie categories to accept. You may update these preferences at any time. Additionally, you can control cookies at the browser level through your browser's settings — most modern browsers allow you to view, block, or delete cookies from specific websites. Please note that blocking strictly necessary cookies will prevent you from using core ck34 features including logging into your account.

10 Your Rights

As a ck34 player, you hold a number of rights with respect to the personal data we hold about you. ck34 is committed to honouring these rights promptly and without unnecessary complexity. Your rights include:

• Right of access: You have the right to request a copy of the personal data ck34 holds about you. ck34 will provide this in a commonly used, machine-readable format within a reasonable timeframe upon receipt of a verified request.
• Right to rectification: If any personal data ck34 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update most account details directly through your account settings; for other corrections, please contact support.
• Right to erasure ("right to be forgotten"): In certain circumstances — for example, where data is no longer necessary for the purpose it was collected — you may request that ck34 delete your personal data. Note that ck34 may be required to retain certain data (such as transaction and KYC records) to meet its legal obligations even after an erasure request. We will always explain which data can and cannot be erased, and why.
• Right to restriction of processing: You may request that ck34 restrict the processing of your personal data in certain circumstances, such as while the accuracy of data you have disputed is being verified.
• Right to data portability: Where processing is based on your consent or on a contractual basis and is carried out by automated means, you have the right to receive the personal data you have provided to ck34 in a structured, commonly used format and to transmit it to another service provider.
• Right to object: You have the right to object to ck34's processing of your personal data where that processing is based on legitimate interests, including the right to object to direct marketing at any time.
• Rights related to automated decision-making: Where ck34 makes decisions about your account (such as fraud risk assessments) through automated processes that have a significant effect on you, you have the right to request human review of that decision and to understand the logic involved.

To exercise any of these rights, please contact the ck34 data team via email at support [at] ck34.io. ck34 will acknowledge your request within two (2) business days and endeavour to fulfil it within thirty (30) calendar days. Where a request is complex or numerous, this period may be extended by up to a further sixty (60) days, and we will notify you accordingly.

11 Minors

The ck34 platform is strictly for adults aged 21 years and above. ck34 does not knowingly collect or process the personal data of any person under the age of 21. If ck34 becomes aware that personal data belonging to a person under 21 has been collected — whether through a false age declaration at registration or any other means — that account will be immediately closed, any associated data will be deleted (except where retention is required by law), and any winnings generated will be forfeited.

If you are a parent or guardian and believe that a person under 21 has registered an account with ck34, please contact our support team immediately at support [at] ck34.io. We treat reports of underage access as a high-priority matter and will investigate and respond promptly.

ck34 recommends that parents and guardians of household members under the age of 21 make use of reputable parental control and internet filtering software to prevent access to online gambling platforms. ck34 can provide guidance on available parental control tools upon request via our support team.

12 Third-Party Services

The ck34 platform may contain references to third-party services — including game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, and payment partners such as bKash, Nagad, and Rocket. When you interact directly with a third-party service (for example, by accessing a game lobby interface operated by a studio partner), that third party's own privacy policy governs the data collected by their systems. ck34 is not responsible for the data practices of third-party services that operate under their own privacy frameworks.

ck34 conducts due diligence on all third-party partners before integrating their services and requires contractual data protection commitments from all partners who process personal data on ck34's behalf. If you have concerns about the data practices of any specific third-party partner used by ck34, please contact our support team and we will provide whatever information we are able to share.

13 Changes to This Policy

ck34 reserves the right to update this Privacy Policy at any time. When material changes are made to this policy — for example, changes to the categories of data collected, the purposes for which data is used, or the third parties with whom it is shared — ck34 will notify registered players via the contact details held on their account and will update the "Last Updated" date at the top of this page.

Your continued use of the ck34 platform following notification of any change to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with any changes, you should cease using the platform and contact support to arrange account closure. ck34 recommends that you review this Privacy Policy periodically to remain informed of how your data is being handled.

14 Contact Us

If you have any questions, concerns , or requests relating to this Privacy Policy or to the personal data ck34 holds about you, please contact the ck34 data and privacy team using the details below:

• Email: support [at] ck34.io
• Response time: ck34 aims to acknowledge all privacy-related enquiries within two (2) business days and to resolve them within thirty (30) calendar days.
• Language: All privacy enquiries may be submitted in English. Our support team handles communications in English for players across Bangladesh.

When contacting us about a data rights request, please include your registered account email address and a brief description of your request so that we can verify your identity and process your enquiry as efficiently as possible. Do not include sensitive financial information such as full card numbers or bKash PIN codes in any written communication to our team.