Your Privacy Matters at ck45 — How We Protect Your Data

1. Introduction

This Privacy Policy (hereinafter referred to as "the Policy" or "this Policy") is issued by ck45 (the "Platform", "We", "Us", or "Our"), the operator of the online casino and sports betting website accessible at https://ck45.io. This Policy describes how ck45 collects, processes, stores, shares, and protects the personal data of individuals (the "User", "Player", "You", or "Your") who access or use the ck45 platform from Bangladesh.

By registering an account, making a deposit, placing a bet, or otherwise using the ck45 platform, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy in full. If you do not agree with this Policy, you must not use the ck45 platform and should request closure of any existing account by contacting our support team.

This Privacy Policy forms part of the overall legal agreement between you and ck45 and should be read alongside the Terms & Conditions and the Responsible Gaming Policy. In the event of any conflict between these documents, the Terms & Conditions shall take precedence unless otherwise stated herein.

2. Data Controller Information

ck45 acts as the data controller for all personal data collected through the platform. As data controller, ck45 determines the purposes and means by which personal data is processed. All data-related queries, correction requests, erasure requests, and formal privacy complaints should be directed to the ck45 data protection contact as follows:

• Platform Name: ck45
• Website: https://ck45.io
• Primary Contact Email: [email protected] — use subject line "Privacy / Data Request" for fastest routing.
• WhatsApp Support: +880 1700 000045
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)

3. What Data We Collect

ck45 collects the following categories of personal data from players. The data collected varies depending on how you interact with the platform — for example, a user who has completed full KYC verification will have a broader data profile than an unverified account holder.

3.1 Registration & Account Data

• Full legal name (as it appears on your National ID or passport)
• Date of birth (to verify minimum age eligibility of 21 years or older)
• Residential address in Bangladesh (city, district, postcode)
• Email address (used for account communications and security alerts)
• Mobile phone number (including the bKash / Nagad / Rocket-registered number)
• Username and encrypted password (credentials are stored using one-way hashing; plain-text passwords are never stored)

3.2 Identity Verification (KYC) Data

• Copy of National Identity Card (NID), passport, or equivalent government-issued photo ID
• Proof of residential address (utility bill, bank statement, or official correspondence)
• Payment method verification documents (e.g., screenshot of bKash or Nagad account confirming the registered account name)
• Selfie photograph taken during the identity verification process (where required)

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and transaction reference numbers
• Payment method identifiers (e.g., the last four digits or registered name of a bKash / Nagad / Rocket / Upay / bank account)
• Account wallet balances (real money and bonus balances maintained separately)
• Wagering history: bet amounts, game titles, outcomes, and timestamps

3.4 Technical & Device Data

• IP address at time of registration and at each subsequent login
• Device type (mobile, tablet, desktop), operating system, and browser version
• Session duration, pages visited, and in-platform navigation patterns
• Cookies and similar tracking identifiers (see Section 8 for full details)
• Geolocation data at the country/city level derived from IP address

3.5 Communications Data

• Records of all communications between you and the ck45 support team via email, WhatsApp, or live chat — including the content of messages, timestamps, and resolution outcomes
• Responses to surveys, feedback forms, or promotional communications where you have chosen to participate

4. How We Collect Your Data

ck45 collects personal data through several distinct channels. Understanding how data reaches us helps you make informed decisions about your privacy.

4.1 Directly From You

The majority of your personal data is collected directly from you when you: register an account; complete the KYC verification process; make a deposit or request a withdrawal; contact our customer support team; or respond to a survey or promotion.

4.2 Automatically Through Platform Use

Technical and behavioural data is collected automatically when you interact with the ck45 website or mobile interface. This includes data captured via server logs (IP address, session timestamps), cookies and local storage (session tokens, preference settings), and payment processing systems (transaction records generated at the point of deposit or withdrawal).

4.3 From Third-Party Service Providers

In certain circumstances, ck45 may receive personal data about you from authorised third-party service providers, including:

• KYC Verification Partners: Identity verification platforms used to cross-check your submitted documents against authoritative data sources.
• Payment Processors: bKash, Nagad, Rocket, Upay, and banking partners may confirm transaction status and payment account ownership details to ck45.
• Fraud Detection Services: Third-party security platforms may share risk signals or flagged activity patterns relating to your account where fraud is suspected.

5. Why We Use Your Data

ck45 processes personal data only for defined, legitimate purposes. We do not process personal data in a manner that is incompatible with the purposes described below. The primary purposes for which your personal data is used are as follows:

• Account Creation & Management: To set up, maintain, and manage your player account, including processing deposits, recording bets, crediting winnings, and handling withdrawal requests.
• Identity Verification (KYC): To verify your identity, confirm your age eligibility (21 years or older), and satisfy our obligations with respect to responsible gaming and anti-money laundering best practices.
• Payment Processing: To execute deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, and supported Bangladesh bank partners. Financial records are retained in accordance with standard financial record-keeping obligations.
• Fraud Prevention & Security: To monitor account activity for signs of fraud, money laundering, bonus abuse, or other prohibited conduct as defined in the Terms & Conditions. This includes automated fraud-detection systems that analyse betting patterns, login behaviour, and payment activity.
• Responsible Gaming: To identify patterns of play that may indicate problem gambling behaviour, enforce deposit limits and self-exclusion requests, and provide proactive support to players who may be at risk.
• Customer Support: To respond to your queries, resolve disputes, and improve the quality of the support experience based on historical interaction records.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the ck45 platform's features, performance, and user experience. This analysis never identifies individual players.
• Legal & Regulatory Compliance: To comply with applicable legal obligations, respond to lawful requests from competent authorities, and defend against legal claims where necessary.
• Service Communications: To send you transactional notifications (deposit confirmations, withdrawal approvals, security alerts, and bonus credits). ck45 does not send unsolicited marketing emails to players who have not opted in to promotional communications.

6. Legal Basis for Processing

ck45 processes personal data on the following legal bases, depending on the specific purpose of the processing activity:

7. Data Sharing & Third Parties

ck45 does not sell, rent, or trade your personal data with any third party for commercial purposes. Personal data is shared with third parties only in the following limited circumstances, and only to the extent necessary for the stated purpose:

7.1 Payment Service Providers

To process deposits and withdrawals, ck45 shares relevant transaction data with authorised payment partners including bKash, Nagad, Rocket, Upay, and banking institutions such as City Bank, BRAC Bank, Islami Bank, Sonali Bank, and Dutch-Bangla Bank. These providers receive only the minimum data required to execute the transaction and are contractually obligated to protect your information.

7.2 Identity Verification Partners

To fulfil KYC obligations, ck45 may engage specialist identity verification service providers. These providers receive the KYC documents you submit (such as your NID or passport copy) for the sole purpose of verifying their authenticity. They do not retain your data beyond the verification period and are bound by strict data processing agreements.

7.3 Game Software Providers

Casino game providers such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming may receive pseudonymised player identifiers (such as an account reference number) and bet/session data for the purposes of game operation, jackpot management, and technical support. These providers do not receive your full name, contact details, or payment information.

7.4 Fraud Detection & Security Services

ck45 uses specialist fraud detection and cybersecurity platforms to monitor for suspicious activity. These services may process technical data (IP address, device fingerprint, session behaviour) under a data processing agreement with ck45. They do not receive personal identification documents or payment account details.

7.5 Legal & Regulatory Authorities

ck45 may be required by law to disclose personal data to competent government authorities, law enforcement agencies, or courts in response to a lawful order or request. In all such cases, ck45 will share only the minimum information required to satisfy the legal obligation and will notify the affected player where legally permitted to do so.

8. Cookies & Tracking Technologies

The ck45 platform uses cookies and similar tracking technologies to operate core site functions, maintain your login session, remember your preferences, and analyse platform usage patterns. By continuing to use ck45 after being informed of our cookie use through this Policy, you consent to the use of cookies as described below.

8.1 Types of Cookies Used

• Essential Cookies: These are strictly necessary for the platform to function. They maintain your login session, store your security token, and ensure that your account balance and game states are correctly loaded. These cookies cannot be disabled without breaking platform functionality.
• Functional Cookies: These remember your preferences such as language selection (English), display settings, and notification preferences. They are not strictly essential but significantly improve your experience.
• Analytics Cookies: ck45 uses anonymised analytics data to understand how players navigate the platform. This data helps us identify popular game categories, improve page load performance, and resolve usability issues. Analytics data is aggregated and does not identify individual players.
• Security Cookies: These are used to detect and prevent fraudulent login attempts, cross-site request forgery (CSRF), and other security threats. They record session fingerprints and flag anomalous access patterns for review.

8.2 Cookie Retention Periods

• Session Cookies: Deleted automatically when you close your browser.
• Persistent Functional Cookies: Retained for up to 90 days from your last visit.
• Security Cookies: Retained for up to 30 days.
• Analytics Cookies: Retained for up to 12 months in anonymised form.

8.3 Managing Cookies

You may manage or delete cookies through your browser settings at any time. Please be aware that disabling essential cookies will impair your ability to log in and use the ck45 platform. Instructions for managing cookies in popular browsers (Chrome, Firefox, Safari, Edge, and Opera) are available through each browser's help documentation.

9. Data Retention

ck45 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or financial record-keeping obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data cannot be immediately deleted due to backup system constraints, it is isolated from active processing until it can be permanently removed at the next scheduled backup purge cycle.

10. Data Security

ck45 implements a multi-layered technical and organisational security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures in place include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and ck45 servers is encrypted using TLS 1.2 or higher. This includes account logins, payment transactions, and any personal data submitted via the platform.
• Password Hashing: Account passwords are processed through a one-way cryptographic hashing algorithm before storage. No plain-text password is ever written to our databases. Even ck45 staff cannot retrieve your password — only a password reset can be used if credentials are forgotten.
• Payment Tokenisation: Payment method identifiers (bKash, Nagad, Rocket, Upay, and bank account references) are tokenised. The token, not the original account number, is used for transaction processing after initial verification.
• Access Controls: Access to personal data within ck45's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum access required to perform their job function. All internal data access is logged and subject to audit.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their ck45 accounts. 2FA requires a secondary confirmation code in addition to the password when logging in from an unrecognised device or location.
• Intrusion Detection: ck45 operates 24/7 automated intrusion detection and monitoring systems that alert our security team to anomalous access patterns, brute-force login attempts, and other potential threats in real time.
• Regular Security Audits: The ck45 platform and its supporting infrastructure undergo periodic security assessments to identify and remediate vulnerabilities before they can be exploited.

11. Your Rights

As a player on the ck45 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] using the subject line "Data Rights Request". We will acknowledge your request within 5 working days and provide a full response within 15 working days of receiving sufficient identity verification.

• Right of Access: You have the right to request a copy of all personal data that ck45 holds about you. We will provide this in a structured, commonly used, machine-readable format where technically feasible.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Please note that corrections to KYC documents require re-submission of the relevant identity documents.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data following closure of your ck45 account, subject to our legal retention obligations (see Section 9). Data that is required for anti-money laundering compliance or financial record-keeping cannot be deleted before the mandatory retention period has elapsed.
• Right to Restrict Processing: In certain circumstances (for example, while a dispute about the accuracy of your data is being resolved), you may request that ck45 restrict its processing of your personal data to storage only.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive your personal data in a portable format and to request that it be transmitted to another data controller where technically feasible.
• Right to Withdraw Consent: Where ck45 processes your personal data based on your consent (for example, for promotional email communications), you may withdraw that consent at any time by contacting our support team or using the unsubscribe link in any promotional email. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Object: You have the right to object to processing of your personal data where ck45 relies on legitimate interest as the legal basis, subject to ck45's ability to demonstrate compelling legitimate grounds that override your interests.

12. Children & Minors

The ck45 platform is strictly intended for adults aged 21 years and older. ck45 does not knowingly collect, process, or store personal data from individuals under the age of 21. If we become aware that an account has been created by a person under 21, that account will be immediately closed, all associated balances will be forfeited, and any personal data held for that account will be deleted promptly in accordance with our data deletion procedures.

If you are a parent or guardian and you believe that a person under the age of 21 under your care has created a ck45 account, please contact us immediately at [email protected]. We take underage access extremely seriously and will act without delay upon receipt of a verified report.

13. Changes to This Policy

ck45 reserves the right to update or amend this Privacy Policy at any time. Any material changes to the Policy will be communicated to registered players via email notification and/or a prominent notice on the ck45 platform homepage. The revised Policy will take effect from the date indicated in the "Last Updated" header at the top of the document.

We encourage all players to review this Privacy Policy periodically to stay informed about how ck45 is protecting their personal data. Your continued use of the ck45 platform after a revised Policy has been published constitutes your acceptance of the updated terms. If you do not agree with any amendment to this Policy, you must discontinue use of the platform and contact our support team to arrange account closure.

Minor amendments — such as clarifications of existing language, corrections of typographical errors, or updates to contact information — may be made without advance notice, provided they do not materially alter your rights or our data processing practices. All versions of this Policy are retained internally by ck45 and prior versions may be requested by contacting our support team.

14. Contact & Data Requests

For any privacy-related questions, data access requests, correction requests, erasure requests, or formal complaints regarding how ck45 handles your personal data, please contact us through one of the following channels. All privacy enquiries are handled by our dedicated support team and are treated with strict confidentiality.

• Email: [email protected] — Subject line: "Privacy / Data Request"
• WhatsApp: +880 1700 000045 — Available 24/7 (BST, UTC+6)
• Live Chat: Available directly on the ck45 platform — 24/7 English-language support

When submitting a data request, please provide your registered email address, your ck45 username, and a brief description of your request. To protect your privacy and prevent unauthorised data access, we will require identity verification before processing any request that involves disclosing, modifying, or deleting personal data. Verification is typically completed within 2 working days of receiving the required documents.

ck45 is committed to resolving all privacy concerns fairly and promptly. We aim to provide a full response to all data rights requests within 15 working days of successful identity verification. If you are not satisfied with our response, you have the right to escalate your complaint through the appropriate legal channels available in your jurisdiction.