cka44 Privacy Policy

Data We Collect

cka44 collects personal data only to the extent necessary to operate the Platform, comply with legal obligations, and deliver a safe and enjoyable experience to Bangladeshi players. We do not collect data we do not need, and we do not retain it beyond the period outlined in Section 6 of this Policy.

The categories of personal data we collect, and the primary source from which each category is gathered, are set out below.

1.1 Data You Provide Directly

When you register for a cka44 account, interact with our support team, or use features of the Platform, you may provide us with the following information:

• Identity Data: Full legal name, date of birth, gender, and national identification number (as required for KYC verification).
• Contact Data: Email address, mobile phone number, and residential address (city, district, and country).
• Account Credentials: Username and hashed password. cka44 never stores passwords in plain text.
• Financial Data: Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers), bank account details, and transaction references necessary to process deposits and withdrawals. We do not store full bank card numbers on our servers.
• KYC Documents: Copies of government-issued photo identification, proof-of-address documents, and payment method verification screenshots submitted during the account verification process.
• Support Communications: Records of live chat sessions, emails, and any other correspondence you send to the cka44 support team.

1.2 Data Collected Automatically

When you access and use the cka44 Platform, certain technical and behavioural data is collected automatically by our systems:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and time zone setting.
• Usage Data: Pages visited, features used, games played, session duration, click-paths, and interactions with promotions or bonus offers.
• Transaction Logs: A complete record of all deposits, withdrawals, bets placed, game results, and bonus activations associated with your account.
• Location Data: Approximate geographic location derived from your IP address, used for jurisdictional compliance checks. We do not collect precise GPS coordinates.

1.3 Data From Third Parties

In limited circumstances, cka44 may receive personal data about you from third parties, including:

• Payment processors and mobile wallet operators (e.g., bKash, Nagad) confirming transaction completion.
• Identity verification and fraud-screening service providers used as part of the KYC process.
• Game studio providers who report in-game session data necessary for dispute resolution and RTP verification.

How We Use Your Data

cka44 uses the personal data described in Section 1 for specific, documented purposes. We do not use personal data for any purpose incompatible with the original reason for collection without first obtaining your explicit consent or establishing a separate lawful basis for the new processing activity.

2.1 Core Service Delivery

• Creating and managing your player account on the cka44 Platform.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and linked bank accounts.
• Verifying your identity and age as required by our KYC and responsible gaming obligations.
• Enabling access to cricket betting markets, live casino tables, slot games, and other Platform features.
• Settling bets, calculating winnings, and maintaining an accurate transaction history in your account.

2.2 Legal Compliance & Fraud Prevention

• Complying with anti-money laundering (AML) and know-your-customer (KYC) obligations.
• Screening transactions against fraud-detection and risk-management systems.
• Investigating and responding to suspected prohibited activity as described in the cka44 Terms & Conditions.
• Responding to lawful requests from competent authorities, courts, or law enforcement agencies.
• Enforcing self-exclusion commitments and responsible gaming restrictions.

2.3 Platform Improvement & Analytics

• Analysing aggregated, anonymised usage data to understand how players interact with the Platform and which features are most valued.
• Diagnosing technical faults, improving Platform stability, and optimising game loading performance for users in Bangladesh.
• Conducting A/B testing on layout, promotional content, and feature placement to improve user experience.

2.4 Promotions & Communications

• Sending you transactional notifications about your account, deposits, withdrawals, and bet settlements via email or in-platform messaging.
• With your consent, sending you promotional communications about bonuses, seasonal offers (e.g., BPL season promotions, Eid bonus), and new features.
• You may opt out of promotional communications at any time by contacting [email protected] or using the unsubscribe mechanism in any marketing email.

2.5 Lawful Basis Summary

Data Sharing & Disclosure

cka44 does not sell, rent, or otherwise commercially exploit your personal data. We share personal data only in the limited circumstances described below, and always under appropriate contractual or legal safeguards.

3.1 Service Providers and Data Processors

We engage trusted third-party service providers to assist in operating the Platform. These parties act as data processors under cka44's instruction and are contractually prohibited from using your data for any purpose other than the specific service they provide. Categories of processors include:

• Payment Processors: bKash, Nagad, Rocket, Upay, and linked banking partners, to facilitate deposit and withdrawal transactions.
• Identity Verification Providers: Third-party KYC and AML screening services used to verify identity documents and screen against sanctions lists.
• Game Studio Providers: Companies such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who supply the games available on the Platform and receive session data necessary for dispute resolution.
• Cloud Infrastructure Providers: Hosting and server infrastructure providers who store Platform data in secure, encrypted data centres.
• Customer Support Platforms: Live chat and ticketing system providers used to manage player communications.

3.2 Legal and Regulatory Disclosure

cka44 may disclose personal data to competent authorities, law enforcement agencies, courts, or regulators where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of cka44, its players, or the public. Such disclosures are made only to the extent legally required and with appropriate confidentiality protections where permitted.

3.3 Business Transfers

In the event that cka44 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, personal data held by cka44 may be transferred to the acquiring entity as part of that transaction. Players will be notified via email or a prominent Platform notice prior to any such transfer, and the acquiring entity will be required to honour this Privacy Policy.

Cookies & Tracking

cka44 uses cookies and similar tracking technologies to operate the Platform, maintain session state, and improve user experience. A cookie is a small text file placed on your device when you visit a website. Cookies do not contain executable code and cannot access other files on your device.

4.1 Types of Cookies We Use

4.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to view all cookies set by a website, block cookies from specific domains, and delete stored cookies at any time. Please note that disabling essential cookies will prevent you from logging into your cka44 account and using the Platform's core features.

Detailed instructions for managing cookies in popular browsers used in Bangladesh are available from the browser vendors directly (Chrome, Firefox, Samsung Internet, Opera Mini).

Data Security

cka44 takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational measures designed to protect it against unauthorised access, accidental loss, disclosure, alteration, or destruction.

5.1 Technical Security Measures

• SSL/TLS Encryption: All data transmitted between your device and the cka44 Platform is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar.
• Data Encryption at Rest: Personal data stored in cka44's databases is encrypted using AES-256 encryption. Encryption keys are managed separately from the encrypted data.
• Password Hashing: Account passwords are hashed using a strong, salted cryptographic algorithm. cka44 employees cannot read your password under any circumstances.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts. 2FA adds a second verification step that significantly reduces the risk of unauthorised access.
• Intrusion Detection: cka44's infrastructure is monitored 24/7 by automated intrusion-detection systems that alert the security team to anomalous access patterns in real time.
• Regular Security Audits: cka44 engages independent security specialists to conduct periodic penetration testing and vulnerability assessments of the Platform.

5.2 Organisational Security Measures

• Access to personal data is restricted on a strict need-to-know basis. Only cka44 employees whose job function genuinely requires access to player data are granted the relevant system permissions.
• All cka44 staff who handle personal data are required to complete data protection training and are bound by confidentiality obligations.
• Third-party service providers are vetted for security compliance before being granted any access to Platform data, and are required to sign data processing agreements.

5.3 Data Breach Response

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, cka44 will notify affected players without undue delay, providing clear information about the nature of the breach, the data involved, and the steps being taken to contain and remediate it. Where legally required, relevant authorities will also be notified. Players are encouraged to report any suspicious account activity immediately to [email protected].

Data Retention

cka44 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, tax, or accounting obligations. The retention periods below represent cka44's standard schedules; specific circumstances may require longer retention where legal proceedings are pending or where a regulatory authority has requested preservation of records.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original information. Players who request account closure should be aware that certain categories of data — particularly transaction records and KYC documentation — must be retained for the regulatory periods specified above regardless of the closure request.

Your Privacy Rights

As a player on the cka44 Platform, you hold a set of meaningful rights with respect to your personal data. cka44 is committed to honouring these rights promptly and without creating unnecessary barriers. All requests should be submitted in writing to [email protected] with the subject line "Privacy Rights Request". We will respond within 30 calendar days of receiving a valid request.

7.1 Right of Access

You have the right to request a copy of the personal data cka44 holds about you, along with information about how it is being used, who it has been shared with, and how long it will be retained. This is sometimes called a Subject Access Request (SAR). cka44 will provide this information free of charge for the first request in any 12-month period. For manifestly unfounded or excessive repeat requests, a reasonable administrative fee may apply.

7.2 Right to Rectification

If any personal data cka44 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Players can update basic contact details (email address, phone number, city of residence) directly within their account settings. For changes to identity data (legal name, date of birth) that require documentary evidence, please contact the support team.

7.3 Right to Erasure

You have the right to request that cka44 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other lawful basis applies, or where the data has been processed unlawfully. This right is subject to the mandatory retention obligations described in Section 6 — cka44 cannot delete data it is legally required to keep.

7.4 Right to Restriction of Processing

You may request that cka44 restrict processing of your personal data in circumstances where you contest its accuracy, where the processing is unlawful but you prefer restriction to erasure, or where cka44 no longer needs the data but you require it for the establishment, exercise, or defence of a legal claim.

7.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity, you have the right to receive a structured, machine-readable copy of the personal data you have provided to cka44. This right applies to data processed by automated means and allows you to transmit that data to another service provider if you choose.

7.6 Right to Object

You have the right to object to processing of your personal data where cka44 relies on legitimate interest as the lawful basis. cka44 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where the processing is necessary for the establishment, exercise, or defence of legal claims. You have an absolute right to object to processing of your personal data for direct marketing purposes, and cka44 will honour all such objections immediately.

7.7 Right to Withdraw Consent

Where cka44 processes your personal data on the basis of your consent (e.g., for promotional communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. To withdraw consent for marketing communications, contact [email protected] or use the unsubscribe link in any marketing email.

Contact & Complaints

cka44 takes all privacy-related queries and complaints seriously. If you have a question about this Privacy Policy, wish to exercise any of the rights described in Section 7, or believe that cka44 has handled your personal data in a manner that does not comply with this Policy, please contact us using the details below.

8.1 Privacy Support Contact

All privacy-related communications should be directed to the cka44 support team. Our dedicated privacy inbox is monitored by staff trained in data protection matters:

• Email: [email protected] — Subject line: "Privacy Rights Request" or "Privacy Complaint"
• Live Chat: Available 24 hours a day, 7 days a week via the Platform
• Response Time: We aim to acknowledge all privacy requests within 2 business days (Bangladesh Standard Time, BST UTC+6) and to provide a substantive response within 30 calendar days

8.2 Complaints Process

If you are dissatisfied with cka44's response to a privacy complaint, you may escalate the matter by requesting a review by a senior member of the cka44 compliance team. Please indicate clearly in your communication that you are escalating an existing complaint and reference the original ticket or case number if one was provided.

8.3 Policy Updates

cka44 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, Platform features, or applicable legal requirements. When material changes are made, cka44 will notify registered players via their registered email address and display a prominent notice on the Platform for a minimum of 30 days following the update. The "Last Updated" date at the top of this page will be revised accordingly. Continued use of the Platform after the effective date of an updated Privacy Policy constitutes acceptance of the revised terms.