ck48 Privacy Policy – How We Handle Your Data
ck48 is committed to protecting the personal information of every player on its platform. This Privacy Policy explains what data we collect, how we use it, who we share it with, and the rights you hold over your own information.
Overview
Privacy at a Glance
This Privacy Policy ("Policy") describes how ck48 ("Platform", "we", "us", "our") collects, processes, stores, shares and protects personal information provided by or generated about users ("Player", "you", "your") of the ck48 website at ck48.org and any associated services. By registering an account or using the ck48 platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.
ck48 treats data protection as a core operational responsibility, not a legal formality. The platform is built on the principle that players should understand exactly what information is held about them and why. This Policy is written in plain language because ck48 believes players in Dhaka, Chittagong, Sylhet, Khulna and every other city in Bangladesh deserve to understand their privacy rights without needing a legal background to do so.
Registration details (mobile number, password), identity verification documents (KYC), transaction records, device and browser data, and gameplay activity logs.
To operate your account, process deposits and withdrawals, verify your identity, detect fraud, deliver support, and send promotional communications where you have opted in.
All data is encrypted in transit using 256-bit SSL. Account passwords are stored as salted hashes. Access to personal data is restricted to authorised personnel with a legitimate operational need.
ck48 does not sell, rent or trade your personal data to third-party marketing companies, data brokers or advertisers. Your data is not used for any purpose outside the ck48 platform without your consent.
You have the right to access, correct, and request deletion of your personal data. You may also withdraw consent for marketing communications at any time by contacting ck48 support.
All data-related queries should be directed to the ck48 support team via live chat on ck48.org or by email at [email protected]. We respond to all data enquiries within 72 hours.
Section 1
Information We Collect
1.1 Information You Provide Directly
When you register an account with ck48, we collect the information you provide during the registration process, including your Bangladeshi mobile number, your chosen account password, and your confirmation that you are 21 years of age or older. When we request identity verification (KYC), we collect the documents you submit, which may include a national identity card, passport, driving licence, utility bill or bank statement. When you contact our support team, we collect the content of that communication, including any attachments. When you participate in surveys or promotional activities, we collect the responses and information you submit.
1.2 Information We Collect Automatically
When you access and use the ck48 platform, we automatically collect certain technical information about your device and usage. This includes your IP address and approximate geographic location derived from it; the type of device, operating system and browser you are using; session timestamps and duration; pages visited and game titles accessed; betting and gaming activity including stakes placed, games played and outcomes; deposit and withdrawal transaction records including amounts, timestamps, and the payment method used; and error logs where a technical issue occurs during your session. This information is collected for the legitimate operational purposes of fraud prevention, security monitoring, platform performance optimisation, and responsible gaming compliance.
1.3 Information from Third Parties
In certain circumstances ck48 may receive personal information about you from third parties. This includes identity and address verification data from KYC service providers where you have submitted documents for verification; fraud prevention signals from payment processors and anti-fraud services; and, where applicable, information from responsible gaming databases used to identify players who have self-excluded from multiple platforms. ck48 uses this third-party data only for the purposes of account verification, fraud prevention and responsible gaming compliance, and does not use it for marketing or profiling purposes.
Section 2
How We Use Your Information
2.1 Platform Operation
The primary use of your personal information is to operate your ck48 account and provide the services you have requested. This includes creating and maintaining your account; processing deposits and withdrawals via bKash, Nagad, Rocket, Upay and other supported payment methods; executing your bets and game transactions and recording their outcomes; providing customer support when you contact us; and delivering responsible gaming tools such as deposit limits, session reminders, cooling-off periods and self-exclusion where requested. These processing activities are necessary for the performance of the contract between you and ck48 — without them, ck48 cannot provide its services to you.
2.2 Security and Fraud Prevention
ck48 uses your personal data to protect the platform and its players from fraud, money laundering and other illegal activities. This includes analysing login patterns and session behaviour to detect unusual account activity; verifying that payment methods are registered in your name to prevent third-party payment fraud; cross-referencing registration data against fraud prevention databases; monitoring betting patterns for signs of match-fixing or collusive play; and applying geolocation data to verify that access complies with applicable jurisdictional requirements. These processing activities are necessary for the purposes of the legitimate interests of ck48 and its players in maintaining a safe and fair gaming environment.
2.3 Marketing Communications
Where you have opted in to receive marketing communications from ck48, we will use your mobile number to send SMS notifications about promotional offers, bonuses, new game launches and seasonal campaigns — for example, Eid special offers, Pohela Boishakh promotions, BPL season bonuses and other Bangladesh-relevant events. You may withdraw your consent to marketing communications at any time by contacting the ck48 support team. Withdrawal of marketing consent does not affect the lawfulness of any marketing communications sent before the withdrawal, and does not affect your ability to continue using the platform. ck48 will never send marketing communications to a player who has activated a self-exclusion.
Section 3
Sharing Your Information
3.1 Service Providers
ck48 engages third-party service providers to assist with the operation of the platform. These providers may process your personal data on behalf of ck48 in order to deliver their services. Categories of service providers include KYC and identity verification providers; payment processing partners (including the mobile financial service operators that facilitate bKash, Nagad and Rocket transactions); game content providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt and Microgaming; customer support platform providers; fraud detection and risk management services; and hosting and cloud infrastructure providers. All third-party service providers are contractually required to process personal data only as directed by ck48, to implement appropriate security measures, and not to use it for their own independent purposes.
3.2 Legal and Regulatory Disclosure
ck48 may disclose your personal data to government authorities, law enforcement agencies or regulatory bodies where it is required to do so by applicable law, court order or binding regulatory direction. ck48 will make reasonable efforts to notify you of any such disclosure where legally permitted to do so. Where ck48 is required to disclose personal data in connection with an investigation into fraud, money laundering or other criminal activity, it may not be possible to notify you in advance without compromising the investigation. ck48 cooperates fully with legitimate law enforcement requests and will provide accurate records as required.
3.3 Business Transfers
In the event that ck48 undergoes a merger, acquisition, sale of assets or other corporate restructuring, your personal data may be transferred to the successor entity as part of that transaction. Where such a transfer occurs, ck48 will make reasonable efforts to notify affected players before their data is transferred and becomes subject to a different privacy policy. The successor entity will be required to honour the commitments made in this Privacy Policy with respect to data collected prior to the transfer, or to obtain fresh consent from affected players where it intends to process data in a materially different way.
Section 4
Cookies and Tracking Technologies
4.1 What Cookies We Use
ck48 uses cookies and similar tracking technologies on ck48.org to provide a functional, secure and personalised experience. The types of cookies we use include: essential cookies, which are strictly necessary for the platform to operate (for example, session authentication cookies that keep you logged in during a session); functional cookies, which remember your preferences such as language setting; and analytical cookies, which collect anonymised data about how users navigate the platform to help us identify and resolve performance issues. ck48 does not use advertising or third-party tracking cookies that monitor your activity across other websites.
4.2 Managing Cookies
You can control and manage cookies through your mobile browser settings. Most browsers allow you to view the cookies currently stored, delete specific cookies, block third-party cookies, and block all cookies from being set. Please be aware that disabling essential cookies will affect the functionality of the ck48 platform — in particular, blocking session cookies will prevent you from staying logged in and may interrupt gameplay. Disabling analytical cookies will not affect your ability to use the platform but will reduce ck48's ability to identify and fix performance issues that may affect your experience.
4.3 Session Security Tokens
In addition to cookies, ck48 uses server-side session tokens to authenticate your login and maintain the security of your account during an active session. These tokens are cryptographically generated, time-limited, and invalidated automatically when you log out or when your session expires. They are not stored in a form that reveals your password or any sensitive account data. If you use ck48 on a shared device, ck48 strongly recommends that you log out at the end of every session to invalidate your session token and prevent unauthorised access to your account.
Section 5
Data Security and Retention
5.1 Security Measures
ck48 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These measures include 256-bit SSL encryption for all data transmitted between your device and the ck48 servers; cryptographic hashing with salt for stored account passwords so that plaintext passwords are never retained; access control policies that restrict database access to authorised personnel with a documented operational need; regular security reviews and vulnerability assessments of platform infrastructure; and segregation of player funds data from general operational systems. No security system is impenetrable, and ck48 cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ck48 will notify affected players as soon as reasonably practicable.
5.2 Data Retention
ck48 retains your personal data for as long as your account remains active and for a period thereafter as required to meet legal, regulatory and operational obligations. Specifically: account registration data and transaction records are retained for a minimum of five years from the date of account closure to comply with anti-money-laundering record-keeping requirements; KYC documents are retained for the same minimum five-year period following account closure; gameplay logs are retained for a minimum of three years; support communications are retained for two years from the date of the last communication; and anonymised analytical data derived from gameplay may be retained indefinitely as it cannot be used to identify individual players. When retention periods expire, data is securely deleted or irreversibly anonymised.
5.3 International Data Transfers
Some of ck48's third-party service providers — including game content providers and cloud hosting infrastructure partners — may process data in locations outside Bangladesh. Where personal data is transferred internationally, ck48 ensures that appropriate safeguards are in place, including contractual obligations requiring the recipient to apply data protection standards equivalent to those described in this Policy. ck48 does not transfer personal data to jurisdictions that do not provide an adequate level of protection without first implementing appropriate contractual safeguards. If you have concerns about international data transfers relating to your account, you may contact the ck48 support team for further information.
Section 6
Your Rights and How to Exercise Them
6.1 Your Data Rights
As a player on the ck48 platform, you have the following rights with respect to your personal data: the right to access — you may request a copy of the personal data ck48 holds about you; the right to rectification — you may request correction of any inaccurate or incomplete personal data; the right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ck48's legal retention obligations; the right to restriction — you may request that ck48 restricts processing of your data in certain circumstances; the right to object — you may object to processing based on legitimate interests, including profiling for fraud prevention; and the right to withdraw consent — where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Exercising any of these rights will not result in any detriment to the services you receive from ck48, except where the right exercised (for example, erasure) necessarily affects ck48's ability to provide those services.
6.2 How to Submit a Data Request
To exercise any of your data rights, please contact the ck48 support team via live chat on ck48.org or by email at [email protected]. Please identify yourself clearly and specify which right you wish to exercise and, where relevant, the specific data you are requesting or the specific processing activity you wish to restrict or object to. ck48 will respond to all data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, ck48 may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. ck48 does not charge a fee for processing data rights requests except where requests are manifestly unfounded or excessive.
6.3 Complaints
If you believe that ck48 has not handled your personal data in accordance with this Privacy Policy or applicable data protection law, you have the right to lodge a complaint. ck48 encourages you to contact its support team in the first instance so that it has the opportunity to investigate and resolve your concern directly. If you are not satisfied with ck48's response, or if you do not wish to raise the matter with ck48 directly, you may escalate your complaint to the relevant data protection authority in Bangladesh. ck48 will cooperate fully with any investigation by a competent supervisory authority.
Section 7
Amendments to This Policy
7.1 Policy Updates
ck48 reserves the right to update this Privacy Policy at any time to reflect changes in its data processing practices, applicable law, or the structure of the platform. Revised versions of this Policy will be published on this page with an updated effective date. Where a change is material — for example, where ck48 begins processing your data for a new purpose or sharing it with a new category of third party — ck48 will provide prominent notice on the platform and, where appropriate, seek fresh consent. Your continued use of the ck48 platform following the publication of a revised Policy constitutes your acceptance of that revised Policy. If you do not agree with the revised Policy, you should stop using the platform and may request account closure in accordance with the Terms & Conditions.
7.2 Contact Information
All privacy-related enquiries, data rights requests and complaints should be addressed to the ck48 data team via the support channels available on ck48.org. The ck48 support team is available 24 hours a day, 7 days a week in Bangladesh Standard Time (UTC+6). Email enquiries are acknowledged within 24 hours and substantively responded to within 30 days. ck48 is committed to handling all privacy enquiries with the seriousness and confidentiality they deserve. Players based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh and Cox's Bazar can all reach the support team on the same channels — there is no geographic restriction on access to data rights support.
Still Have Privacy Questions?
Our support team is available 24/7 in Bangladesh Standard Time to answer any questions about how ck48 handles your data. You can also read our FAQ for quick answers or visit our About Us page to learn more about who we are.
Read Our FAQ About Us