1 Who We Are
ck4com operates the online casino and sports betting platform accessible at https://ck4com.app, serving players located in Bangladesh. The Platform offers a broad range of gaming services including live casino tables, slot games, cricket betting, Teen Patti, and other sports wagering products, all transacted in Bangladeshi Taka (BDT).
As the operator of this Platform, ck4com acts as the data controller in respect of personal data collected from Players and site visitors. All queries relating to data protection and privacy may be directed to our support team at [email protected].
2 Personal Data We Collect
ck4com collects the categories of personal data described in the table below. We collect only what is necessary for the stated purpose and do not retain data beyond the period required for that purpose.
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, National ID (NID) number, passport number | Account registration, KYC verification, age verification |
| Contact Data | Mobile phone number, email address, residential address in Bangladesh | Account communication, transaction notifications, support |
| Financial Data | bKash / Nagad / Rocket / Upay mobile wallet numbers, bank account details, transaction history | Processing deposits and withdrawals, fraud prevention, AML compliance |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps | Platform security, fraud detection, service optimisation |
| Usage Data | Pages visited, games played, wager history, session duration, clickstream data | Personalisation, responsible gaming monitoring, product improvement |
| Communications Data | Support chat transcripts, email correspondence, complaint records | Customer support, dispute resolution, quality assurance |
| Marketing Preferences | Opt-in / opt-out status for promotional communications | Sending relevant promotional offers where consent has been given |
3 How We Collect Your Data
ck4com collects personal data through the following channels:
3.1 Directly From You
The majority of the personal data we hold is provided directly by you when you register an Account, complete KYC verification, make a deposit or withdrawal, contact our support team, or otherwise interact with the Platform. This includes information you enter into forms, data you submit during identity verification, and preferences you set within your Account settings.
3.2 Automatically
When you access the Platform, we automatically collect certain technical and usage data via cookies, log files, and similar technologies. This includes your IP address, device identifiers, browser configuration, and records of your navigation and activity on the site. See Section 7 (Cookies & Tracking) for full details.
3.3 From Third Parties
In limited circumstances, we may receive personal data about you from third parties, including:
- Payment service providers (bKash, Nagad, Rocket, Upay, and Bangladeshi banks) — to confirm transaction statuses and verify payment method ownership.
- Identity verification service providers — to cross-check the accuracy of KYC documents you submit.
- Fraud prevention and AML screening services — to fulfil our obligations under applicable anti-money-laundering requirements.
- Game content providers (e.g., Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — aggregated gameplay data required for game integrity and dispute resolution.
4 How We Use Your Personal Data
ck4com uses your personal data for the following purposes:
4.1 Account Management
To create, maintain, and administer your Player Account, including verifying your identity and age, managing your Account settings, and communicating with you about your Account status, security alerts, and transactional updates.
4.2 Processing Transactions
To process deposits and withdrawal requests in Bangladeshi Taka, reconcile transaction records, investigate disputed transactions, and maintain accurate financial records as required by our licensing obligations.
4.3 Legal & Regulatory Compliance
To fulfil our obligations under applicable Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements, including verifying the source of funds where required, reporting suspicious transactions, and cooperating with lawful requests from competent authorities.
4.4 Fraud Prevention & Platform Security
To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, collusion, and other prohibited conduct. Technical data such as IP addresses and device fingerprints are used by our security systems on a continuous basis for this purpose.
4.5 Responsible Gaming
To monitor gameplay patterns and identify signs of potentially problematic gambling behaviour. Where indicators are detected, we may make proactive contact with affected Players to offer responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion options.
4.6 Service Personalisation & Improvement
To analyse aggregated usage data in order to improve the Platform's features, game selection, payment experience, and overall quality. Usage data may also be used to personalise your experience, such as surfacing game categories relevant to your activity history.
4.7 Marketing Communications
Where you have given your explicit consent, to send you promotional communications about ck4com bonuses, tournaments, and seasonal promotions — for example, Eid specials, BPL season offers, or Pohela Boishakh promotions. You may withdraw consent to marketing communications at any time by updating your preferences in your Account settings or contacting support. Withdrawal of marketing consent does not affect your ability to use the Platform.
4.8 Customer Support
To respond to your enquiries, process complaints, and resolve disputes. Support communications are recorded and retained for quality assurance and audit purposes.
5 Legal Basis for Processing
ck4com processes your personal data on the following legal bases, depending on the specific processing activity in question:
- Performance of a Contract: Processing that is necessary to fulfil our obligations to you under the ck4com Terms & Conditions, including Account management, payment processing, and game provision.
- Legitimate Interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where these interests are not overridden by your rights and interests.
- Legal Obligation: Processing required to comply with applicable KYC, AML, and other regulatory requirements, including the retention of certain records for prescribed statutory periods.
- Consent: Processing carried out on the basis of your freely given, specific, and informed consent — primarily in respect of marketing communications. You may withdraw consent at any time without detriment.
6 Sharing Your Personal Data
ck4com does not sell your personal data. We share personal data with third parties only in the circumstances described below and subject to appropriate contractual safeguards:
6.1 Payment Service Providers
Necessary financial data is shared with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and other participating Bangladeshi financial institutions, solely to the extent required to process your deposit or withdrawal transaction.
6.2 Identity & Fraud Verification Partners
Identity data and, where required, financial data may be shared with licensed KYC and AML compliance service providers for the purpose of verifying your identity and screening against sanctions and watchlists.
6.3 Game Content Providers
To deliver live dealer games and RNG casino titles, certain gameplay data is transmitted to and from third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers process data in their capacity as independent data processors under contracts that restrict the use of data to game delivery and integrity purposes only.
6.4 IT & Infrastructure Providers
We engage third-party hosting, cloud infrastructure, and cybersecurity service providers who may process personal data as part of delivering the technical infrastructure required to operate the Platform. All such providers are bound by data processing agreements that prohibit independent use of your data.
6.5 Legal & Regulatory Authorities
We may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other competent authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of ck4com, our players, or the public.
7 Cookies & Tracking Technologies
ck4com uses cookies and similar technologies to operate the Platform effectively, maintain session security, and analyse user behaviour in aggregate. The following categories of cookies are in use:
| Cookie Type | Purpose | Retention |
|---|---|---|
| Strictly Necessary | Session management, authentication tokens, security functions. Required for the Platform to function and cannot be disabled. | Session / up to 24 hours |
| Functional | Remembering your language preferences, display settings, and responsible gaming configurations between sessions. | Up to 12 months |
| Analytics | Aggregated data on page performance, navigation paths, and feature usage — used to improve the Platform. No personally identifiable information is included in analytics reports. | Up to 24 months |
| Security | Device fingerprinting and fraud-detection signals used to identify anomalous access patterns and protect your Account. | Up to 6 months |
ck4com does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent the Platform from functioning correctly.
8 Data Retention
ck4com retains personal data for the periods set out below. Upon expiry of the applicable retention period, data is securely deleted or anonymised in accordance with our internal data disposal procedures.
- Account and identity data: Retained for the duration of your Account plus a minimum of five (5) years following Account closure, to meet AML record-keeping requirements.
- Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
- Support communications: Retained for three (3) years from the date of the communication.
- Marketing preference records: Retained for the duration of your Account, or until you withdraw consent, whichever is earlier.
- Technical / log data: Retained for up to twelve (12) months, unless required for an ongoing fraud investigation.
Where retention beyond these standard periods is required by a specific legal obligation, court order, or active regulatory investigation, ck4com will retain the relevant data until that obligation is discharged.
9 Your Data Rights
As a Player on the ck4com Platform, you have the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at [email protected]. We will respond to verified requests within 30 days.
Right of Access
Request a copy of the personal data we hold about you and information about how it is used.
Right to Rectification
Request correction of inaccurate or incomplete personal data held in your Account.
Right to Erasure
Request deletion of your personal data where we no longer have a lawful basis to retain it, subject to legal retention obligations.
Right to Restriction
Request that we restrict processing of your data in specific circumstances, such as where you contest its accuracy.
Right to Portability
Request a machine-readable export of the personal data you provided to us, where technically feasible.
Right to Object
Object to processing based on legitimate interests, or withdraw consent to marketing communications at any time.
Please note that some rights are subject to limitations under applicable law and our regulatory obligations. For example, we cannot delete transaction records that we are legally required to retain for AML compliance purposes. Where we are unable to fulfil a request in full, we will explain the reason in our response.
10 Data Security
ck4com implements a layered technical and organisational security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:
- SSL/TLS Encryption: All data transmitted between your device and the ck4com Platform is encrypted in transit using industry-standard TLS protocols.
- Encryption at Rest: Sensitive personal data stored on ck4com infrastructure is encrypted at rest using AES-256 encryption.
- Access Controls: Access to personal data is restricted on a strict need-to-know basis. Staff who require access to personal data are subject to background checks, confidentiality obligations, and regular security awareness training.
- Two-Factor Authentication (2FA): All administrative access to systems containing personal data requires multi-factor authentication. Players are encouraged to enable 2FA on their Accounts via the Account security settings.
- Penetration Testing & Audits: ck4com conducts regular third-party security assessments and penetration tests to identify and remediate vulnerabilities.
- Incident Response: In the event of a data security incident, ck4com will take immediate remedial action and notify affected Players and relevant authorities in accordance with applicable legal obligations.
While ck4com employs robust security measures, no online platform can guarantee absolute security. Players are responsible for maintaining the confidentiality of their own Account credentials and for ensuring their devices are adequately protected.
11 Children's Privacy
The ck4com Platform is strictly intended for individuals aged 18 years or older. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, you must not register an Account or provide any personal information to ck4com.
If ck4com becomes aware that personal data has been collected from a person under the age of 18, we will immediately close the associated Account, delete the personal data in question, and void any associated transactions. If you are a parent or guardian and believe that your child has provided personal data to ck4com, please contact us at [email protected] immediately so that we can take appropriate action.
12 International Data Transfers
ck4com operates as an offshore-licensed platform. As a result, personal data collected from players in Bangladesh may be processed on servers or by service providers located in jurisdictions outside of Bangladesh. Such transfers occur only where necessary to operate the Platform and deliver our services, and are subject to appropriate contractual safeguards.
Where personal data is transferred to third-party service providers located in other jurisdictions, ck4com ensures that such transfers are made under binding contractual arrangements that require the receiving party to protect your personal data to a standard at least equivalent to the protections described in this Policy.
By using the ck4com Platform, you acknowledge and consent to the transfer of your personal data to other jurisdictions for the purposes described in this Policy.
13 Changes to This Privacy Policy
ck4com reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify active Players by posting a notice on the Platform and, where appropriate, by sending an email notification to the address associated with your Account. The effective date at the top of this Policy will be updated to reflect the date of the most recent revision.
Your continued use of the ck4com Platform after the effective date of any revised Policy constitutes your acceptance of the changes. If you do not agree to the revised Policy, you must cease using the Platform and may request Account closure by contacting our support team. We encourage you to review this Policy periodically to stay informed about how we protect your data.
14 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which ck4com handles your personal data, please contact our Data Protection team using the details below:
- Email: [email protected]
- Live Chat: Available 24 hours a day, 7 days a week via the support widget on the Platform
- Average response time: Within 24 hours for email; 2–5 minutes via live chat
All privacy-related requests must be submitted in writing. Please include your Account username and a clear description of your request or concern. We may ask you to verify your identity before processing a data rights request to ensure that we do not disclose personal information to unauthorised parties.