ck678 Privacy Policy — Your Data, Your Rights

ck678 ("we", "our", "us", "the Platform") is committed to safeguarding the privacy and personal data of every individual who interacts with the ck678 platform. This Privacy Policy sets out the principles and practices that govern how ck678 collects, stores, processes, uses, and shares personal data relating to players, prospective players, and visitors to ck678.io ("you", "your", "the User").

This Policy is intended to be transparent, written in plain English, and fully compliant with applicable data protection legislation. We recognise that the players who choose ck678 as their preferred online betting platform in Bangladesh place a significant degree of trust in us, and we take that responsibility seriously.

By accessing or using the ck678 platform, creating an account, or submitting any personal information to us, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with any part of this Policy, you should discontinue use of the ck678 platform immediately.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which contain additional provisions relevant to your use of the ck678 platform.

ck678 collects only the personal data that is necessary to deliver our services, comply with legal obligations, and improve the user experience on the Platform. The categories of personal data we collect are described below.

Identity & Contact Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (used to verify the mandatory minimum age of 21 years);
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or other Bangladeshi cities), division, and postal code;
• Email address used to register your ck678 account;
• Mobile phone number registered in Bangladesh.

Identification & Verification Data

• National Identity Card (NID) number or passport number submitted for KYC verification;
• Copies of identity documents uploaded during the verification process;
• Selfie or facial image submitted for identity confirmation (where required);
• Proof of address documentation (e.g., utility bill, bank statement).

Financial Data

• Payment method details, including bKash wallet number, Nagad account number, Rocket account, Upay account, Dutch-Bangla Bank account details, or card details (Visa, Mastercard) — stored only in tokenised or masked form;
• Transaction history including deposit amounts, withdrawal requests, and payment timestamps, all denominated in Bangladeshi Taka (৳ BDT);
• Source of funds documentation where requested under our Anti-Money Laundering (AML) obligations.

Usage & Technical Data

• IP address and approximate geolocation at the time of login and key transactions;
• Device type, operating system, browser type and version;
• Session duration, pages visited, games played, and betting patterns;
• Login timestamps and logout timestamps;
• Error logs and platform interaction data collected for debugging and quality assurance purposes.

Communications Data

• Records of all live chat conversations, email correspondence, and support ticket submissions with ck678 customer support;
• Responses to surveys, promotions, or feedback requests where you choose to participate;
• Marketing preferences and opt-in/opt-out records for promotional communications.

ck678 collects personal data through multiple channels, each described below. We do not purchase personal data lists from third-party data brokers.

Directly From You

The majority of personal data we hold is provided directly by you when you:

• Complete the account registration form on ck678.io;
• Submit identity or address documents as part of the KYC process;
• Make a deposit or request a withdrawal using bKash, Nagad, Rocket, Upay, or any other supported payment method;
• Contact our customer support team via live chat or email;
• Respond to surveys or participate in promotional campaigns;
• Update your account profile or preferences settings.

Automatically via the Platform

When you access ck678.io, our servers and analytics tools automatically record certain technical data, including your IP address, device identifiers, browser fingerprint, and session activity. This data is collected using cookies, server logs, and similar tracking technologies, as further described in Section 7 (Cookies & Tracking).

From Third-Party Partners

In limited circumstances, ck678 may receive data about you from trusted third-party partners, including:

• KYC verification service providers who cross-reference the identification documents you submit;
• Payment processors and mobile financial service operators (bKash, Nagad, Rocket, Upay) who confirm transaction completion and flag suspicious payment activity;
• Fraud detection and anti-money laundering (AML) screening services that check your details against sanctions lists and risk databases;
• Game content providers (such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, Ezugi) who may share session data associated with your account activity on their platforms.

ck678 uses personal data only for legitimate, clearly defined purposes. We do not use your data for purposes incompatible with those stated below. The principal uses of your personal data are as follows:

ck678 processes personal data on the following legal grounds, depending on the nature of the processing activity:

• Contractual Necessity: Processing your identity data, financial data, and account activity data is necessary to perform the contract between you and ck678 — namely, to provide you with access to the betting and gaming services described in our Terms & Conditions.
• Legal Obligation: Processing for KYC verification, AML screening, age verification, and record-keeping is required to fulfil ck678's legal and regulatory obligations.
• Legitimate Interests: Processing for fraud detection, platform security, responsible gaming monitoring, and service improvement is carried out on the basis of ck678's legitimate interests in operating a safe, fair, and commercially viable platform, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies is based on your freely given, specific, and informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

ck678 does not sell, rent, or trade your personal data to any third party for their own independent marketing or commercial purposes. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

Service Providers

ck678 engages carefully selected third-party service providers who process personal data on our behalf under strict contractual data processing agreements. These include:

• KYC and identity verification providers;
• Payment processors and mobile financial service operators (bKash, Nagad, Rocket, Upay, Visa, Mastercard);
• Fraud detection and AML screening services;
• Cloud hosting and infrastructure providers who store platform data on secure servers;
• Customer support platform providers who process live chat and email correspondence;
• Game content providers (Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, Ezugi) for the purpose of delivering games and settling game outcomes.

Legal Disclosure

ck678 may disclose personal data to law enforcement agencies, regulatory authorities, courts, or other governmental bodies in Bangladesh or internationally where we are legally required to do so, or where disclosure is necessary to:

• Comply with a binding legal obligation or court order;
• Investigate, prevent, or take action against fraud, money laundering, or other financial crimes;
• Protect the rights, property, or safety of ck678, its players, or third parties;
• Enforce our Terms & Conditions.

Business Transfers

In the event that ck678 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, personal data held by ck678 may be transferred to the acquiring entity as part of that transaction. Where such a transfer occurs, the acquiring entity will be required to honour the commitments made in this Privacy Policy or provide you with reasonable notice of any material changes.

ck678 uses cookies and similar tracking technologies on ck678.io to deliver a functional, personalised, and secure platform experience. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies do not execute code or deliver viruses and cannot access other data on your device.

Types of Cookies We Use

Managing Cookies

You may manage your cookie preferences at any time through your browser settings or through your ck678 account preferences panel. Most modern browsers allow you to block, delete, or restrict cookies. Please note that disabling strictly necessary cookies will impair the functionality of the ck678 platform, including your ability to log in and process transactions.

Other Tracking Technologies

In addition to cookies, ck678 may use pixel tags (web beacons), local storage objects, and server-side session tokens to support the functional, analytics, and security purposes described above. These technologies operate on similar principles to cookies and are subject to the same consent requirements where applicable.

ck678 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as is required by applicable law. The following retention periods apply as general guidelines:

Where personal data is no longer required for any of the purposes listed above, ck678 will securely delete or anonymise that data in a manner that prevents reconstruction. Anonymised data derived from your account activity may be retained indefinitely for aggregated statistical analysis.

ck678 implements a comprehensive suite of technical, organisational, and procedural security measures to protect personal data against unauthorised access, accidental loss, destruction, disclosure, or alteration. Our security framework includes but is not limited to the following measures:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and ck678.io is encrypted in transit using industry-standard TLS protocols. The ck678 platform enforces HTTPS for all connections.
• Encrypted Data Storage: Sensitive personal data, including identity document images and financial account details, is stored encrypted at rest using AES-256 encryption on secured servers.
• Access Controls: Access to personal data within ck678 is restricted on a strict need-to-know basis. All staff with access to personal data undergo background screening and receive regular data protection training.
• Multi-Factor Authentication (MFA): All internal administrative systems used to manage player data require multi-factor authentication.
• Firewall & Intrusion Detection: ck678's infrastructure is protected by enterprise-grade firewalls, intrusion detection systems (IDS), and 24/7 security monitoring.
• Tokenisation of Payment Data: Payment method details (bKash numbers, Nagad accounts, card numbers) are tokenised — ck678 stores only masked or tokenised references, not full account numbers or card details.
• Penetration Testing: The ck678 platform undergoes periodic penetration testing by independent security specialists to identify and remediate vulnerabilities.

Despite these measures, no data transmission over the internet or electronic storage method can be guaranteed to be 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ck678 will notify affected individuals without undue delay in accordance with applicable legal requirements.

As a player whose personal data is processed by ck678, you have the following rights with respect to your personal information. ck678 is committed to honouring these rights promptly and without charge unless a request is manifestly unfounded or excessive.

Right of Access

You have the right to request a copy of all personal data that ck678 holds about you. We will provide this information within a reasonable timeframe following identity verification of the requestor.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or supplement it. For minor account details (such as contact preferences), you may update these directly through your ck678 account settings. For identity or KYC data, please contact support.

Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to processing on the grounds of legitimate interests. Please note that certain data must be retained by ck678 to comply with legal obligations (see Section 8), which may limit our ability to fulfil erasure requests in full.

Right to Restriction of Processing

You have the right to request that ck678 restricts the processing of your personal data in certain circumstances, such as while a dispute about the accuracy of data is being resolved, or where you have objected to processing pending verification of legitimate grounds.

Right to Data Portability

Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted directly to another controller where technically feasible.

Right to Object

You have the right to object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, in which case ck678 will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

How to Exercise Your Rights

To exercise any of the rights described above, please submit a written request to our support team at [email protected]. We may require you to verify your identity before processing any request. We will respond within 30 days; where a request is complex or numerous, we may extend this period by a further 30 days with notification.

All registration attempts are subject to mandatory age verification as part of the KYC process. If ck678 discovers or has reasonable grounds to believe that personal data has been collected from an individual who is under 21 years of age, the associated account will be suspended immediately, all personal data relating to that individual will be securely deleted, and any deposits or winnings associated with the account will be handled in accordance with our underage gambling policy as described in our Terms & Conditions.

If you are the parent or guardian of a minor and you believe that your child has created a ck678 account or submitted personal data to the Platform, please contact us immediately at [email protected] so that we may investigate and take appropriate action without delay.

The ck678 platform may contain references to third-party services, game providers, or payment partners. While ck678 exercises care in selecting its third-party partners, we do not control the privacy practices of those third parties and cannot accept responsibility for their handling of your personal data once you interact with their services directly.

We encourage you to review the privacy policies of any third-party service providers — including payment operators such as bKash, Nagad, Rocket, and Upay — before sharing personal data with them. This Privacy Policy applies solely to personal data processed by ck678 in connection with the ck678 platform.

ck678 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we provide. Where changes are material, we will provide reasonable notice to registered players via the email address associated with their ck678 account, or by displaying a prominent notice on the Platform.

The effective date displayed at the top of this document will be updated each time this Policy is revised. Your continued use of the ck678 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept any changes to this Policy, you should cease using the Platform and contact support to arrange account closure.

We recommend that you review this Privacy Policy periodically to stay informed of how ck678 protects your personal data. Previous versions of this Policy are available on request by contacting support at [email protected].

If you have any questions, concerns, or complaints regarding this Privacy Policy or the manner in which ck678 processes your personal data, please contact our Data Protection team using the details below. All correspondence must be submitted in English.

Complaints Process

ck678 will acknowledge all formal privacy complaints within five (5) business days and will endeavour to provide a substantive response within thirty (30) calendar days of receipt. Where a complaint is complex, we may request additional information or extend the response period, in which case we will notify you of the revised timeline.

If you are not satisfied with ck678's response to your privacy complaint, you have the right to escalate the matter to the relevant data protection authority or supervisory body applicable in your jurisdiction.