ck677 Privacy Policy — How We Protect Your Personal Data

ck677 ("we", "us", "our", "the Company") operates the online casino and sports betting platform accessible at https://ck677.io and all associated subdomains and applications (collectively, "the Platform"). ck677 is the data controller in respect of all personal data collected from players and visitors in connection with the Platform.

This Privacy Policy applies to all personal data we collect about you when you visit, register on, or use the ck677 Platform, including data collected via our website, mobile-optimised interface, live chat system, email correspondence, and any other channel through which you interact with ck677. It applies to all players located in Bangladesh and any other jurisdiction from which the Platform is accessed.

ck677 collects personal data from you in several ways: information you provide directly during registration and account use, information generated automatically when you use the Platform, and information obtained from trusted third-party verification and payment partners. The categories of personal data we collect are set out below.

We do not collect or process special-category sensitive data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than where a liveness check is required by our KYC partner and only to the extent required), or health data, unless you voluntarily disclose such information in a support communication.

ck677 uses the personal data we collect for the following clearly defined purposes. We will not use your data for any purpose that is incompatible with these stated purposes without first obtaining your explicit consent.

• Account Registration & Management: To create and administer your ck677 player account, verify your identity, and enable you to log in securely.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay; to reconcile transactions; and to detect and prevent payment fraud.
• Identity Verification (KYC): To verify that you meet the 21+ age requirement and to confirm that you are who you say you are, in compliance with our anti-money-laundering obligations.
• Service Delivery: To provide access to our casino games, sports betting markets, live dealer tables, and all other Platform features.
• Customer Support: To respond to your queries, complaints, and support requests in a timely and informed manner.
• Responsible Gaming: To monitor your gaming activity for signs of problem gambling and, where appropriate, to apply deposit limits, cooling-off periods, or self-exclusion in line with our Responsible Gaming Policy.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct on the Platform.
• Platform Improvement: To analyse usage patterns, diagnose technical issues, and improve the features, performance, and user experience of the Platform.
• Marketing Communications (opt-in only): To send you promotional offers, bonus notifications, and platform updates where you have explicitly consented to receive such communications.
• Legal Compliance: To comply with any legal obligation to which ck677 is subject, including retaining records in accordance with applicable law.

ck677 processes your personal data on one or more of the following legal bases, depending on the purpose for which the data is being processed:

• Contractual Necessity: Processing is necessary to perform the contract between you and ck677 — namely, to provide the services you have registered for. This covers account creation, game access, payment processing, and customer support.
• Legal Obligation: Processing is necessary to comply with a legal obligation to which ck677 is subject. This covers identity verification, age verification, anti-money-laundering checks, and the retention of transaction records.
• Legitimate Interests: Processing is necessary for the purposes of ck677's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms. This covers fraud prevention, security monitoring, Platform analytics, and responsible gaming monitoring.
• Consent: Where processing is based on your consent, you are free to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Consent-based processing covers marketing communications and non-essential analytics cookies.

ck677 does not sell, rent, or otherwise commercially exploit your personal data to third parties. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the relevant purpose.

• Payment Processors: bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, and other payment service providers receive the financial data necessary to process your deposits and withdrawals. These providers operate their own privacy policies and are independently responsible for data they collect in their own capacity.
• Identity Verification Providers: Our third-party KYC partners receive identity and verification documents solely to perform age and identity verification checks. Verified results are returned to ck677; raw documents are retained only for the period required by applicable law.
• Game Providers: Game software providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive your player session identifier and technical data to enable gameplay. They do not receive your full identity or financial data.
• Analytics Providers: Anonymous, aggregated usage data may be shared with analytics service providers to help us understand how players use the Platform. This data cannot be used to identify you as an individual.
• Legal & Regulatory Authorities: ck677 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are required to do so by law, court order, or binding regulatory request.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or a material part of ck677's business, player data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained. We will notify affected players of any such transfer.

ck677 uses cookies and similar tracking technologies on the Platform to provide a functional, personalised, and secure user experience. A cookie is a small text file stored on your device by your web browser when you visit a website. ck677 uses the following categories of cookies:

ck677 does not deploy third-party advertising cookies, cross-site tracking pixels, or social media retargeting scripts. You can manage your cookie preferences at any time by adjusting your browser settings or by contacting [email protected]. Please note that disabling strictly necessary cookies may affect your ability to use core Platform features including logging in and accessing your account.

ck677 retains personal data for no longer than is necessary for the purposes for which it was collected or as required by applicable law. The following retention periods apply as a general guide:

• Account Data: Retained for the duration of your account's active status, plus a minimum of 5 years following account closure, to comply with anti-money-laundering and record-keeping obligations.
• Transaction Records: Financial transaction data is retained for a minimum of 5 years from the date of the transaction in accordance with standard financial record-keeping requirements.
• KYC & Verification Documents: Retained for the duration of your account's active status plus 5 years following account closure, or for such longer period as may be required by applicable law.
• Support Communications: Live chat transcripts and email correspondence are retained for 2 years from the date of the communication, unless the communication relates to an unresolved dispute, in which case it is retained until the dispute is fully resolved.
• Analytics Data: Anonymous, aggregated analytics data does not contain personal identifiers and is retained indefinitely for Platform improvement purposes. Raw session logs containing IP addresses are retained for a maximum of 90 days.
• Marketing Consent Records: Records of your marketing consent (or withdrawal thereof) are retained for the duration of your account plus 3 years, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Where anonymisation is used, the resulting data no longer constitutes personal data and may be retained and used for analytical purposes without restriction.

ck677 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational security measures to protect your data against unauthorised access, disclosure, alteration, or destruction. Our current security measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and ck677's servers is encrypted in transit using industry-standard TLS 1.2 or higher.
• Encryption at Rest: All personally identifiable data stored in ck677's databases is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within ck677's systems is restricted on a strict need-to-know basis. Staff access is governed by role-based access controls and requires multi-factor authentication.
• Regular Security Audits: ck677's systems and infrastructure undergo regular internal security reviews and periodic third-party penetration testing to identify and remediate vulnerabilities.
• Incident Response: ck677 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected players without undue delay.
• Secure Password Storage: Player passwords are stored using a salted hashing algorithm. Plain-text passwords are never stored or logged at any point.

As a player whose personal data is processed by ck677, you have the following rights in respect of your personal data. These rights are provided to all players regardless of location, including players across Bangladesh:

• Right of Access: You have the right to request confirmation of whether ck677 holds personal data about you and, if so, to obtain a copy of that data along with information about how it is processed.
• Right to Rectification: You have the right to request that ck677 correct any inaccurate personal data we hold about you, or complete any incomplete personal data.
• Right to Erasure: You have the right to request that ck677 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to ck677's legal obligation to retain certain data for specified periods.
• Right to Restriction: You have the right to request that ck677 restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is contested or while an objection is assessed.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where processing is based on legitimate interests. ck677 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request" along with your registered username and a description of your request. ck677 will acknowledge your request within 5 business days and provide a full response within 30 days. In complex cases, this period may be extended by a further 30 days, and we will notify you if an extension is required.

ck677 operates a strict minimum age policy of 21 years. The Platform is not intended for, and is not directed at, any person under the age of 21. ck677 does not knowingly collect personal data from any individual under the age of 21.

If ck677 becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete all associated personal data to the extent permitted by law, and void any transactions associated with the account. Parents or guardians who believe that a minor may have registered an account on ck677 are encouraged to contact [email protected] immediately so that the matter can be investigated and resolved without delay.

ck677 will only send you direct marketing communications — including promotional emails, bonus offers, tournament announcements, and platform update notifications — if you have explicitly opted in to receive such communications at the time of registration or via your account settings.

Marketing communications from ck677 are sent by email to your registered address. We do not conduct unsolicited telephone marketing and do not send marketing SMS messages. All marketing emails from ck677 include a clearly visible unsubscribe link. Clicking the unsubscribe link will remove you from all marketing communications within 5 business days.

Opting out of marketing communications does not affect your receipt of transactional and service-related communications, such as deposit confirmations, withdrawal processing notifications, account security alerts, or updates to these Terms & Conditions and Privacy Policy, which are sent to all registered players regardless of marketing preference.

ck677 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we provide. Where a change is material — meaning it significantly affects your rights or how we use your personal data — we will provide at least 7 days' advance notice via email to your registered address and/or via an in-platform notification before the change takes effect.

Non-material changes (such as typographical corrections, clarifications of existing provisions, or formatting updates) may take effect immediately upon publication without prior notice. The most current version of this Privacy Policy will always be accessible at https://ck677.io/privacy-policy. The effective date at the top of this document indicates when the policy was last reviewed and updated.

Your continued use of the ck677 Platform following the effective date of any update to this Privacy Policy constitutes your acknowledgement of and agreement to the updated version. If you do not agree to the updated Privacy Policy, you must cease using the Platform and may request account closure by contacting [email protected].

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which ck677 handles your personal data, or if you wish to exercise any of your data rights as described in Section 9, please contact our support team using the details below. All privacy-related correspondence should be submitted in English.

• Email (Privacy): [email protected] — please use the subject line "Privacy Policy Query" or "Data Rights Request" as appropriate.
• Live Chat: Available 24/7 via the ck677 Platform — average response time under 2 minutes for general queries.
• Formal Data Rights Requests: Submit to [email protected] with subject line "Data Rights Request", your registered username, a description of your request, and confirmation of your identity. ck677 will acknowledge within 5 business days and respond in full within 30 days.
• Formal Privacy Complaints: Submit to [email protected] with subject line "Privacy Complaint". ck677 will acknowledge within 24 hours and provide a substantive response within 5 business days.