ck97 Privacy Policy — How We Handle Your Personal Data

ck97 ("the Platform", "we", "us", "our") operates the online casino and sports betting website accessible at ck97.io. ck97 functions as the data controller in respect of all personal data collected from players, visitors, and prospective users of the platform. As data controller, ck97 determines the purposes and means by which personal data is processed in connection with the provision of the Service.

This Privacy Policy applies to all personal data collected through the ck97 website, mobile-optimised interfaces, live chat support channels, email correspondence, and any other interaction you have with ck97 as a platform user. It applies to registered players, guest visitors, and individuals who contact ck97 support without having an active account.

ck97 is an offshore platform primarily serving players in Bangladesh. The platform is operated in English and all privacy-related communications, data access requests, and policy documents are published in English. This policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference.

ck97 collects personal data across several categories depending on how you interact with the platform. The table below summarises the categories of data collected and typical examples within each category:

ck97 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond ID document selfies required for KYC), or health data, except where a player voluntarily discloses health-related information in the context of a responsible gaming self-exclusion request.

ck97 collects personal data through the following channels and mechanisms:

• Direct submission: Data you actively provide when registering an account, completing identity verification, making deposits or withdrawals, contacting support via live chat or email, completing responsible gaming forms, or updating your account profile.
• Automated technical collection: Data collected automatically when you visit the ck97 website or use the platform, including IP address, device identifiers, browser characteristics, page views, session duration, and referral source. This data is collected via server logs and first-party analytics systems.
• Cookies and similar tracking technologies: ck97 uses essential cookies to maintain your logged-in session and platform preferences. Functional cookies may be used to remember your language and display settings. See Section 7 for full details of our cookie usage.
• Payment processors: When you initiate a deposit or withdrawal, your payment provider (bKash, Nagad, Rocket, Upay, USDT network, Visa, Mastercard) may transmit transaction confirmation data and wallet or card identifiers to ck97 to complete the transaction.
• Identity verification providers: Where ck97 uses third-party KYC service providers to verify your identity, those providers may return verification results, risk scores, and document authentication data to ck97.
• Third-party referrals: If you arrive at ck97 via an affiliate or referral partner, the partner may share limited data (such as a referral code or click identifier) with ck97 to attribute your registration. No sensitive personal data is shared by referral partners.

ck97 processes your personal data for the following specific purposes:

• Account creation and management: To register your account, maintain your player profile, enable login authentication, and process account-related requests such as password resets and profile updates.
• Identity verification and fraud prevention: To verify that you meet the eligibility requirements set out in the Terms & Conditions (including the 21+ age requirement), to detect and prevent fraud, money laundering, account takeover, and other prohibited conduct.
• Payment processing: To process deposits from and withdrawals to your registered payment methods, reconcile transactions, and maintain accurate financial records.
• Service delivery: To provide access to the full catalogue of casino games, live dealer games, slots, cricket betting, and all other platform features available on ck97.
• Customer support: To respond to your support enquiries, resolve disputes, process complaints, and provide assistance via live chat, email, and WhatsApp.
• Responsible gaming: To implement and enforce responsible gaming measures you have activated (deposit limits, session reminders, cooling-off periods, self-exclusion), and to proactively monitor for patterns of play that may indicate problem gambling.
• Security and platform integrity: To detect, investigate, and prevent security incidents, unauthorised access, cheating, and technical vulnerabilities affecting the platform.
• Legal and regulatory compliance: To meet obligations arising under applicable anti-money laundering (AML) regulations, to respond to lawful requests from law enforcement and regulatory authorities, and to maintain records required by law.
• Platform improvement: To analyse aggregated usage patterns, identify technical issues, and improve the performance, content, and user experience of the ck97 platform.
• Communications: To send you transactional communications (deposit confirmations, withdrawal notifications, security alerts), and — where you have consented — promotional communications about bonuses, offers, and platform updates.

ck97 relies on the following legal bases to process your personal data, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing that is necessary to perform the contract between you and ck97 — specifically, to operate your account, process payments, and deliver the gaming and betting services you have requested.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering checks, age verification requirements, and responses to lawful authority requests.
• Legitimate interests: Processing carried out for purposes that are in the legitimate business interests of ck97 and that do not override your fundamental privacy rights — for example, fraud detection, platform security monitoring, usage analytics, and responsible gaming safeguard implementations.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of optional marketing communications. Where consent is the legal basis, you retain the right to withdraw it at any time without affecting the lawfulness of prior processing.

ck97 does not sell, rent, or trade your personal data to third parties for commercial purposes. Your data may be shared with the following categories of recipients, strictly on a need-to-know basis and only for the purposes described in this policy:

• Payment service providers: bKash, Nagad, Rocket, Upay, USDT network operators, Visa, and Mastercard receive only the transaction data necessary to complete your deposit or withdrawal. These providers operate under their own privacy policies and are independently responsible for their data practices.
• Identity verification providers: Third-party KYC service providers receive copies of the identity documents you submit during the verification process. These providers are contractually bound to process your data only for identity verification purposes on behalf of ck97.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a player session token to initialise your game session. These providers do not receive your full identity data — they receive only the minimum technical data required to load and operate game sessions.
• Fraud prevention and security partners: Specialist technology providers that assist ck97 in detecting fraudulent activity, bot traffic, and security threats may process limited technical data (IP addresses, device fingerprints) under strict data processing agreements.
• Law enforcement and regulatory authorities: ck97 will disclose personal data to competent authorities where required to do so by applicable law, court order, or legitimate regulatory request. Where legally permitted, ck97 will notify the affected player of such disclosure.
• Professional advisers: Legal counsel, auditors, and other professional advisers may access personal data on a confidential basis in connection with the provision of their professional services to ck97.

All third-party recipients of ck97 player data are required to implement appropriate technical and organisational security measures and to process that data only in accordance with ck97's instructions and applicable data protection requirements.

ck97 uses cookies and similar technologies on its website. A cookie is a small text file placed on your device by a web server when you visit a website. Cookies allow the platform to recognise your device on subsequent visits and to deliver a more functional and personalised experience.

ck97 uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential to the operation of the ck97 platform. They enable you to navigate the site, maintain your authenticated session while logged in, and use core platform features. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: These cookies remember your preferences — such as your preferred display language and session settings — to improve your experience on return visits. They are set only with your consent.
• Analytics cookies: ck97 may use first-party analytics tools to collect aggregated, anonymised data about how visitors interact with the website (pages visited, session duration, click paths). This data is used solely to identify usability issues and improve the platform. No individually identifiable data is collected through analytics cookies.
• Security cookies: Certain cookies are used to support platform security functions including CSRF (Cross-Site Request Forgery) protection and detection of unusual login patterns.

ck97 does not use third-party advertising cookies, retargeting pixels, or cross-site tracking technologies. You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to use the ck97 platform.

ck97 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, after which data is securely deleted or irreversibly anonymised. The following standard retention periods apply:

Where retention beyond these periods is required by a specific legal obligation, court order, or ongoing investigation, ck97 will retain the relevant data until that obligation is resolved. Data that is no longer required is deleted using secure erasure methods or anonymised in a manner that cannot be reversed.

ck97 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security controls in place include:

• Transport Layer Security (TLS): All data transmitted between your browser and ck97 servers is encrypted using TLS 1.2 or higher. This protects your login credentials, payment data, and personal information during transmission.
• Password security: User passwords are stored using strong, salted cryptographic hashing algorithms. ck97 does not store passwords in plain text or in reversibly encrypted form.
• Access controls: Access to player personal data within ck97 systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum access level required to perform their role. All internal access is logged and subject to periodic review.
• Intrusion detection and monitoring: ck97 operates continuous security monitoring to detect and respond to anomalous access patterns, brute-force login attempts, and other indicators of unauthorised activity.
• Third-party security assessments: ck97's platform and data handling practices are subject to periodic third-party security reviews to identify and remediate vulnerabilities.
• Incident response: ck97 maintains a documented data breach response plan. In the event of a data security incident that poses a risk to your personal data, ck97 will notify affected players without undue delay and take immediate steps to contain the incident.

As a ck97 player, you hold the following rights with respect to the personal data we hold about you. These rights may be exercised by contacting the ck97 support team as described in Section 14:

• Right of access: You have the right to request a copy of the personal data ck97 holds about you, along with information about how that data is being used. ck97 will respond to verified access requests within 30 days.
• Right to rectification: If you believe that any personal data ck97 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Many account details can be updated directly through the account dashboard.
• Right to erasure ("right to be forgotten"): You may request that ck97 delete your personal data where it is no longer necessary for the purpose for which it was collected and where no overriding legal basis for retention exists. Note that data subject to mandatory legal retention periods (e.g., AML records) cannot be erased until those periods expire.
• Right to restriction of processing: In certain circumstances — for example, where you contest the accuracy of data or have objected to processing — you may request that ck97 restrict processing of your data while the matter is under review.
• Right to data portability: Where data is processed on the basis of your consent or a contractual necessity and the processing is carried out by automated means, you may request that ck97 provide your data in a structured, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. You also have an unconditional right to object to direct marketing processing at any time.
• Right to withdraw consent: Where ck97 processes your data on the basis of your consent (primarily for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of the above rights, please contact ck97 via live chat or by emailing [email protected]. ck97 may request proof of identity before processing a data rights request to ensure that data is not disclosed to or modified by an unauthorised party.

ck 97 is strictly an adults-only platform. The Service is available exclusively to individuals who are 21 years of age or older. ck97 does not knowingly collect, store, or process personal data relating to any individual under the age of 21.

During the registration process, all applicants are required to confirm that they meet the minimum age requirement of 21 years. ck97 reserves the right to request identity verification documents at any stage to confirm that a player meets this requirement. Any account found to belong to a person under the age of 21 will be suspended immediately, all funds will be frozen pending investigation, and the account will be permanently closed in accordance with the ck97 Terms & Conditions.

If ck97 becomes aware that personal data has been collected from an individual under the age of 21 without the verification safeguards operating as intended, that data will be deleted as promptly as technically possible. If you believe that a minor may have registered on the ck97 platform, please contact support immediately at [email protected] so that the matter can be investigated and resolved without delay.

ck97 operates as an offshore platform and its server infrastructure and operational teams may be located in jurisdictions outside Bangladesh. As a result, your personal data may be transferred to, stored in, or processed in countries other than Bangladesh. ck97 takes this responsibility seriously and implements appropriate safeguards for all cross-border data transfers.

Where personal data is transferred to third-party service providers located outside Bangladesh — including payment processors, KYC providers, and game content suppliers — ck97 ensures that such transfers are governed by contractual data protection clauses requiring the recipient to maintain a standard of data protection equivalent to that described in this policy.

By using the ck97 platform and providing your personal data, you acknowledge and consent to the transfer of your data to ck97's operational infrastructure and authorised service providers, wherever they may be located, subject to the protections described in this policy.

ck97 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform operations, or data processing practices. The effective date at the top of this document will be updated to reflect the date of the most recent revision.

Where changes to this policy are material — meaning they significantly affect your rights or the way ck97 processes your personal data — ck97 will notify registered players via email or a prominent notice on the platform at least 7 days before the changes take effect. For non-material changes (such as editorial clarifications or formatting updates), the updated policy will take effect on the date stated without advance individual notice.

Your continued use of the ck97 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a material change to this policy, you should discontinue use of the platform and may request account closure by contacting the support team.

ck97 recommends that all players review this Privacy Policy periodically to stay informed about how their personal data is being handled. Archived versions of prior Privacy Policy editions are available upon request from the ck97 support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or to ck97's handling of your personal data, you are encouraged to contact the ck97 support team using any of the channels listed below. ck97 is committed to addressing all privacy-related enquiries promptly and transparently.

• Email: [email protected] — for written privacy enquiries, data access requests, and formal complaints. Please include "Privacy Request" in your subject line.
• Live Chat: Available 24 hours a day, 7 days a week via the ck97 website. Live chat is the fastest channel for general privacy questions and account-related queries.
• WhatsApp: Contact details available via the ck97 account dashboard. Response time is typically 2–5 minutes during peak hours (Bangladesh Standard Time, UTC+6).

When submitting a data rights request, please provide your registered account username, the email address associated with your ck97 account, a clear description of your request, and any supporting documentation that may assist in verifying your identity. This information enables ck97 to locate your records accurately and respond to your request as efficiently as possible.

ck97 serves players across all divisions of Bangladesh — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh — and our support team is fully equipped to handle privacy queries from players in all regions. All privacy communications are handled in English.