ck343 Privacy Policy

1. Data Controller

ck343 ("the Platform", "we", "us", "our") is the data controller responsible for personal data collected through ck343.io. As data controller, ck343 determines the purposes and means of processing personal data submitted by or collected about players who access the Platform.

Any questions, requests, or complaints relating to the handling of your personal data should be directed to our Data Protection contact at [email protected]. We will acknowledge receipt of your communication within two business days and respond fully within a reasonable period, normally not exceeding 30 calendar days.

2. Data We Collect

ck343 collects the following categories of personal data from players and prospective players:

2.1 Identity Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (used to verify the 21+ minimum age requirement)
• National Identity Card (NID) number or passport number
• Scanned or photographed copies of identity documents where submitted for KYC verification

2.2 Contact Data

• Registered Bangladesh mobile phone number (used for OTP authentication and account notifications)
• Email address, where provided
• City or district of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh)

2.3 Financial Data

• Mobile wallet identifiers associated with your bKash, Nagad, Rocket, or Upay account (wallet phone number only — ck343 does not store wallet PINs or full financial credentials)
• Transaction history including deposit amounts, withdrawal amounts, dates, and processing status
• Account Balance and Bonus Funds balance at any given time

2.4 Technical & Usage Data

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser version
• Session timestamps, login history, and session duration
• Pages visited within ck343, games played, bet amounts, and game outcomes
• Referral source (how you arrived at ck343.io)

2.5 Communications Data

• Records of any communications you initiate with our support team, including chat transcripts and email correspondence
• Feedback, complaints, and dispute records

ck343 does not collect special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where a document submitted for identity verification incidentally contains such information (in which case it is used solely for verification and not further processed).

3. How We Collect Data

Personal data is collected through the following channels:

• Direct submission: Information you actively provide during account registration, KYC verification, deposit and withdrawal requests, and support interactions.
• Automated technical collection: Data collected automatically when you access the Platform, including IP address, device information, and behavioural usage data via server logs and first-party analytics.
• Payment processors: Transaction confirmation data returned by bKash, Nagad, Rocket, and Upay when you initiate a deposit or withdrawal. ck343 receives confirmation status and wallet reference numbers — it does not receive your wallet PIN or full financial credentials.
• Identity verification providers: Confirmation of identity document validity and age verification from third-party KYC service providers engaged by ck343.
• Cookies and similar technologies: First-party cookies used to maintain session state, personalise your experience, and support platform security. See Section 6 for full details.

4. Purposes & Legal Basis for Processing

The table below sets out each category of data processing carried out by ck343, together with the purpose and the legal basis on which it relies.

5. Data Sharing & Third Parties

ck343 does not sell, rent, or otherwise commercially transfer your personal data to third parties. Data is disclosed only in the following limited circumstances:

5.1 Service Partners

ck343 engages the following categories of third-party service providers who process personal data on our behalf under strict contractual data protection terms:

• Payment processors: bKash, Nagad, Rocket, and Upay for deposit and withdrawal processing. These providers receive only the data necessary to complete your requested transaction.
• Identity verification providers: Third-party KYC services engaged to verify identity documents and confirm minimum age compliance.
• Cloud infrastructure providers: Hosting and database services used to operate the ck343 platform securely.
• Customer support tooling: Platforms used to manage support ticket queues and live chat interactions.
• Game content providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session identifiers and game-play data necessary to deliver and audit their games. They do not receive full identity data.

5.2 Legal Disclosure

ck343 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, valid legal process, or court order. We will notify affected players of such disclosures to the extent permitted by law.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial part of ck343's assets, personal data held about players may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material change to data processing practices that results from it.

6. Cookies & Tracking Technologies

ck343 uses first-party cookies and similar browser-based storage technologies to operate and improve the Platform. No third-party advertising cookies are used on ck343.io.

6.1 Types of Cookies Used

• Strictly necessary cookies: Required for core Platform functions including session management, authentication, and security token handling. These cannot be disabled without rendering the Platform non-functional.
• Functional cookies: Store your preferences such as language settings and last-used payment method to improve your experience across sessions.
• Analytics cookies: First-party analytics data collected to understand how players navigate the Platform, which pages are most visited, and where technical errors occur. This data is aggregated and not used to identify individual players for marketing purposes.

6.2 Managing Cookies

You may control cookie behaviour through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling functional or analytics cookies will not prevent you from accessing the Platform but may reduce the quality of your experience.

7. Data Retention

ck343 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: Retained for a minimum of five years following Account closure, in accordance with anti-money laundering and fraud prevention obligations.
• Financial transaction records: Retained for a minimum of seven years from the date of each transaction, in accordance with financial record-keeping requirements.
• Communications and support records: Retained for three years from the date of the relevant interaction.
• Technical and usage data: Retained in aggregated or pseudonymised form for up to two years for platform analytics purposes.
• Marketing consent records: Retained for the duration of your consent and for one year following withdrawal of consent, to demonstrate compliance.

Upon expiry of the applicable retention period, data is securely deleted or anonymised in a manner that prevents re-identification.

8. Data Security

ck343 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure:

• Transport security: All data in transit between your device and ck343 servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Storage encryption: Sensitive data fields within ck343 databases — including identity document references and financial identifiers — are stored in encrypted form.
• Access controls: Internal access to player personal data is restricted to authorised staff on a need-to-know basis, enforced through role-based access control and multi-factor authentication for all administrative systems.
• OTP authentication: Account login is secured by one-time password (OTP) verification sent to your registered Bangladesh mobile number, providing a second factor of authentication.
• Security monitoring: ck343 systems are monitored continuously for anomalous activity, attempted intrusions, and data exfiltration patterns.
• Incident response: In the event of a confirmed data breach that poses a risk to affected players, ck343 will notify impacted players and take all reasonable steps to contain and remediate the incident without undue delay.

No security system is infallible. While ck343 takes extensive measures to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials and for notifying us immediately if you suspect any unauthorised access.

9. Children & Minors

ck343 strictly prohibits the use of its Platform by persons under the age of 21. We do not knowingly collect personal data from individuals below this minimum age. If you have reason to believe that a person under 21 has registered an Account or submitted personal data to ck343, please contact us immediately at [email protected].

Upon receiving credible notification or independently identifying that an Account belongs to a person under 21, ck343 will immediately close that Account, delete or anonymise all associated personal data to the extent not required for legal compliance purposes, and return any deposited funds to the payment source used at registration.

10. Your Rights

As a player on ck343, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with a clear description of your request and sufficient information to verify your identity.

• Right of access: Request a copy of all personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of personal data where it is no longer required for the purpose collected, subject to legal retention obligations.
• Right to restrict processing: Request that we pause certain processing activities while a dispute is being resolved.
• Right to data portability: Request a structured, machine-readable copy of data you have provided to us.
• Right to object: Object to processing based on legitimate interests or carried out for direct marketing purposes.
• Right against automated decision-making: Request human review of significant decisions made solely by automated means.
• Right to withdraw consent: Withdraw consent for consent-based processing (such as marketing) at any time, without affecting the lawfulness of prior processing.

ck343 will respond to all valid data rights requests within 30 calendar days of receipt. Where a request is complex or numerous, this period may be extended by a further 30 days with notification to the requester.

11. Marketing Communications

ck343 will only send you promotional or marketing communications — including bonus offers, seasonal promotions, and platform updates — where you have provided explicit opt-in consent to receive them. This consent is collected during account registration and can be withdrawn at any time by contacting [email protected].

Transactional communications — such as deposit confirmations, withdrawal notifications, OTP codes, and security alerts — are not classified as marketing communications and will be sent to you regardless of your marketing preferences, as they are necessary for the operation of your Account.

12. Cross-Border Data Transfers

ck343 primarily processes and stores personal data within secure data centre infrastructure. Where personal data is processed by third-party service providers located outside Bangladesh — including cloud infrastructure providers, game studios, or analytics platforms — ck343 ensures that appropriate safeguards are in place to protect the data during transfer and at rest in the destination country. These safeguards include contractual data processing agreements that impose equivalent data protection obligations on the recipient.

By using the ck343 platform, you acknowledge that your personal data may be transferred to and processed in countries outside Bangladesh in the limited circumstances described above.

13. Changes to This Privacy Policy

ck343 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform services. When changes are material, we will notify you via a prominent notice on the Platform or by direct communication to your registered contact details before the changes take effect.

The effective date at the top of this document reflects the date on which the current version came into force. We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

14. Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way ck343 handles your personal data, please contact us using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
• Response Time: Acknowledgement within 2 business days; full response within 30 calendar days

If you are not satisfied with our response to your complaint, you have the right to escalate the matter to the appropriate data protection authority or seek independent legal advice. ck343 is committed to resolving all data-related concerns promptly and transparently.