Privacy Policy — How ck499 Protects Your Data

This Privacy Policy ("Policy") is published by ck499 ("ck499", "we", "us", "our") and applies to all personal data collected through the ck499 website at https://ck499.io and all associated services, applications, and communications channels (collectively, the "Platform"). It describes how ck499 collects, uses, stores, shares, and protects your personal data, and outlines the rights available to you as a data subject.

By registering an account on ck499, accessing the Platform, or otherwise using any of our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should not use the Platform.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions in relation to the handling of personal data, this Policy shall take precedence.

ck499 collects personal data from you directly (when you register, deposit, contact support, or use Platform features), automatically (through cookies and server logs when you browse the Platform), and occasionally from third parties (such as payment processors and identity verification providers). The categories of data we collect are set out in the table below.

ck499 does not collect or process special categories of sensitive personal data (such as health data, religious beliefs, political opinions, or biometric data) except where required by applicable anti-money laundering regulations and only to the minimum extent necessary for compliance purposes.

ck499 uses the personal data it collects for the following specific purposes. We process data only for purposes that are compatible with the original collection purpose, unless we have obtained your explicit consent for a new purpose or are required to do so by law.

• Account creation and management: To register your account, verify your identity, maintain your player profile, and manage your account settings including responsible gaming preferences and deposit limits.
• Service delivery: To process your deposits and withdrawals in Bangladeshi Taka (BDT) via bKash, Nagad, Rocket, Upay, and other supported payment methods; to settle bets and gaming transactions; and to credit bonuses and promotional rewards to your account.
• Identity verification (KYC/AML): To comply with anti-money laundering obligations, to verify that you are aged 21 or above, and to confirm that you are not subject to any sanctions or self-exclusion orders.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account abuse, collusion, and any other prohibited conduct as defined in our Terms & Conditions.
• Customer support: To respond to your enquiries, resolve disputes, investigate complaints, and provide technical assistance.
• Platform improvement: To analyse usage patterns, diagnose technical issues, test new features, and improve the overall performance and user experience of the ck499 Platform.
• Responsible gaming: To monitor betting patterns, enforce self-exclusion requests, apply deposit limits set by players, and to identify players who may be showing signs of problematic gambling behaviour.
• Marketing communications: To send you promotional offers, seasonal bonuses (e.g., Eid, Pohela Boishakh, BPL season promotions), and newsletters — but only where you have explicitly opted in to receive such communications. You may opt out at any time.
• Legal compliance: To comply with applicable laws, respond to lawful requests from regulatory or law enforcement authorities, and to exercise or defend legal claims.

ck499 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing is necessary to perform the contract between you and ck499 — specifically, to operate your account, process transactions, settle bets, and deliver all Platform services you have requested.
• Legal obligation: Processing is necessary for ck499 to comply with applicable legal obligations, including anti-money laundering (AML) requirements, know-your-customer (KYC) regulations, and mandatory record-keeping obligations.
• Legitimate interests: Processing is necessary for ck499's legitimate business interests, including fraud detection, information security, platform analytics, and responsible gaming monitoring, provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: For certain processing activities — such as sending marketing emails, using non-essential cookies, or processing data for profiling purposes — ck499 relies on your freely given, specific, informed, and unambiguous consent. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

ck499 uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage) to operate the Platform, remember your preferences, and analyse how users interact with our services. The types of cookies we use are described below.

• Strictly necessary cookies: These cookies are essential for the Platform to function. They enable core features such as user authentication, session management, and security. These cookies cannot be disabled without breaking core functionality.
• Functional cookies: These cookies remember choices you make (such as your preferred language or responsible gaming settings) to provide a more personalised experience. Disabling them may affect certain Platform features.
• Analytics cookies: These cookies collect anonymised information about how visitors use the Platform — for example, which pages are visited most frequently and how users navigate between sections. This data helps us improve the Platform. Analytics cookies are only set with your consent.
• Marketing cookies: These cookies track your browsing behaviour to enable ck499 and its partners to show you relevant promotional content. Marketing cookies are only set with your explicit consent and can be withdrawn at any time through your browser or account settings.

You can control and manage cookies through your browser settings at any time. Note that disabling strictly necessary cookies will impair your ability to use the Platform. Detailed cookie settings and consent preferences can be managed through the cookie settings panel accessible within your account profile.

ck499 does not sell, rent, or trade your personal data to third parties. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose:

• Payment processors: We share financial data (transaction amounts, wallet identifiers) with payment service providers — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely to process your deposits and withdrawals. These providers are bound by their own data protection obligations.
• Identity verification providers: We share identity documents and related data with KYC/AML verification service providers for the purpose of completing mandatory identity checks. These providers operate under strict contractual confidentiality obligations.
• Game technology providers: Certain game providers (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe) may process limited technical and session data to deliver their games on our Platform. This data is limited to what is necessary for game functionality and fairness certification.
• Analytics service providers: Anonymised usage and technical data may be shared with analytics providers to help us understand Platform performance. No directly identifiable personal data is included in these data sets.
• Law enforcement and regulatory authorities: ck499 will disclose personal data to law enforcement, financial intelligence units, or other regulatory authorities where required to do so by law, court order, or where we reasonably believe disclosure is necessary to prevent fraud, protect national security, or comply with AML obligations.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of ck499's business, personal data held by ck499 may be transferred to the relevant acquirer or successor entity, subject to equivalent data protection obligations being maintained.

ck499 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal obligations, and to resolve disputes or enforce our agreements. The following retention schedule applies:

When a retention period expires, personal data is either securely deleted, anonymised (so that it can no longer be associated with an identifiable individual), or pseudonymised for aggregate statistical purposes. ck499 conducts periodic data audits to ensure that retention schedules are being followed.

ck499 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• SSL/TLS encryption: All data transmitted between your device and ck499's servers is encrypted using 256-bit SSL/TLS technology, ensuring that data in transit cannot be intercepted or read by unauthorised parties.
• Encryption at rest: Sensitive personal data — including identity documents and financial data — is encrypted when stored on ck499's servers using industry-standard encryption algorithms.
• Access controls: Access to personal data is restricted to ck499 personnel and authorised third-party processors who have a demonstrated need to access the data to perform their role. All such individuals operate under strict confidentiality obligations.
• Firewalls and intrusion detection: ck499's infrastructure is protected by enterprise-grade firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) that monitor for and block suspicious activity in real time.
• Regular security testing: ck499 conducts regular penetration testing and vulnerability assessments of its systems to identify and remediate security weaknesses before they can be exploited.
• Incident response: ck499 maintains a documented data breach response plan. In the event of a personal data breach that is likely to result in a risk to your rights, ck499 will notify affected individuals without undue delay and take all reasonable steps to contain and mitigate the breach.

While ck499 employs robust security measures, no internet transmission or electronic storage system is completely secure. We encourage you to use a strong, unique password for your ck499 account and to contact [email protected] immediately if you suspect any unauthorised access to your account.

As a data subject, you have the following rights in relation to your personal data held by ck499. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and include your registered username and a description of your request.

• Right of access: You have the right to request a copy of the personal data ck499 holds about you, along with information about how it is being used and shared. We will respond to valid access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update most of your account information directly through the account settings page.
• Right to erasure ("right to be forgotten"): You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent, or where the data has been processed unlawfully. Note that this right is subject to legal retention obligations — for example, financial transaction records must be retained for regulatory compliance purposes and cannot be deleted on request.
• Right to restrict processing: You have the right to request that ck499 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to data portability: Where processing is based on consent or contract and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where ck499 relies on legitimate interests as the legal basis. ck499 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for legal claims.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

ck499 is strictly an adult entertainment platform. Our services are not directed at, and may not be used by, any person under the age of 21. We do not knowingly collect personal data from individuals under 21 years of age.

If ck499 becomes aware that it has inadvertently collected personal data from an individual who is under 21 years old, we will take immediate steps to delete that data and close the associated account. All deposits received from an underage account will be returned, less any amounts already wagered.

ck499 uses age verification technology as part of its registration and KYC processes to prevent underage individuals from accessing the Platform. We are committed to child protection and take this obligation extremely seriously.

ck499's primary operations and player base are located in Bangladesh. However, some of the third-party service providers we use to operate the Platform — including game technology providers, cloud infrastructure partners, and analytics tools — may process data in servers located outside Bangladesh.

Where personal data is transferred outside Bangladesh, ck499 ensures that appropriate safeguards are in place to protect the data, including:

• Entering into data processing agreements with third-party processors that include contractual data protection obligations equivalent to those applicable in Bangladesh.
• Conducting due diligence on the data protection practices of all third-party processors before engagement and on a periodic basis thereafter.
• Implementing technical safeguards such as encryption for data transferred across international boundaries.

ck499 does not transfer personal data to any jurisdiction where adequate data protection standards cannot be ensured. If you have questions about the specific countries to which your data may be transferred, please contact us at [email protected].

ck499 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform functionality. When we make material changes to this Policy, we will notify registered players by email (to the address on file) or by displaying a prominent notice on the Platform at least 7 days before the changes take effect.

Minor changes — such as typographical corrections , clarifications of existing language, or updates to contact details — may be made without prior notice, though the "Last Updated" date at the top of this Policy will always reflect the most recent revision.

Your continued use of the Platform after any revised Privacy Policy has taken effect constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed about how ck499 protects your personal data. The current version of this Policy will always be available at https://ck499.io/privacy-policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way ck499 handles your personal data, or if you wish to exercise any of your data subject rights, please contact our Data Protection team through the following channel:

When submitting a data rights request, please include the following information to help us process your request efficiently: your registered ck499 username, the email address associated with your account, a clear description of the right you wish to exercise or the concern you wish to raise, and any supporting information relevant to your request.

ck499 will never charge a fee for handling a data rights request unless the request is manifestly unfounded or excessive, in which case we reserve the right to charge a reasonable administrative fee or to refuse the request, with written reasons provided to you.