Privacy Policy — Your Data, Our Responsibility

ck444baji collects personal data from you in several ways: directly when you register an account and interact with our platform, automatically as you browse and use our services, and from trusted third-party partners where this is necessary to verify your identity or process payments.

1.1 Information You Provide Directly

When you create a ck444baji account or interact with our platform, you may provide the following categories of personal information:

• Identity data: Full legal name, date of birth, nationality, and a copy of your government-issued National ID (NID) or passport submitted for KYC verification
• Contact data: Email address, Bangladeshi mobile phone number, and residential address
• Financial data: Mobile financial service account numbers (bKash, Nagad, Rocket, Upay), bank account details, and transaction history within the ck444baji platform
• Account credentials: Your chosen username and encrypted password hash (we never store your raw password)
• Communications data: The content of any messages you send to our customer support team via email or live chat
• Responsible gaming data: Any deposit limits, session limits, cooling-off periods, or self-exclusion instructions you submit through our responsible gaming tools

1.2 Information Collected Automatically

When you visit the ck444baji website or use our platform on any device, we automatically collect certain technical and behavioural data, including:

• Device and browser data: IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, and language settings
• Usage data: Pages visited, time spent on each page, game sessions started and completed, betting history, click patterns, and navigation paths through the platform
• Session data: Login timestamps, session duration, and logout events
• Location data: Approximate geographic location derived from your IP address, used to verify that your access is consistent with the Bangladesh market and to detect anomalous login activity

1.3 Information from Third Parties

In certain circumstances, ck444baji may receive personal data about you from trusted third parties, including:

• Payment service providers (such as bKash, Nagad, and Rocket) who confirm the ownership and status of the mobile financial accounts you use to deposit and withdraw funds
• Identity verification partners who assist with KYC document validation
• Fraud prevention and anti-money laundering (AML) screening services that cross-reference your details against watchlists and sanction databases

ck444baji does not sell your personal data. We share your information only in the limited circumstances described below, and only to the extent necessary for the specific purpose of each disclosure.

3.1 Payment Service Providers

To process deposits and withdrawals, ck444baji must share certain personal and financial data with the payment service providers you choose, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and international card processors. These providers receive only the minimum data required to authorise and complete your transaction. All payment partners are contractually obligated to handle your data securely and to use it solely for transaction processing purposes.

3.2 Identity Verification and KYC Partners

ck444baji works with accredited third-party identity verification services to validate the documents you submit during KYC. Your identity documents are transmitted to these partners using encrypted channels. Verification partners are prohibited from retaining your documents beyond the time required to complete the verification check, and they may not use your data for any purpose other than identity validation on behalf of ck444baji.

3.3 Legal and Regulatory Obligations

ck444baji may be required to disclose your personal data to law enforcement agencies, regulatory bodies, or courts in response to a lawful request, court order, or legal process. In such cases, we will disclose only the specific data required by the legal instrument and will notify you of the disclosure where we are legally permitted to do so.

3.4 Business Operations

ck444baji may share anonymised, aggregated data — which cannot be used to identify any individual — with analytics providers and game platform partners for the purpose of understanding platform performance and improving the player experience. No personally identifiable information is included in these aggregated data sets.

3.5 Corporate Transactions

In the event of a merger, acquisition, or sale of all or part of ck444baji's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, ck444baji will ensure that the acquiring entity is contractually bound to honour the privacy commitments set out in this policy, and we will notify affected players before any transfer takes effect.

ck444baji employs a layered security architecture to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, and destruction. The following measures form the core of our data security programme.

5.1 Encryption

All data transmitted between your device and the ck444baji platform is encrypted using Transport Layer Security (TLS 1.2 or higher). Sensitive data stored in our databases — including KYC document scans, payment account references, and password hashes — is encrypted at rest using AES-256 encryption. Passwords are never stored in plain text; they are processed through a one-way cryptographic hash function with a unique per-user salt before storage.

5.2 Access Controls

Access to personal data within ck444baji's internal systems is governed by a strict role-based access control (RBAC) policy. Team members are granted access only to the data categories required for their specific job function. All internal access to player data is logged, and access logs are reviewed regularly as part of our security monitoring programme. Administrative access to core systems requires multi-factor authentication (MFA).

5.3 Infrastructure Security

ck444baji's platform infrastructure is hosted on servers with physical access controls, continuous uptime monitoring, and automated intrusion detection systems. Regular vulnerability assessments and penetration tests are conducted to identify and remediate security weaknesses before they can be exploited. Database backups are encrypted and stored in geographically separated locations to ensure data availability in the event of a disaster.

5.4 Data Breach Response

In the event of a data breach that poses a risk to your personal data, ck444baji will take immediate steps to contain the breach, assess its scope, and remediate the underlying vulnerability. Affected players will be notified promptly with details of what data was involved, what steps have been taken, and what actions we recommend to protect yourself. ck444baji will also report qualifying breaches to the relevant authorities as required by applicable law.

As a ck444baji player, you hold a number of rights with respect to the personal data we hold about you. We are committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our data protection team at [email protected] with the subject line "Data Privacy Request".

7.1 Response Timeframe

ck444baji aims to respond to all data privacy requests within 30 calendar days of receipt. In cases of particular complexity or where a high volume of requests has been received, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.

7.2 Identity Verification for Data Requests

To protect your privacy, ck444baji must verify your identity before processing any data access, rectification, or deletion request. You will be asked to confirm your registered email address, mobile number, and in some cases submit a copy of your ID document. This step ensures that your data is not disclosed to or deleted at the request of an unauthorised third party.