Our Privacy Commitments
A plain-English summary of the six core privacy commitments ck44sap makes to every player. This summary does not replace the full policy below.
Your Data is Encrypted
All personal and financial data transmitted to and from ck44sap is protected using industry-standard TLS/SSL encryption. Stored data is encrypted at rest using AES-256.
We Never Sell Your Data
ck44sap does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. Your data is used solely to operate and improve the platform.
You Control Your Data
You have the right to access, correct, export, restrict processing of, and request deletion of your personal data at any time by contacting our support team.
Minimal Cookie Use
We use only the cookies necessary for platform functionality, session management, and fraud prevention. We do not use invasive third-party advertising trackers.
Data Kept Only as Long as Needed
We retain your data only for as long as your account is active or as required by applicable law. Upon account closure, personal data is anonymised or deleted within 90 days.
Transparent Communication
If we change how we handle your data in any meaningful way, we will notify you via your registered mobile number or email before those changes take effect.
Information We Collect
ck44sap collects personal information from you in three primary ways: information you provide directly when registering and using the platform, information generated automatically through your use of the platform, and information received from trusted third-party service providers involved in delivering our services.
Information You Provide Directly
When you create a ck44sap account or interact with our platform, we may collect the following categories of personal data:
- Identity data: Full name, date of birth, gender, and national identity number or passport number (collected during age and identity verification).
- Contact data: Mobile phone number, email address, and residential address (city and district in Bangladesh).
- Account credentials: Username and encrypted password hash. We never store your password in plain text.
- Financial data: Mobile money account numbers (bKash, Nagad, Rocket, Upay), USDT wallet addresses, and card details (Visa, Mastercard) used for deposits and withdrawals. Full payment credentials are processed by our payment partners and are not stored on ck44sap servers in unencrypted form.
- Verification documents: Copies of government-issued ID, passport, or other documents submitted for KYC (Know Your Customer) verification.
- Communication data: Messages, queries, and other content you send to our support team via live chat or email.
Information Collected Automatically
When you access the ck44sap platform, our systems automatically collect certain technical data, including:
- Device and browser data: Device type, operating system version, browser type and version, screen resolution, and language settings.
- Network data: IP address, approximate geographic location derived from IP, internet service provider (ISP) name, and connection type.
- Usage data: Pages visited, games played, bets placed, session start and end times, click patterns, and feature interactions within the platform.
- Transaction logs: Full records of all deposits, withdrawals, bonus claims, game rounds, and bet settlements associated with your account.
- Cookie and session data: Session identifiers, authentication tokens, and preference cookies. See the Cookies & Tracking section below for full details.
Information from Third Parties
We may receive personal data about you from the following categories of third-party sources:
- Payment providers: Transaction confirmation data, payment status updates, and fraud-screening results from bKash, Nagad, Rocket, Upay, and USDT network operators.
- Identity verification services: Age and identity confirmation results from KYC verification partners.
- Fraud prevention services: Risk scores and device fingerprint data from third-party fraud detection platforms used to protect the platform and its players.
How We Use Your Data
ck44sap processes your personal data for specific, clearly defined purposes. We do not use your data for any purpose that is incompatible with the original reason it was collected. The table below summarises the key purposes for which we process personal data and the legal basis for each.
| Purpose | Legal Basis | Data Categories Used |
|---|---|---|
| Account registration and management | Contract performance | Identity, contact, credentials |
| Processing deposits and withdrawals | Contract performance | Financial, identity, transaction logs |
| Age and identity verification (KYC) | Legal obligation | Identity, verification documents |
| Fraud detection and prevention | Legitimate interest | Network, device, usage, financial |
| Customer support and dispute resolution | Contract performance | Identity, communication, transaction logs |
| Responsible gaming monitoring | Legal obligation / legitimate interest | Usage, transaction logs, account data |
| Platform improvement and analytics | Legitimate interest | Usage data (anonymised / aggregated) |
| Personalised promotions and bonuses | Consent | Contact, usage, transaction history |
| Regulatory compliance and record-keeping | Legal obligation | Identity, financial, transaction logs |
Marketing Communications
With your consent, ck44sap may send you promotional communications via SMS or email regarding new games, seasonal bonuses (such as Eid, BPL season, Pohela Boishakh, or Victory Day promotions), and platform updates. You may withdraw your consent to marketing communications at any time by updating your notification preferences in account settings or by contacting [email protected]. Withdrawal of marketing consent does not affect the processing of data for other lawful purposes such as account management or legal compliance.
Data Sharing & Third Parties
ck44sap does not sell, rent, or trade your personal data. We share your data with third parties only where strictly necessary to deliver our services, comply with legal obligations, or protect the platform and its players. Every third-party recipient is required to handle your data in accordance with applicable data protection standards and is prohibited from using it for any purpose beyond the specific service they are providing to ck44sap.
Categories of Third-Party Recipients
- Payment processing partners: bKash, Nagad, Rocket, Upay, and USDT network operators receive the minimum transaction data necessary to process your deposits and withdrawals. Card payments via Visa and Mastercard are processed by a PCI-DSS compliant payment gateway.
- Identity verification providers: KYC and age-verification service providers receive copies of identification documents you submit for verification purposes. These providers are contractually bound to use the data only for the verification service.
- Game software providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios receive session and wagering data necessary to operate game rounds and calculate outcomes. These providers are independently licensed and subject to their own data protection frameworks.
- Fraud prevention and security services: Third-party fraud detection platforms may receive device fingerprint data, IP addresses, and transaction patterns to identify and prevent fraudulent activity.
- Customer support platforms: If you contact ck44sap support via live chat, your communication data is processed by our support system provider, which operates under a strict data processing agreement.
- Legal and regulatory authorities: Where required by a court order, regulatory directive, anti-money-laundering obligation, or other lawful legal process, ck44sap will disclose the minimum necessary personal data to the relevant authority. We will inform you of any such disclosure where we are legally permitted to do so.
International Data Transfers
Some of the third-party service providers used by ck44sap are located or operate infrastructure outside of Bangladesh. Where personal data is transferred internationally, ck44sap ensures that appropriate safeguards are in place, including data processing agreements incorporating standard contractual clauses or equivalent data protection measures.
Data Retention
ck44sap retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, or reporting obligations. The retention periods below reflect both operational necessity and compliance requirements.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account identity and contact data | Duration of account + 5 years after closure | Legal and regulatory compliance |
| KYC / verification documents | Duration of account + 5 years after closure | Anti-money-laundering obligation |
| Financial transaction records | 7 years from transaction date | Financial record-keeping requirements |
| Game and betting history | Duration of account + 2 years after closure | Dispute resolution and audit |
| Support communications | 3 years from last interaction | Complaint handling and quality assurance |
| Analytics and usage data (anonymised) | Up to 3 years from collection | Platform improvement |
| Marketing consent records | Duration of consent + 2 years | Proof of consent for compliance |
Account Closure and Deletion
When you request account closure, ck44sap will anonymise or delete your personal data from active systems within 90 days of closure, subject to the retention obligations in the table above. Certain categories of data must be retained for the legally required periods even after account closure — this is a regulatory obligation that ck44sap cannot waive. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for platform analytics and fraud pattern research.
Data Security
ck44sap takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction.
Technical Security Measures
- Transport Layer Security (TLS/SSL): All data transmitted between your device and ck44sap servers is encrypted in transit using TLS 1.2 or higher. Our SSL certificate is valid and maintained at all times.
- Encryption at rest: Sensitive personal and financial data stored in our databases is encrypted using AES-256, a military-grade symmetric encryption standard.
- Password hashing: User passwords are never stored in plain text. They are hashed using a secure adaptive hashing algorithm (bcrypt) with a per-user salt, making them practically irreversible even if our database were compromised.
- Access controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All internal data access is logged and audited.
- Intrusion detection: ck44sap operates continuous network monitoring and intrusion detection systems to identify and respond to potential security threats in real time.
- Regular security assessments: We conduct periodic vulnerability assessments and penetration tests to identify and remediate security weaknesses before they can be exploited.
Organisational Security Measures
- All staff with access to personal data are trained in data protection principles and are bound by confidentiality obligations.
- Data access privileges are reviewed quarterly and revoked promptly when no longer required.
- Third-party service providers are vetted for security compliance before being granted access to any ck44sap systems or player data.
- ck44sap maintains an internal data breach response plan that defines escalation procedures, containment steps, and notification timelines.
Data Breach Notification
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, ck44sap will notify affected players without undue delay after becoming aware of the breach. Notification will be sent to the mobile number or email address associated with your account and will include a description of the nature of the breach, the categories of data affected, and the steps we have taken or plan to take to address it.
Your Privacy Rights
As a player on the ck44sap platform, you have a number of rights in relation to the personal data we hold about you. ck44sap is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our support team at [email protected] with your account username and a description of your request. We will respond within 30 days of receipt.
Right of Access
You have the right to request a copy of the personal data ck44sap holds about you. This is commonly referred to as a Subject Access Request (SAR). Upon verification of your identity, we will provide you with a summary of the data categories held, the purposes for which they are processed, any third parties with whom the data has been shared, and the applicable retention periods.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For basic account details such as your contact number or email address, you may update these directly in your account settings. For verified identity data (such as name or date of birth as confirmed during KYC), corrections require supporting documentation.
Right to Erasure
You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been unlawfully processed. Please note that ck44sap may be legally required to retain certain categories of data (such as transaction records) for specified periods even following an erasure request, as detailed in the Data Retention section above.
Right to Restrict Processing
You may request that ck44sap restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing based on legitimate interests and verification is pending. During a restriction period, ck44sap will continue to store your data but will not actively process it beyond what is strictly necessary.
Right to Data Portability
Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON). You may request a data export by contacting our support team.
Right to Object
You have the right to object to ck44sap processing your personal data on the basis of legitimate interests, including profiling for responsible gaming monitoring or fraud prevention purposes. We will assess your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests. You may also object to processing for direct marketing purposes at any time, and we will honour this request without requiring justification.
Right to Withdraw Consent
Where processing is based solely on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent, update your preferences in your account settings or contact us directly.
Contact & Data Officer
ck44sap takes its data protection responsibilities seriously. If you have any questions, concerns, or complaints about how we handle your personal data, or if you wish to exercise any of the rights described above, please reach out to us using the contact details below.
Support Team
For general privacy enquiries, account data requests, and marketing opt-out requests, our support team is available daily from 9 AM to 11 PM Bangladesh Standard Time (BST, UTC+6). Contact: [email protected]
Data Protection Officer
For formal data protection matters, including Subject Access Requests, erasure requests, complaints about data processing practices, and data breach reports, please direct your correspondence to our Data Protection Officer (DPO) at the same contact address, marking your message with the subject line "Data Protection — [Your Request Type]". The DPO will acknowledge receipt within 5 business days and provide a substantive response within 30 days.
Complaints
If you are unsatisfied with ck44sap's response to a privacy concern or believe that we are processing your personal data unlawfully, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. ck44sap encourages players to contact us directly in the first instance so that we have the opportunity to resolve the matter before formal regulatory escalation.
Policy Updates
This Privacy Policy was last updated on 1 January 2026. ck44sap reserves the right to update this policy at any time to reflect changes in our data practices, legal requirements, or platform features. When material changes are made, registered players will be notified via their registered contact details prior to the changes taking effect. The most current version of this policy is always available at ck44sap.im/privacy-policy.
Continue Exploring ck44sap
Now that you have reviewed our Privacy Policy, you may want to explore the platform, review our responsible gaming tools, or browse our game categories.
Join Thousands of Players Across Bangladesh
Log in to your ck44sap account and enjoy 500+ casino games and live cricket betting. Deposit instantly via bKash or Nagad. Your data is always protected. For adults aged 18 and above only.
Responsible Gaming
Tools and resources to help you stay in control of your gambling habits.
Learn More