ckbd Privacy Policy
Your privacy matters to ckbd. This Privacy Policy explains exactly what personal data we collect when you use our platform, why we collect it, how it is stored and protected, and the rights you hold over your own information. We are committed to handling your data with care, transparency, and respect — consistent with our broader commitment to player trust.
Privacy at a Glance
How ckbd Protects Your Information
The following cards summarise the key principles of our privacy approach. Full details are provided in the legal sections below. Where there is any difference between a summary card and the full policy text, the full policy text governs.
Minimal Data Collection
ckbd collects only the personal data that is strictly necessary to operate your account, process payments, verify your identity, and comply with applicable anti-money-laundering obligations. We do not collect data speculatively or for purposes unrelated to your gaming experience on the platform.
Bank-Grade Encryption
All data transmitted between your device and ckbd's servers is protected using Transport Layer Security (TLS 1.3). Stored sensitive data — including identity documents and payment method details — is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the data they protect.
No Data Selling
ckbd does not sell, rent, or trade your personal data to third-party marketing companies, data brokers, or advertising networks under any circumstances. Your personal information is used solely to operate your ckbd account and to meet our legal obligations. We share data with third parties only in the limited circumstances described in the Data Sharing section of this policy.
You Control Your Data
Registered players have the right to access, correct, export, and request deletion of their personal data at any time. ckbd provides a straightforward process for exercising these rights via email to our support team. Most requests are handled within seven business days of receipt.
Transparent Cookie Use
ckbd uses cookies exclusively for session management, fraud detection, and performance analytics. We do not use third-party advertising or behavioural targeting cookies. A full breakdown of the cookies we set, their purpose, and their retention period is available in the Cookies section of this policy.
Defined Retention Periods
We do not hold your data indefinitely. Each category of personal data has a defined maximum retention period based on our operational needs and legal obligations. Identity and transaction records are retained for a minimum of five years to satisfy anti-money-laundering requirements; other data is deleted sooner where no ongoing purpose exists.
1 Data We Collect
ckbd collects personal data from you in three main ways: data you provide directly when registering or using the platform, data generated automatically by your use of the platform, and data obtained from third-party identity and payment verification services. The categories of data we collect are described below.
1.1 Data You Provide Directly
| Data Category | Specific Data Points | Collected At |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, national identity card number or passport number | Registration & KYC verification |
| Contact Data | Email address, mobile phone number, residential address (including city, district, postal code) | Registration |
| Document Data | Scanned or photographed copies of NID card, passport, utility bill, or bank statement submitted for verification | KYC verification |
| Payment Data | bKash / Nagad / Rocket / Upay mobile wallet number and account holder name; transaction reference numbers | First deposit & withdrawal requests |
| Communication Data | Content of emails, live chat transcripts, and support tickets submitted to ckbd | Any customer support interaction |
| Responsible Gaming Data | Voluntary deposit limits, cooling-off periods, and self-exclusion requests submitted by the player | Player-initiated responsible gaming tool activation |
1.2 Data Collected Automatically
When you access the ckbd platform, our systems automatically record certain technical and behavioural data. This data is used to maintain platform security, detect fraud, improve performance, and comply with our anti-money-laundering monitoring obligations.
- Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device language settings.
- Session data: Login timestamps, session duration, pages visited, games played, bet amounts and outcomes, and navigation paths through the platform.
- Transaction logs: Timestamps, amounts, payment method references, and outcomes for all deposit and withdrawal transactions.
- Geolocation data: Country-level geolocation derived from your IP address, used to verify that you are not accessing the platform from a prohibited jurisdiction. We do not collect precise GPS-level location data.
1.3 Data from Third Parties
ckbd may receive additional personal data about you from third-party service providers engaged to assist with identity verification, fraud prevention, and payment processing. This includes confirmation of identity document authenticity from document verification services and transaction outcome confirmations from mobile financial services providers such as bKash and Nagad. Data received from third parties is handled in accordance with this Privacy Policy in the same manner as data you provide directly.
2 How We Use Your Data
ckbd uses your personal data only for the purposes described in this policy. We do not use your data for purposes that are incompatible with the reason it was originally collected. The primary purposes for which we process your personal data are as follows.
- Account management: To create, maintain, and administer your ckbd account, including processing deposits and withdrawals, applying bonus credits, and maintaining your account history.
- Identity verification and KYC compliance: To verify your age, identity, and source of funds in accordance with our anti-money-laundering obligations. This is a legal requirement and cannot be opted out of.
- Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, duplicate account creation, bonus abuse, money laundering, and other prohibited conduct described in our Terms & Conditions.
- Payment processing: To initiate and confirm deposit and withdrawal transactions via your registered mobile financial services provider (bKash, Nagad, Rocket, or Upay) and to maintain an auditable transaction record.
- Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance with account issues via email and live chat.
- Responsible gaming: To apply deposit limits, cooling-off periods, and self-exclusion requests that you have voluntarily activated, and to monitor for behavioural patterns that may indicate problem gambling in order to intervene proactively where necessary.
- Platform improvement: To analyse aggregated and anonymised usage data for the purpose of improving the platform's performance, game selection, user interface, and overall player experience.
- Legal compliance: To comply with applicable laws and regulations, respond to lawful requests from competent authorities, and maintain records required by anti-money-laundering and counter-terrorist financing obligations.
- Communications: To send you transactional messages (such as deposit confirmations, withdrawal notifications, and account security alerts) and, where you have given explicit consent, promotional communications about relevant offers and bonuses.
Marketing Communications
ckbd will only send you marketing emails or promotional SMS messages if you have explicitly opted in to receive them at the time of registration or via your account settings. You may withdraw your consent to marketing communications at any time by contacting [email protected] with the subject line "Unsubscribe from Marketing". Withdrawal of marketing consent does not affect transactional messages, which are sent as a necessary part of operating your account.
3 Legal Basis for Processing
ckbd processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved.
- Contractual necessity: Processing your identity data, contact data, and payment data is necessary to perform the contract represented by our Terms & Conditions. Without this processing, we cannot operate your account or provide the services you have requested.
- Legal obligation: Processing your identity documents and transaction records for KYC and anti-money-laundering purposes is required by applicable law. We have no discretion to suspend this processing while your account is active.
- Legitimate interests: Processing device data, session data, and geolocation data for fraud prevention and platform security is carried out on the basis of our legitimate interest in protecting the integrity of the platform and the safety of all players. We have assessed that this interest is not overridden by your privacy rights, given the limited and proportionate nature of the data involved.
- Consent: Sending marketing communications by email or SMS is carried out only where you have given freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.
4 Cookies & Tracking Technologies
ckbd uses cookies and similar technologies on its platform. A cookie is a small text file placed on your device by a web server when you visit a website. Cookies allow the platform to recognise your device on subsequent visits, maintain your login session, and record certain technical information about your use of the site.
4.1 Categories of Cookies We Use
| Cookie Type | Purpose | Retention |
|---|---|---|
| Strictly Necessary | Maintain your login session, remember your language preference, and prevent cross-site request forgery. These cookies are essential for the platform to function and cannot be disabled. | Session (deleted on browser close) or up to 30 days |
| Security & Fraud Detection | Assign a unique device fingerprint to assist in detecting duplicate account creation, bonus abuse, and suspicious login activity. | Up to 12 months |
| Performance Analytics | Collect anonymised data on page load times, error rates, and navigation paths to help us identify and fix platform performance issues. | Up to 6 months |
4.2 Cookies We Do Not Use
ckbd does not use third-party advertising cookies, social media tracking pixels, or behavioural profiling cookies of any kind. No data collected via cookies on the ckbd platform is shared with advertising networks or used to build marketing profiles about you.
4.3 Managing Cookies
You may configure your browser to refuse cookies or to alert you when cookies are being sent. Please note that disabling strictly necessary cookies will prevent the platform from functioning correctly — in particular, you will not be able to maintain a login session without session cookies enabled. Browser-level cookie settings vary by browser; consult your browser's help documentation for instructions on managing cookie preferences.
5 Data Sharing & Third Parties
ckbd does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share your data with third parties only in the following limited and specific circumstances.
5.1 Service Providers
We engage a small number of carefully selected third-party service providers who process data on our behalf, under binding data processing agreements that restrict their use of your data to the specific service they provide for ckbd. These providers include:
- Identity verification services: Document authentication providers who verify the validity of identity documents submitted during KYC verification.
- Payment processors: Mobile financial services intermediaries who facilitate the processing of bKash, Nagad, Rocket, and Upay transactions. These providers receive only the minimum data necessary to execute the transaction — typically the transaction reference, amount, and wallet number.
- Cloud infrastructure providers: Hosting and database services used to operate the ckbd platform. All data stored with infrastructure providers is encrypted and access-controlled.
- Fraud prevention services: Specialist fraud detection platforms that help us identify suspicious activity, duplicate accounts, and potential money laundering patterns.
5.2 Legal and Regulatory Disclosure
ckbd may disclose your personal data to competent law enforcement authorities, regulatory bodies, or courts where we are required to do so by applicable law, or where disclosure is necessary to protect the legal rights, property, or safety of ckbd, its players, or the public. We will notify affected players of such disclosures to the extent permitted by law.
5.3 Business Transfers
In the event that ckbd undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via the email address associated with your account prior to the transfer taking effect, and you will retain the right to request deletion of your data if you do not wish your information to be transferred.
No International Transfers Without Safeguards
Where any data processing by a third-party service provider involves transfer of your data outside Bangladesh, ckbd ensures that appropriate contractual safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. ckbd does not transfer personal data to jurisdictions with inadequate data protection standards without implementing appropriate protective measures.
6 Data Retention & Deletion
ckbd retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following retention periods apply to the main categories of data we hold.
| Data Category | Retention Period | Basis for Retention |
|---|---|---|
| Identity & KYC documents | 5 years from account closure | Anti-money-laundering legal obligation |
| Transaction records | 5 years from transaction date | Anti-money-laundering legal obligation |
| Account data (name, email, address) | Duration of account + 2 years post-closure | Contractual necessity; legal obligation |
| Customer support communications | 3 years from last interaction | Legitimate interests (dispute resolution) |
| Session and device logs | 12 months from creation | Legitimate interests (fraud prevention) |
| Marketing consent records | 3 years from consent withdrawal or account closure | Legal obligation (demonstrable consent record) |
| Self-exclusion records | Indefinitely (or until exclusion is formally lifted) | Responsible gaming obligations |
6.1 Deletion Requests
You may request deletion of your personal data at any time by contacting [email protected] with the subject line "Data Deletion Request". Please note that where we are required by law to retain certain categories of data — particularly identity documents and transaction records subject to anti-money-laundering retention requirements — we are unable to delete those records before the applicable retention period has elapsed. In such cases, we will confirm to you exactly which data cannot yet be deleted and the date on which deletion will take place.
7 Your Data Rights
As a player on the ckbd platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with a clear description of your request. We will acknowledge all data rights requests within 48 hours and provide a substantive response within seven business days.
- Right of access: You have the right to request a copy of all personal data we hold about you. We will provide this in a structured, commonly used, machine-readable format (CSV or JSON) upon request.
- Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Requests to correct identity data will require supporting documentation.
- Right to erasure: You have the right to request deletion of personal data that is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations as described in Section 6.
- Right to restrict processing: You have the right to request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being disputed, or where you have objected to processing based on legitimate interests and we are assessing that objection.
- Right to data portability: You have the right to receive personal data you have provided to us in a structured, machine-readable format, and to request that we transmit it directly to another service provider where technically feasible.
- Right to object: Where we process your data on the basis of legitimate interests, you have the right to object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment or defence of legal claims.
- Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
Identity Verification for Data Requests
To protect your privacy and prevent unauthorised access to your data, ckbd is required to verify your identity before processing any data rights request. You will be asked to confirm your registered email address and may be asked to provide a copy of your identity document before the request is fulfilled. This verification step is a safeguard, not an obstacle — it exists to ensure that your data is never disclosed to a third party claiming to be you.
8 Contact & Complaints
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how ckbd has handled your personal data, please contact our support team using the details below.
Privacy enquiries and data rights requests:
Email: [email protected] (plain text — not a link)
Subject line: "Privacy Request" or "Data Rights Request"
Response time: within 48 hours acknowledgement; substantive response within 7 business days
8.1 Complaints
If you are not satisfied with our response to a privacy enquiry or data rights request, you may escalate the matter to ckbd's senior management team by emailing [email protected] with the subject line "Privacy Complaint — Escalation". We take all privacy complaints seriously and will appoint a senior team member to review your case and respond within fourteen business days of escalation.
8.2 Changes to This Privacy Policy
ckbd reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. Where changes are material — meaning they substantially affect your rights or the way we use your data — we will notify you by email at least fourteen days before the changes take effect. The "Last updated" date at the top of this policy reflects the date on which the most recent version was published. Continued use of the ckbd platform following the effective date of any update constitutes acceptance of the revised Privacy Policy.
We encourage you to review this Privacy Policy periodically to stay informed about how ckbd protects your personal data. If you have questions about any change, please contact us before the effective date and we will be happy to clarify.
Have Questions About Your Data?
Our support team is available 24/7 to answer any privacy questions, process data requests, or help you manage your ckbd account settings.