ckr4 Privacy Policy

1 Introduction and Controller Identity

This Privacy Policy applies to all personal data processed by ckr4 in connection with the operation of the online sports betting and casino platform available at ckr4.io and any associated interfaces, including mobile-optimised browser access. ckr4 is the data controller responsible for the personal data of registered players and visitors to the Platform.

For the purposes of this Policy, "personal data" means any information relating to an identified or identifiable natural person — including name, contact details, financial information, device identifiers and behavioural data — processed in connection with your use of the ckr4 Platform.

By creating an account with ckr4 or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside our Terms and Conditions, which govern your overall relationship with ckr4.

2 Data We Collect

ckr4 collects the following categories of personal data from players and Platform visitors:

ckr4 does not intentionally collect special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data or health information. If any such data is inadvertently included in documents you submit for verification purposes, it will not be processed beyond what is strictly necessary for identity confirmation and will be stored under enhanced access controls.

3 How We Collect Your Data

ckr4 collects your personal data through the following means:

• Direct submission: Information you provide when you complete the registration form, update your account profile, submit identity verification documents, contact customer support, or participate in promotions and surveys.
• Automated technical collection: Data collected passively as you navigate and interact with the Platform, including page views, click events, session duration, device fingerprinting and IP-based geolocation to confirm Bangladesh residency.
• Payment processing partners: Transaction confirmation data, payment method tokens and fraud risk scores received from bKash, Nagad, Rocket, Upay and card network processors when you deposit or withdraw funds.
• Identity verification services: Results and risk assessments received from third-party KYC (Know Your Customer) and AML (Anti-Money Laundering) verification providers used to confirm your identity and screen for financial crime risk.
• Game data providers: Aggregated session and outcome data from third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt and Microgaming) that power casino games available on the Platform.
• Cookies and similar technologies: Session identifiers, preference cookies and analytics tags placed on your browser or device as described in Section 5 of this Policy.

4 Purposes and Legal Bases for Processing

ckr4 processes your personal data for specific, clearly defined purposes. Each processing activity is supported by one or more legal bases as set out below:

• Account creation and management: To register your account, verify your identity, maintain your account balance, process deposits and withdrawals in Bangladeshi Taka (৳), and provide access to all Platform features. Legal basis: performance of a contract.
• Payment processing: To initiate, settle and record financial transactions via bKash, Nagad, Rocket, Upay, Visa and Mastercard. Legal basis: performance of a contract; legal obligation (financial record-keeping).
• Identity verification and KYC: To confirm that you meet the minimum age requirement of 21 years, verify your identity to prevent fraud and comply with applicable anti-money laundering obligations. Legal basis: legal obligation; legitimate interests.
• Fraud detection and prevention: To monitor transactions and account activity for indicators of fraudulent behaviour, collusion, bonus abuse, or money laundering, and to take protective action where warranted. Legal basis: legitimate interests; legal obligation.
• Customer support: To respond to your queries, complaints and account requests in a timely and accurate manner, and to maintain a record of communications for quality assurance purposes. Legal basis: performance of a contract; legitimate interests.
• Responsible gaming: To identify indicators of problem gambling, offer appropriate responsible gaming tools, and respond to self-exclusion or limit-setting requests in compliance with our responsible gaming obligations. Legal basis: legal obligation; legitimate interests; vital interests of the data subject.
• Platform improvement and analytics: To understand how players use the Platform, identify technical issues, and improve the overall user experience for Bangladesh-based players. Legal basis: legitimate interests.
• Marketing communications: To send you promotional offers, bonus notifications and game updates where you have opted in to receive such communications. Legal basis: consent (which may be withdrawn at any time).
• Legal compliance: To comply with applicable laws, respond to regulatory inquiries, enforce our Terms and Conditions, and exercise or defend legal claims. Legal basis: legal obligation; legitimate interests.

5 Cookies and Tracking Technologies

ckr4 uses cookies and similar technologies to operate the Platform, remember your preferences and collect analytics data. The following categories of cookies are used:

• Strictly necessary cookies: These are essential for the Platform to function and cannot be disabled. They include session authentication tokens, security cookies and load-balancing identifiers. No consent is required for these cookies.
• Functional cookies: These remember your preferences such as language settings and interface layout choices to provide a personalised experience across sessions. They are set with your consent.
• Analytics cookies: These collect aggregated, anonymised data about how visitors interact with the Platform — including pages visited, time spent and navigation paths — to help us improve the Platform. They are set with your consent.
• Security and fraud-detection cookies: These help ckr4 identify unusual access patterns, detect bot activity and protect your account against unauthorised access attempts. They are strictly necessary and cannot be disabled.

Most modern browsers allow you to control cookie settings, including blocking or deleting cookies. Please note that disabling strictly necessary cookies will impair the functionality of the ckr4 Platform and may prevent you from accessing your account. Instructions for managing cookies are available in your browser's help documentation.

6 Sharing Your Data with Third Parties

ckr4 does not sell, rent or trade your personal data. We share data with third parties only where necessary and under strict contractual obligations to protect your information:

• Payment processors: bKash, Nagad, Rocket, Upay, and card network processors receive the financial and identity data strictly necessary to process your deposits and withdrawals in ৳.
• Identity verification providers: Third-party KYC and AML service providers receive identity and document data to verify your age, identity and source of funds where required.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi receive anonymised session identifiers necessary to deliver their games within the ckr4 Platform.
• Customer support platform: Our customer support tooling provider processes support ticket data and chat transcripts in order to manage your enquiries on our behalf.
• Legal and regulatory authorities: Where required by applicable law, court order or regulatory obligation, ckr4 may disclose personal data to law enforcement agencies or regulatory bodies. We will notify you of such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer.

All third-party data processors engaged by ckr4 are bound by data processing agreements that require them to process your personal data only on our documented instructions, to maintain appropriate security measures, and to delete or return your data at the end of the service relationship.

7 International Data Transfers

Some of our third-party service providers — including game content providers and infrastructure partners — may process personal data outside of Bangladesh. Where such transfers occur, ckr4 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy.

These safeguards may include contractual clauses that impose data protection obligations on the receiving party, or reliance on the recipient's adherence to internationally recognised data protection frameworks. If you would like further information about the safeguards applied to any specific international transfer, please contact us at [email protected].

8 Data Retention

ckr4 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or to comply with applicable legal, regulatory, accounting or reporting requirements. The following general retention principles apply:

• Account data and transaction records are retained for a minimum of five (5) years following account closure to comply with financial record-keeping obligations.
• Identity verification documents are retained for a minimum of five (5) years from the date of verification to satisfy anti-money laundering record-keeping requirements.
• Customer support communications are retained for up to three (3) years from the date of the interaction, unless the communication relates to an ongoing dispute or legal claim.
• Marketing preference data and consent records are retained until you withdraw your consent or for up to three (3) years from your last interaction with a marketing communication, whichever occurs first.
• Technical log data (IP addresses, session logs) is retained for up to twelve (12) months for security and fraud investigation purposes, then deleted or anonymised.

When data is no longer required, it is securely deleted from active systems and backed-up copies are purged in accordance with our data deletion schedule. In some cases, data may be anonymised rather than deleted, so that it can no longer be linked to any individual, and used for statistical or analytical purposes without retention limits.

9 Security Measures

ckr4 implements a layered approach to data security designed to protect your personal information against unauthorised access, accidental loss, disclosure, alteration or destruction. Our technical and organisational security measures include:

• SSL/TLS encryption for all data transmitted between your browser or mobile device and the ckr4 Platform.
• Encryption at rest for sensitive data stored in our databases, including financial records and identity documents.
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access personal data categories.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Multi-factor authentication requirements for internal staff accessing systems that contain personal data.
• Incident response procedures to detect, contain and notify affected parties of data breaches within applicable regulatory timeframes.

10 Your Data Rights

As a registered user of ckr4, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within five (5) business days and provide a substantive response within fourteen (14) calendar days.

• Right of access: You may request a copy of the personal data ckr4 holds about you, along with information about how it is being processed.
• Right to rectification: You may request the correction of any inaccurate or incomplete personal data held about you. Some corrections can be made directly through your account settings.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other legal basis applies. This right is subject to our legal retention obligations.
• Right to restrict processing: You may request that ckr4 limits processing of your data in certain circumstances, such as while the accuracy of data is being contested.
• Right to data portability: You may request a copy of data you have provided to us in a structured, commonly used, machine-readable format where technically feasible.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes. Objections to direct marketing will be honoured immediately.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Please note that certain data rights may be limited where ckr4 has a legal obligation to retain or process data, or where exercising the right would adversely affect the rights of others. Where a request is declined, ckr4 will provide a clear explanation of the grounds for refusal.

11 Children and Minors

The ckr4 Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect or process personal data from individuals under the age of 21. If ckr4 becomes aware that personal data has been collected from a person below the minimum age, that account will be immediately suspended, the data will be deleted, and any associated funds will be processed in accordance with our Terms and Conditions and applicable law.

If you are a parent or guardian and believe that a person under 21 has registered an account with ckr4 without your knowledge, please contact us immediately at [email protected] so that we can take prompt action.

12 Marketing Communications

ckr4 may send you promotional emails, SMS notifications or in-platform messages relating to bonuses, cricket betting offers for BPL and IPL seasons, casino promotions and other Platform updates — but only where you have provided your explicit consent to receive such communications at the time of registration or through your account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the unsubscribe link included in every marketing email.
• Updating your communication preferences in the notification settings section of your account.
• Sending a written request to [email protected] with the subject line "Unsubscribe".

Please allow up to five (5) business days for opt-out requests to take effect across all communication channels. Withdrawal of marketing consent does not affect the receipt of transactional communications essential to the operation of your account, such as deposit confirmations, withdrawal notifications, security alerts and identity verification requests.

13 Changes to This Policy

ckr4 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, Platform features, applicable legal requirements or regulatory guidance. The revised Policy will be published on the Platform with an updated effective date.

Where changes are material — meaning they affect how we use your personal data in ways that are significantly different from what was described in the previous version — we will provide advance notice by posting a prominent notice on the Platform and, where we hold your email address, by sending you a direct notification. Your continued use of the Platform after the revised Policy takes effect constitutes your acceptance of the updated terms.

14 Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about how ckr4 handles your personal data, please contact our privacy team using the details below:

We encourage you to contact us directly in the first instance so that we have the opportunity to resolve your concern promptly and to your satisfaction.