xck44 Privacy Policy

This Privacy Policy ("Policy") describes how xck44 ("xck44", "we", "us", "our") collects, uses, stores, and protects personal information about individuals ("you", "your", "the Player") who register for, access, or use the xck44 online casino and sports betting platform available at xck44.io and any associated mobile-optimised interfaces or applications (collectively, "the Platform").

xck44 is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy is incorporated by reference into the xck44 Terms & Conditions, which are available at xck44.io/terms-conditions. By registering an account or continuing to use the xck44 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

This Policy applies to all personal data processed by xck44 in connection with the Platform, regardless of whether the data is provided directly by you during registration, collected automatically during your use of the Platform, or received from authorised third-party sources such as payment processors or identity verification providers.

xck44 acts as the data controller in respect of personal data collected through and processed in connection with the xck44 Platform. As data controller, xck44 determines the purposes for which personal data is processed and the means by which that processing is carried out.

For all data protection enquiries, access requests, and complaints relating to xck44's handling of your personal data, please contact the xck44 Data Protection team using the contact details provided in Section 15 of this Policy.

xck44 collects the following categories of personal data in connection with the operation of the Platform:

xck44 collects personal data through the following primary channels:

• Direct submission: Data you provide when registering your xck44 account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a promotional offer.
• Automated collection: Data collected automatically when you access the xck44 Platform, including device and browser information, IP address, session data, and cookie-derived usage signals. See Section 9 for full details on cookies.
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Visa, and Mastercard when you make deposits or withdrawals. xck44 receives only necessary transaction metadata — full card or wallet account numbers are handled directly by the payment processor.
• Identity verification partners: Where xck44 uses a third-party KYC or identity verification service to validate your identity documents, that provider may share verification outcome data and document metadata with xck44.
• Publicly available sources: In limited fraud prevention contexts, xck44 may cross-reference information against publicly available records such as sanction lists or politically exposed person (PEP) databases.

xck44 uses personal data for the following specific purposes. Each purpose is tied to a legal basis as described in Section 6:

• Account creation and management: Setting up your xck44 account, maintaining your account profile, and enabling you to log in and use the Platform.
• Identity and age verification: Confirming that you are who you say you are, that you are at least 21 years of age, and that you are not a restricted or self-excluded person.
• Payment processing: Processing deposits and withdrawals in BDT via your chosen payment method and maintaining accurate financial records of all transactions on your account.
• Fraud and money laundering prevention: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, duplicate account creation, payment fraud, and money laundering in compliance with applicable financial crime prevention standards.
• Responsible gaming: Monitoring betting patterns and account activity to identify indicators of problem gambling behaviour, and taking action — such as enforcing self-exclusion, cooling-off periods, or deposit limits — where required to protect players.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining support interaction records for quality assurance and compliance purposes.
• Platform improvement: Analysing aggregated usage data to understand how players interact with the xck44 Platform and to improve features, game offerings, and user experience.
• Marketing communications (with consent only): Sending you promotional offers, bonus notifications, and news about xck44 games and events — only where you have explicitly opted in to receive such communications.
• Legal and regulatory compliance: Meeting obligations under applicable law, responding to lawful requests from authorities, and maintaining records required for audit and compliance purposes.

xck44 relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to fulfil the contract between you and xck44 — that is, the Terms & Conditions you accept when registering. This covers account creation, payment processing, game operation, and support.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering obligations, age verification requirements, fraud reporting duties, and responses to lawful authority requests.
• Legitimate interests: Processing carried out for purposes that serve xck44's legitimate business interests, provided those interests are not overridden by your rights. This includes fraud prevention, security monitoring, and platform analytics. xck44 always considers the impact on your privacy before relying on legitimate interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent. This applies to marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

xck44 does not sell, rent, or trade your personal data to any third party. xck44 may share your personal data with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard — solely for the purpose of processing your deposits and withdrawals. Each provider is subject to its own privacy policy and security standards.
• Identity verification providers: Third-party KYC service providers engaged by xck44 to verify identity documents submitted during account registration or compliance checks.
• Game technology providers: Licensed game studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, and Spribe, which supply the casino games available on the xck44 Platform. These providers may receive anonymised session identifiers to facilitate game delivery but do not receive full player identity data.
• IT and infrastructure providers: Cloud hosting, content delivery, and cybersecurity service providers that support the operation and security of the xck44 Platform. These providers act as data processors under binding agreements with xck44.
• Legal and regulatory authorities: Law enforcement agencies, financial intelligence units, or other competent authorities where xck44 is legally required or permitted to disclose personal data in connection with fraud investigations, AML reporting, or court orders.
• Professional advisers: Lawyers, auditors, and accountants engaged by xck44 for legal, compliance, and financial reporting purposes, subject to professional confidentiality obligations.

xck44 retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention principles apply:

• Active account data: Retained for the full duration of your account relationship with xck44, plus a minimum of five (5) years following account closure, in accordance with financial record-keeping and AML obligations.
• KYC and identity verification records: Retained for a minimum of five (5) years following the completion of verification or account closure, whichever is later.
• Transaction records: Financial transaction data, including deposit and withdrawal history, is retained for a minimum of five (5) years for AML and audit compliance purposes.
• Support communications: Customer support interaction records are retained for three (3) years from the date of the interaction.
• Marketing data: Retained until you withdraw consent to marketing communications or request deletion, subject to legal minimum retention requirements.
• Technical and usage logs: Server logs and session data are typically retained for ninety (90) days for security and fraud monitoring purposes, after which they are deleted or anonymised.

Where personal data is no longer required for its original purpose and there is no legal basis to retain it, xck44 will securely delete or anonymise it so that it can no longer be attributed to an identifiable individual.

xck44 uses cookies and similar tracking technologies on the xck44 Platform to ensure the Platform functions correctly, to keep you securely logged in, and to understand how players use the Platform so that it can be continuously improved. The following types of cookies may be used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged into your xck44 account. These cookies cannot be disabled without breaking core Platform functionality.
• Functional cookies: Store your preferences such as preferred language and display settings so that the Platform remembers your choices between sessions.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate the xck44 Platform, which pages are visited most frequently, and where technical errors occur. This data is used to improve the Platform and is not linked to individual player identities.
• Security cookies: Used to detect and prevent fraud, bot activity, and unauthorised access attempts. These cookies are essential for the security of the Platform and cannot be disabled.

xck44 does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary or security cookies may impair your ability to use the xck44 Platform.

xck44 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the xck44 Platform.
• Encryption at rest for sensitive personal data fields stored in xck44 databases.
• Password hashing using industry-standard cryptographic algorithms — xck44 never stores passwords in plain text.
• Payment card data tokenisation — full card details are handled exclusively by PCI-DSS compliant payment processors and are never stored on xck44 servers.
• Access controls that restrict access to personal data to authorised xck44 personnel and contracted service providers on a strict need-to-know basis.
• Regular security assessments and vulnerability testing of the xck44 Platform infrastructure.
• Intrusion detection systems and real-time monitoring for suspicious access patterns.

As a player on the xck44 Platform, you have the following rights in respect of your personal data. To exercise any of these rights, contact xck44 support using the details in Section 15. xck44 will respond to all data rights requests within thirty (30) calendar days:

• Right of access: You may request a copy of all personal data xck44 holds about you, together with information about how it is used and with whom it is shared.
• Right to rectification: You may request that xck44 correct any inaccurate or incomplete personal data held about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to legal retention obligations — xck44 may be required to retain certain data for AML and audit purposes even after account closure.
• Right to restrict processing: You may request that xck44 restrict the processing of your personal data in certain circumstances, for example while a correction request is being assessed.
• Right to data portability: Where processing is based on your consent or on contractual necessity and carried out by automated means, you may request that xck44 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing of your personal data carried out on the basis of legitimate interests. xck44 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent — for example, marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

The xck44 Platform is strictly intended for adults aged 21 and above. xck44 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the xck44 registration process, and xck44 reserves the right to request supporting documentation to confirm a player's age at any time.

If xck44 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately, the associated account will be closed, and any deposits made will be returned to the original payment source. If you believe that a minor has created a xck44 account, please contact xck44 support immediately.

xck44 primarily stores and processes personal data within the region in which it operates. However, certain third-party service providers engaged by xck44 — such as cloud infrastructure providers, identity verification partners, or game technology providers — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred internationally, xck44 takes steps to ensure that an adequate level of protection is maintained, including by entering into data processing agreements with service providers that incorporate appropriate data protection safeguards. xck44 does not transfer personal data to parties in jurisdictions that do not provide an adequate level of data protection without implementing appropriate contractual safeguards.

xck44 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, changes in xck44's data processing practices, or changes in the services offered on the Platform. When material changes are made, xck44 will publish the updated Policy on the xck44 website and, where the changes are significant, notify registered players via the contact details associated with their account.

The "Last updated" date displayed in the Table of Contents panel and at the top of this page will be revised whenever the Policy is updated. Your continued use of the xck44 Platform following the publication of an updated Policy constitutes your acceptance of the revised terms. If you do not accept the updated Policy, you must stop using the Platform and contact support to arrange account closure.

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about xck44's handling of your personal data, please contact the xck44 Data Protection team through any of the following channels. All support operates on Bangladesh Standard Time (BST, UTC+6), 24 hours a day, 7 days a week.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available within the xck44 Platform, 24/7 (BST)
• WhatsApp: +880 1700 000000 (message only)

xck44 will acknowledge all data rights requests within five (5) business days and aim to resolve them fully within thirty (30) calendar days of receipt. Where a request is complex or involves a large volume of data, xck44 may extend this period by a further thirty (30) days, in which case you will be notified of the extension and the reason for it.