ck10 Privacy Policy — How We Handle Your Personal Data

1. Information We Collect

ck10 collects personal data in the following categories when you register for an account, use the platform, or interact with our support team. The categories of data collected and the contexts in which they are collected are described below:

• Registration data: your mobile phone number, chosen username, date of birth (for age verification purposes), and the details you provide when completing the KYC verification process, which may include a copy of a government-issued photo identification document.
• Financial and transaction data: records of deposits and withdrawals, the mobile wallet or bank account details associated with each transaction (such as the bKash or Nagad number used), transaction amounts, dates, and reference numbers. ck10 does not store full card numbers or full bank account numbers.
• Usage and activity data: records of your gaming activity, including games played, bet amounts, session duration, win/loss history, and the features you access within the platform. This data is used for account management, responsible gaming monitoring, and fraud prevention.
• Device and technical data: your IP address, device type, operating system, browser type and version, screen resolution, and mobile network information. This data is collected automatically when you access the platform and is used for security, fraud prevention, and platform optimisation purposes.
• Communications data: records of communications between you and the ck10 support team, including support chat transcripts, emails sent to [email protected], and any information you voluntarily provide when contacting us.

We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data, except where a government-issued ID submitted for KYC purposes incidentally contains such information. In those cases, the information is used solely for identity verification and is not processed for any other purpose.

2. How We Use Your Information

ck10 uses the personal data it collects for the following purposes. We do not use your data for purposes that are incompatible with those stated below without first obtaining your consent or having a lawful basis to do so:

• Account registration and management: to create and maintain your player account, verify your identity and age in accordance with our 21+ policy, process deposits and withdrawals, and communicate with you about your account.
• Platform delivery and improvement: to operate, maintain, and improve the ck10 platform, including personalising the gaming experience based on your activity, resolving technical issues, and developing new features.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent transactions, account abuse, money laundering, and other illegal or unauthorised activity on the platform. This includes automated monitoring of account and transaction activity.
• Responsible gaming: to monitor gaming activity for patterns that may indicate problem gambling behaviour, to apply self-exclusion and account limit restrictions requested by players, and to fulfil our responsible gaming obligations.
• Communications and support: to respond to your support queries, send you account-related notifications (such as deposit confirmations and withdrawal updates), and, where you have opted in, to send promotional communications about ck10 offers and events.
• Legal and regulatory compliance: to comply with applicable laws and regulations, including anti-money laundering requirements, to respond to lawful requests from regulatory or law enforcement authorities, and to establish, exercise, or defend legal claims.

3. Legal Basis for Processing

ck10 processes personal data on one or more of the following lawful bases, depending on the specific processing activity and the circumstances in which the data was collected:

• Contract performance: processing necessary to fulfil our contractual obligations to you as a registered platform user, including operating your account, processing your transactions, and delivering the gaming services you have requested.
• Legitimate interests: processing necessary for ck10's legitimate business interests, including fraud prevention, platform security, improving the user experience, and conducting analytics — provided these interests are not overridden by your rights and interests.
• Legal obligation: processing necessary to comply with a legal obligation to which ck10 is subject, including anti-money laundering regulations, age verification requirements, and obligations to cooperate with regulatory or law enforcement authorities.
• Consent: where we rely on your consent for a specific processing activity (such as sending you promotional communications), you have the right to withdraw that consent at any time by contacting us at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

4. Sharing Your Information

ck10 does not sell, rent, or otherwise trade your personal data to third parties for their own marketing or commercial purposes. We may share your personal data with the following categories of third parties, strictly as necessary and for the purposes described in this policy:

• Payment processing partners: mobile wallet operators and banking institutions (including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and City Bank) that process your deposit and withdrawal transactions. These partners receive only the data necessary to complete the transaction and are subject to their own privacy and data security obligations.
• Game and technology providers: certified game studios (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) and technology infrastructure providers whose services are integrated into the ck10 platform. These providers may process limited technical and activity data to deliver their services.
• Identity verification and KYC providers: third-party identity verification services used to verify the identity and age of players during the account registration and KYC process. These providers are bound by confidentiality obligations and data processing agreements.
• Regulatory and law enforcement authorities: government bodies, regulatory authorities, and law enforcement agencies when we are required to disclose personal data by applicable law, court order, or lawful request. ck10 will only disclose the minimum amount of data necessary to fulfil the legal obligation.

All third parties with whom ck10 shares personal data are required to handle that data in accordance with applicable data protection standards. Where we engage a third party as a data processor, we require them to enter into a data processing agreement that imposes appropriate technical and organisational security measures and restricts their use of the data to the purposes for which it was shared.

5. Payment Data and Financial Information

When you make a deposit or request a withdrawal on ck10, the transaction is processed through your chosen payment method — bKash, Nagad, Rocket, Upay, or a Bangladeshi bank. ck10 records the mobile wallet number or bank account identifier associated with each transaction for the purpose of processing the payment, verifying ownership of the payment method during KYC, and maintaining accurate financial records. We do not store full card numbers, full bank account numbers, or payment method PINs or passwords on our systems.

All financial transaction records are retained for the periods required by applicable anti-money laundering and financial record-keeping regulations. These records may be disclosed to regulatory or law enforcement authorities where required by law.

6. Cookies and Tracking Technologies

ck10 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small data file placed on your device when you visit a website. ck10 uses the following categories of cookies:

• Essential cookies: strictly necessary for the platform to function. These include session authentication cookies that keep you logged in, security cookies that help detect fraud, and cookies that remember your language and regional settings. Essential cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: used to collect aggregated, anonymised information about how users interact with the platform — such as which pages are visited most frequently, how long sessions last, and which features are used. This data helps ck10 identify areas for improvement and understand user behaviour at a population level.
• Preference cookies: used to remember your platform settings and preferences, such as display preferences or notification settings, so that you do not need to reset them each time you visit.

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the ck10 platform. Your browser's help documentation will explain how to manage cookie settings for your specific browser.

7. Data Retention

ck10 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention principles apply: account data is retained for the duration of your account and for a period after account closure as required by anti-money laundering and financial regulation obligations; transaction records are retained for the minimum period required by applicable financial record-keeping regulations; communications data (support chat logs and emails) is retained for a reasonable period to resolve disputes and improve service quality; and device and technical data is retained only for as long as required for the security and fraud prevention purposes for which it was collected.

When personal data is no longer required for the purposes for which it was collected and there is no legal obligation to retain it, ck10 will securely delete or anonymise the data so that it can no longer be associated with any individual.

8. Data Security

ck10 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL (Secure Sockets Layer) encryption for all data transmitted between your device and the ck10 platform; access controls that restrict access to personal data to authorised personnel only, on a need-to-know basis; secure storage of data on protected servers; regular security assessments and vulnerability testing of platform infrastructure; and staff training on data protection and information security obligations.

While ck10 takes all reasonable steps to protect your personal data, no internet-based system can be guaranteed to be completely secure. You are responsible for keeping your account credentials confidential and for notifying ck10 immediately at [email protected] if you suspect any unauthorised access to your account.

9. Your Data Rights

As a user of the ck10 platform, you have the following rights in respect of the personal data we hold about you. To exercise any of these rights, please contact the ck10 support team at [email protected]. We will respond to all valid requests within a reasonable timeframe:

• Right of access: you have the right to request a copy of the personal data we hold about you, along with information about how it is used and with whom it is shared.
• Right of rectification: you have the right to request correction of inaccurate or incomplete personal data we hold about you. You may also update certain account information directly through your account settings.
• Right to erasure: you have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent, or where the processing is unlawful — subject to our legal obligations to retain certain data.
• Right to restrict processing: you have the right to request that we restrict processing of your personal data in certain circumstances, such as while we investigate the accuracy of data you have disputed.
• Right to object: you have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis, and to object at any time to the use of your data for direct marketing purposes.

Please note that some rights are subject to limitations and exceptions under applicable law. For example, we may not be able to delete data that we are legally required to retain for anti-money laundering or financial regulation compliance purposes. We will explain any such limitations when responding to your request.

10. Children's Privacy

The ck10 platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the ck10 platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

11. Changes to This Privacy Policy

ck10 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable law. When we make material changes to this policy, we will notify registered users by posting a notice on the platform or by sending a notification to your registered mobile number. The updated policy will be effective from the date it is published on the platform unless a later effective date is expressly stated.

We encourage you to review this Privacy Policy periodically to stay informed of how ck10 handles your personal data. Your continued use of the platform after any update to this policy constitutes your acceptance of the revised policy. If you do not agree with any changes, you must stop using the platform and may request account closure by contacting us at [email protected].