ctk444 Privacy
Policy

This Privacy Policy ("Policy") describes how ctk444 ("ctk444", "we", "us", or "our") collects, processes, stores, shares, and protects personal data relating to registered players and visitors to the ctk444 website at ctk444.com (the "Platform"). This Policy applies to all users of the Platform, including prospective players who browse without registering. By using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing activities described herein.

ctk444 is committed to protecting the privacy and security of all personal information entrusted to us. We process personal data strictly in accordance with applicable data protection principles: lawfulness, fairness, and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality. This Policy is reviewed and updated at least annually, and whenever a material change to our data practices occurs.

1. Data We Collect

ctk444 collects personal data through several channels: directly from you when you register an account or complete KYC verification; automatically through your use of the Platform; and occasionally from trusted third-party service providers who support our operations. The categories of personal data we collect are described below.

1.1 Registration and Account Data

When you create a ctk444 account, we collect the following information:

• Full legal name
• Date of birth (to verify you meet the 18+ age requirement)
• Residential address in Bangladesh
• Email address
• Mobile phone number (registered in your name in Bangladesh)
• Chosen username and hashed password (passwords are never stored in plain text)

1.2 Identity Verification (KYC) Data

To comply with our responsible gaming and anti-fraud obligations, we require identity verification before processing your first withdrawal. KYC documents we may collect include:

• Bangladesh National Identity Card (NID) — front and back
• Valid passport (photo page)
• Government-issued driving licence
• Recent utility bill or bank statement as proof of address (dated within 3 months)
• Selfie photograph for liveness verification, where requested

1.3 Financial Transaction Data

When you deposit or withdraw funds via bKash, Nagad, Rocket, or Upay, we record:

• Transaction reference numbers
• Transaction amounts in BDT (৳)
• Mobile financial service account identifiers (partial numbers only, consistent with PCI-DSS practices)
• Timestamps and transaction status

ctk444 does not store full payment account credentials. Payment processing is handled securely by our payment service partners.

1.4 Gaming Activity Data

We collect records of your activity on the Platform, including:

• Games played, bet amounts, and outcomes
• Sports betting selections and settlement results
• Bonus claims, wagering progress, and Loyalty Program point balances
• Session start and end times

This data is collected for the purposes of account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

1.5 Technical and Device Data

When you access the Platform, we automatically collect certain technical information:

This technical data helps us ensure the Platform functions correctly on your device, detect fraudulent or automated access attempts, and analyse overall site performance.

1.6 Communications Data

When you contact our support team — whether by email, live chat, or any other channel — we retain records of those communications, including your name, contact details, the content of your messages, and any attachments you provide. This data allows us to resolve your query effectively and maintain a record for quality assurance.

2. How We Use Your Data

ctk444 processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we process your data are:

Purpose	Data Used	Legal Basis
Account registration and management	Registration data, KYC data	Performance of contract
Identity and age verification	KYC documents, date of birth	Legal obligation / responsible gaming
Processing deposits and withdrawals	Financial transaction data	Performance of contract
Providing and personalising gaming services	Gaming activity data, device data	Performance of contract / legitimate interest
Fraud prevention and security monitoring	Technical data, transaction data	Legitimate interest / legal obligation
Responsible gaming monitoring	Gaming activity, session data	Legal obligation / legitimate interest
Customer support and dispute resolution	Communications data, account data	Performance of contract / legitimate interest
Marketing communications (where opted in)	Email, name, gaming preferences	Consent
Platform analytics and improvement	Technical data, usage data	Legitimate interest

2.1 Marketing Communications

ctk444 may send you promotional emails or in-platform notifications about bonuses, new games, seasonal offers (such as Eid or Pohela Boishakh promotions), and Loyalty Program updates — but only where you have provided your explicit consent to receive such communications during registration or subsequently via your account settings. You may withdraw your consent and unsubscribe from marketing communications at any time by contacting [email protected] or using the unsubscribe link in any promotional email.

Please note: even if you unsubscribe from marketing communications, ctk444 will continue to send you essential transactional messages relating to your account, such as deposit confirmations, withdrawal notifications, KYC requests, and security alerts. These operational communications cannot be opted out of while your account remains active, as they are necessary for the performance of our contract with you.

2.2 Responsible Gaming Monitoring

ctk444 uses your gaming activity data — including session frequency, bet sizes, time spent on the Platform, and deposit patterns — to monitor for indicators of problem gambling. Where our systems identify patterns of concern, our responsible gaming team may reach out to you proactively with information about available tools such as deposit limits, cool-off periods, and self-exclusion. This processing is carried out in your interest and in fulfilment of our responsible gaming obligations. Full details are available on our Responsible Gaming page.

3. Cookies & Tracking

ctk444 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage patterns, and detect fraudulent activity. A cookie is a small text file stored on your device by your web browser when you visit a website. Cookies set by ctk444 do not contain your password or payment details.

3.1 Types of Cookies We Use

Cookie Type	Purpose	Can Be Disabled?
Essential / Strictly Necessary	Maintain your login session, remember language preference, enable the Platform to function correctly	No — required for basic Platform operation
Security	Detect and prevent fraudulent logins, bot traffic, and account takeover attempts	No — required for account protection
Analytics	Understand how players navigate the Platform, identify pages with errors, measure load times	Yes — opt out via account settings
Preferences	Remember your display preferences, game history, and responsible gaming tool settings	Yes — clearing browser cookies will reset these

ctk444 does not use third-party advertising cookies, tracking pixels for cross-site advertising networks, or social media retargeting technologies. Analytics data is aggregated and anonymised wherever possible.

3.2 Managing Cookies

You may control cookies through your browser settings. Most modern browsers allow you to view, disable, or delete cookies stored on your device. Please note that disabling essential cookies will prevent you from logging into your ctk444 account or using core Platform features. Instructions for managing cookies are available in the help documentation for your specific browser (Chrome, Firefox, Edge, Safari, etc.).

4. Data Sharing & Third Parties

ctk444 shares personal data with third parties only where strictly necessary to operate the Platform, fulfil our legal obligations, or protect the safety and security of players and staff. The categories of third parties with whom we may share data are described below.

4.1 Payment Processing Partners

To process deposits and withdrawals, ctk444 shares the minimum necessary transaction data with our payment processing partners — the mobile financial service platforms bKash, Nagad, Rocket, and Upay. These partners act as independent data controllers in respect of the payment data they process and are subject to their own privacy policies and applicable Bangladesh Bank regulations.

4.2 Gaming Software Providers

Games on the ctk444 Platform are powered by third-party software providers including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe. These providers may receive limited technical data (such as an anonymised session token) necessary to deliver their games to your device. They do not receive your full name, address, payment details, or KYC documents.

4.3 Identity Verification Services

Where ctk444 uses a third-party KYC verification service to assist in verifying identity documents, the relevant document images and associated metadata are shared with that service solely for the purpose of verification. All such service providers are bound by strict data processing agreements and are prohibited from using your data for any other purpose.

4.4 Legal and Regulatory Disclosure

ctk444 may disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, or where we believe in good faith that disclosure is necessary to prevent fraud, money laundering, or other criminal activity, or to protect the rights, property, or safety of ctk444, our players, or the public. We will inform you of any such disclosure where legally permitted to do so.

4.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of ctk444's business assets, personal data held by ctk444 may be transferred to the acquiring entity as part of that transaction. We will notify registered players via their registered email address at least 30 days before any such transfer takes effect, and you will retain your existing privacy rights in relation to your data.

5. Data Security

ctk444 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes the following measures:

• 256-bit SSL/TLS encryption on all data transmitted between your device and ctk444 servers.
• Encrypted storage of sensitive data fields, including passwords (bcrypt hashing), payment identifiers, and KYC document images.
• Role-based access controls ensuring that ctk444 staff can only access the personal data necessary for their specific job function.
• Two-factor authentication (2FA) available to all players and mandatory for all ctk444 staff with access to production systems.
• Regular security audits and penetration testing of Platform infrastructure conducted by qualified security professionals.
• Automated fraud detection systems that monitor for unusual login behaviour, payment anomalies, and account takeover indicators in real time.
• Secure data centre hosting with physical access controls, surveillance, and redundant power and connectivity.

While ctk444 takes all reasonable steps to secure your personal data, no internet-based system is completely immune to security risks. You also play an important role in keeping your account secure: use a strong, unique password; do not share your login credentials with anyone; enable 2FA on your account; and log out after each session, particularly on shared or public devices.

6. Data Retention

ctk444 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, comply with our legal and regulatory obligations, resolve disputes, and enforce our agreements. The table below summarises our standard data retention periods by data category.

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	Legal obligation, dispute resolution
KYC / identity documents	Duration of account + 5 years after closure	Regulatory compliance, anti-money laundering
Financial transaction records	7 years from date of transaction	Statutory financial record-keeping requirements
Gaming activity logs	3 years from date of activity	Dispute resolution, responsible gaming review
Customer support communications	3 years from last interaction	Quality assurance, dispute resolution
Analytics / technical logs	13 months (rolling)	Platform performance monitoring
Marketing consent records	Until consent withdrawn + 3 years	Proof of consent for marketing communications

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with any individual. Where data is anonymised rather than deleted, the anonymised dataset may be retained indefinitely for statistical and analytical purposes.

7. Your Privacy Rights

As a player based in Bangladesh, you have a number of rights in relation to the personal data ctk444 holds about you. We are committed to honouring these rights promptly and without charge. To exercise any of the rights described below, please contact us at [email protected] with your registered email address and a clear description of your request.

7.1 Right of Access

You have the right to request a copy of the personal data ctk444 holds about you. We will provide this information in a structured, readable format within 30 days of receiving your verified request. This is sometimes referred to as a Subject Access Request (SAR).

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For standard account details (email address, phone number), you may update these directly via your account settings. For registered identity information (name, date of birth), contact [email protected] and provide documentary evidence of the correct information.

7.3 Right to Erasure

You may request that ctk444 delete your personal data where: the data is no longer necessary for the purpose it was collected; you withdraw your consent (where consent was the legal basis); or you object to processing based on legitimate interests and there are no overriding grounds for continued processing. Please note that this right is not absolute — ctk444 may be required to retain certain data to comply with legal obligations (such as anti-money laundering record-keeping requirements) even after you request erasure. In such cases, we will explain which data must be retained and for how long.

7.4 Right to Restrict Processing

You may request that ctk444 restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved, or while you await the outcome of an objection to processing. Where processing is restricted, we will continue to store your data but will not use it for any other purpose without your further consent.

7.5 Right to Data Portability

Where the legal basis for processing is consent or performance of a contract, and processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.

7.6 Right to Object

You have the right to object to ctk444 processing your personal data where the legal basis is legitimate interests. Where you object, ctk444 will cease processing unless we can demonstrate compelling legitimate grounds for continuing that override your interests, rights, and freedoms, or the processing is necessary for establishing, exercising, or defending legal claims.

7.7 Rights Related to Automated Decision-Making

ctk444 uses automated systems to detect fraud, money laundering, and responsible gaming risks. Where an automated decision has a significant legal or similarly significant effect on you (for example, account suspension following automated fraud detection), you have the right to request human review of that decision. Contact [email protected] to initiate a human review request.

7.8 Withdrawing Consent

Where ctk444 processes your data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. To withdraw consent, contact [email protected] or use the unsubscribe link in any marketing communication.

8. Contact & Policy Updates

8.1 How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ctk444 processes your personal data, please contact our team at:

• Email: [email protected]
• Response Time: Within 2 business days (Bangladesh Standard Time, UTC+6)
• Support Hours: 24/7 — our team is available around the clock to assist you

When contacting us about a privacy matter, please include your registered email address and a clear description of your request or concern. For Subject Access Requests and erasure requests, we may need to verify your identity before processing your request. This is to ensure we do not inadvertently disclose or delete data belonging to another individual.

8.2 Updates to This Policy

ctk444 reviews this Privacy Policy at least once per year and updates it whenever there is a material change to our data collection or processing practices, or when required by applicable law. When we make a significant change to this Policy, we will notify registered players via their registered email address and display a prominent notice on the Platform for at least 14 days following the update.

The most current version of this Privacy Policy is always available at ctk444.com/privacy-policy. The "Last Updated" date at the top of this document indicates when the Policy was most recently revised. Your continued use of the Platform following notification of a Policy update constitutes your acceptance of the revised terms.