wwwck Privacy Policy — How We Collect, Use, and Protect Your Data

wwwck ("we", "us", "our") is committed to protecting the privacy of every person who interacts with our platform. This Privacy Policy describes in plain, accessible language how we collect personal data from players and visitors, the lawful purposes for which that data is processed, the parties with whom it may be shared, how long it is retained, and what rights you have over your own information.

This policy should be read alongside the wwwck Terms & Conditions, which govern the overall relationship between you and the platform. Where this Privacy Policy and the Terms & Conditions address the same subject matter, the more specific provision applies.

wwwck is an online betting and casino platform serving the Bangladesh market. Our services include cricket betting, live casino games, slots, crash games such as Aviator, and related promotional activities. The personal data we collect is directly related to delivering these services safely and responsibly to eligible adults aged 21 and above.

For the purposes of this Privacy Policy, wwwck acts as the data controller — meaning we determine the purposes and means by which your personal data is processed. All data protection enquiries, access requests, and complaints should be directed to our support team at [email protected] (plain text — not a clickable link).

We will respond to all formal data protection requests within 10 business days of receipt, measured in Bangladesh Standard Time (BST, UTC+6). Complex requests may require additional time, in which case we will notify you of the expected resolution date within the initial 10-day window.

The table below summarises the categories of personal data that wwwck may collect from you, together with examples of the specific data points within each category.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data. If any such information appears incidentally in a document submitted for KYC purposes, it is not extracted, processed, or stored separately from the verification record.

wwwck collects personal data through the following channels:

• Direct submission: Data you provide when creating an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated technologies: Technical and usage data collected automatically as you browse and interact with the platform, including via cookies, server logs, and session-tracking software.
• Payment processors: Transaction confirmation data received from payment partners such as bKash, Nagad, Rocket, Upay, and card-processing gateways, for the purposes of reconciling deposits and withdrawals.
• Identity verification providers: Where third-party KYC services are used to cross-check the documents you submit, those providers may return structured identity data that is appended to your account record.
• Fraud prevention services: Risk-scoring data and device fingerprinting data supplied by fraud-detection service providers to help us identify unusual account activity.

wwwck does not purchase personal data lists from data brokers or any other third-party source for the purpose of targeting new customers.

wwwck processes personal data under the following legal bases, as applicable to each processing activity:

• Contractual necessity: Processing required to enter into and perform the contract we have with you as a registered player — including account creation, bet settlement, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and responsible gaming mandates.
• Legitimate interests: Processing carried out for wwwck's legitimate business interests where these are not overridden by your privacy rights — including fraud prevention, security monitoring, platform analytics, and service improvement.
• Consent: Processing activities that are optional and require your explicit agreement, such as receiving promotional emails or personalised bonus notifications. You may withdraw consent at any time by updating your communication preferences within your account settings or by emailing [email protected].

The personal data we collect is used for the following purposes:

• Account management: Creating, maintaining, and administering your wwwck account, including authentication and access control.
• Identity verification (KYC): Verifying that you meet our eligibility criteria — including the 21+ age requirement — and complying with applicable regulatory standards.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and reconciling your transaction history.
• Service delivery: Providing access to cricket betting markets, live casino games, slots, Aviator, and other platform features.
• Customer support: Responding to your enquiries, resolving disputes, and processing complaints.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour, applying self-imposed limits, and fulfilling our duty of care obligations.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, and abuse of bonuses or promotions.
• Platform improvement: Analysing aggregated usage data to improve user experience, fix bugs, and develop new features.
• Marketing communications: Sending promotional offers, bonus notifications, and seasonal campaign messages — only where you have provided explicit consent or where we have a legitimate basis to do so.
• Legal compliance: Retaining records as required by applicable law, responding to lawful requests from authorities, and enforcing our Terms & Conditions.

wwwck does not sell or rent your personal data. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, and card-processing gateways receive the minimum data required to process your deposit or withdrawal transaction.
• KYC and identity verification providers: Third-party identity verification services receive copies of the documents you submit to verify your identity and age.
• Game providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive your account session token and applicable game data to deliver their games within the platform. These providers operate under their own data protection standards.
• Fraud and security providers: Risk management and device fingerprinting services receive technical and behavioural data to help identify and prevent fraud.
• IT and hosting providers: Cloud infrastructure and hosting providers who store platform data on our behalf, under strict data processing agreements that prohibit independent use of your data.
• Legal and regulatory authorities: Where required by law, court order, or regulatory directive, we may disclose personal data to government authorities, law enforcement agencies, or financial intelligence units.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the wwwck business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third-party service providers who process personal data on our behalf are required to handle that data in accordance with this Privacy Policy and applicable data protection standards. We conduct due diligence on third-party providers before engaging them and review their data protection practices periodically.

Payment data — including mobile wallet numbers (bKash, Nagad, Rocket, Upay) and card details (Visa, Mastercard) — is handled with the highest level of security and confidentiality.

• Full card numbers and mobile wallet PINs are never stored on wwwck servers. Card details are tokenised at the point of entry by our payment gateway partner, and only the token and last 4 digits are retained by wwwck for reconciliation purposes.
• Mobile wallet identifiers are stored in encrypted form and are used solely to route withdrawal payments to the correct account.
• Payment data is never shared with third parties for marketing or profiling purposes.
• All payment data transmissions use TLS 1.3 encryption to prevent interception in transit.

If you believe that your payment information has been compromised in connection with your wwwck account, please contact [email protected] immediately so we can take protective action including account suspension pending investigation.

wwwck uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage patterns. The following categories of cookies may be set when you visit wwwck:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery (CSRF). These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language, game display settings, and responsible gaming configurations. These improve your experience but are not essential.
• Analytics cookies: Collect aggregated, anonymised data about how visitors use the platform — including pages visited, session duration, and error logs — to help us improve performance and content.
• Marketing cookies: Used only where you have provided consent. These may track your interaction with promotional content and help us deliver more relevant bonus offers. You can withdraw consent at any time.

You can manage cookie preferences through your browser settings. Blocking essential cookies will impair your ability to use the platform. Blocking analytics or marketing cookies will not affect your ability to place bets, access games, or make transactions.

wwwck does not use third-party advertising networks or cross-site tracking pixels for the purpose of serving advertisements on external websites.

wwwck implements a layered security architecture to protect personal data from unauthorised access, disclosure, alteration, or destruction. Our key security measures include:

• Encryption in transit: All data exchanged between your device and our servers is encrypted using TLS 1.3.
• Encryption at rest: Sensitive personal data stored in our databases is encrypted using AES-256.
• Access controls: Access to personal data is restricted to authorised wwwck personnel who require it for legitimate business purposes. Access is governed by role-based permissions and reviewed regularly.
• Password security: User passwords are stored as salted cryptographic hashes and are never stored or transmitted in plain text.
• Intrusion detection: Automated systems monitor for unusual access patterns, brute-force attempts, and other indicators of compromise around the clock.
• Secure development practices: The wwwck platform is developed following secure coding standards including input validation, parameterised queries to prevent SQL injection, and regular third-party security assessments.

In the event of a personal data breach that poses a risk to your rights and freedoms, wwwck will notify affected players without undue delay and will take immediate remedial action. Notification will be delivered to the email address registered on your account.

We retain personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your account being active and for a period of 5 years after account closure, in order to comply with financial record-keeping and AML obligations.
• KYC verification documents: Retained for 5 years from the date of submission or from the date of account closure, whichever is later.
• Transaction records: Retained for 5 years from the date of each transaction.
• Customer support records: Retained for 2 years from the date of the last interaction, unless the matter is subject to ongoing legal proceedings.
• Marketing consent records: Retained for as long as your consent is active, plus 2 years after withdrawal of consent as evidence of the consent history.
• Technical logs (server, access, error): Retained for a rolling period of 12 months and then purged automatically.

At the end of the applicable retention period, personal data is either securely deleted or anonymised so that it can no longer be linked to an individual.

As a wwwck player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact us at [email protected] with "Data Rights Request" in the subject line:

• Right of access: You have the right to request a copy of the personal data we hold about you, together with information about how it is processed. We will provide this in a structured, readable format within 10 business days.
• Right to rectification: If the personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update basic account information yourself via your account settings; for KYC-related data corrections, please contact support.
• Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where we have no legitimate grounds for retaining it. Note that we may be required to retain certain data for legal compliance purposes even following an erasure request.
• Right to restrict processing: You may request that we suspend active processing of your data — for example, while the accuracy of data is disputed — without requiring deletion of the data itself.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your data in a machine-readable format (such as JSON or CSV) so that you can transfer it to another service.
• Right to object: You have the right to object to processing based on our legitimate interests, including profiling for marketing purposes. Objections to marketing communications will be actioned immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to the withdrawal.

wwwck will not discriminate against you or restrict access to your account as a result of you exercising any of the above rights. All requests are handled confidentially and processed in good faith.

wwwck is strictly a 21+ platform. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in our account registration and KYC process, and any account found to belong to a person under 21 will be closed immediately and all associated funds will be frozen pending review.

If you believe that a person under the age of 21 has registered an account on wwwck, please notify us immediately at [email protected]. We take underage gambling extremely seriously and will investigate all such reports as a matter of urgency.

Parents and guardians are encouraged to make use of parental control software to prevent minors from accessing online gambling platforms. wwwck supports responsible gaming at every level and cooperates with all reasonable requests from guardians to address underage access concerns.

wwwck's primary services are delivered to players in Bangladesh. However, some of the third-party service providers we work with — including game studios, cloud hosting providers, and fraud detection services — may process data in data centres located outside Bangladesh.

Where personal data is transferred to a third country, wwwck ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. These safeguards may include contractual clauses with the receiving party that impose equivalent data protection obligations, or reliance on the receiving country having an adequate level of data protection in place.

If you would like further information about the specific safeguards in place for any international data transfer, please contact us at [email protected].

wwwck may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. The date of the most recent revision is always displayed at the top of this document.

Where changes are material — meaning they significantly affect your rights or our obligations — we will notify you by email to your registered address and/or by a prominent notice on the platform, with a minimum of 7 days' notice before the updated policy takes effect.

Your continued use of the wwwck platform after a revised Privacy Policy has taken effect constitutes your acceptance of the updated terms. If you do not accept the revised policy, you must discontinue use and may request account closure in accordance with the Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which wwwck processes your personal data, please contact our support team:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data rights requests: "Data Rights Request"
• Subject line for data breach reports: "Data Security Report"
• Response time: Within 2 hours for general enquiries; within 10 business days for formal data rights requests (Bangladesh Standard Time, BST UTC+6)
• Language of support: English

We take all privacy enquiries seriously and commit to handling every request with transparency, professionalism, and respect for your rights as a wwwck player.