cko33 Privacy Policy

This Privacy Policy ("Policy") governs the collection, processing, storage, and disclosure of personal data by cko33 ("the Company", "we", "us", "our") in connection with your use of the cko33 website, mobile interface, games, betting services, promotional programmes, and all associated features (collectively, "the Platform"). This Policy forms part of our Terms & Conditions and should be read alongside them.

cko33 is committed to handling personal data responsibly and transparently. We collect only the data necessary to operate the Platform, verify player identities, process transactions, and fulfil our legal obligations. We do not use personal data for any purpose beyond those described in this Policy without your explicit consent.

By registering an account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with this Policy, please discontinue use of the Platform and contact us to close your account.

1 Data We Collect

cko33 collects personal data through multiple channels: directly from you during registration, account management, and support interactions; automatically through your use of the Platform; and, where lawfully permitted, from third-party identity verification and payment service providers.

cko33 does not collect sensitive categories of personal data — such as racial or ethnic origin, political opinions, religious beliefs, or health data — except where expressly required by applicable law or where you voluntarily provide such information in the context of a responsible gaming self-assessment.

2 How We Use Your Data

cko33 processes personal data only for specific, documented purposes. The primary legal bases for processing are: performance of a contract (operating your account and fulfilling bets/transactions), compliance with legal obligations (KYC, anti-money-laundering, age verification), legitimate interests (fraud prevention, platform security, service improvement), and consent (marketing communications where opted in).

cko33 does not use personal data to make fully automated decisions that produce significant legal effects on players without a human review process. Where automated fraud-detection or responsible gaming monitoring flags an account, a member of our compliance team reviews the case before any consequential action (such as account suspension) is taken.

3 Data Sharing & Third Parties

cko33 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment Service Providers: We share transaction data with payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard to facilitate deposits and withdrawals. These providers process data under their own privacy policies and are bound by contractual obligations to handle data securely.
• Identity Verification Partners: Where KYC verification is required, we may share identity document data with regulated third-party verification service providers operating under strict data processing agreements.
• Game Software Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data (e.g., game ID, session token) to operate game functionality. These providers do not receive your name, contact details, or financial data.
• Legal & Regulatory Authorities: We may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where we are legally required to do so, or where disclosure is necessary to protect the safety and security of our players or the public.
• Fraud Prevention Networks: cko33 participates in industry-standard fraud prevention programmes. Data shared in this context is limited to fraud-relevant signals (e.g., device fingerprints, IP addresses) and is handled under strict data-sharing agreements.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of cko33's assets, personal data held about players may be transferred to the acquiring entity. You will be notified of any such transfer and your continued use of the Platform will constitute acceptance of the new data controller's privacy policy.

4 Cookies & Tracking Technologies

cko33 uses cookies and similar tracking technologies (including local storage, session tokens, and pixel tags) to operate the Platform, personalise your experience, maintain session security, and analyse usage patterns. By using the Platform, you consent to the use of cookies as described in this section.

Strictly necessary cookies cannot be disabled as they are essential for the Platform to function. You may disable functional and analytical cookies through your browser settings; however, doing so may impair certain features of the Platform such as saved preferences or personalised game recommendations.

cko33 does not use third-party advertising networks that place cookies for cross-site tracking or behavioural profiling unrelated to the Platform's own operations.

5 Data Retention

cko33 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the lifetime of your account and for a period of five (5) years following permanent account closure, in line with standard financial record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later, to satisfy anti-money-laundering obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support correspondence: Retained for three (3) years from the date of the final communication, unless related to a dispute or legal matter in which case the period extends until final resolution plus one (1) year.
• Marketing data (opt-in): Retained until you withdraw consent or for two (2) years following your last interaction with a marketing communication, whichever occurs first.
• Analytical and usage logs: Aggregated and anonymised after thirteen (13) months; individual-level logs are deleted after the same period unless required for an ongoing investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual.

6 Data Security Measures

cko33 implements a layered security framework designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, and unlawful disclosure. Our security measures include, but are not limited to, the following controls:

Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, cko33 will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

You are responsible for maintaining the confidentiality of your account password. cko33 will never ask you to share your password by email, chat, or telephone. If you suspect your account credentials have been compromised, change your password immediately and notify our support team.

7 Your Privacy Rights

cko33 respects your rights in relation to your personal data. Depending on the nature of the processing and applicable law, you may be entitled to exercise the following rights:

• Right of Access: You may request a copy of the personal data cko33 holds about you. We will provide this in a structured, commonly used format within 30 days of a verified request.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you may request that we correct or update it. Minor corrections (e.g., phone number updates) can be made directly in Account Settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to cko33's overriding legal obligations (e.g., AML record-keeping requirements that supersede erasure requests).
• Right to Restriction of Processing: In certain circumstances, you may request that we restrict processing of your data (e.g., while an accuracy dispute is being resolved) without requiring deletion.
• Right to Data Portability: Where processing is based on consent or contract performance and carried out by automated means, you may request that your data be transferred to you or a third party in a machine-readable format.
• Right to Object: You may object to processing based on legitimate interests (including direct marketing) at any time. Where objection relates to direct marketing, we will cease processing immediately upon receipt of your request.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing that occurred before withdrawal.

To exercise any of the above rights, submit your request in writing to support at cko33 dot app with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and complete it within 30 calendar days, or notify you if an extension is required.

8 Policy Updates & Contact

cko33 reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, Platform features, or applicable legal requirements. Where updates are material — meaning they significantly affect how we collect, use, or share your personal data — we will notify you by email to your registered address at least 14 days before the changes take effect.

Minor updates (such as clarifying existing language, correcting typographical errors, or updating contact details) may be made without advance notice. The "Effective" date displayed at the top of this Policy and in the hero section above indicates the date of the most recent revision. We encourage you to review this Policy each time you visit the Platform.

If you have questions, concerns, or complaints about this Privacy Policy or cko33's data practices, please contact our dedicated privacy team using the details below. We are committed to resolving all privacy-related enquiries fairly and promptly.