cck777 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how cck777 ("we", "us", "our") collects, processes, stores, and protects personal data provided by users ("you", "your", "Player") of the cck777 online gaming platform, accessible at cck777.app. It applies to all registered Players as well as unregistered visitors who browse the Platform.

cck777 operates with a strong commitment to data privacy. We collect only the personal data that is strictly necessary for the operation of the Platform and the fulfilment of our legal obligations. We do not engage in the sale, brokerage, or unauthorised sharing of personal data under any circumstances.

This Policy should be read alongside the cck777 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. By registering on or continuing to use the Platform, you confirm that you have read and accepted this Policy.

2 Data Controller

cck777 is the data controller responsible for the personal data collected through the Platform. As data controller, cck777 determines the purposes for which personal data is processed and the manner in which it is processed. Where a third-party service provider processes personal data on our behalf (for example, a payment gateway or KYC verification service), that provider acts as a data processor under a binding data processing agreement that prohibits them from using your data for any purpose other than providing the contracted service to cck777.

If you have any questions regarding data controllership, wish to exercise your data rights, or wish to file a privacy complaint, please refer to Section 14 of this Policy for contact details.

3 Data We Collect

cck777 collects personal data through three primary channels: data you provide directly during registration and account use, data generated automatically by your interactions with the Platform, and data received from third-party partners where necessary for verification and payment purposes.

4 How We Use Your Data

cck777 uses personal data collected from Players for the following defined purposes only:

• Account Management: To create, verify, maintain, and close your cck777 Player Account, including enforcing the one-account-per-person policy.
• Age & Identity Verification: To confirm that you meet the minimum age requirement of 18 years and that the identity information provided at registration is accurate and genuine.
• Payment Processing: To facilitate deposits and withdrawals through bKash, Nagad, Rocket, and Upay, and to maintain accurate financial records denominated in BDT for each transaction.
• Game Operation: To deliver a functioning, personalised gaming experience — including slot games, live casino tables, fishing arcade titles, and cricket betting markets.
• Fraud Prevention & Security: To detect, investigate, and prevent unauthorised account access, bonus abuse, multi-accounting, money laundering, and other fraudulent activities.
• Regulatory Compliance: To fulfil any reporting or record-keeping obligations arising from applicable laws or orders issued by competent authorities.
• Responsible Gaming: To identify patterns of potentially problematic gambling behaviour and proactively offer self-exclusion, deposit limit, or cool-off tools where appropriate.
• Marketing Communications (where consented): To send promotional offers, seasonal bonuses, and game updates by SMS or email to Players who have opted in to marketing communications. You may withdraw this consent at any time.
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving Platform performance, user experience, and game selection.

cck777 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing an appropriate legal basis.

5 Legal Basis for Processing

Each processing activity carried out by cck777 rests on one of the following legal bases:

• Contractual Necessity: Processing required to fulfil the agreement between cck777 and the Player — including account creation, game operation, and payment processing.
• Legal Obligation: Processing required to comply with applicable law, including age verification, anti-money laundering checks, and the retention of financial records.
• Legitimate Interests: Processing that cck777 carries out based on its legitimate business interests — such as fraud detection, platform security, and prevention of bonus abuse — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing activities for which cck777 has obtained your explicit, freely given, and informed consent — primarily, the sending of marketing communications via SMS or email. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Data Sharing

cck777 does not sell, rent, or otherwise commercially exploit your personal data. We share personal data with third parties only under the following strictly defined circumstances:

• Payment Service Providers: bKash, Nagad, Rocket, and Upay receive the minimum data necessary to authenticate and process each financial transaction. These providers are bound by their own privacy frameworks and applicable Bangladesh Bank regulations.
• KYC & Identity Verification Partners: Where we engage a third-party service to verify the authenticity of identity documents submitted during the KYC process, that provider receives only the document image and the data points necessary to perform the verification check.
• Game Content Providers: Game studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming may receive a pseudonymous session token to authenticate you within their game engines. These providers do not receive your full name, mobile number, or financial data.
• Fraud Prevention & Security Services: Aggregated behavioural data and, where strictly necessary, identifying data may be shared with fraud prevention tools to detect and block suspicious account activity.
• Legal & Regulatory Authorities: cck777 will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by a lawful order, warrant, or legal process. We will notify the affected Player unless prohibited from doing so by the relevant authority.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of the assets of cck777, Player data may be transferred to the acquiring entity, subject to that entity assuming the same privacy obligations set out in this Policy.

7 Cookies & Tracking Technologies

cck777 uses cookies and similar tracking technologies to operate the Platform, maintain your authenticated session, remember your preferences, and analyse aggregate usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These cookies maintain your login session, remember your language preference, and protect against cross-site request forgery. They cannot be disabled without breaking core Platform functionality.
• Analytics Cookies: Used to collect anonymised, aggregated data about how Players navigate the Platform — which game categories are most visited, where Players spend the most time, and where they encounter difficulties. This data is used exclusively to improve the Platform experience and is never linked back to an individual Player's identity.
• Functionality Cookies: Used to remember Player preferences such as the last game played, preferred deposit method, or notification settings so that the Platform delivers a more personalised experience on return visits.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling analytics or functionality cookies will not prevent Platform access but may reduce personalisation quality.

8 Data Retention

cck777 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Active Account Data: Retained for the full lifetime of the Player's cck777 Account.
• Post-Closure Account Data: Following voluntary or involuntary Account closure, core identity and financial transaction records are retained for a maximum of five years to comply with anti-money laundering record-keeping obligations.
• KYC Documents: Identity verification documents are retained for five years following account closure, after which they are securely and permanently deleted.
• Support Communications: Chat transcripts and email correspondence are retained for two years from the date of the interaction, then deleted.
• Technical Log Data: Server logs and IP address records are retained for a maximum of 90 days before automated deletion, unless a specific security investigation requires extended retention.
• Marketing Consent Records: Records of opt-in and opt-out events are retained for the lifetime of the account to demonstrate compliance, but the underlying marketing data is deleted promptly following an opt-out request.

On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.

9 Security Measures

cck777 implements a multi-layered security architecture to protect personal data from unauthorised access, accidental loss, destruction, or disclosure. Key technical and organisational measures include:

• Transport Security: All data in transit between your device and cck777 servers is encrypted using TLS 1.3 with 256-bit AES cipher suites.
• Data at Rest: Personal data stored in cck777 databases is encrypted at rest using AES-256, with encryption keys managed through a dedicated key management system.
• Access Controls: Internal access to personal data is governed by role-based access control. Only personnel with a documented operational need may access Player data, and all access events are logged and regularly audited.
• Penetration Testing: cck777 engages independent security professionals to conduct regular penetration tests and vulnerability assessments of the Platform infrastructure.
• Incident Response: cck777 maintains a documented data breach response plan. In the event of a security incident affecting personal data, affected Players will be notified within 72 hours of discovery, with details of the nature of the breach, the data categories affected, and the remediation steps taken.
• Employee Training: All cck777 staff who handle personal data undergo mandatory data protection and information security training on joining and at least annually thereafter.

10 Your Rights

As a Player whose personal data is processed by cck777, you hold the following rights in relation to that data. To exercise any of these rights, contact our support team at the details in Section 14. We will acknowledge your request within 48 hours and provide a substantive response within 30 calendar days.

• Right of Access: You may request a copy of all personal data that cck777 holds about you, together with information about how it is being used and the legal basis for processing.
• Right of Rectification: You may request the correction of any inaccurate or incomplete personal data held in your cck777 Account. Minor details such as contact number and city of residence can also be updated directly in your account settings.
• Right of Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where cck777 no longer has a legal basis to retain it. Note that this right may be limited where retention is required to comply with legal obligations (for example, anti-money laundering record-keeping requirements).
• Right to Restriction of Processing: You may request that cck777 restrict the processing of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: You may request a copy of personal data you have provided to cck777 in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests where you believe your rights and freedoms override those interests.
• Right to Withdraw Consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

11 Minors

The cck777 Platform is strictly intended for adults aged 18 and above. cck777 does not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has registered an account or provided personal data, that account will be immediately suspended, all data associated with the account will be deleted, and any wallet balance will be returned to the payment method used for deposit.

If you are a parent or guardian and believe that your child may have registered on cck777, please contact our support team immediately at the address in Section 14. We will investigate and resolve the matter within 24 hours.

12 International Data Transfers

Some of the third-party service providers engaged by cck777 — such as game content studios and cloud infrastructure providers — may process personal data on servers located outside Bangladesh. Where such transfers occur, cck777 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections afforded under this Policy.

Safeguards used for international transfers include contractual clauses that impose binding data protection obligations on the receiving party, and selection of vendors whose data handling practices have been assessed and approved by cck777's security and compliance team. cck777 will not transfer personal data to any jurisdiction or entity that cannot provide an adequate level of protection for that data.

13 Changes to This Policy

cck777 reserves the right to revise this Privacy Policy at any time. The most current version is always published at cck777.app/privacy-policy with its effective date prominently displayed. Where a proposed change is material — for example, a change in the categories of data collected, the introduction of a new processing purpose, or a change in data sharing arrangements — cck777 will notify active Players via SMS or email at least 14 days before the change takes effect.

Continued use of the Platform following the effective date of a revised Privacy Policy constitutes your acknowledgement and acceptance of the updated terms. If you do not agree with the revised Policy, you should close your Account before the effective date of the change.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a privacy concern or complaint, please contact the cck777 Data Protection team using the following details:

• Email: support at cck777.app — please use the subject line "Privacy Request" or "Privacy Complaint" to ensure your message is routed to the correct team.
• Live Chat: Available 24/7 through the in-platform chat widget after logging in to your cck777 Account. For privacy-specific matters, ask to speak with the Data Protection team.
• Response Time: All privacy requests and complaints are acknowledged within 48 hours (Bangladesh Standard Time, UTC+6) and substantively resolved within 30 calendar days. For complex requests, we may require an extension of up to an additional 30 days, in which case we will notify you in writing.

cck777 takes all privacy complaints seriously. If you are not satisfied with our response to your complaint, you have the right to escalate the matter to the appropriate data protection authority in your jurisdiction.