xck33 Privacy Policy

This Privacy Policy ("Policy") describes how xck33 ("xck33", "we", "us", "our") collects, uses, stores, and protects the personal information of individuals ("you", "the Player", "User") who access or use the xck33 website at xck33.io and all associated sub-domains, mobile interfaces, and gaming services (collectively, the "Platform").

This Policy applies to all personal data processed in connection with your registration, use of the Platform, participation in promotions, and interactions with our customer support team. It should be read alongside our Terms & Conditions, which govern your overall use of the Platform and form part of the same agreement.

By creating an account, making a deposit, or otherwise using the xck33 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

xck33 collects personal data through several channels, including account registration forms, payment processing, gameplay activity, customer support interactions, and automated technical systems. The specific categories of personal data we collect are as follows:

2.1 Identity & Contact Data

• Full legal name, date of birth, and gender (where provided).
• Email address and mobile phone number.
• Residential address, city, and country of residence.
• Government-issued identification documents (e.g., National Identity Card, passport) submitted during Know Your Customer (KYC) verification.

2.2 Financial Data

• Mobile banking account numbers associated with bKash, Nagad, Rocket, or Upay, used solely to process deposits and withdrawals.
• Cryptocurrency wallet addresses provided for USDT transactions.
• Partial card details (card type, last four digits, expiry month/year) for Visa and Mastercard transactions — full card numbers are never stored by xck33.
• Transaction history, including deposit amounts, withdrawal requests, dates, and payment methods used.

2.3 Gaming & Betting Activity Data

• Account username, login timestamps, and session durations.
• Game history, bet history, wager amounts, and outcomes across all casino and sportsbook products.
• Bonus and promotion usage records, including wagering progress and eligibility status.
• Responsible gaming tool settings, such as active deposit limits, self-exclusion status, and reality check preferences.

2.4 Technical & Device Data

• IP address, device type, operating system, and browser type at login.
• Geolocation data (country and city level) derived from your IP address at the time of access.
• Cookie identifiers and session tokens used to maintain your login state and personalise your Platform experience.
• Error logs, crash reports, and performance metrics collected automatically to support platform stability.

2.5 Communications Data

• The contents of messages sent to our customer support team via email, live chat, or WhatsApp, including any attachments you provide.
• Your responses to surveys, promotions, or feedback requests, where you choose to participate.
• Records of marketing communications sent to you and your engagement with those communications (e.g., email open and click data).

xck33 uses the personal data we collect for the following specific and documented purposes:

Purpose	Data Categories Used
Account creation and management — registering your account, verifying your identity, maintaining your profile, and enabling login.	Identity data, contact data, device data
Payment processing — facilitating deposits and withdrawals via your chosen payment method and maintaining accurate financial records.	Financial data, identity data, transaction history
KYC and AML compliance — verifying your identity to comply with Know Your Customer and anti-money laundering obligations, and screening against sanctions lists.	Identity data, financial data, gaming activity data
Game and betting service delivery — enabling you to play casino games, place sports bets, and participate in promotions.	Gaming activity data, financial data, device data
Fraud detection and prevention — monitoring for suspicious activity, multi-accounting, bonus abuse, and financial fraud.	All categories as required
Responsible gaming — administering deposit limits, self-exclusion programmes, and reality checks at your request or where xck33 has a duty of care obligation.	Gaming activity data, financial data, communications data
Customer support — responding to your queries, resolving disputes, and providing account assistance.	Identity data, communications data, gaming activity data
Marketing communications — sending you information about bonuses, promotions, and new products, where you have consented to receive such communications.	Contact data, communications data, gaming activity data
Platform improvement — analysing usage patterns and technical performance to improve the xck33 Platform.	Technical data, gaming activity data (anonymised where possible)
Legal compliance — complying with applicable laws, responding to lawful requests from authorities, and enforcing our Terms & Conditions.	All categories as required

xck33 processes your personal data on one or more of the following legal grounds, depending on the specific purpose of each processing activity:

• Contractual necessity: Processing is necessary to perform our contract with you — that is, to operate your account, process payments, and deliver gaming services. Without this processing, we cannot provide the Platform to you.
• Legal obligation: Processing is necessary to comply with our legal obligations, including anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and responses to lawful requests from law enforcement or regulatory authorities.
• Legitimate interests: Processing is necessary for xck33's legitimate business interests, including fraud detection and prevention, platform security, responsible gaming monitoring, and general business analytics — provided these interests are not overridden by your privacy rights and interests.
• Consent: Where we rely on your consent as the legal basis for processing (for example, for sending marketing communications), you have the right to withdraw that consent at any time by contacting our support team or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

xck33 does not sell, trade, or rent your personal data to third parties. We share your data only in the following limited and documented circumstances:

5.1 Payment Service Providers

To process deposits and withdrawals, we share relevant financial and identity data with our payment partners, including mobile banking operators (bKash, Nagad, Rocket, Upay), card networks (Visa, Mastercard), and cryptocurrency payment processors. These providers are contractually bound to process your data only for the specific purpose of executing your payment transaction and are prohibited from using it for any other purpose.

5.2 Identity Verification Partners

To comply with KYC obligations, xck33 may share identity documents and personal data with specialist identity verification service providers. These providers operate under strict data processing agreements and are engaged solely to confirm that players meet our eligibility requirements.

5.3 Game Studios and Software Providers

Casino games available on the xck33 Platform are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play these games, your session data (including bets placed and outcomes) is processed by the relevant studio's platform under its own privacy framework. xck33 shares the minimum data necessary to facilitate gameplay.

5.4 Legal and Regulatory Authorities

xck33 may disclose your personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by applicable law, court order, or lawful regulatory request. Such disclosures are made only to the extent strictly necessary.

5.5 Fraud Prevention Services

xck33 may share data with industry-recognised fraud prevention and risk intelligence services for the purpose of detecting and preventing financial crime, bonus abuse, and multi-accounting. Information passed to such services may be retained and used by them to inform risk decisions made by other regulated operators.

xck33 uses cookies and similar tracking technologies to operate the Platform effectively, analyse usage patterns, and improve your experience. The following categories of cookies are used on the xck33 Platform:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your login session, remember your language and currency preferences, and enable core security features such as CSRF protection. These cookies cannot be disabled without materially affecting Platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised or pseudonymised data about how players interact with the Platform — for example, which pages are visited most frequently, where errors occur, and how long sessions last. This data is used solely to improve Platform performance and player experience.
• Functional Cookies: These cookies remember choices you have made on the Platform, such as your preferred game view or notification settings, to provide a more personalised experience across sessions.
• Marketing and Retargeting Cookies: Where you have consented, these cookies allow xck33 to deliver relevant promotional content based on your gaming interests and activity. They may also be used to measure the effectiveness of our marketing campaigns.

You can manage your cookie preferences at any time through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the Platform. Most modern browsers provide options to view, manage, and delete cookies via the browser's privacy or settings menu.

xck33 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• SSL/TLS Encryption in Transit: All data exchanged between your browser or device and the xck33 Platform is encrypted using TLS 1.2 or higher, ensuring that your personal and financial data cannot be intercepted during transmission.
• AES-256 Encryption at Rest: Sensitive data stored in our databases — including identity documents, financial records, and account credentials — is encrypted using AES-256, a gold-standard symmetric encryption algorithm.
• Access Controls: Access to personal data held by xck33 is restricted on a strict need-to-know basis. Only authorised employees and contractors who require access to perform their job functions are granted access, and all access is logged and audited.
• Password Security: Player passwords are never stored in plain text. We use modern one-way hashing algorithms with salting to ensure that passwords cannot be recovered even in the event of a data breach affecting our systems.
• Intrusion Detection: xck33 operates continuous network monitoring and intrusion detection systems to identify and respond to potential security incidents in real time.
• Regular Security Audits: Our Platform and data infrastructure are subject to regular internal security reviews and periodic independent penetration testing to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no system is entirely immune to security risks. In the event of a data breach that is likely to result in a risk to your rights and freedoms, xck33 will notify affected players without undue delay and will take immediate steps to contain and remediate the incident.

xck33 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply to the main categories of personal data we hold:

Data Category	Retention Period	Basis
Account registration and identity data	For the duration of your account, plus 5 years after account closure	AML/KYC legal obligation
Financial transaction records	7 years from the date of the transaction	Financial record-keeping obligations
Gaming and betting history	5 years from the date of the session or bet	Dispute resolution, fraud prevention
Customer support communications	3 years from the date of the last communication	Legitimate interest (dispute resolution)
Marketing communication records	Until consent is withdrawn, plus 1 year	Consent; regulatory record-keeping
Technical and device logs	13 months from collection	Security monitoring, fraud detection
Self-exclusion and responsible gaming records	Minimum 7 years from the date of the request	Duty of care; regulatory obligation

Upon expiry of the applicable retention period, personal data is either securely deleted from all xck33 systems or, where deletion is not technically feasible, anonymised such that it can no longer be linked to any identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

As a player on the xck33 Platform, you hold the following rights in respect of your personal data. xck33 is committed to facilitating the exercise of these rights promptly and without unnecessary restriction:

• Right of Access: You have the right to request a copy of the personal data that xck33 holds about you, along with information about how it is used, who it has been shared with, and how long it will be retained. Access requests will be responded to within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update many details directly within your account settings; for changes that require verification, please contact our support team.
• Right to Erasure ("Right to Be Forgotten"): You may request that xck33 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing has no legitimate legal basis. This right is subject to overriding legal and regulatory retention obligations.
• Right to Restriction of Processing: You may request that xck33 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of your data is being contested, or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on your consent or on a contract with you, you have the right to receive the personal data you have provided to xck33 in a structured, commonly used, machine-readable format, and to transmit that data to another controller.
• Right to Object: You have the right to object to the processing of your personal data where xck33 relies on legitimate interests as its legal basis. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Opt Out of Marketing: You may opt out of receiving marketing communications from xck33 at any time by clicking the unsubscribe link in any marketing email, by updating your account notification preferences, or by contacting our support team directly.

To exercise any of the rights listed above, please contact our Data Privacy team at [email protected] with the subject line "Privacy Rights Request". Please include your registered username and email address so we can verify your identity before processing your request. We will acknowledge your request within 5 business days and aim to respond fully within 30 days.

The xck33 Platform is strictly intended for adults aged 21 years and above. xck33 does not knowingly collect, process, or retain personal data from any individual under the age of 21. Our registration process includes age declaration requirements and document-based age verification procedures specifically designed to prevent access by minors.

If xck33 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to close the relevant account, delete all associated personal data, and return any deposited funds to the payment method from which they originated. Any winnings accumulated on an underage account will be forfeited in accordance with our Terms & Conditions.

xck33 operates infrastructure and engages service providers that may be located in jurisdictions outside Bangladesh. When your personal data is transferred to, or accessed from, a country that may not provide the same level of data protection as your home country, xck33 ensures that adequate safeguards are in place to protect your information. These safeguards may include:

• Standard contractual clauses approved by recognised data protection authorities, incorporated into agreements with all recipients of personal data outside Bangladesh.
• Data processing agreements that bind recipients to confidentiality, security, and use-limitation obligations equivalent to those applied by xck33 itself.
• Transfers made on the basis of adequacy decisions where the recipient country is recognised as offering an equivalent standard of data protection.
• Transfers that are strictly necessary for the performance of our contract with you — for example, when a payment provider or game studio based outside Bangladesh needs to process your transaction or session data to deliver the requested service.

By using the xck33 Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Bangladesh as described in this section. All such transfers are conducted with appropriate protections in place, and xck33 remains responsible for ensuring that your data is handled in accordance with this Privacy Policy regardless of where it is processed.

xck33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, updates in applicable law, or improvements to the xck33 Platform. The most current version of this Policy will always be accessible at xck33.io/privacy-policy.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — xck33 will notify registered players by email to the address on file for their account, and by posting a prominent notice on the Platform homepage, at least 14 days before the changes take effect. Non-material amendments, such as typographical corrections or minor clarifications that do not alter the substance of the Policy, may be made without advance notice.

The date shown at the top of this Policy ("Last updated") reflects when the current version came into force. We encourage you to review this Policy periodically so that you remain informed about how xck33 protects your personal data. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way xck33 handles your personal data, please contact our Data Privacy team using the details below. We aim to respond to all privacy-related enquiries within 5 business days:

• Email: [email protected]
• WhatsApp: +880 1700 000000
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

When submitting a privacy-related request, please include your registered username, the email address associated with your xck33 account, and a clear description of your query or request. This allows our team to verify your identity and process your request efficiently.

If you are not satisfied with our response to a privacy complaint or believe that xck33 has not adequately addressed your concern, you have the right to escalate your complaint to the relevant data protection or consumer protection authority in your jurisdiction. xck33 will cooperate fully with any such investigation and will work in good faith to resolve all privacy disputes.