cgk22 Privacy Policy

This Privacy Policy ("Policy") describes how cgk22 ("the Platform", "we", "our", "us") collects, uses, stores, and protects the personal data of individuals ("you", "your", "the Player") who access or use the cgk22 website at cgk22.io and all associated services. By registering an account or otherwise using the platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein . This Policy forms part of the cgk22 Terms & Conditions and should be read alongside them.

1 Introduction

cgk22 is an online casino and sports betting platform operated for the entertainment of eligible adult players in Bangladesh and other permitted jurisdictions. As a platform that processes financial transactions and verifies user identities, we necessarily handle personal data in the course of providing our services.

We take our data protection responsibilities seriously. This Policy has been written in clear, accessible English so that every player understands precisely what data we hold about them and how it is used. Where technical or legal terms are unavoidable, we have provided plain-language explanations alongside them.

This Policy applies to all personal data collected through the cgk22 website, mobile interface, customer support communications, and payment processing flows. It does not apply to third-party websites or services that may be linked to or referenced from the cgk22 platform — those parties operate their own independent privacy policies.

2 Data We Collect

cgk22 collects the following categories of personal data in the course of providing its services:

Identity Data: Full legal name, date of birth, nationality, and government-issued identification document details (such as National ID card number or passport number) collected during the KYC verification process.

Contact Data: Email address, mobile phone number, and residential address provided at registration or updated subsequently through your account settings.

Financial Data: Payment method identifiers (such as the registered bKash or Nagad mobile number, partial bank account details, or masked card numbers), transaction amounts, deposit and withdrawal history, and account balance records.

Account Activity Data: Login timestamps, session durations, game history, wagering patterns, bonus redemption records, and responsible gaming preference settings.

Technical Data: IP address, device type, browser type and version, operating system, screen resolution, and referral source collected automatically when you access the platform.

Communications Data: Records of your correspondence with cgk22 customer support, including live chat logs, email threads, and any documents you submit in support of an account query or complaint.

3 How We Collect Your Data

cgk22 collects personal data through the following channels:

• Direct submission: Information you provide when completing the registration form, submitting KYC documents, initiating deposits or withdrawals, updating your account profile, or contacting customer support.
• Automated technical collection: Technical Data collected automatically by our servers and analytics systems each time you interact with the cgk22 website or mobile interface, including during browsing sessions prior to registration.
• Payment processors: Transaction confirmation data returned by payment partners including bKash, Nagad, Rocket, and Upay following the processing of a deposit or withdrawal instruction.
• Identity verification providers: Verification outcome data returned by third-party KYC service providers following document checks conducted at our instruction as part of the account verification process.
• Fraud prevention systems: Risk signal data generated by automated fraud detection systems that monitor account activity for patterns consistent with money laundering, bonus abuse, or other prohibited conduct.

4 Purpose of Processing

The table below sets out the specific purposes for which cgk22 processes each category of personal data.

cgk22 does not use automated decision-making that produces legal or similarly significant effects on players without human review. Where automated systems flag an account for investigation, a member of the cgk22 compliance team reviews the case before any consequential action — such as account suspension or withdrawal restriction — is taken.

5 Legal Basis for Processing

cgk22 processes personal data on the following legal bases depending on the purpose of processing:

• Contractual necessity: Processing required to perform our obligations under the player account agreement — including account creation, game access, payment processing, and withdrawal management.
• Legal obligation: Processing required to comply with applicable anti-money laundering obligations, identity verification requirements, and fraud prevention duties.
• Legitimate interests: Processing conducted to protect the security and integrity of the cgk22 platform, prevent fraud and bonus abuse, and improve the quality of services provided to players — where these interests are not overridden by the player's own privacy interests.
• Consent: Processing of contact data for the purpose of sending promotional communications, where you have explicitly opted in to receive such communications. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting support.

6 Data Sharing and Disclosure

cgk22 does not sell, rent, or trade your personal data to any third party. We share personal data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely for the purpose of processing your deposit and withdrawal transactions.
• Identity verification providers: Third-party KYC and document verification services engaged by cgk22 to conduct age and identity checks on registered players.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios — limited technical data necessary to deliver game content and validate game outcomes. Game providers do not receive identity or financial data.
• Fraud prevention and security services: Specialist third-party systems used to detect account takeover attempts, bonus abuse, and suspected money-laundering activity.
• Professional advisers: Legal counsel, auditors, and compliance consultants engaged under strict confidentiality obligations where their advice is required in connection with platform operations.
• Regulatory and law enforcement authorities: Where cgk22 is required by law, court order, or formal regulatory request to disclose personal data, we will comply with such obligations and notify the affected player where we are legally permitted to do so.

All third parties with whom cgk22 shares personal data are contractually required to maintain appropriate technical and organisational security measures and to process the data only for the specific purpose for which it was shared.

7 Cookies and Tracking Technologies

cgk22 uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your logged-in session, and to understand how players interact with the website. The following types of cookies are used:

• Strictly necessary cookies: Required for the platform to operate. These include session authentication tokens, security cookies, and load-balancing identifiers. They cannot be disabled without rendering core platform functionality inoperable.
• Functional cookies: Used to remember your preferences such as preferred language, currency display settings, and responsible gaming limits you have configured.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the platform — which pages are visited most frequently, where players encounter errors, and how game categories are browsed. This data helps cgk22 improve the platform experience.
• Security cookies: Used to detect and prevent fraudulent activity, unauthorised access attempts, and bot traffic.

You may manage non-essential cookie preferences through your browser settings. Please note that disabling functional or analytics cookies may affect your experience on the cgk22 platform but will not prevent you from placing wagers or making transactions.

8 Data Retention

cgk22 retains personal data for the periods described below, after which data is securely deleted or irreversibly anonymised:

• Account and identity data: Retained for the duration of the active account relationship and for a period of five years following account closure, to satisfy anti-money laundering record-keeping obligations and to resolve any post-closure disputes.
• Financial transaction records: Retained for seven years from the date of each transaction in accordance with financial record-keeping requirements applicable to payment processing operations.
• Game and wagering history: Retained for three years from the date of each session to support dispute resolution and responsible gaming monitoring.
• Customer support communications: Retained for two years from the date of the last communication in the relevant support thread.
• Technical and session data: Retained for thirteen months from the date of collection for security analysis and platform performance review purposes.

Where a player's account is subject to an ongoing investigation — whether internal or by an external authority — the relevant data will be retained until the investigation is formally concluded, regardless of the standard retention period.

9 Data Security

cgk22 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between player devices and cgk22 servers.
• Encryption at rest for all databases storing personal and financial data.
• Role-based access controls ensuring that cgk22 staff can only access personal data that is necessary for their specific operational function.
• Multi-factor authentication requirements for all internal administrative systems.
• Regular penetration testing and security audits conducted by independent third-party security specialists.
• Automated intrusion detection systems that monitor for anomalous access patterns in real time.
• Documented incident response procedures, including player notification protocols, in the event of a confirmed data breach affecting personal data.

Despite these measures, no system is completely immune to security risk. Players are responsible for maintaining the security of their own login credentials and for reporting any suspected unauthorised account access to [email protected] without delay.

10 Your Data Rights

As a player whose personal data is processed by cgk22, you hold the following rights in relation to that data. To exercise any of these rights, please contact cgk22 support at [email protected] with your registered account username and a clear description of your request.

• Right of access: You may request a copy of all personal data cgk22 holds about you, along with information about how and why it is being processed.
• Right to rectification: You may request that any inaccurate or incomplete personal data we hold about you be corrected or completed without undue delay.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to cgk22's legal retention obligations. Note that financial transaction records and KYC data are subject to mandatory minimum retention periods and cannot be deleted on request during those periods.
• Right to restriction: You may request that cgk22 restrict the processing of your personal data in specific circumstances — for example, where you contest the accuracy of the data or where you have objected to processing pending verification of legitimate grounds.
• Right to object: You may object to processing based on legitimate interests. cgk22 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

cgk22 will respond to all verified data rights requests within 30 calendar days of receipt. In complex cases we may extend this period by an additional 30 days, in which case we will notify you of the extension and the reason for it.

11 Children and Minors

The cgk22 platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals below the age of 21. The KYC verification process is specifically designed to prevent underage registration by requiring documentary proof of age for all accounts.

If cgk22 discovers or has reasonable grounds to believe that an account has been registered by or on behalf of a person under the age of 21, the account will be closed immediately, all associated balances will be forfeited, and any personal data collected in connection with that account will be deleted as promptly as our legal obligations permit. If you believe that a minor has registered an account on cgk22, please contact [email protected] immediately so that we can investigate and act without delay.

12 Changes to This Privacy Policy

cgk22 reserves the right to update or revise this Privacy Policy at any time. When material changes are made — changes that affect how your personal data is collected, used, or shared in a way that is materially different from what was previously disclosed — we will notify registered players via the email address associated with their account, or by a prominent notice displayed upon login, prior to the changes taking effect.

Non-material changes, such as corrections of typographical errors or clarifications that do not alter the substance of the Policy, may be made without direct notification. The date of the most recent revision is always shown at the top of this document. We encourage you to review this Policy periodically so that you remain informed about how your data is protected.

Your continued use of the cgk22 platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data cgk22 holds about you, please contact our support team using the details below. We are committed to addressing all privacy-related enquiries thoroughly and without unnecessary delay.

Email: [email protected]

Response time: cgk22 support operates around the clock in Bangladesh Standard Time (BST, UTC+6) and aims to provide an initial response to all privacy enquiries within two business days.

When submitting a data rights request or privacy enquiry, please include your registered account username and sufficient detail to allow us to identify your account and understand the nature of your request. We may need to verify your identity before processing a data access or deletion request to ensure that we do not disclose or delete data in response to an unauthorised request.