xck33 Privacy Policy
At xck33, protecting your personal data is a fundamental commitment — not an afterthought. This Privacy Policy explains precisely what information we collect, why we collect it, how it is used, and the rights you hold over your data as a player on our platform.
Privacy at a Glance
Our Core Privacy Commitments
These cards summarise the principles that underpin xck33's approach to data privacy. The full legal text is available in the sections below.
Minimal Data Collection
xck33 collects only the personal data that is strictly necessary to provide you with a safe, functional, and enjoyable gaming experience. We do not collect data speculatively or for purposes beyond those stated in this policy.
No Sale of Personal Data
xck33 does not sell, rent, or auction your personal data to any third party under any circumstances. Data shared with service partners is governed by strict data processing agreements and used solely for the purpose of delivering the xck33 Service to you.
SSL Encryption in Transit
All data transmitted between your device and xck33's servers is encrypted using industry-standard TLS/SSL protocols. Your payment details, login credentials, and personal information are protected from interception during transmission.
Your Data, Your Rights
As an xck33 player, you have the right to access, correct, export, and request deletion of your personal data at any time. Submit a data subject request to our support team and we will respond within 30 days of receipt.
Transparent Cookie Use
xck33 uses cookies and similar technologies only for session management, platform analytics, and fraud prevention. We do not deploy third-party advertising cookies or behavioural profiling trackers without your informed consent.
Defined Retention Periods
Personal data held by xck33 is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable regulatory obligations. Once the retention period expires, data is securely deleted or anonymised.
1 Information We Collect
xck33 collects personal information from you through several channels: directly when you register an account or contact support, automatically through your use of the platform, and from third-party service providers where necessary to verify your identity or process payments.
Information You Provide Directly
When you create an xck33 account or interact with our support team, we collect the following categories of personal data:
- Identity Data: Full legal name, date of birth, and National ID card or passport number (collected during identity verification)
- Contact Data: Email address, mobile phone number, and residential address in Bangladesh
- Financial Data: bKash account number, Nagad account number, Rocket or Upay account details, bank account details, and transaction history associated with your xck33 account
- Account Credentials: Your chosen username and an encrypted hash of your password (we never store your password in plain text)
- Verification Documents: Copies of government-issued photo identity documents and proof-of-address documents submitted during the KYC (Know Your Customer) verification process
- Support Communications: Records of all correspondence between you and the xck33 support team via email or live chat
Information Collected Automatically
When you access the xck33 platform, our systems automatically record certain technical and behavioural data:
- Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifier
- Usage Data: Pages visited, games played, session duration, click patterns, bet history, deposit and withdrawal activity, and login timestamps
- Location Data: General geographic location derived from your IP address (country and city level); xck33 does not collect precise GPS location data
- Cookie Data: Session tokens, preference cookies, and analytics identifiers — see the Cookies section below for full details
Information From Third Parties
In limited circumstances, xck33 receives personal data from trusted third-party sources to fulfil our legal and operational obligations:
- Identity verification and age confirmation services used to confirm that players meet the 18+ minimum age requirement
- Payment processors including bKash, Nagad, Rocket, and Upay who provide transaction confirmation data
- Fraud detection and anti-money laundering screening providers
- Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, and Microgaming, who may share session data for dispute resolution purposes
2 How We Use Your Data
xck33 processes your personal data only where there is a lawful basis for doing so. The primary bases on which we rely are: performance of a contract (operating your account and delivering the Service), compliance with legal obligations (KYC, AML, age verification), our legitimate business interests (fraud prevention, platform security, service improvement), and — where applicable — your consent (marketing communications).
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, Contact, Credentials | Contract performance |
| Identity verification (KYC) | Identity, Verification Documents | Legal obligation |
| Payment processing (bKash, Nagad, bank) | Financial, Identity | Contract performance |
| Fraud prevention and AML screening | Identity, Financial, Device, Usage | Legal obligation & Legitimate interest |
| Customer support and dispute resolution | Identity, Contact, Support Communications | Contract performance |
| Responsible gaming monitoring | Usage, Financial, Account | Legal obligation & Legitimate interest |
| Platform analytics and improvement | Usage, Device, Cookie | Legitimate interest |
| Promotional communications (opt-in only) | Contact, Usage (preferences) | Consent |
Marketing Communications
xck33 will only send you promotional emails or SMS messages relating to bonuses, tournaments, and seasonal offers (such as Eid promotions and BPL season specials) if you have explicitly opted in to receiving such communications. You may withdraw your consent and unsubscribe from marketing communications at any time by adjusting your notification preferences within the account settings section of your xck33 dashboard, or by contacting support at [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal, nor does it affect transactional communications (such as deposit confirmations, withdrawal receipts, or security alerts) which xck33 must send as part of delivering the Service.
3 Data Sharing & Third Parties
xck33 does not sell, trade, or otherwise transfer your personal data to external parties for commercial gain. We share your data only in the specific and limited circumstances described below, and only to the extent necessary for the stated purpose.
Service Providers and Data Processors
xck33 works with carefully selected third-party service providers who process personal data on our behalf and under our documented instruction. These include:
- Payment Partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and Visa/Mastercard processing networks — data shared is limited to what is required to authorise, process, and record your transactions.
- Identity Verification Providers: Third-party KYC and age-verification services that confirm your identity documents against government records.
- Game Studios: Providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session identifiers and bet data necessary to run their games within the xck33 Casino lobby.
- Analytics Providers: Aggregated and pseudonymised usage data is shared with analytics platforms used to monitor platform performance and user experience.
- Fraud and AML Screening: Transaction data and identity markers are shared with fraud prevention and anti-money laundering screening services as required by compliance obligations.
All third-party data processors engaged by xck33 are required to maintain appropriate technical and organisational security measures and are contractually prohibited from using your data for any purpose other than those specified.
Legal Disclosures
xck33 may disclose your personal data to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where we are required to do so by applicable law, court order, or regulatory directive. In such cases, xck33 will disclose only the minimum data required to comply with the legal obligation and will, where legally permissible, notify you of the disclosure.
4 Cookies & Tracking Technologies
xck33 uses cookies and similar technologies (such as local storage tokens and session identifiers) on its website and mobile interface. This section explains what cookies we use, why we use them, and the choices available to you.
What Are Cookies?
Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites work efficiently and to provide website operators with information about how their site is used. Cookies do not give xck33 access to your device beyond the information they contain.
Categories of Cookies Used by xck33
| Cookie Category | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session management, authentication tokens, security cookies that keep your account secure while you are logged in | No — essential for the Service to function |
| Functional | Remembering your language preference, display settings, and notification preferences between sessions | Yes — disabling may affect user experience |
| Analytics | Anonymised tracking of page views, game popularity, and platform navigation to help xck33 improve the Service | Yes — opt out via account preferences |
| Fraud Prevention | Device fingerprinting tokens used to detect multiple accounts, bot activity, and suspicious login patterns | No — required for platform security |
Managing Your Cookie Preferences
You can control non-essential cookies via your xck33 account settings. You may also configure your browser to refuse all cookies or to alert you when cookies are being sent. Please note that disabling strictly necessary or fraud-prevention cookies may prevent you from accessing or using key features of the xck33 platform. xck33 does not use third-party advertising or behavioural retargeting cookies.
5 Data Security Measures
xck33 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. While no system is entirely immune to risk, xck33 maintains security standards commensurate with the sensitivity of the data held and the nature of our operations.
Technical Safeguards
- TLS/SSL Encryption: All data in transit between your device and xck33 servers is encrypted using TLS 1.2 or higher.
- Password Hashing: Account passwords are never stored in readable form. They are processed using a strong cryptographic hashing algorithm with per-user salting before storage.
- Access Controls: Access to personal data held within xck33 systems is restricted on a need-to-know basis. Staff access is governed by role-based permissions, multi-factor authentication, and audit logging.
- Infrastructure Security: xck33's server infrastructure is hosted in secured data centres with physical access controls, redundant connectivity, and continuous monitoring for intrusion attempts.
- Vulnerability Management: xck33 conducts regular security assessments and penetration testing of its platform to identify and remediate vulnerabilities before they can be exploited.
Data Breach Response
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, xck33 will notify affected players without undue delay and will take all reasonable steps to contain the breach, assess its scope, and prevent recurrence. Notification will be sent to the email address registered on your account and will include a description of the nature of the breach, the data affected, and the steps xck33 has taken in response.
6 Data Retention Policy
xck33 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal, regulatory, or contractual obligations. The retention periods below reflect both our operational needs and our compliance requirements.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Regulatory compliance and dispute resolution |
| KYC / identity documents | 5 years from submission date | AML regulatory obligation |
| Financial transaction records | 7 years from transaction date | Financial record-keeping requirement |
| Support communications | 3 years from last interaction | Dispute resolution and quality assurance |
| Analytics / usage data | 24 months (anonymised thereafter) | Platform improvement and performance monitoring |
| Marketing consent records | Until consent withdrawn + 3 years | Proof of consent for compliance purposes |
Following the expiry of the applicable retention period, personal data is securely deleted from xck33 systems or, where deletion is technically impractical in the short term (for example, from encrypted backup systems), it is isolated from further processing until deletion can be completed.
7 Your Privacy Rights
As an xck33 player, you hold meaningful rights over your personal data. xck33 is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact the xck33 data team at [email protected] with the subject line "Privacy Rights Request" and include your registered username or email address for account identification.
Right of Access
You have the right to request a copy of the personal data xck33 holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of receiving a verified request.
Right to Rectification
If any personal data held by xck33 is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly via your xck33 dashboard. For changes to identity documents or date of birth, please contact support and provide supporting documentation.
Right to Erasure
You may request that xck33 delete your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (for consent-based processing), or where you object to processing based on legitimate interests and there are no overriding grounds. Please note that xck33 may be required by law to retain certain categories of data (such as financial records and KYC documents) notwithstanding an erasure request — in such cases, we will inform you of the data that cannot be deleted and the reason why.
Right to Restrict Processing
You may request that xck33 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified, or while an objection to processing is being assessed.
Right to Data Portability
Where processing is based on your consent or on contract performance, you have the right to receive your personal data in a portable format and, where technically feasible, to have it transmitted directly to another data controller.
Right to Object
You have the right to object to xck33 processing your personal data on the basis of legitimate interests. Where you raise a valid objection, xck33 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for the establishment, exercise, or defence of legal claims.
Right to Withdraw Consent
Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.
8 Changes to This Policy
xck33 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable regulations, or the features of our platform. When we make material changes to this policy, we will notify you by sending an email to your registered address and by displaying a prominent notice on the xck33 platform for a minimum of 14 days prior to the changes taking effect.
The effective date displayed at the top of this document indicates when the current version of the policy came into force. We encourage you to review this page periodically to stay informed about how xck33 protects your personal data.
Your continued use of the xck33 Service after the revised Privacy Policy comes into effect constitutes your acknowledgement of the changes. If you do not agree with the revised policy, you must discontinue your use of the Service and may close your account by contacting [email protected].
Contact for Privacy Enquiries
For any question, concern, or request relating to this Privacy Policy or xck33's data practices, please contact our support team. All privacy-related enquiries are handled in English and will receive a substantive response within 10 business days.
Contact: [email protected] — available 24 hours a day, 7 days a week.
Your Data Is Safe with xck33
We take your privacy seriously so you can focus on what matters — enjoying the games. Explore xck33 Casino, check out our FAQ, or log in to manage your account and privacy settings today.