cgk22 Privacy Policy

1 Data We Collect

When you register for and use a cgk22 account, we collect personal data across several categories. This section explains precisely what data we collect, the mechanism by which it is collected, and the legal basis that justifies each category of collection. cgk22 processes personal data only where a valid legal basis exists under applicable data protection principles.

1.1 Registration and Identity Data

When you create a cgk22 account, you are required to provide the following information:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (to verify that you meet the 18+ age requirement)
• Mobile phone number (registered in Bangladesh)
• Email address
• Preferred username and password (password is stored in hashed form — we cannot read your plain-text password)
• City and district of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna)

This data is collected on the basis of contractual necessity — it is required to open and manage your account. Without it, we cannot provide cgk22 services to you.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) and anti-money-laundering compliance programme, we may require you to submit additional identity documents at specific trigger points, including before processing your first withdrawal, when your account is flagged for enhanced due diligence review, or when you exceed certain cumulative transaction thresholds. KYC documents we may collect include:

• National Identity Card (NID), passport, or driving licence — front and back images
• A selfie photograph for facial verification purposes
• Proof of address document dated within the last three months (utility bill, bank statement, or mobile financial service statement from bKash, Nagad, Rocket, or Upay)
• Source of funds documentation where required by compliance review

KYC data is processed on the legal basis of legal obligation compliance. Identity documents submitted for KYC are transmitted and stored using encrypted file storage and are accessible only to cgk22's compliance team. They are not used for any purpose other than identity verification and regulatory compliance.

1.3 Financial and Transaction Data

To process deposits and withdrawals, cgk22 collects and retains a record of your financial transactions. This includes:

Data Type	Description	Legal Basis
Payment method identifier	Your registered bKash, Nagad, Rocket, or Upay number; last 4 digits of Visa/Mastercard	Contractual necessity
Transaction history	Amount, timestamp, method, and status of every deposit and withdrawal	Legal obligation (AML record-keeping)
Betting and game records	Wagers placed, game results, bonus usage, and account balance history	Contractual necessity / Legal obligation
Bonus claim history	Which promotions were activated, wagering progress, and bonus outcomes	Contractual necessity

1.4 Technical and Usage Data

When you access cgk22.net, our servers automatically collect certain technical data about your device and browsing session. This data is used to maintain platform security, detect fraud, and optimise the user experience. Technical data collected includes:

• IP address and approximate geographic location (country and city level)
• Device type, operating system, and browser version
• Session timestamps — login time, logout time, and session duration
• Pages visited, game titles launched, and features accessed within your session
• Referral source (the URL or platform from which you arrived at cgk22.net, if applicable)
• Error logs and crash reports for technical support purposes

Technical data is collected on the basis of legitimate interest — specifically, the maintenance of platform security, fraud prevention, and the improvement of cgk22 services. cgk22 does not use IP address data to build individual marketing profiles.

1.5 Communications Data

When you contact cgk22 via live chat, email, or any other support channel, we retain a record of that communication, including the content of messages, timestamps, and the agent who handled your query. Communications data is retained to ensure continuity of support, resolve disputes, and maintain an audit trail for compliance purposes.

2 How We Use Your Data

cgk22 uses the personal data we collect for the following specific and clearly defined purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent or establishing a separate legitimate legal basis.

2.1 Account Management and Service Delivery

The primary use of your personal data is to deliver the cgk22 gaming and betting services you have signed up for. This includes creating and managing your player account, processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, crediting and managing bonus balances, and providing access to cricket betting markets, live casino tables, slots, and fishing games.

2.2 Identity Verification and Regulatory Compliance

cgk22 uses your identity data and KYC documents to verify your age and identity, as required by our responsible gaming and anti-money-laundering policies. This use of data is mandated by legal obligation and cannot be opted out of. Account functionality will be restricted until mandatory verification is completed.

2.3 Fraud Detection and Platform Security

cgk22 uses technical and transaction data to monitor accounts for suspicious activity, including multi-accounting, bonus abuse, bot usage, and money-laundering patterns. Automated systems and human review analysts may analyse your account activity for these purposes. This processing is carried out on the basis of cgk22's legitimate interest in maintaining a fair and secure gaming environment for all players.

2.4 Customer Support

Communications data and account information are used by cgk22's support team to respond to your queries, resolve complaints, investigate disputed transactions, and process account change requests. Support agents access your data on a need-to-know basis and are bound by strict confidentiality obligations.

2.5 Responsible Gaming Monitoring

cgk22 uses your account activity data — including session duration, deposit frequency, betting patterns, and self-exclusion history — to identify early indicators of problem gambling behaviour. Where such indicators are detected, cgk22 may reach out proactively to offer responsible gaming tools or information. This processing is carried out in the interest of player welfare and is a core element of our responsible gaming programme.

2.6 Platform Improvement and Analytics

Aggregated and anonymised usage data is used by cgk22 to understand how players interact with the platform, identify technical issues, optimise game lobby layouts, and prioritise new feature development. Analytics processing uses aggregated data that cannot identify you personally and does not affect your individual account.

2.7 Marketing Communications (Opt-In Only)

Where you have explicitly opted in to receive marketing communications from cgk22, we may use your name and email address to send you information about relevant promotions, seasonal offers (such as BPL and Eid bonuses), and platform updates. You may withdraw your marketing consent at any time by contacting [email protected] or by updating your communication preferences in your account settings. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.

3 Data Sharing & Disclosure

cgk22 does not sell or rent your personal data to third parties. We share personal data only in the limited and specific circumstances described below, and only with parties who are contractually bound to protect your information to at least the same standard as cgk22.

3.1 Payment Service Providers

To process your financial transactions, cgk22 must share relevant payment data with the mobile financial service providers and card networks you use — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard. The data shared is limited to what is strictly necessary to execute the specific transaction. Each payment provider operates under its own privacy policy and is independently responsible for the data it processes.

3.2 Game Technology Providers

cgk22's gaming library is powered by third-party game studios, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game from one of these providers, a session token and your account balance data are transmitted to the relevant game server. Game providers do not receive your full identity data (name, NID, etc.) — they receive only the anonymised session and balance data required to run the game. All cgk22 game technology partners are certified by independent testing laboratories and operate under internationally recognised gaming standards.

3.3 Identity Verification Services

cgk22 may use third-party KYC and identity verification service providers to assist in the processing of identity documents submitted during account verification. These providers process your identity data solely on cgk22's instructions and are prohibited from using it for their own purposes.

3.4 Legal and Regulatory Disclosure

cgk22 may be required to disclose personal data in response to a lawful request from a law enforcement body, regulatory authority, or court of competent jurisdiction. We will disclose only the minimum data required to satisfy the specific lawful request and will notify the affected player of any such disclosure where we are legally permitted to do so.

3.5 Business Continuity

In the event of a merger, acquisition, or transfer of cgk22 business assets, personal data held by cgk22 may be transferred to the acquiring or successor entity. In such an event, cgk22 will notify registered players prior to their data being transferred and will ensure that the successor entity is bound by privacy obligations at least equivalent to those set out in this policy.

4 Cookies & Tracking Technologies

cgk22.net uses cookies and similar browser-based technologies to operate the platform, maintain your login session, remember your preferences, and collect aggregate analytics about site usage. This section details every category of cookie deployed on cgk22.net.

4.1 What Are Cookies?

A cookie is a small text file placed on your device by a website when you visit it. Cookies allow the website to remember information about your visit — for example, whether you are logged in, your preferred language, or the contents of your session. Cookies do not contain executable code and cannot be used to access other files on your device.

4.2 Cookie Categories Used by cgk22

Category	Purpose	Retention	Can Be Disabled?
Strictly Necessary	Maintains your login session, prevents cross-site request forgery, and enables core platform functionality. Cannot be disabled without breaking the platform.	Session or up to 24 hours	No
Functional	Remembers your UI preferences such as game lobby sort order, preferred language, and notification settings.	Up to 90 days	Yes
Analytics	Collects aggregated, anonymised data about page views, session durations, and feature usage to help cgk22 improve the platform experience.	Up to 13 months	Yes
Security	Flags unusual login patterns and suspicious activity for fraud detection purposes.	Up to 30 days	No

4.3 Third-Party Cookies

cgk22 does not deploy third-party advertising or retargeting cookies. The only third-party scripts that may set cookies on cgk22.net are those belonging to cgk22's game technology partners (e.g., Pragmatic Play, Evolution Gaming) when you launch a game in a browser context. These cookies are scoped to the game session and expire when the session ends.

4.4 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging into your cgk22 account. For guidance on managing cookies in your specific browser, refer to your browser's official help documentation. Disabling analytics or functional cookies will not affect your ability to place bets, make deposits, or use any core cgk22 service.

5 Data Retention

cgk22 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The table below sets out the retention periods applicable to each category of personal data processed by cgk22.

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years post-closure	AML record-keeping obligations
KYC identity documents	Duration of account + 5 years post-closure	Regulatory compliance
Financial transaction records	7 years from transaction date	Financial record-keeping requirements
Betting and game history	Duration of account + 3 years post-closure	Dispute resolution and fair play auditing
Support communications	3 years from last interaction	Complaint resolution and audit trail
Session and technical logs	90 days from collection	Security monitoring and fraud detection
Marketing consent records	Duration of consent + 3 years	Evidence of lawful processing basis

Upon expiry of the applicable retention period, personal data is either permanently deleted from cgk22 systems or irreversibly anonymised such that it can no longer be linked to any individual. Anonymised aggregate data (e.g., site-wide game popularity statistics) may be retained indefinitely for platform analytics purposes.

6 Data Security

cgk22 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security programme is reviewed and updated regularly to address evolving threats.

6.1 Technical Security Measures

• TLS/SSL Encryption: All data transmitted between your browser and cgk22.net is encrypted using TLS 1.2 or higher. Look for the padlock icon in your browser's address bar when accessing cgk22.net.
• Encrypted Data Storage: Sensitive data fields — including identity document files, payment method identifiers, and hashed passwords — are stored using AES-256 encryption at rest.
• Firewall and Intrusion Detection: cgk22's platform infrastructure is protected by enterprise-grade firewall systems and real-time intrusion detection and prevention systems (IDS/IPS).
• Access Controls: Access to player personal data within cgk22's internal systems is restricted on a strict need-to-know basis. All internal access is logged and subject to periodic audit.
• Two-Factor Authentication: Two-factor authentication (2FA) is available to all cgk22 players via account settings. cgk22 strongly recommends enabling 2FA on your account for an additional layer of protection.

6.2 Organisational Security Measures

• All cgk22 personnel who handle personal data undergo mandatory data protection and information security training upon joining and at regular intervals thereafter.
• Data processing agreements are in place with all third-party service providers who access cgk22 player data, contractually obligating them to maintain equivalent security standards.
• cgk22 conducts periodic security assessments and penetration testing of its platform infrastructure.

6.3 Data Breach Response

In the event of a data breach that poses a risk to the rights and freedoms of cgk22 players, cgk22 will notify affected players without undue delay and will take all reasonable steps to contain the breach and mitigate its impact. cgk22 maintains a documented incident response plan and a dedicated security response team to manage such events. If you suspect that your cgk22 account has been accessed without your authorisation, contact our security team immediately at [email protected].

7 Your Privacy Rights

As a cgk22 player, you hold specific rights in relation to the personal data we hold about you. cgk22 is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, contact our data privacy team at [email protected] with the subject line "Privacy Rights Request".

7.1 Right of Access

You have the right to request a copy of all personal data cgk22 holds about you. Upon receiving a verified access request, cgk22 will provide a structured summary of your data within 30 days. The summary will include the categories of data held, the purposes for which it is processed, and the parties with whom it has been shared.

7.2 Right to Rectification

If any personal data cgk22 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For minor corrections (e.g., email address or phone number updates), you can update your information directly via your cgk22 account profile. For changes to core identity data (e.g., legal name), you will need to contact support with supporting documentation.

7.3 Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no overriding legal basis for continued processing. Please note that cgk22 cannot delete data that it is legally required to retain (see Section 5 — Data Retention). In such cases, cgk22 will inform you of the specific legal obligation that prevents full erasure.

7.4 Right to Restrict Processing

You have the right to request that cgk22 restricts the processing of your personal data in specific circumstances, such as while you contest the accuracy of the data or while a complaint is under investigation. During a restriction period, cgk22 will continue to store your data but will not process it for any purpose other than storage and compliance.

7.5 Right to Data Portability

Where cgk22 processes your personal data on the basis of consent or contractual necessity, you have the right to receive a copy of that data in a structured, commonly used, and machine-readable format. Contact [email protected] to request a data export.

7.6 Right to Object to Marketing

You have the absolute right to object to the processing of your personal data for direct marketing purposes at any time. To opt out of cgk22 marketing communications, contact [email protected] or update your preferences in your account settings. Opt-out requests will be processed within 5 business days.

7.7 How to Submit a Privacy Rights Request

All privacy rights requests must be submitted in writing to [email protected] with the subject line "Privacy Rights Request". To protect your privacy, cgk22 will verify your identity before processing any request. We aim to acknowledge all requests within 5 business days and to fulfil them within 30 days. Where a request is complex or involves a large volume of data, we may extend the fulfilment period by up to an additional 30 days and will notify you of the extension.

8 Policy Updates & Contact

8.1 Changes to This Privacy Policy

cgk22 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When we make material changes to this policy, we will notify registered players by email and by posting a prominent notice on cgk22.net at least 14 days before the changes take effect. The "Last updated" date at the top of this page reflects the date on which the most recent version was published.

Your continued use of cgk22.net after the effective date of any updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not agree with the changes, you should close your cgk22 account before the new policy takes effect and contact [email protected] to exercise your data rights.

8.2 Version History

• Version 2.4 — January 2026: Expanded Section 4 (Cookies) with updated retention periods. Added third-party game provider cookie disclosure. Clarified data portability process in Section 7.
• Version 2.3 — October 2025: Added Section 6.3 (Data Breach Response). Updated KYC document list to include Upay account statements. Revised retention period for session logs from 180 to 90 days.
• Version 2.2 — June 2025: Initial published version of the cgk22 Privacy Policy following platform launch.

8.3 Contact Our Data Privacy Team

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way cgk22 processes your personal data, please contact our data privacy team directly. We are committed to responding to all genuine privacy enquiries promptly and constructively.

Email: [email protected] (subject line: "Privacy Policy Enquiry")
Support Hours: Daily 09:00 – 24:00 BST (UTC+6)
Response Time: We aim to respond to all privacy enquiries within 2 business days.