4c44 Privacy Policy

1 Introduction

This Privacy Policy is published by 4c44, the online betting and casino platform accessible at https://4c44.io ("4c44", "we", "us", "our"). It applies to all personal data collected from individuals who visit, register with, or otherwise interact with the 4c44 platform, including players based in Bangladesh and any other jurisdiction from which the platform is accessed.

4c44 is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. We recognise that the personal data you entrust to us is sensitive and deserves robust protection. This policy sets out in formal English exactly what data we collect, on what legal basis, for what purposes, with whom it may be shared, and for how long it is retained.

By registering an account on 4c44 or by continuing to use the platform after this policy has been published or updated, you acknowledge that you have read and understood this Privacy Policy and accept its terms. This Privacy Policy forms part of the 4c44 Terms & Conditions and should be read in conjunction with that document.

2 Data We Collect

4c44 collects the following categories of personal data from players and platform visitors:

4c44 does not intentionally collect sensitive personal data beyond what is listed above. We do not collect data relating to racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data for identification purposes.

3 How We Collect Data

4c44 collects personal data through the following channels:

• Direct Submission: Data you provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal request, or contacting the 4c44 support team via live chat or email.
• Automated Technical Collection: Data collected automatically when you visit or interact with the 4c44 platform, including IP addresses, device identifiers, session cookies, and browser metadata. This data is collected via server logs and first-party cookies.
• Platform Interaction Logging: Records of bets placed, games played, promotions redeemed, and account settings changes are generated automatically by the 4c44 platform as part of normal operations.
• Payment Processor Confirmation: When a transaction is processed via bKash, Nagad, Rocket, or Upay, the relevant payment service provider confirms transaction status and associated payment account details to 4c44's cashier system. 4c44 does not receive full payment account credentials — only the information necessary to match a transaction to a player account.
• Fraud Prevention and Security Systems: 4c44's fraud detection systems may generate risk scores and flags based on account activity patterns, which are retained as part of the account record.

4 Purposes of Processing

4c44 processes personal data for the following specific and legitimate purposes:

1. Account Creation and Management: To register your account, maintain your player profile, authenticate your identity at login, and administer your relationship with the 4c44 platform throughout its duration.
2. Identity and Age Verification (KYC): To verify that you meet the minimum age requirement of 21 years, to confirm your identity in accordance with anti-money-laundering obligations, and to validate ownership of your registered Supported Payment Method.
3. Payment Processing: To process deposit and withdrawal transactions in Bangladeshi Taka (BDT) via bKash, Nagad, Rocket, and Upay, and to maintain accurate financial records for each player account.
4. Delivery of Gaming Services: To provide access to sports betting markets, live casino games, slot titles, and all other products available on the 4c44 platform, and to settle bets and games accurately.
5. Bonus and Promotion Administration: To track wagering activity against applicable Wagering Requirements, to credit bonus funds upon qualifying events, and to enforce bonus terms including expiry and eligibility conditions.
6. Customer Support: To respond to enquiries, resolve complaints, and provide live chat assistance. Support communications may be recorded for quality assurance and training purposes.
7. Responsible Gaming: To monitor account activity for indicators of problem gambling, to enforce deposit limits and self-exclusion decisions, and to prevent excluded players from re-registering accounts on the platform.
8. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, duplicate accounts, money laundering, bonus abuse, and other forms of misconduct. 4c44 employs automated and manual fraud detection processes for this purpose.
9. Legal and Regulatory Compliance: To comply with applicable legal obligations, including responding to lawful requests from authorities, maintaining records required by law, and reporting suspicious transactions where required.
10. Platform Improvement: To analyse aggregate, anonymised usage data to improve the performance, reliability, and user experience of the 4c44 platform. Individual player data is not used for this purpose without anonymisation.
11. Communications: To send you account-related notifications, security alerts, transaction confirmations, and — where you have not opted out — promotional communications about relevant 4c44 offers. You may opt out of promotional communications at any time by contacting the support team.

5 Legal Basis for Processing

4c44 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Performance of a Contract: Processing necessary to fulfil our obligations to you under the 4c44 Terms & Conditions, including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable laws, including identity verification, anti-money-laundering checks, age verification, and responding to lawful authority requests.
• Legitimate Interests: Processing undertaken for 4c44's legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security, responsible gaming monitoring, and aggregate platform analytics.
• Consent: Where 4c44 relies on your consent as the legal basis for a specific processing activity (such as sending optional promotional communications), you may withdraw that consent at any time by contacting the support team. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing and Disclosure

4c44 does not sell, rent, or trade personal data to any third party. Personal data may be shared only in the following limited circumstances:

• Payment Service Providers: Transaction data is shared with bKash, Nagad, Rocket, and Upay solely to process deposit and withdrawal requests. These providers act as independent data controllers in respect of transaction data processed through their own platforms and are subject to their own privacy policies.
• Game Content Providers: Where a game is supplied by a third-party provider such as Pragmatic Play, NetEnt, Evolution Gaming, Microgaming, Spribe, or Ezugi, limited technical session data (such as a pseudonymous player session ID) may be passed to that provider to initialise the game session. No full personal identity data is shared with game studios for this purpose.
• Identity Verification Services: Where 4c44 engages a third-party KYC or document verification service to assist with identity and age checks, the minimum necessary identity data is shared with that provider under a data processing agreement that imposes equivalent data protection obligations.
• Fraud Prevention and Security Partners: 4c44 may share data with fraud detection and cybersecurity service providers for the purposes of identifying and preventing fraudulent activity, subject to appropriate contractual safeguards.
• Legal and Regulatory Authorities: 4c44 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required or permitted by applicable law — including in response to a lawful court order, subpoena, or investigative request relating to suspected illegal activity.
• Business Transfers: In the event of a merger, acquisition, or sale of the 4c44 platform or its assets, personal data held by 4c44 may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection commitments.

All third-party service providers with whom 4c44 shares personal data are required to process that data only for the stated purpose, to maintain appropriate security standards, and to comply with applicable data protection obligations. 4c44 does not permit third-party service providers to use your data for their own independent marketing or commercial purposes.

7 Data Retention

4c44 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and in accordance with any applicable legal retention obligations. The following general retention guidelines apply:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Where data is anonymised rather than deleted, the resulting anonymised dataset may be retained indefinitely for aggregate analytical purposes.

8 Data Security

4c44 implements a layered, defence-in-depth approach to data security, incorporating both technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, or disclosure. Key measures include:

• Encryption in Transit: All data transmitted between player devices and the 4c44 platform is encrypted using industry-standard 256-bit SSL/TLS protocols. This applies to all page loads, login events, payment interactions, and API communications.
• Encryption at Rest: Sensitive personal data, including payment account references and KYC document copies, is encrypted when stored on 4c44's servers.
• Access Controls: Access to personal data within 4c44's systems is restricted on a strict need-to-know basis. Staff who require access to player data in the course of their role are subject to confidentiality obligations and receive regular data protection training.
• Fraud Detection Systems: Automated systems monitor platform activity in real time for indicators of fraudulent conduct, account takeover attempts, and other security threats.
• Incident Response: 4c44 maintains documented procedures for responding to personal data breaches, including assessing impact, containing the breach, and notifying affected players where required.
• Third-Party Security Audits: 4c44 engages independent security professionals to conduct periodic assessments of platform infrastructure and data handling practices.

While 4c44 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your 4c44 account and to notify us immediately via live chat if you suspect any unauthorised access to your account.

9 Cookies and Tracking Technologies

4c44 uses cookies and similar first-party tracking technologies to operate and improve the platform. The following categories of cookies are deployed:

• Essential Cookies: Required for the platform to function. These cookies maintain your authenticated session, remember your language and display preferences, and enable secure payment flows. They cannot be disabled without impacting platform functionality.
• Functional Cookies: Used to remember choices you have made on the platform — such as preferred game view or responsible gaming settings — so that those preferences persist across sessions. These are strictly first-party cookies.
• Analytics Cookies: First-party analytics cookies are used to collect anonymised aggregate data about how players navigate and interact with the 4c44 platform, enabling us to identify performance bottlenecks and improve the user experience. No individual player profile is built from analytics data.

4c44 does not deploy third-party advertising cookies, retargeting pixels, cross-site tracking technologies, or social media tracking scripts on the platform. You will not be tracked across other websites as a result of using 4c44.

Most browsers allow you to manage cookie preferences via browser settings, including blocking or deleting cookies. Please note that disabling essential cookies will prevent you from logging into your 4c44 account.

10 Your Rights

As a player whose personal data is processed by 4c44, you hold the following rights in relation to your data. These rights may be exercised by contacting the 4c44 support team via live chat:

• Right of Access: You may request a copy of the personal data 4c44 holds about you, together with information about how it is being processed. 4c44 will respond to verified access requests within 30 days.
• Right to Rectification: If personal data held by 4c44 is inaccurate or incomplete, you may request that it be corrected. For account-held details such as contact information, you may also update these directly via account settings where available.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 4c44's overriding legal retention obligations. Note that legal obligations — including anti-money-laundering record-keeping requirements — may prevent full erasure in certain circumstances.
• Right to Restriction: You may request that processing of your personal data be restricted in certain circumstances, for example where you contest the accuracy of the data or where processing is unlawful but you prefer restriction over deletion.
• Right to Object: Where 4c44 processes your personal data on the basis of legitimate interests, you may object to that processing. 4c44 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Data Portability: Where technically feasible and where processing is based on consent or contract performance, you may request that personal data you have provided to 4c44 be delivered to you in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11 Minors and Age Restriction

The 4c44 platform is strictly for adults aged 21 years and over. 4c44 does not knowingly collect personal data from any individual under the age of 21. If you are under 21 years of age, you must not attempt to register an account, and you must not submit any personal data to the 4c44 platform.

Age verification is conducted as part of the standard KYC process for all registered players. Where 4c44 identifies or reasonably suspects that a player is under the age of 21, the account will be immediately suspended, all pending transactions will be cancelled, any deposited funds will be returned to the originating payment method, and the account will be permanently closed. Any personal data collected from a player subsequently confirmed to be under 21 will be deleted promptly, subject only to any retention obligations imposed by applicable law.

Parents and guardians who believe that a minor may have registered an account on 4c44 are encouraged to contact the support team immediately via live chat so that the matter can be investigated and resolved without delay.

12 International Data Transfers

The 4c44 platform primarily serves players based in Bangladesh. Personal data collected from players may be processed on servers located outside Bangladesh where 4c44's infrastructure or third-party service providers operate. Where such transfers occur, 4c44 takes reasonable steps to ensure that the receiving jurisdiction or service provider maintains data protection standards that are substantially equivalent to those described in this Privacy Policy.

Specifically, international data transfers to third-party service providers are governed by contractual data processing agreements that impose obligations regarding data security, purpose limitation, and data subject rights. 4c44 does not transfer personal data to jurisdictions or entities that cannot provide adequate protections for that data.

Where personal data is transferred to payment service providers such as bKash, Nagad, Rocket, or Upay for transaction processing purposes, those providers operate primarily within Bangladesh and are subject to applicable Bangladeshi financial regulations governing customer data.

13 Changes to This Policy

4c44 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform operations. The effective date displayed at the top of this document and in the hero section of this page indicates the date on which the current version came into force.

Where changes to this Privacy Policy are material — meaning they meaningfully affect how your personal data is collected, used, or shared — 4c44 will endeavour to provide advance notice to registered players via the email address associated with their account, or by displaying a prominent notice on the platform prior to the changes taking effect.

Your continued use of the 4c44 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of, and agreement to, the updated terms. If you do not accept the revised policy, you should cease using the platform and request account closure via the support team. It remains your responsibility to review this Privacy Policy periodically to remain informed of any updates.

14 Contact and Data Requests

All enquiries, data rights requests, and privacy-related concerns should be directed to the 4c44 support team through the following channels:

• Live Chat: Available 24/7 via the 4c44 platform. Average response time is 2–5 minutes. Live chat is the fastest channel for urgent account or data queries.
• Email: [email protected] (plain text — not a clickable link). Email responses are typically provided within 24 hours. For formal data rights requests, please use the subject line "Data Rights Request — [Your Username]" to ensure prompt routing to the relevant team.

4c44 will acknowledge all formal privacy enquiries within 48 hours of receipt and will provide a substantive response within 30 calendar days. In complex cases where additional time is required, we will notify you of the expected timeline. All data rights requests will be handled free of charge unless they are manifestly unfounded, repetitive, or excessive, in which case a reasonable administrative fee may be applied.

4c44 is committed to resolving privacy concerns in a fair and transparent manner. If you are not satisfied with the response to a privacy enquiry, you may escalate your concern in writing to [email protected] with the subject line "Privacy Complaint — Escalation". Escalated complaints will receive a final written response within 14 calendar days of receipt.