Your Privacy Matters to 44bt

1. Who We Are

44bt is an online betting and casino platform operating at 44bt.io, serving adult players aged 21 and above in Bangladesh. References in this Privacy Policy to "44bt", "we", "us", or "our" refer to the 44bt platform and its operating entity. References to "you", "your", or "the player" refer to any individual who accesses, registers on, or interacts with the 44bt platform in any capacity.

44bt acts as the data controller for all personal data collected through the platform. As data controller, 44bt determines the purposes and means by which your personal data is processed. Where 44bt engages third-party service providers to process data on its behalf, those providers act as data processors under written agreements that bind them to confidentiality and data protection obligations consistent with this policy.

For all privacy-related enquiries, requests, and complaints, players may contact the 44bt data privacy team at [email protected] (plain text — not a clickable link). All correspondence should include your registered account username and a clear description of your request.

2. Data We Collect

44bt collects personal data through several channels: directly from you during registration and platform use, automatically through your device and browser, and in limited cases from third-party verification services. The categories of data we collect are as follows:

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used for mandatory age verification — 44bt is strictly 21+ only).
• Residential address in Bangladesh, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar).
• Mobile phone number registered to a Bangladeshi network (Grameenphone, Robi, Banglalink, Teletalk, or Airtel Bangladesh).
• Email address (where provided as an optional contact channel).
• Username and encrypted password hash.

2.2 KYC Verification Data

• Copies of government-issued photo identification (National ID Card, passport, or driving licence).
• Proof of address documents (utility bill, bank statement, or similar official document issued within 3 months).
• Selfie or live photo (where required for enhanced identity verification).
• Results of automated identity verification checks performed by our KYC service provider.

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts in BDT (৳), timestamps, and payment method references.
• Mobile financial service account identifiers associated with bKash, Nagad, Rocket, or Upay transactions.
• Card scheme references (Visa or Mastercard) where card payments are used — 44bt does not store full card numbers; only masked references are retained.
• Bonus and promotional credit history associated with your account.

2.4 Betting & Gaming Activity Data

• Complete bet and wager history, including markets, stakes, odds, outcomes, and timestamps (Bangladesh Standard Time, UTC+6).
• Casino game session logs, including game titles, round outcomes, and session durations.
• Crash game activity records (e.g., Aviator, Dreams of Macao).
• Responsible gaming tool settings you have configured, including deposit limits, loss limits, session reminders, and self-exclusion records.

2.5 Technical & Device Data

• IP address and approximate geolocation derived from IP lookup.
• Device type, operating system, and browser type and version.
• Session start and end times, pages visited, and click paths within the 44bt platform.
• Cookie identifiers and similar tracking tokens (see Section 6 for full details).

2.6 Communications Data

• Records of live chat sessions with 44bt support staff, including chat transcripts.
• Email correspondence sent to or received from [email protected].
• Promotional communication preferences (opt-in / opt-out records for SMS, email, and in-platform notifications).

3. How We Use Your Data

44bt uses your personal data for the following specific purposes. We do not use your data for any purpose that is incompatible with the original purpose for which it was collected without first seeking your consent or establishing a new legal basis as described in Section 4.

Purpose	Data Categories Used	Legal Basis
Account registration and identity verification (KYC)	Registration data, KYC data	Contract performance; Legal obligation
Processing deposits and withdrawals	Financial data, identity data	Contract performance
Providing betting and casino services	Gaming activity data, technical data	Contract performance
Fraud detection and prevention	All categories	Legitimate interest; Legal obligation
Responsible gaming monitoring and intervention	Gaming activity, financial data	Legal obligation; Legitimate interest
Customer support and dispute resolution	Communications data, gaming data	Contract performance; Legitimate interest
Platform analytics and performance improvement	Technical data, gaming activity data	Legitimate interest
Sending promotional communications	Registration data, communications preferences	Consent
Compliance with legal and regulatory obligations	All categories as required	Legal obligation

4. Legal Basis for Processing

44bt processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contract Performance: Processing is necessary to enter into and perform the contract between you and 44bt — specifically, to operate your account, process your transactions, and provide the betting and gaming services you have signed up to use.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, age verification requirements, and financial crime reporting duties.
• Legitimate Interests: Processing is necessary for 44bt's legitimate interests in operating a secure, fair, and commercially viable platform, provided those interests are not overridden by your data protection rights. This includes fraud prevention, platform security, and analytics.
• Consent: Where we rely on your consent (e.g., for sending promotional communications by SMS or email), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent for marketing communications, contact [email protected] or adjust your account notification settings.

5. Data Sharing & Third Parties

44bt does not sell your personal data. We share your personal data with third parties only in the limited circumstances described below, and only with parties who are contractually bound to process your data in accordance with 44bt's instructions and applicable data protection standards.

• Payment Processors: bKash, Nagad, Rocket, Upay, and card scheme processors (Visa, Mastercard) receive the minimum transaction data necessary to process your deposits and withdrawals. Each provider operates under its own privacy policy and data security standards.
• KYC & Identity Verification Providers: 44bt uses accredited third-party identity verification services to conduct age and identity checks. These providers receive your identity documents and return a verification result. They are contractually prohibited from using your data for any other purpose.
• Game Software Providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate the game software and may receive session data (e.g., player ID, bet amounts, game outcomes) as required to deliver and certify the game results. These providers operate under strict data processing agreements.
• Technology & Infrastructure Providers: 44bt uses cloud hosting, database, and cybersecurity service providers to operate the platform. These providers act as data processors under written agreements and do not have independent access to your personal data for their own purposes.
• Law Enforcement & Regulatory Authorities: 44bt will disclose personal data to law enforcement, financial intelligence units, or other competent authorities where we are legally required to do so, or where disclosure is necessary to prevent or detect serious crime including fraud, money laundering, or match-fixing.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of the 44bt business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy implications in advance.

6. Cookies & Tracking Technologies

44bt uses cookies and similar technologies (including local storage tokens and session identifiers) to operate the platform, maintain security, and understand how players use the site. The following table summarises the types of cookies used:

Cookie Type	Purpose	Duration	Can Be Disabled?
Essential / Session	Maintains your login session, CSRF protection, and platform security. Required for the platform to function.	Session (deleted on browser close)	No — essential for platform operation
Preference	Remembers your language, display, and notification preferences so you do not need to reconfigure them on each visit.	Up to 12 months	Yes — disabling may affect your experience
Analytics	Collects anonymised data about pages visited, session duration, and feature usage to help 44bt improve the platform.	Up to 24 months	Yes — via account settings or browser controls
Fraud Prevention	Device fingerprinting tokens used to detect duplicate accounts, bot activity, and fraudulent access attempts.	Up to 12 months	No — required for platform security

44bt does not use third-party advertising cookies or cross-site tracking pixels. You can manage non-essential cookies through your browser settings at any time. Please note that disabling essential or fraud prevention cookies will impair platform functionality and may prevent you from logging in or placing bets.

7. Data Retention

44bt retains your personal data for the periods set out below. After the applicable retention period expires, data is securely deleted or anonymised so that it can no longer be attributed to you.

• Active Account Data: Retained for the duration of your account relationship with 44bt, plus a minimum of 5 years following account closure, to meet anti-money laundering record-keeping obligations.
• KYC & Identity Documents: Retained for a minimum of 5 years from the date of verification, or from the date of account closure, whichever is later, in line with applicable AML requirements.
• Transaction Records: Retained for a minimum of 5 years from the transaction date, as required for financial record-keeping and regulatory compliance.
• Betting & Game Logs: Retained for a minimum of 90 days for dispute resolution purposes, and up to 5 years for fraud investigation and regulatory reporting purposes.
• Support Communications: Live chat transcripts and email correspondence are retained for 2 years from the date of the conversation, after which they are securely deleted.
• Marketing Consent Records: Records of your consent to (or withdrawal from) marketing communications are retained for the lifetime of your account plus 1 year, to demonstrate compliance with consent requirements.
• Technical Logs: Server access logs and IP address records are retained for up to 12 months and then deleted unless required for an active fraud or security investigation.

In all cases, 44bt applies the principle of storage limitation: data is not retained for longer than necessary, and retention periods are reviewed annually. Where a legal obligation requires retention beyond the default period stated above, data will be held only for the period required by that obligation and then deleted promptly.

8. Security Measures

44bt takes the security of your personal data seriously and implements a layered set of technical and organisational controls to protect it against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• Encryption in Transit: All communication between your device and the 44bt platform is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock icon in your browser's address bar confirms that your connection is secure.
• Encryption at Rest: Sensitive personal data fields (including identity document data and payment references) are stored encrypted in the 44bt database using industry-standard encryption algorithms.
• Access Controls: Access to personal data within 44bt is restricted to staff members who require it to perform their specific job function. All internal access is logged and subject to regular audit.
• Two-Factor Authentication: 44bt supports and actively encourages players to enable two-factor authentication (2FA) on their accounts, adding an SMS verification layer to the login process.
• Penetration Testing: 44bt's platform undergoes regular security testing by independent cybersecurity professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a personal data breach, 44bt has a documented incident response procedure. Affected players will be notified promptly where the breach is likely to result in a high risk to their rights and freedoms, and authorities will be notified as required by applicable law.

While 44bt implements robust security measures, no internet-based platform can guarantee absolute security. Players are responsible for maintaining the confidentiality of their own account credentials and should report any suspected unauthorised account access to [email protected] immediately.

9. Your Rights

As a player whose personal data is processed by 44bt, you hold the following rights in relation to that data. To exercise any of these rights, contact [email protected] with your account username and a clear description of your request. 44bt will respond within 30 days.

• Right of Access: You have the right to request a copy of the personal data that 44bt holds about you, together with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data held by 44bt is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure: You may request that 44bt delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to 44bt's legal obligation to retain certain data for regulatory compliance purposes as set out in Section 7.
• Right to Restriction: You may request that 44bt restrict the processing of your data in certain circumstances — for example, while a rectification request is being verified, or where you have objected to processing and 44bt is assessing the grounds for that objection.
• Right to Data Portability: Where 44bt processes your data by automated means on the basis of contract or consent, you may request that we provide you with a copy of that data in a structured, commonly used, machine-readable format (e.g., CSV or JSON) so that you can transfer it to another service provider.
• Right to Object: You may object at any time to processing of your personal data carried out on the basis of 44bt's legitimate interests. 44bt will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where 44bt relies on your consent as the legal basis for any processing activity (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

10. Children & Minors

The 44bt platform is strictly intended for adults aged 21 and above. 44bt does not knowingly collect or process personal data belonging to any person under the age of 21.

All 44bt accounts are subject to mandatory age verification (KYC) before a player may make a deposit or place any bet. Where 44bt discovers or has reasonable grounds to suspect that personal data belonging to a minor has been collected — whether through a false registration or any other means — the following actions will be taken immediately:

• The account in question will be suspended pending investigation.
• All personal data associated with the account will be reviewed and, once the investigation is complete, permanently deleted unless retention is required for legal reporting purposes.
• Any funds deposited by an underage player will be returned to the originating payment method after investigation.
• The incident will be reported to relevant authorities as required by applicable child protection legislation.

Parents and guardians who believe that a minor has registered or used the 44bt platform should contact [email protected] immediately. 44bt will investigate and act on all such reports promptly.

11. Changes to This Policy

44bt reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made, we will notify registered players by email or via an in-platform notification at least 7 days before the updated policy takes effect.

The "Last Reviewed" date at the top of this policy and in the version footer below indicates when the policy was most recently updated. We encourage players to review the Privacy Policy periodically. Continued use of the 44bt platform following the effective date of any update constitutes acceptance of the revised policy.

Where changes to the Privacy Policy require your explicit consent (for example, a new processing purpose that relies on consent as its legal basis), 44bt will seek that consent separately before the new processing begins. You will not be opted in to new consent-based processing automatically.

12. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 44bt handles your personal data, please contact the 44bt data privacy team using the details below. We are committed to resolving all privacy enquiries fairly and promptly.

• Email: [email protected] (plain text — not a clickable link). Please include your account username and the subject line "Privacy Enquiry" to ensure your message reaches the correct team.
• Live Chat: 24/7 live chat is available on the 44bt platform. For privacy matters, please request to speak with the data privacy team when connected.
• Response Time: 44bt aims to acknowledge all privacy-related contacts within 2 business days (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 30 calendar days of receipt.

If you are not satisfied with 44bt's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority or competent regulatory body in your jurisdiction. 44bt will cooperate fully with any such authority in the investigation of a complaint.