bd444 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how bd444 ("bd444", "we", "us", or "our") collects, processes, stores, and protects the personal data of individuals ("you", "your", "Player", or "User") who register for an account, visit the bd444 website at https://bd444.im, or otherwise interact with our online casino and sports betting platform.

bd444 is committed to handling your personal data with transparency, integrity, and in accordance with internationally recognised data protection principles. We collect only the data we genuinely need to deliver and improve our services, fulfil our legal obligations, and keep the platform secure for everyone who uses it.

By creating a bd444 account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any aspect of this Policy, you must cease using bd444 and contact us to close your account.

This Policy should be read alongside bd444's Terms & Conditions (available at /terms-conditions) and Responsible Gaming Policy (available at /responsible-gaming), both of which are incorporated by reference.

2 Data Controller

bd444 acts as the data controller in respect of the personal data collected through the platform. As data controller, bd444 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

For all data protection enquiries, requests to exercise your rights, or concerns about how your personal data is handled, you may contact the bd444 data protection team using the contact details provided in Section 15 of this Policy.

3 Personal Data We Collect

bd444 collects the following categories of personal data in connection with your use of the platform:

3.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification
• Date of birth (used to verify that you meet the 21+ age requirement)
• Bangladesh mobile number used for account authentication and two-factor verification
• Email address, where provided during registration
• Username and encrypted password credentials
• Residential address, city, and postcode
• Nationality and country of residence

3.2 Verification & KYC Data

• Copies of government-issued photo identification (National Identity Card, passport, or driving licence)
• Proof of address documents (utility bills, bank statements, or official correspondence dated within three months)
• Proof of payment method ownership (screenshots or confirmations from bKash, Nagad, Rocket, or bank accounts in your name)
• Source of funds documentation where deposits exceed specified thresholds
• Selfie or liveness verification images where requested for identity confirmation

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and payment methods used
• Payment method identifiers (mobile wallet numbers, masked card numbers, bank account references)
• Account balance history and transaction logs
• Bonus and promotional credit records
• Chargeback and dispute records where applicable

3.4 Gaming & Betting Activity Data

• Game session logs including games played, wager amounts, outcomes, and timestamps
• Sports betting selections, stake amounts, odds accepted, and settlement records
• VIP tier status, loyalty points, and reward redemption history
• Responsible gaming tool settings (deposit limits, session timers, self-exclusion status)

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, browser type, and version
• Device identifiers and fingerprint data used for fraud prevention
• Session timestamps, page visit logs, and clickstream data
• Referring URLs and traffic source information

3.6 Communications Data

• Records of live chat, email, and support ticket exchanges with bd444 customer service
• Survey responses and feedback submissions
• Marketing communication preferences and opt-in/opt-out records

4 How We Collect Your Data

bd444 collects personal data through the following channels and methods:

• Directly from you: During account registration, identity verification, deposit and withdrawal submissions, support communications, survey participation, and any other interaction where you voluntarily provide information.
• Automatically: Through cookies, web beacons, tracking pixels, and server-side logging as you navigate and interact with the bd444 platform. See Section 10 for full cookie disclosure.
• From third-party verification providers: Identity and document verification services that bd444 engages to fulfil KYC obligations may return data-match results, risk scores, and document authenticity flags.
• From payment processors: bKash, Nagad, Rocket, Upay, bank partners, Visa, and Mastercard may share transaction confirmation data with bd444 in connection with deposit and withdrawal processing.
• From fraud prevention partners: Device fingerprinting services and fraud intelligence platforms may share risk assessments associated with your device or network profile.
• From marketing and affiliate partners: Where you arrive at bd444 via a tracked affiliate link, the affiliate may share your referral data with bd444 for commission tracking purposes.

5 How We Use Your Personal Data

bd444 uses the personal data it collects for the following purposes:

bd444 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or being required to do so by law.

6 Legal Basis for Processing

bd444 processes your personal data on the following legal grounds depending on the specific purpose of processing:

• Contractual necessity: Processing required to create and manage your account, process transactions, and deliver the services you have requested under the bd444 Terms & Conditions.
• Legal obligation: Processing required to comply with applicable laws, including KYC verification, AML screening, fraud prevention obligations, and regulatory reporting requirements.
• Legitimate interests: Processing carried out to pursue bd444's legitimate business interests — such as fraud prevention, platform security, responsible gaming monitoring, and business analytics — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — in particular, the sending of promotional communications and personalised marketing. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

7 Data Sharing & Third Parties

bd444 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

7.1 Service Providers & Data Processors

bd444 engages carefully vetted third-party service providers who process personal data on our behalf under strict data processing agreements. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard — for transaction processing
• Identity verification providers: For KYC document authentication and liveness checks
• Fraud prevention and device intelligence providers: For risk scoring and suspicious activity detection
• Game studios and content providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi — who may receive anonymised session data required for game delivery
• Cloud infrastructure and hosting providers: For secure data storage and platform operation
• Customer support platform providers: For live chat and ticketing system operation
• Email and SMS communication providers: For transactional and (where consented) promotional communications

7.2 Legal & Regulatory Disclosure

bd444 may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other government authorities where required or permitted to do so by applicable law — including in connection with AML investigations, fraud reporting, or court orders. bd444 will notify you of such disclosures where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of bd444's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material change to the data controller's identity in advance.

8 Data Retention

bd444 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable law or legitimate business need. The following retention guidelines apply:

Upon expiry of the applicable retention period, bd444 will securely delete or irreversibly anonymise your personal data so that it can no longer be associated with you.

9 Data Security

bd444 implements a layered security architecture designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our technical and organisational security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and bd444 servers
• AES-256 encryption for sensitive data fields stored at rest in our databases
• Cryptographic password hashing using industry-standard algorithms — bd444 never stores plaintext passwords
• Two-factor authentication (2FA) available to all account holders for login security
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis, with full audit logging
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Web application firewall (WAF) and DDoS mitigation systems protecting the platform perimeter
• 24/7 security monitoring with automated alerting for anomalous access patterns or data exfiltration indicators

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bd444 will notify affected players without undue delay, providing details of the nature of the breach, the data affected, likely consequences, and the measures taken or proposed to address it.

10 Cookies & Tracking Technologies

bd444 uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage objects) to operate the platform, enhance your user experience, and gather analytics data. Cookies are small text files placed on your device by your browser when you visit bd444.

10.1 Types of Cookies Used

10.2 Managing Cookies

Strictly necessary cookies cannot be disabled as they are essential for the platform to function. You may manage or disable functional, analytics, and marketing cookies through your browser settings. Note that disabling certain cookies may impair platform functionality or affect your gaming experience. Most modern browsers provide cookie management tools under their Privacy or Security settings.

11 Your Data Protection Rights

Subject to applicable law and certain limited exceptions, you hold the following rights in respect of your personal data held by bd444:

• Right of Access: You may request a copy of the personal data bd444 holds about you (a "Subject Access Request"). bd444 will respond within 30 days of receiving a valid request.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Many details can be updated directly within your account dashboard; for others, contact support.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bd444's legal retention obligations (see Section 8).
• Right to Restriction of Processing: You may request that bd444 restricts processing of your data in certain circumstances, such as while a dispute about data accuracy is being resolved.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service provider, where processing is based on consent or contractual necessity.
• Right to Object: You may object at any time to processing based on bd444's legitimate interests, including profiling. You also have an absolute right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing. Marketing opt-outs can be managed via account settings or by contacting support.

To exercise any of the rights above, contact the bd444 data protection team at the email address provided in Section 15. bd444 may request proof of identity before processing a rights request to ensure we do not disclose or amend data in response to a fraudulent request. There is no fee for making a rights request under ordinary circumstances.

12 Minors & Age Restriction

bd444 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes date-of-birth verification and KYC document checks designed to prevent access by minors. If bd444 discovers that an account has been registered by a person under the age of 21, the account will be closed immediately, all associated funds will be handled in accordance with our Terms & Conditions, and any personal data collected will be deleted without undue delay.

If you are a parent or guardian and believe that a minor under your care has created a bd444 account, please contact our support team immediately at the details provided in Section 15. We take underage gambling extremely seriously and will act on all such reports promptly.

13 International Data Transfers

As a platform serving players primarily in Bangladesh, bd444 stores the majority of player data on servers located in Asia-Pacific data centres. However, certain service providers engaged by bd444 — including game studios, fraud prevention vendors, and cloud infrastructure partners — may process data in other jurisdictions.

Where personal data is transferred outside of your country of residence, bd444 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that provided under this Policy. These safeguards may include standard contractual clauses, binding corporate rules, or reliance on adequacy decisions where applicable.

For more information about the specific safeguards applicable to any particular international transfer, please contact the bd444 data protection team.

14 Changes to This Privacy Policy

bd444 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. Material changes will be communicated to registered players via their registered mobile number or email address, or via a prominent notice on the bd444 platform, no less than 14 days before the amended Policy takes effect.

The "Last updated" date at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically so that you remain informed about how bd444 protects your data. Your continued use of the platform following the effective date of any revised Policy constitutes your acceptance of the changes.

15 Contact & Data Protection Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which bd444 processes your personal data, please contact our data protection team through any of the following channels:

• Email: [email protected] — please include "Privacy Enquiry" or "Data Rights Request" in the subject line for prompt routing
• Live Chat: Available 24/7 directly within the bd444 platform for general privacy questions
• Written correspondence: Send written requests marked "Data Protection" to the bd444 support team via the platform messaging system

bd444 commits to acknowledging all data protection enquiries within 48 hours and providing a substantive response within 30 calendar days. Where a request is particularly complex or where a large volume of requests have been received simultaneously, bd444 may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it.