Privacy Policy — How cd44c Protects Your Data

cd44c collects personal data through a number of interactions with the platform, including the account registration process, payment transactions, customer support communications, and your ongoing use of betting and gaming products. The categories of personal data we collect are set out below.

1.1 Identity and Contact Data

When you register an account, we collect your full legal name, date of birth, gender, residential address, email address (where provided), and the mobile telephone number linked to your preferred payment method. This data is used primarily for identity verification, age verification, and communication related to your account.

1.2 Financial and Payment Data

To process deposits and withdrawals, we collect payment method identifiers including the mobile wallet number associated with your bKash, Nagad, Rocket, or Upay account, as well as bank account details where bank transfer is the selected payment method. We do not store full payment credentials on our own servers; all sensitive payment data is tokenised and handled by our accredited payment processing partners.

1.3 Transaction and Activity Data

We maintain a full record of all financial transactions and betting activity associated with your account. This includes deposit and withdrawal history, bet placement records (sport, market, odds, stake, outcome), game session logs for casino and slots products, and bonus redemption history. This data is essential for account management, dispute resolution, and regulatory compliance.

1.4 Technical and Device Data

When you access the cd44c platform via a web browser or mobile device, we automatically collect certain technical information, including your IP address, device type, operating system, browser version, screen resolution, and referring URL. This data is used to maintain platform security, detect suspicious access patterns, and improve the technical performance of the platform.

1.5 Communications Data

If you contact the cd44c support team via live chat, email, or any other channel, we retain records of those communications including the content of messages, timestamps, and the support agent's responses. These records are used for quality assurance, dispute resolution, and staff training purposes.

cd44c processes your personal data only for purposes that are lawful, specific, and proportionate. We do not process personal data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we use your data are as follows:

• Account Administration: Creating and maintaining your player account, processing login authentication, and managing account settings and preferences.
• Payment Processing: Crediting deposits to your account balance, processing withdrawal requests to your registered payment method, and reconciling transaction records.
• Identity and Age Verification: Confirming that you are who you claim to be and that you meet the minimum age requirement of 18 years before withdrawals are approved.
• Fraud Prevention and Security: Detecting and investigating suspicious login activity, flagging unusual betting patterns, and protecting the platform from abuse, collusion, and money laundering.
• Responsible Gaming: Monitoring account activity for indicators of problem gambling behaviour, enforcing self-exclusion restrictions, and administering deposit limits and time-out periods.
• Customer Support: Responding to your enquiries, resolving disputes, and providing technical assistance related to your account or transactions.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the performance, reliability, and user experience of the cd44c platform.
• Legal Compliance: Meeting obligations imposed by applicable law, including record-keeping requirements, responding to lawful requests from regulatory authorities, and complying with anti-money laundering (AML) obligations.

2.1 Marketing Communications

cd44c may use your contact details to send you promotional communications about platform offers, new features, and seasonal events such as BPL cricket season bonuses or Eid special promotions, provided that you have consented to receive such communications. You may withdraw your marketing consent at any time by contacting the support team. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out before the withdrawal.

In the course of operating the cd44c platform, we engage a limited number of third-party service providers who may process your personal data on our behalf. Each such provider is bound by a data processing agreement that restricts their use of your data to the specific purpose for which it was shared.

3.1 Payment Processors

Your mobile wallet number and payment transaction data are shared with the payment processing partners required to execute your deposit or withdrawal — for example, the bKash or Nagad API infrastructure. These processors receive only the minimum data necessary to complete the transaction and are not authorised to use that data for any other purpose.

3.2 Identity Verification Services

To fulfil our age and identity verification obligations, we may share your name, date of birth, and identity document details with accredited third-party verification service providers. These providers return a verification result to cd44c and do not retain your data beyond the period required to complete the verification check.

3.3 Game Content Providers

The cd44c platform integrates live casino, slots, and other gaming content from established providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive session tokens and game result data as part of the technical integration. They do not receive your personal identity or payment data.

3.4 Legal and Regulatory Disclosure

cd44c may disclose your personal data to law enforcement agencies, regulatory bodies, or other authorities where required to do so by applicable law or in response to a lawful legal process. We will only disclose the minimum data necessary to satisfy the legal obligation and will notify you of any such disclosure where we are legally permitted to do so.

cd44c uses cookies and similar tracking technologies to operate the platform, maintain your login session, and analyse platform performance. A cookie is a small text file placed on your device by the platform when you visit. The following categories of cookies are used on cd44c:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, remember your account preferences, and ensure that security mechanisms such as CSRF protection operate correctly. These cookies cannot be disabled without breaking core platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised information about how players use the platform — for example, which pages are visited most frequently and whether any technical errors are encountered. This data helps us improve the reliability and usability of cd44c. No personally identifiable data is collected by these cookies.
• Functional Cookies: These cookies remember choices you have made on the platform, such as preferred language or display settings, to provide a more personalised experience across sessions.

4.1 Managing Cookies

You may control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies, or to configure alerts when cookies are set. However, disabling strictly necessary cookies will impair your ability to use the cd44c platform, including logging in and placing bets. Instructions for managing cookies are available in your browser's help documentation. Continued use of the platform after reviewing this Policy constitutes consent to our use of cookies as described above.

cd44c retains your personal data for as long as your account remains active and for a defined period after account closure, in order to satisfy legal, regulatory, and operational obligations. The general retention periods that apply to each category of data are as follows:

On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual. Where anonymised data is retained for aggregated analytics purposes, it is no longer treated as personal data and falls outside the scope of this Policy.

5.1 Storage Location

Your personal data is stored on encrypted servers. cd44c takes reasonable steps to ensure that any data processed by third-party providers outside Bangladesh is subject to equivalent levels of protection to those described in this Policy. Where data is transferred internationally, appropriate safeguards — including contractual data protection clauses — are in place.

As a player on the cd44c platform, you hold the following rights with respect to your personal data:

• Right of Access: You have the right to request a copy of the personal data cd44c holds about you. We will provide this in a structured, readable format.
• Right of Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing is otherwise unlawful. This right is subject to legal retention obligations — we cannot delete data that we are required by law to retain.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances, for example while a dispute regarding the accuracy of the data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contractual relationship, you have the right to receive your personal data in a machine-readable format and to request that it be transmitted directly to another data controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, though such objections are subject to a balancing assessment.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

6.1 How to Exercise Your Rights

To exercise any of the rights listed above, please contact the cd44c support team via live chat on the platform. Please provide sufficient information to allow us to identify your account and locate the relevant data. We may request additional verification before processing a rights request to ensure that data is not disclosed to or altered by an unauthorised party.

cd44c implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your device and the cd44c platform is encrypted using TLS 1.3, the current industry standard for secure web communications.
• Encryption at Rest: Personal data stored on cd44c servers is encrypted using AES-256 encryption. Encryption keys are managed separately from the encrypted data itself.
• Access Controls: Access to personal data within cd44c's internal systems is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data receive data protection training.
• Two-Factor Authentication: Player accounts are protected by optional two-factor authentication via SMS OTP. Internal administrative access to systems holding personal data requires mandatory two-factor authentication.
• Intrusion Detection: cd44c operates continuous network monitoring and intrusion detection systems to identify and respond to potential security incidents in real time.
• Regular Security Audits: The platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.

7.1 Data Breach Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, cd44c will take immediate steps to contain the breach, assess its scope, and notify affected individuals without undue delay. We will provide clear information about what data was involved, the likely consequences of the breach, and the steps we have taken or intend to take to address it.

cd44c reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. The "Last Updated" date at the top of this document will be revised whenever a change is made.

Where a change is material — meaning it significantly affects how your personal data is processed or the rights available to you — cd44c will provide reasonable advance notice via a platform notification or to the contact details registered on your account. Your continued use of the platform following publication of an updated Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed about how cd44c is protecting your information. If at any time you have questions about this Policy or about your data, please contact our support team who are available 24 hours a day, 7 days a week, in English.

8.1 Contact the Data Team

All privacy-related enquiries, rights requests, and data breach reports should be directed to the cd44c support team. Our contact email for data matters is: [email protected] — please note this address is displayed for reference only and is not a clickable link. You may also reach us via the live chat function available on the platform at any time.