Your Privacy Matters at 4c444

4c444 operates as Bangladesh's English-language online casino and sports betting platform, accessible at https://4c444.io. We recognise that players entrust us with sensitive personal and financial information when they create an account and engage with our services. This Privacy Policy sets out in clear, precise terms exactly what information we collect, why we collect it, how it is used, with whom it may be shared, and how long it is retained.

Our approach to data protection is grounded in five core principles: transparency — we tell you clearly what we do with your data; minimality — we collect only what we genuinely need; security — we protect what we hold to the highest technically feasible standard; accountability — we take responsibility for our data practices; and respect — we honour your rights as a data subject at every stage of your relationship with 4c444.

This policy should be read alongside the 4c444 Terms & Conditions and our Responsible Gaming page, both of which contain additional provisions relevant to how your account information is managed.

For the purposes of this Privacy Policy, 4c444 (referred to as "we", "us", or "our") is the data controller responsible for personal data collected from players using the platform at https://4c444.io and all associated sub-domains and interfaces.

As data controller, 4c444 determines the purposes and means of processing your personal data. Where we engage third-party service providers who process data on our behalf — such as payment processors, KYC verification providers, and fraud detection services — those parties act as data processors under binding contractual agreements that require them to handle your data strictly in accordance with our instructions and to implement appropriate technical and organisational security measures.

For all privacy-related enquiries, data access requests, correction requests, or deletion requests, players may contact us at: [email protected] (plain text — not a clickable link).

The following table summarises the categories of personal data that 4c444 may collect and hold in relation to registered players:

We do not collect special categories of sensitive personal data (such as health information, biometric data beyond selfie-based age verification, religious beliefs, or political opinions) except where a player voluntarily discloses health-related information in the context of a responsible gaming self-exclusion or problem gambling support request, in which case such information is handled with heightened confidentiality.

4c444 collects personal data through the following channels and mechanisms:

• Direct Registration: Information you provide when creating your 4c444 account, including name, date of birth, contact details, and preferred payment method.
• KYC Submission: Identity documents, NID scans, and selfie photographs submitted during the account verification process, whether at registration or upon request by our compliance team.
• Payment Transactions: Transaction metadata — including payment method identifiers, transaction reference numbers, timestamps, and amounts in Bangladeshi Taka — generated when you make deposits or withdrawal requests via bKash, Nagad, Rocket, Upay, or bank transfer.
• Platform Interaction: Usage data collected automatically as you navigate and play on the 4c444 platform, including game logs, betting history, session data, and feature engagement analytics.
• Technical Signals: IP address, device fingerprint, browser type, and operating system data collected automatically via standard server logging and our security monitoring systems.
• Support Interactions: Records of your communications with our customer support team via live chat, email, or WhatsApp, including the content of those communications and metadata such as timestamps and response times.
• Third-Party Verification: In limited circumstances, identity verification data may be cross-referenced against third-party KYC databases to confirm the accuracy of information provided during registration. We do not acquire marketing lists or data profiles from commercial data brokers.

4c444 uses the personal data we collect for the following clearly defined purposes only:

• Account Management: Creating, maintaining, and administering your player account, including processing deposits and withdrawals in Bangladeshi Taka (৳) and maintaining your betting history and balance records.
• Identity Verification (KYC): Confirming that you meet the minimum age requirement of 21 years and that the identity information provided during registration is accurate and consistent.
• Payment Processing: Facilitating the secure movement of funds between your mobile financial service account (bKash, Nagad, Rocket, Upay) or bank account and your 4c444 account balance.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, duplicate account creation, bonus abuse, and money laundering. Technical data and usage patterns play a central role in our real-time fraud detection systems.
• Responsible Gaming: Monitoring account activity to identify potential indicators of problem gambling and to administer self-exclusion orders, deposit limits, session time alerts, and cooling-off periods where requested or required by our responsible gaming policy.
• Customer Support: Responding to player enquiries, resolving disputes, investigating complaints, and delivering quality customer service in English, aligned to Bangladesh Standard Time (BST, UTC+6) for peak staffing.
• Platform Improvement: Analysing aggregated and anonymised usage data to understand player behaviour, identify technical issues, improve game performance, and enhance the overall user experience on the 4c444 platform.
• Marketing Communications (with consent): Sending promotional offers, bonus notifications, and platform updates to players who have opted in to marketing communications. You can withdraw this consent at any time via your account settings or by contacting support.
• Legal and Regulatory Compliance: Meeting applicable legal obligations, including anti-money laundering record-keeping requirements, responding to lawful requests from competent authorities, and resolving legal disputes.

4c444 processes personal data on the following legal bases, as appropriate to each processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and 4c444 — including account creation, payment processing, game participation, and customer support — is carried out on the basis that it is required to fulfil our contractual obligations to you as a player.
• Legal Obligation: Processing required to comply with applicable legal obligations — such as KYC age verification, anti-money laundering record-keeping, and responding to lawful regulatory or law enforcement requests — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing carried out for fraud prevention, platform security monitoring, duplicate account detection, and internal analytics is based on 4c444's legitimate interest in operating a secure, fair, and commercially viable platform. We have assessed that these legitimate interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for optional purposes — including marketing communications and non-essential analytics cookies — is based on your freely given, informed, and specific consent. You may withdraw consent at any time without affecting the lawfulness of any processing carried out before withdrawal.

4c444 does not sell, rent, or commercially transfer your personal data to third parties for their own marketing or commercial purposes under any circumstances. We may share personal data with the following categories of third parties strictly as necessary to operate the platform and comply with our legal obligations:

• Payment Processors: Mobile financial service providers including bKash, Nagad, Rocket, and Upay, and banking partners including Dutch-Bangla Bank, BRAC Bank, and City Bank — to the extent necessary to process deposit and withdrawal transactions in Bangladeshi Taka.
• KYC and Identity Verification Providers: Third-party identity verification services that assist with NID document checking, age verification, and sanctions screening as part of our Know Your Customer compliance programme.
• Fraud Prevention and Security Services: Specialist fraud analytics and device fingerprinting services used to detect and prevent fraudulent account activity, bonus abuse, and money laundering.
• Game Content Providers: Live dealer game providers — including Evolution Gaming, Pragmatic Play Live, and Ezugi — receive session-level data (such as player ID and bet amounts) necessary to deliver the game experience. These providers do not receive your identity or contact data beyond what is technically required for game session continuity.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or lawful request from a competent authority, 4c444 may disclose personal data to law enforcement agencies or regulatory bodies. We will notify you of any such disclosure where permitted by law.
• Professional Advisers: Legal counsel, auditors, and accountants who are bound by professional confidentiality obligations, in connection with the management of legal claims, regulatory compliance, or financial auditing.

All third-party processors engaged by 4c444 are required to enter into data processing agreements that mandate appropriate technical and organisational security measures, restrict use of your data to the specified purpose, and prohibit sub-processing without our prior written consent.

4c444 uses the following categories of cookies and similar tracking technologies when you access the platform via a web browser:

• Strictly Necessary Cookies: These cookies are essential for the operation of the 4c444 platform. They maintain your login session, preserve game state between pages, remember your language and currency settings, and ensure the security of your session. These cookies cannot be disabled without rendering the platform non-functional.
• Performance and Analytics Cookies: We use first-party analytics cookies to collect aggregated, anonymised data about how players navigate and interact with the platform — including page view counts, session durations, and feature engagement rates. This data is used solely to improve the platform experience. We do not use third-party analytics platforms that track you across external websites.
• Functional Cookies: These cookies remember your preferences — such as your preferred payment method selection and responsible gaming settings — to provide a more personalised and convenient experience on return visits.

4c444 does not use advertising cookies, retargeting pixels, or any tracking technology that monitors your browsing activity outside of the 4c444 platform domain. You may manage cookie preferences via your browser settings; note that disabling strictly necessary cookies will affect platform functionality.

4c444 implements a multi-layered technical and organisational security framework to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• Encryption in Transit: All data transmitted between your device and 4c444 servers is protected by Transport Layer Security (TLS 1.2 or higher), providing 256-bit encryption. Our platform enforces HTTPS exclusively — unencrypted HTTP connections are automatically redirected.
• Encryption at Rest: Sensitive data fields — including identity document records, payment method identifiers, and KYC documentation — are encrypted at rest using AES-256 encryption within our database infrastructure.
• Password Security: Player passwords are processed through a one-way cryptographic hashing algorithm (bcrypt) with unique per-account salts. 4c444 cannot retrieve your password in plain text; if you forget your password, a reset link is issued to your registered email address or mobile number.
• Access Controls: Internal access to player data is governed by role-based access control (RBAC). Staff members access only the data categories necessary for their specific function. All internal data access is logged and subject to periodic audit review.
• Two-Factor Authentication: 4c444 offers optional SMS-based two-factor authentication (2FA) for player accounts. We strongly recommend enabling 2FA in your account security settings to provide an additional layer of protection against unauthorised access.
• Incident Response: 4c444 maintains a documented data breach response procedure. In the event of a security incident that presents a material risk to player data, affected players will be notified promptly with details of the incident and recommended protective actions.

While 4c444 takes all reasonable and technically feasible steps to protect your personal data, no internet-based platform can guarantee absolute security. Players are encouraged to use strong, unique passwords, enable 2FA, and report any suspected unauthorised account activity to our support team immediately.

4c444 retains personal data for the periods set out below, after which data is securely deleted or irreversibly anonymised:

• Active Account Data: Retained for the full duration of your active relationship with 4c444, from account creation until account closure.
• Financial Transaction Records: Retained for a minimum of 5 years following the date of the transaction or account closure (whichever is later), in compliance with financial record-keeping obligations.
• KYC and Identity Documents: Retained for a minimum of 5 years following account closure. In cases where a legal dispute, regulatory investigation, or anti-money laundering matter is pending, retention may be extended until final resolution of that matter.
• Customer Support Communications: Retained for 3 years from the date of the communication, unless the communication relates to an unresolved dispute or complaint, in which case it is retained until resolution plus 1 year.
• Marketing Preference Records: Opt-in and opt-out records are retained for the duration of the account relationship plus 2 years, to provide an audit trail of consent.
• Dormant Account Data: Accounts with no login activity for 12 consecutive months are classified as dormant. Following the dormancy notification process described in the Terms & Conditions, account data is retained for a further 3 years before deletion, unless a legal obligation requires extended retention.

When the applicable retention period expires, 4c444 permanently deletes personal data from active systems and instructs processors to do the same. Where technical constraints require a delay, data is logically isolated and restricted from active use pending physical deletion.

As a player whose personal data is processed by 4c444, you have the following rights in relation to your personal information:

• Right of Access: You may request a copy of the personal data that 4c444 holds about you. We will provide this in a structured, readable format within 30 days of receiving a valid request.
• Right to Rectification: If personal data held by 4c444 is inaccurate or incomplete, you have the right to request that it be corrected. You can update most contact information directly in your account settings; for identity document corrections, please contact support.
• Right to Erasure: You may request that 4c444 delete your personal data. This right is subject to limitations where retention is required by law (e.g., financial records, AML obligations) or where data is necessary to resolve a pending dispute. We will clearly explain any limitations when responding to an erasure request.
• Right to Restriction of Processing: In certain circumstances — for example, while the accuracy of data is contested — you may request that we restrict processing of your data to storage only, pending resolution.
• Right to Data Portability: Where processing is carried out on the basis of your consent or contractual necessity, you may request a machine-readable export of the personal data you provided to 4c444 directly.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to Object: You may object to processing carried out on the basis of 4c444's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defence of legal claims.

To exercise any of the above rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days. We may ask you to verify your identity before processing any request to protect against unauthorised access to your personal data.

4c444 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes mandatory date-of-birth verification and KYC identity checks specifically designed to prevent access by minors.

If 4c444 becomes aware that personal data has been collected from an individual under the age of 21 — whether through a misrepresentation during registration or any other means — we will immediately suspend the relevant account, void any associated transactions, and permanently delete all personal data associated with that account from our systems.

If you believe a person under the age of 21 has registered an account on 4c444, please contact us immediately at [email protected]. We treat underage account reports as an urgent compliance matter and will act on any credible report within 24 hours.

The 4c444 platform may contain references to third-party service names — including payment providers such as bKash, Nagad, and Rocket, and game studios such as Pragmatic Play, Evolution Gaming, and Spribe — in the context of describing features available on our platform. These references are informational only.

4c444 does not include outbound links to external websites within the platform interface. However, if you independently navigate to any third-party website or service, please be aware that this Privacy Policy does not apply to those external destinations. 4c444 has no control over, and accepts no responsibility for, the privacy practices of any third-party website or service. We encourage you to review the privacy policy of any third-party service before submitting personal information to them.

4c444 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When we make material changes to this policy, we will notify registered players via a prominent notice on the platform and, where we hold a valid email address for your account, by email to that address.

The date on which this Privacy Policy was last updated is displayed at the top of this page and in the table of contents sidebar. Continued use of the 4c444 platform after the effective date of any updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree to any material change, you should contact us to discuss account closure before the change takes effect.

We recommend that all 4c444 players review this Privacy Policy periodically — particularly before making new deposits or engaging with new features on the platform — to stay informed of how your personal data is being handled.

For all privacy-related enquiries — including data access requests, rectification requests, erasure requests, complaints about our data practices, or general questions about this Privacy Policy — please contact the 4c444 support team using the details below. All privacy communications are handled in English.

• Email: [email protected] — use the subject line "Privacy Enquiry" or "Data Rights Request" for fastest routing.
• Live Chat: Available in-platform 24 hours a day, 7 days a week. Peak staffing is aligned to Bangladesh Standard Time (BST, UTC+6).
• WhatsApp: +880 1700 000000 — available during BST business hours for privacy enquiries that require real-time discussion.

We aim to acknowledge all privacy-related requests within 2 business days and to provide a substantive response within 30 calendar days. If the nature of your request requires additional time — for example, a complex data portability export — we will notify you of the extended timeline within the initial 30-day period.

This Privacy Policy was last reviewed and updated in January 2026. If you have any concerns about the accuracy or fairness of any provision in this policy, please contact us before continuing to use the platform.