ct444 Privacy Policy — How We Protect Your Data

1. Information We Collect

ct444 collects personal information from players in Bangladesh in order to operate the platform safely, verify player identities, process financial transactions, comply with applicable regulations, and deliver a high-quality gaming experience. The categories of personal data we collect are described in detail below.

1.1 Registration Data

When you create a ct444 account, we collect the following information:

• Full legal name — required for KYC identity verification and payment processing
• Date of birth — required to confirm that you are 18 years of age or older
• Email address — used for account communications, security alerts, and support
• Mobile phone number — used for two-factor authentication and account recovery
• Residential address — required for KYC and responsible gaming compliance
• Username and password — used to secure and authenticate access to your account

1.2 Identity Verification (KYC) Documents

To comply with anti-money laundering (AML) requirements and to verify that players are aged 18 or above, ct444 may request one or more of the following documents:

• Bangladesh National Identity Card (NID)
• Valid passport (any nationality accepted by ct444)
• Bangladesh driving licence
• Recent utility bill or bank statement (for proof of address)
• Proof of payment method ownership (e.g., screenshot of bKash, Nagad, or Rocket account registered in your name)

KYC documents are processed securely and stored in encrypted form. They are accessed only by authorised compliance personnel and are not shared with any third party except where required by law.

1.3 Financial Data

When you make a deposit or withdrawal at ct444, we collect transaction-related data including payment method type (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer), transaction amounts in Bangladeshi Taka (৳), transaction timestamps, and the mobile number or account identifier associated with your payment method. ct444 does not store full card numbers or CVV codes — card payment processing is handled by PCI-DSS compliant payment processors.

1.4 Technical & Usage Data

When you visit and use the ct444 platform, our servers automatically record certain technical data including:

• IP address and approximate geographic location (country/city level)
• Device type, operating system, and browser version
• Pages visited, features used, and time spent on the platform
• Game history, bet amounts, and session timestamps
• Referral source (how you arrived at ct444.app)

This technical data is used for platform security, fraud prevention, responsible gaming monitoring, and anonymous aggregate analytics to improve the ct444 experience.

1.5 Communication Data

If you contact the ct444 support team via email or through a support ticket, we retain a record of that communication, including your name, email address, the content of your message, and our response. These records are stored for quality assurance purposes and to maintain a complete history of any disputes or issues you have raised with ct444.

2. How We Use Your Data

ct444 uses the personal data we collect for the following specific and legitimate purposes. We do not use your data for any purpose that is incompatible with what is described in this Privacy Policy.

Purpose	Data Used	Legal Basis
Account creation and management	Registration data, username, password	Contractual necessity
Identity verification (KYC / AML)	KYC documents, date of birth, address	Legal obligation
Processing deposits and withdrawals	Financial data, payment method details	Contractual necessity
Fraud prevention and platform security	IP address, device data, game history	Legitimate interest
Responsible gaming monitoring	Betting patterns, session data, deposit history	Legal obligation / Legitimate interest
Customer support	Communication data, account data	Contractual necessity
Platform analytics and improvement	Anonymised usage data, device data	Legitimate interest
Sending transactional emails and alerts	Email address, account data	Contractual necessity
Promotional communications (with consent)	Email address, preferences	Consent (opt-in only)

2.1 Promotional Communications

ct444 may send you promotional emails about bonuses, new games, seasonal offers (such as Eid promotions or BPL cricket betting specials), and platform updates, but only if you have opted in to receive such communications. You may withdraw your consent and unsubscribe from promotional emails at any time by clicking the unsubscribe link in any promotional email or by contacting [email protected]. Unsubscribing from promotional emails does not affect the delivery of transactional or security-related account communications.

2.2 Automated Decision-Making

ct444 uses automated systems to detect unusual account activity, flag potentially fraudulent transactions, and identify patterns consistent with problem gambling behaviour. In certain cases, these automated systems may result in a temporary account restriction or a request for additional verification. Where an automated decision has a significant impact on your account, you have the right to request a manual review by a ct444 compliance team member. Please contact [email protected] to request a review.

3. Data Sharing & Disclosure

ct444 does not sell, rent, or trade your personal information to third parties. Personal data is shared only in the limited circumstances described below, and always with appropriate safeguards in place.

3.1 Payment Processing Partners

To process your deposits and withdrawals, ct444 shares the minimum necessary financial data with our payment processing partners, including mobile money providers (bKash, Nagad, Rocket, Upay, SureCash), card networks (Visa, Mastercard), and Bangladeshi banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank). These partners operate under their own privacy policies and are bound by contractual data processing agreements with ct444.

3.2 Identity Verification Providers

ct444 may use third-party KYC and identity verification service providers to assist in validating player documents. Any data shared with these providers is used exclusively for verification purposes and is governed by data processing agreements that prohibit secondary use.

3.3 Technology and Infrastructure Providers

ct444 uses third-party cloud hosting, database, and analytics infrastructure to operate the platform. These providers may process personal data on ct444's behalf as data processors. ct444 ensures that all such providers maintain appropriate technical and organisational security measures and are contractually bound to process data only in accordance with ct444's instructions.

3.4 Game Providers

When you play a game provided by a third-party game studio (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, or Spribe), limited technical data (such as a session token and your account identifier) may be shared with that provider to facilitate gameplay. Game providers do not receive your full name, national ID, or payment details.

3.5 Legal and Regulatory Disclosure

ct444 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities if required to do so by applicable law, court order, or legal process. ct444 will make reasonable efforts to notify you of such a disclosure where permitted by law.

4. Cookies & Tracking Technologies

ct444 uses cookies and similar tracking technologies on the ct444.app website. This section explains what types of cookies we use, why we use them, and how you can manage them.

4.1 What Are Cookies?

Cookies are small text files that are placed on your device by a website when you visit it. They allow the website to remember information about your visit, such as your login session, preferred language, and display settings. Cookies do not contain executable code and cannot access other files on your device.

4.2 Types of Cookies Used by ct444

Cookie Type	Purpose	Duration
Strictly Necessary	Maintain your login session, prevent CSRF attacks, enable secure payment flows	Session / Up to 24 hours
Functional	Remember your display preferences, language setting, and last-visited game category	Up to 30 days
Analytics	Anonymous aggregate data on page views, feature usage, and session duration used to improve ct444	Up to 12 months
Fraud Prevention	Device fingerprinting signals used to detect multiple accounts, bot activity, and suspicious login patterns	Up to 12 months

4.3 Third-Party Cookies

ct444 does not deploy third-party advertising cookies, social media tracking pixels, or cross-site retargeting technologies on ct444.app. The analytics cookies used by ct444 are configured in privacy-preserving mode with IP anonymisation enabled. ct444 does not participate in any cross-site advertising networks.

4.4 Managing Cookies

You can manage, restrict, or delete cookies at any time through your browser settings. Please be aware that disabling strictly necessary cookies will prevent you from logging into your ct444 account and using core platform features. Most modern browsers allow you to configure cookie preferences on a per-site basis — consult your browser's help documentation for guidance specific to your browser version.

5. Data Security & Storage

ct444 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure.

5.1 Encryption

All data transmitted between your device and ct444.app is encrypted using TLS 1.3 (Transport Layer Security). Personal data stored in ct444's databases is encrypted at rest using AES-256 encryption. KYC documents are stored in a separately secured, access-controlled document vault with its own encryption layer.

5.2 Access Controls

Access to personal data within ct444's systems is restricted on a strict need-to-know basis. All staff with access to personal data undergo background checks and are trained in data protection best practices. Administrative access to player data is logged and audited regularly. Multi-factor authentication is required for all internal system access.

5.3 Incident Response

In the event of a personal data breach that poses a risk to player rights or freedoms, ct444 will notify affected players via the email address on their account as soon as reasonably practicable. Our security team operates 24/7 to monitor for and respond to potential security incidents. ct444 maintains a formal incident response plan that is reviewed and tested regularly.

5.4 Data Storage Location

ct444 stores player data on servers located in secure data centres. While ct444 operates primarily in the Bangladesh market, some data processing may occur in other countries where our technology providers maintain infrastructure. In all cases, ct444 ensures that equivalent data protection standards apply, regardless of where the data is physically stored.

6. Your Privacy Rights

As a ct444 player, you have a number of rights in relation to your personal data. ct444 is committed to honouring these rights promptly and without unnecessary friction. To exercise any of the rights described below, please contact [email protected] with the subject line "Privacy Request — [Your Right]".

6.1 Right of Access

You have the right to request a copy of all personal data that ct444 holds about you. ct444 will provide this information in a structured, commonly used, machine-readable format within 30 days of receiving a valid access request. There is no charge for a first access request within any 12-month period.

6.2 Right to Rectification

If any personal data held by ct444 about you is inaccurate or incomplete, you have the right to request that it be corrected. Please note that changes to your registered name or date of birth may require additional KYC documentation to verify the amendment.

6.3 Right to Erasure

You may request the deletion of your personal data from ct444's systems. However, this right is subject to certain limitations — ct444 is required to retain certain data (such as financial transaction records and KYC documents) for legally mandated periods even after account closure. Data that ct444 is legally required to retain will not be deleted in response to an erasure request, but will be restricted from further processing beyond compliance purposes.

6.4 Right to Restrict Processing

In certain circumstances — for example, if you contest the accuracy of your personal data or have objected to ct444's processing of it — you may request that ct444 restrict the processing of your data while the matter is under review. During a restriction period, ct444 will store your data but will not actively process it beyond what is strictly necessary.

6.5 Right to Data Portability

You have the right to receive your personal data in a portable, structured format (such as JSON or CSV) so that you can transfer it to another service provider if you choose. This right applies to data that you have actively provided to ct444 and that is processed on the basis of your consent or a contract with you.

6.6 Right to Object

You have the right to object to ct444's processing of your personal data where that processing is based on ct444's legitimate interests. If you object, ct444 will cease processing the data unless we can demonstrate compelling legitimate grounds that override your interests. You may also object at any time to the processing of your data for direct marketing purposes — see Section 2.1 for unsubscribe instructions.

6.7 Right to Withdraw Consent

Where ct444 processes your personal data on the basis of your consent (for example, for promotional email communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

7. Data Retention

ct444 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The table below outlines the retention periods that apply to the main categories of personal data held by ct444.

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	AML compliance, dispute resolution
KYC verification documents	Duration of account + 5 years after closure	Legal obligation (AML regulations)
Financial transaction records	7 years from transaction date	Financial record-keeping requirements
Game history and betting records	3 years from the date of each event	Dispute resolution, responsible gaming audit
Customer support communications	3 years from last communication	Quality assurance, dispute resolution
Analytics data (anonymised)	Up to 24 months	Platform improvement (anonymised — no personal identifier)
Marketing consent records	Until consent is withdrawn + 1 year	Proof of consent for regulatory purposes

When a retention period expires, ct444 will securely delete or irreversibly anonymise the relevant personal data. Deletion is performed using industry-standard secure erasure techniques. Where data is anonymised rather than deleted, the anonymised data no longer constitutes personal data and may be retained indefinitely for aggregate statistical purposes.

8. Contact & Policy Updates

8.1 Contacting ct444 About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or ct444's handling of your personal data, please contact us using the details below. All privacy-related correspondence should be written in English to ensure accurate and timely handling by our compliance team.

Privacy and Data Protection enquiries: [email protected]

Responsible Gaming and self-exclusion: [email protected]

8.2 Updates to This Privacy Policy

ct444 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When we make material changes to this Privacy Policy, we will update the "Last Updated" date at the top of this page and, where the changes are significant, we will notify registered players via the email address on their ct444 account. We encourage all players to review this Privacy Policy periodically to stay informed about how ct444 protects their personal data.

Continued use of the ct444 platform after any update to this Privacy Policy constitutes acceptance of the revised policy. If you do not agree with the updated terms, you must cease using the platform and contact [email protected] to request account closure.

8.3 Relationship to Other ct444 Policies

This Privacy Policy should be read alongside the ct444 Terms & Conditions and the ct444 Responsible Gaming Policy, which together form the complete set of agreements governing your use of the ct444 platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a data-related matter, this Privacy Policy shall prevail.