444l Privacy Policy — How We Handle Your Data

444l is an English-language online casino and sports betting platform operated specifically for the Bangladesh market and accessible at https://444l.onl. In the context of data privacy, 444l acts as the data controller — meaning we are the entity that determines the purposes and means by which your personal data is processed.

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or need to report a data security concern, please contact our support team using the following details:

444l collects the following categories of personal data in connection with your use of the platform:

We do not knowingly collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data, except where you voluntarily disclose health-related information in the context of a responsible gaming request (for example, when requesting self-exclusion due to a gambling-related health concern).

444l collects personal data through the following channels:

• Direct collection: Data you provide voluntarily when completing the registration form, submitting a verification request, making a deposit or withdrawal, contacting support, or filling out any other form on the platform.
• Automated technical collection: Data collected automatically when you visit the platform, including IP addresses, device identifiers, and browsing behaviour within the 444l website, via server logs and session management technology.
• Payment processor data: Transaction confirmation data returned by bKash, Nagad, Rocket, Upay, and bank partners when a deposit or withdrawal is processed. This data is limited to what is necessary to confirm the transaction and match it to your account.
• Identity verification partners: Where 444l uses third-party document verification services to confirm the authenticity of identity documents you submit, those partners may return verification results and risk scores to 444l. The document itself is processed by the partner under their own data processing agreement.
• Publicly available sources: In limited circumstances related to fraud prevention or account security investigations, 444l may cross-reference data against publicly available records.

444l processes your personal data on the following legal bases:

• Performance of a contract: Processing that is necessary to open and maintain your account, process deposits and withdrawals, verify your identity, and deliver the gaming and betting services you have requested. Without this processing, 444l cannot provide the platform to you.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) obligations, age verification requirements, and any law enforcement or regulatory requests.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, business analytics, and improving the quality of our services. We balance our legitimate interests against your privacy rights and do not process data where those interests are clearly overridden by your rights.
• Consent: Where we rely on your consent as a legal basis — for example, for non-essential marketing communications — you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

The personal data collected by 444l is used for the following purposes:

• Account creation and management: Setting up your player account, maintaining accurate account records, and enabling you to log in securely and manage your profile and preferences.
• Identity and age verification: Confirming that you are who you say you are and that you meet the minimum age requirement of 21 years, in compliance with our obligations as a responsible gaming platform operating in the Bangladesh market.
• Payment processing: Crediting deposits to your account balance, processing withdrawal requests, and matching transaction records to prevent fraud and errors.
• Customer support: Responding to your queries, resolving account issues, investigating complaints, and maintaining records of support interactions for quality and compliance purposes.
• Fraud and security monitoring: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, and other forms of platform abuse that could harm you, other players, or the integrity of the platform.
• Responsible gaming: Monitoring gaming patterns to identify indicators of potential problem gambling and, where appropriate, applying responsible gaming tools such as deposit limits, cooling-off periods, or self-exclusion at your request or where we have a duty of care to act.
• Legal and regulatory compliance: Retaining records as required by applicable law, responding to lawful requests from authorities, and fulfilling our AML and data protection obligations.
• Platform improvement: Analysing aggregated usage data to understand how players interact with the platform and to improve game selection, user experience, and technical performance. This analysis uses aggregated or pseudonymised data wherever possible.
• Marketing communications: Sending promotional offers, bonus notifications, and tournament information where you have consented to receive such communications or where we have a legitimate interest in keeping you informed about promotions directly relevant to your account.

6.1 Principle of minimal sharing. 444l does not sell, rent, trade, or otherwise disclose your personal data to third parties for their own commercial purposes. Data sharing is limited strictly to what is necessary for the operation of the platform and fulfilment of legal obligations.

6.2 Categories of third parties with whom data may be shared:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other financial institutions involved in processing your deposits and withdrawals. These parties receive only the data required to execute the transaction.
• Identity verification providers: Third-party KYC and document verification services used to confirm the authenticity of identity documents submitted during account verification.
• Game technology providers: Software providers including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi may receive technical session data necessary to deliver their games within the 444l platform. These providers are bound by data processing agreements that restrict the use of any data shared with them.
• IT and hosting infrastructure: Cloud hosting, content delivery, and cybersecurity service providers who process data on 444l's behalf under strict data processing agreements and are not permitted to use the data for their own purposes.
• Legal and regulatory authorities: Law enforcement agencies, financial intelligence units, or other regulatory bodies where 444l is required by law to disclose data, or where disclosure is necessary to protect the rights and safety of players or the public.
• Professional advisers: Lawyers, auditors, and financial advisers who are bound by professional confidentiality obligations and who require access to data in connection with their advisory services to 444l.

6.3 International data transfers. Where personal data is transferred to service providers located outside Bangladesh, 444l takes steps to ensure that appropriate data protection safeguards are in place, including contractual clauses that require the receiving party to protect your data to a standard equivalent to that applied within Bangladesh.

7.1 What cookies we use. 444l uses a minimal set of cookies that fall into the following categories:

• Strictly necessary cookies: These are essential for the platform to function. They include session cookies that keep you logged in during your visit, security tokens that protect against cross-site request forgery, and load-balancing cookies that ensure stable platform performance. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These remember preferences you have set — such as your preferred language or display settings — so you do not have to reset them on every visit. These cookies do not track you across other websites.
• Analytics cookies: Where used, these collect aggregated, anonymised data about how players navigate the platform, which pages are visited most frequently, and where technical errors occur. This data is used solely to improve platform performance and is not linked back to individual player identities.

7.2 What we do not use. 444l does not deploy third-party advertising cookies, cross-site tracking cookies, social media pixel trackers, or any cookie technology that builds a behavioural profile of you for advertising purposes outside of the 444l platform.

7.3 Managing cookies. You can control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in and using the platform. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

8.1 Retention periods. 444l retains personal data for as long as it is needed for the purpose for which it was collected, subject to any longer retention period required by law. The following general retention guidelines apply:

• Active account data: Retained for the full duration of your account's active status plus a minimum period of five years following account closure, to meet AML record-keeping obligations.
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction, consistent with financial record-keeping requirements.
• Identity verification documents: Retained for a minimum of five years following account closure or the completion of the verification that required the document, whichever is later.
• Support and communications records: Retained for three years from the date of the last interaction, unless the interaction is related to an ongoing dispute or investigation.
• Technical and usage logs: Retained for up to 24 months in full, after which they are anonymised and may be retained in aggregated form for analytical purposes.

8.2 Deletion requests. If you request deletion of your personal data before the end of the applicable retention period, 444l will assess the request and delete or anonymise data where there is no legal obligation to retain it. Where a legal obligation to retain specific data exists, we will inform you of this and retain only the minimum data required to meet that obligation.

9.1 Technical safeguards. 444l applies the following technical measures to protect your personal data:

• All data in transit between your device and our servers is encrypted using 256-bit TLS/SSL encryption.
• Account passwords are hashed using a strong one-way cryptographic algorithm before storage. Plaintext passwords are never held in our databases.
• Access to player data within our systems is restricted on a need-to-know basis. Staff members can only access the data categories relevant to their specific role.
• Our infrastructure is hosted on secure, access-controlled servers with regular security patching and vulnerability scanning.
• We conduct periodic internal security reviews to assess our data protection practices and address identified risks.

9.2 Organisational safeguards. Staff who handle personal data are trained on data protection obligations and the correct procedures for handling, storing, and disclosing data. Access controls and audit logs are maintained to detect any unauthorised access to personal data systems.

9.3 Data breach response. In the event that 444l becomes aware of a data security incident that affects the confidentiality, integrity, or availability of your personal data, we will take immediate steps to contain the incident, assess its scope, and — where the incident poses a risk to your rights and freedoms — notify affected players without undue delay with details of the nature of the breach and the steps you should take to protect yourself.

As an individual whose personal data is processed by 444l, you hold the following rights. To exercise any of these rights, please contact [email protected] with the subject line "Privacy Request" and a clear description of the right you wish to exercise:

• Right of access: You have the right to request a copy of the personal data that 444l holds about you, together with information about how it is used and with whom it is shared. We will provide this information free of charge within 30 days of receiving a valid request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Account holders can update basic contact information directly within the account settings; more sensitive corrections (such as legal name or date of birth) will require supporting documentation.
• Right to erasure: You have the right to request that 444l delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (if consent was the basis for processing), or where you object to processing and there are no overriding legitimate grounds. This right is subject to legal retention obligations as described in Section 8.
• Right to restriction of processing: You may request that 444l temporarily restrict the processing of your data while the accuracy of data is being contested, while an objection is being considered, or while you are exercising other rights.
• Right to data portability: Where processing is based on your consent or on the performance of a contract and is carried out by automated means, you have the right to receive a structured, machine-readable copy of the personal data you have provided to 444l.
• Right to object: Where 444l processes your data on the basis of legitimate interests, you have the right to object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Rights related to automated decision-making: 444l does not make solely automated decisions that produce legal or similarly significant effects on players without human review. Where automated processes flag accounts for investigation, a member of the 444l compliance team reviews the case before any account action is taken.

The 444l platform is strictly restricted to individuals aged 21 years or older. We do not knowingly collect personal data from anyone under the age of 21. Registration is prohibited for minors, and our age verification process is designed to identify and prevent underage access.

If 444l discovers or is informed that personal data has been collected from an individual under 21, we will take immediate steps to delete that data, close the associated account, and return any real-money balance to the payment method used. If you are a parent or guardian and believe that a minor in your care has registered an account with 444l, please contact us immediately at [email protected].

We encourage parents and guardians in Bangladesh to use parental control software to prevent minors from accessing online gambling platforms. A number of free tools are available for this purpose and can be found through standard internet searches.

12.1 Monitoring for player welfare. 444l uses gaming activity data — including session frequency, session duration, deposit volumes, loss patterns, and wagering behaviour — to power responsible gaming monitoring systems. These systems are designed to identify patterns that may indicate that a player is developing a gambling problem, so that appropriate support can be offered.

12.2 Self-exclusion and restriction data. If you request self-exclusion, a cooling-off period, deposit limits, or any other responsible gaming tool, 444l records this request and the associated restrictions on your account. This data is retained for the full duration of the restriction and for a minimum of five years after the restriction ends, to prevent you from inadvertently re-accessing the platform during an exclusion period through account re-registration or other means.

12.3 No commercial use of responsible gaming data. Data collected in connection with responsible gaming monitoring is never used for commercial profiling, marketing purposes, or shared with third parties outside of what is strictly necessary for legal compliance. Its sole purpose is to support player welfare.

For more detail on the responsible gaming tools available to you, please visit our Responsible Gaming page.

444l may update this Privacy Policy from time to time to reflect changes in our data practices, operational procedures, or legal obligations. When material changes are made, we will notify registered players by posting a notice on the platform and, where appropriate, by sending an email to the address registered on your account, with a minimum of seven days' notice before the revised policy takes effect.

The date at the top of this Privacy Policy indicates when it was last reviewed. We encourage you to review this page periodically to remain informed about how we are protecting your data. Continued use of the platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

If you have concerns about any proposed change to this Privacy Policy, please contact us at [email protected] before the change takes effect. If you do not wish to accept the revised policy, you may request account closure and your real-money balance will be returned to you following account verification.

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or want to report a concern about the way your personal data has been handled, please contact the 444l support team. We take all privacy queries seriously and commit to responding promptly and thoroughly.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your concern through the formal dispute resolution procedures described in our Terms & Conditions.