Privacy Policy — How 44k Protects Your Data

1. Introduction

44k ("we", "us", "our") is committed to protecting the privacy of every individual who interacts with the 44k platform at https://44k.onl. This Privacy Policy sets out in plain, formal terms how 44k collects, uses, stores, shares, and protects the personal data of our registered players, visitors, and anyone who contacts our support team.

By registering an account on the 44k platform or by continuing to use https://44k.onl after this Privacy Policy has been made available to you, you acknowledge that you have read and understood this document and that you consent to the collection and use of your personal data as described herein. This Privacy Policy should be read in conjunction with our Terms & Conditions, which are available at /terms-conditions.

44k serves a Bangladesh-focused player base and processes the personal data of users resident in Bangladesh. Our platform operates in English and all data-related communications with players are conducted in English. This Privacy Policy is the authoritative version of our data protection commitments and supersedes any prior version previously published.

2. Data Controller

For the purposes of applicable data protection law, the data controller responsible for your personal data is the operator of the 44k platform. As data controller, 44k determines the purposes and means by which your personal data is processed. All data protection enquiries, rights requests, and complaints should be directed to our designated data protection contact at [email protected].

Where 44k engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification services, or game providers — those parties act as data processors. They are contractually prohibited from using your personal data for any purpose other than the specific service they have been engaged to deliver for 44k.

3. Data We Collect

44k collects the following categories of personal data, depending on how you interact with the platform:

3.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification
• Date of birth (used to verify you are 18 years of age or older)
• Residential address in Bangladesh (street address, city, postcode)
• Mobile phone number (used for SMS OTP verification and account security)
• Email address (used for account communications and support)
• Username and encrypted password

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (National ID card, passport, or driving licence)
• Proof of address documents (utility bills, bank statements, or official correspondence)
• Selfie photographs taken for liveness and identity matching purposes
• Proof of ownership of the payment method used (screenshot or confirmation from bKash, Nagad, or Rocket account registered in your name)

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction history including amounts, timestamps, and payment references
• Payment method identifiers (bKash account number, Nagad account number, Rocket number, or bank account details)
• Account balance and bonus balance records
• Chargeback and dispute records, where applicable

3.4 Gaming Activity Data

• Game session logs including games played, stakes placed, wins, losses, and game round IDs
• Sports betting history including markets wagered on, odds accepted, and settlement outcomes
• Responsible gaming tool settings (deposit limits, session time reminders, self-exclusion status)

3.5 Technical & Device Data

• IP address at the time of each login and transaction
• Device type, operating system, and browser version
• Cookie identifiers and session tokens (see Section 9)
• Referring URL and navigation path data collected via analytics tools
• Timestamps of login, logout, and significant account actions

3.6 Communications Data

• The content of emails, live chat transcripts, and any other messages you send to the 44k support team
• Feedback or survey responses submitted voluntarily
• Records of your marketing communication preferences and opt-in / opt-out history

4. How We Collect Your Data

44k collects your personal data through the following channels:

• Directly from you: When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or update your account profile.
• Automatically: When you visit or use the 44k platform, our servers automatically record technical data including your IP address, device information, session duration, and navigation behaviour via cookies and similar tracking technologies.
• From third-party service providers: Our KYC verification partners may supplement the documents you provide with additional identity checks. Our payment processors confirm transaction outcomes and flag suspicious payment activity. Game providers supply game round logs and RTP data for audit purposes.
• From publicly available sources: In limited circumstances, 44k may cross-reference your details against publicly available information — such as official watchlists or politically exposed persons databases — as part of our anti-money-laundering compliance programme.

5. Legal Basis for Processing

44k processes your personal data on the following legal grounds, as applicable to each processing activity:

6. How We Use Your Data

The personal data we collect is used for the following purposes:

6.1 Account Operations

We use your registration and identity data to create and maintain your 44k account, authenticate your login sessions, process password resets, and communicate essential account notices such as security alerts, policy updates, and transaction confirmations.

6.2 Payments & Financial Compliance

Your financial and transaction data is used to process deposits received via bKash, Nagad, Rocket, Upay, and partner banks, to verify withdrawal requests, to reconcile account balances, and to maintain records required for financial compliance purposes. All payment data is handled in strict accordance with the requirements of our payment service providers.

6.3 Identity Verification

KYC data — including copies of your National ID, address proof, and selfie photographs — is used solely to verify your age, identity, and the legitimacy of your payment methods. This verification is mandatory before withdrawals are processed and may be triggered at other points during the account lifecycle as described in our Terms & Conditions.

6.4 Responsible Gaming

44k monitors gameplay and account activity patterns to identify indicators of problem gambling behaviour. This monitoring is conducted in the legitimate interests of player welfare and allows us to offer appropriate responsible gaming tools, including deposit limit adjustments, cooling-off periods, and self-exclusion, to players who may benefit from them.

6.5 Fraud Prevention & Security

Technical data, transaction patterns, and IP address logs are used to detect and prevent fraudulent activity, multi-account registration, bonus abuse, money laundering, and unauthorised account access. Where suspicious activity is identified, 44k reserves the right to suspend the relevant account pending investigation.

6.6 Platform Analytics & Improvement

Aggregated and anonymised usage data helps us understand which features players use most, where technical issues occur, and how navigation flows can be improved. This data is processed in a manner that does not identify individual players.

7. Data Sharing & Disclosure

44k does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your data only in the following limited and controlled circumstances:

• Game Providers: Providers such as Evolution Gaming, Pragmatic Play, NetEnt, Ezugi, and Microgaming receive session identifiers and game round data necessary to deliver their games. They do not receive your full identity information unless required by their own compliance obligations.
• Payment Processors: bKash, Nagad, Rocket, Upay, and our bank partners receive the financial data necessary to process your deposit and withdrawal transactions. These providers are independently regulated financial institutions.
• KYC Verification Services: Third-party identity verification providers receive copies of your KYC documents strictly for the purpose of verifying your identity and age on behalf of 44k. These providers operate under contractual data protection obligations.
• Fraud Prevention & Compliance Services: 44k may share data with anti-fraud platforms and watchlist screening services as part of our legal compliance programme. This may include screening against politically exposed persons lists and sanctions databases.
• Legal Authorities: Where required by applicable law, court order, or a lawful request from a regulatory authority, 44k will disclose personal data as required. 44k will notify affected players of such disclosures where permitted to do so by law.
• Business Transfers: In the event that 44k undergoes a merger, acquisition, or transfer of all or substantially all of its assets, player data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

8. Payment Data & Financial Information

Given the nature of the 44k platform, payment data occupies a particularly sensitive category within our data handling practices. The following specific rules apply to your financial information:

• Full payment account details (bKash numbers, Nagad numbers, bank account numbers) are stored in encrypted form and are accessible only to the payment processing team on a strictly need-to-know basis.
• 44k does not store full card numbers where card payments are processed. Card transactions are tokenised by our payment processor and only a masked reference is retained in our systems.
• All payment data is transmitted over encrypted connections using industry-standard TLS protocols.
• Transaction records are retained for a minimum of five years from the date of the transaction, as required for financial compliance and anti-money-laundering record-keeping purposes. These records may not be deleted upon an account closure request.
• Withdrawal requests are verified against the payment method used for the original deposit. This same-source withdrawal policy is a security measure designed to protect your funds and prevent fraudulent diversion of winnings.

9. Cookies & Tracking Technologies

44k uses cookies and similar technologies on the platform to ensure the site functions correctly and to gather analytical insights. The following categories of cookies are used:

You may configure your browser settings to block or delete cookies at any time. Please note that disabling essential cookies will prevent you from logging into your 44k account and using core platform features. 44k does not use third-party advertising cookies or retargeting pixels.

10. Data Retention

44k retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following retention periods apply as a general guide:

• Account data (registration, KYC documents): Retained for the duration of the account relationship and for a minimum of five years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five years from the date of the transaction, regardless of account status.
• Game activity logs: Retained for a minimum of three years from the date of each session, to support dispute resolution and regulatory audit requests.
• Support communications: Retained for two years from the date of the last communication in each support thread.
• Marketing consent records: Retained for the duration of the account relationship and for one year following any withdrawal of consent, to demonstrate compliance with consent requirements.
• Technical and device logs: Retained for 90 days on a rolling basis, after which they are automatically purged unless flagged for a security investigation.

When retention periods expire and no other legal basis for continued retention applies, 44k securely deletes or permanently anonymises the relevant data so that it can no longer be attributed to an identifiable individual.

11. Data Security

44k takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• All data transmitted between your browser and the 44k platform is encrypted using 256-bit TLS (Transport Layer Security) protocols. The padlock icon visible in your browser address bar confirms that this encryption is active during your session.
• Passwords are stored using one-way cryptographic hashing algorithms. 44k staff cannot view your plaintext password at any time.
• Access to production systems and player data is restricted to authorised personnel only, on a documented need-to-know basis. All internal data access is logged and subject to audit.
• 44k undergoes regular security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Player accounts are protected by optional SMS-based two-factor authentication, which we strongly encourage all players to enable via their account security settings.
• Our infrastructure is hosted on enterprise-grade servers with physical security controls, redundant backups, and 24/7 monitoring.

While 44k employs robust security measures, no online platform can guarantee absolute security. You are also responsible for keeping your login credentials confidential and for reporting any suspected unauthorised access to your account at [email protected] without delay.

12. Your Rights

As a player whose personal data is processed by 44k, you hold the following rights in respect of your personal information. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and your registered account username:

• Right of Access: You may request a copy of the personal data that 44k holds about you. We will provide this within 30 days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. For account-critical data such as your legal name and date of birth, rectification may require submission of updated KYC documentation.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (where consent was the legal basis), or where you object to processing and there is no overriding legitimate interest. Please note that this right is subject to mandatory retention obligations — for example, financial transaction records that must be retained for regulatory compliance purposes cannot be deleted on request.
• Right to Restrict Processing: You may request that we restrict the processing of your data in certain circumstances, such as while a correction request is under review or while you have lodged an objection.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, you may request that we provide your personal data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes. 44k will consider your objection and will cease the processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — specifically, marketing communications — you may withdraw that consent at any time with immediate effect, without affecting the lawfulness of processing carried out before the withdrawal.

44k will respond to all valid data rights requests within 30 calendar days. Where a request is complex or voluminous, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.

13. Marketing Communications

44k may, with your explicit prior consent, send you promotional communications about new games, seasonal promotions, bonus offers, and platform updates. These communications may be delivered by email or SMS to the contact details registered on your account.

You may opt in to marketing communications during the registration process or at any time via your account notification preferences. You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link included in any marketing email
• Updating your notification preferences in your 44k account settings
• Emailing [email protected] with the subject line "Marketing Opt-Out" and your registered username

Opting out of marketing communications does not affect the delivery of essential account communications such as transaction confirmations, security alerts, KYC requests, and policy update notifications. These service-related messages are sent on the basis of contract performance and cannot be opted out of while your account remains active.

14. Children's Privacy

The 44k platform is strictly intended for adults aged 18 years and above. 44k does not knowingly collect personal data from individuals under the age of 18. Age verification is a mandatory step in the registration process, and accounts where the holder is subsequently found to be under 18 will be immediately closed, with any deposits returned to the originating payment source.

If you are a parent or guardian and believe that a minor has registered an account on 44k or provided personal data to the platform, please contact us immediately at [email protected]. We will promptly investigate and take appropriate action, including deletion of the minor's data and closure of any associated account. 44k encourages parents and guardians to use parental control software to prevent underage access to online gambling platforms.

15. Changes to This Privacy Policy

44k reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, we will notify registered players by email to the address on file and will post a prominent notice on the 44k platform homepage. The revised Privacy Policy will take effect seven days after notification for existing players and immediately for new players registering after the effective date.

We encourage you to review this Privacy Policy periodically. The "Effective Date" shown at the top of this document will always reflect the date of the most recent revision. Continued use of the 44k platform following the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not accept the revised terms, you must close your account by contacting [email protected] before the effective date.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 44k handles your personal data, please reach out using the details below. We are committed to responding promptly and transparently to all privacy-related enquiries.

• Data Protection Contact: [email protected]
• Subject Line for Rights Requests: "Data Rights Request — [Your Username]"
• Subject Line for General Privacy Queries: "Privacy Enquiry — [Your Username]"
• Response Time: Within 30 calendar days for formal data rights requests; within 3 business days for general privacy enquiries
• Operating Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

Please include your registered account username in all privacy-related correspondence to allow our team to locate your records and respond accurately. For account security reasons, 44k cannot process data rights requests received from unverified parties — you may be asked to confirm your identity before we action a request to access, correct, or delete your personal data.