Privacy Policy — How 44kb Protects Your Data

1. Data Controller

1.1 Identity. For the purposes of this Privacy Policy, 44kb acts as the data controller in respect of the personal information collected from players who register and use the Platform. As data controller, 44kb determines the purposes and means by which personal data is processed.

1.2 Contact. All enquiries, complaints, or requests relating to the collection and use of your personal data should be directed to the 44kb data team via email at [email protected] with the subject line "Privacy Enquiry". We aim to respond to all privacy-related correspondence within 10 business days.

1.3 Scope. This Privacy Policy applies to all personal data collected through the 44kb website at https://44kb.io, including all account registration pages, cashier pages, game pages, sports betting pages, and any other area of the platform where personal information may be submitted or automatically collected. It does not apply to third-party websites or services that may be linked from the Platform.

2. Data We Collect

2.1 Registration Data. When you create an account on 44kb, we collect the following information: full legal name, date of birth, mobile telephone number, email address, and a chosen username. This data is required to establish your account and is used for identity verification and account management purposes.

2.2 Identity Verification (KYC) Data. To comply with anti-money laundering obligations and to verify player age, 44kb may collect copies of government-issued identity documents (such as a National ID card or passport), proof of address documents (such as a utility bill or bank statement), and selfie photographs for facial verification. KYC data is collected and processed securely and is not used for any purpose beyond identity verification and fraud prevention.

2.3 Financial & Transaction Data. We collect records of all deposits and withdrawals made through your account, including the payment method used (bKash, Nagad, Rocket, Upay, bank transfer, or card), transaction amounts in BDT, transaction timestamps, and transaction reference identifiers. Full payment method credentials (such as bKash PINs or card numbers) are never stored on 44kb systems — only tokenised references are retained for withdrawal processing.

2.4 Gaming & Betting Activity Data. We maintain a full record of all bets placed, games played, stakes wagered, outcomes received, and bonuses claimed during your time on the Platform. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

2.5 Technical & Device Data. When you access the Platform, we automatically collect certain technical information, including: your IP address, device type, operating system version, browser type and version, screen resolution, and referring URL. This data helps us deliver a consistent experience across devices and is used in fraud detection and security monitoring.

2.6 Communications Data. When you contact the 44kb support team via live chat or email, we retain records of those communications, including the content of messages and the date and time of contact. This data is used for customer service quality assurance and dispute resolution.

2.7 Responsible Gaming Data. If you use any responsible gaming tools — including deposit limits, cooling-off periods, session time reminders, or self-exclusion — we record your preferences and the history of any limits or restrictions applied. This data is retained to ensure your safety settings are honoured, including if you attempt to re-register after a self-exclusion period.

3. How We Use Your Data

The following table summarises the primary purposes for which 44kb processes your personal data:

3.1 No Automated Decision-Making. 44kb does not make decisions with significant legal or similarly significant effects on players solely through automated processing without human review. Where automated systems flag an account for fraud review or responsible gaming intervention, a human member of the 44kb team reviews the case before any consequential account action is taken.

4. Legal Basis for Processing

4.1 Contract Performance. The majority of data processing by 44kb is necessary to perform the contract between 44kb and the Player — that is, to operate your account, accept deposits, settle withdrawals, and deliver the gaming and betting services you have registered to use. Without this processing, the Platform cannot function for you.

4.2 Legal Obligation. Certain data processing activities are required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, and financial record-keeping regulations. This processing cannot be opted out of, as it is a legal requirement for 44kb to operate.

4.3 Legitimate Interest. Where 44kb processes data on the basis of legitimate interest — such as fraud prevention, platform security, and service analytics — we ensure that our interest does not override your rights and freedoms. You may object to processing based on legitimate interest at any time by contacting [email protected].

4.4 Consent. For promotional and marketing communications, 44kb relies on your explicit consent. Consent is collected at the point of registration and can be withdrawn at any time. Withdrawing consent does not affect any processing that was lawfully carried out prior to the withdrawal.

5. Data Sharing & Third Parties

5.1 Payment Processors. To process deposits and withdrawals, 44kb shares necessary transaction data with payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard. Data shared with payment processors is limited to what is strictly required to complete the relevant transaction and is governed by each provider's own privacy and data security standards.

5.2 Game Technology Providers. Casino games hosted on the 44kb platform are provided by certified third-party suppliers including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe. These providers may receive anonymised session data required to deliver their games. They do not receive your full registration or financial data unless strictly required for game dispute resolution.

5.3 Identity Verification Partners. To facilitate KYC document verification, 44kb may use a certified identity verification technology partner. Any such partner is contractually bound to process KYC data only for the purpose of verification and to handle it in accordance with applicable data protection standards.

5.4 Legal and Regulatory Authorities. 44kb may disclose personal data to law enforcement agencies, regulatory bodies, or other official authorities where required by law, court order, or where we determine in good faith that disclosure is necessary to protect the rights, safety, or property of 44kb, our players, or the public.

5.5 No Sale of Data. 44kb does not sell, rent, trade, or otherwise transfer your personal information to any external party for commercial or marketing purposes. All third-party data sharing arrangements described above are strictly operational in nature and governed by written data processing agreements.

6. Cookies & Tracking

6.1 What Are Cookies. Cookies are small text files placed on your device when you visit a website. 44kb uses cookies and similar tracking technologies (such as session tokens and local storage objects) to ensure the Platform functions correctly, to maintain your login session, and to support security and analytics functions.

6.2 Types of Cookies We Use. 44kb uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that keep you logged in during your visit and security tokens that protect your account. These cookies cannot be disabled without impairing the Platform's core functionality.
• Functional Cookies: Used to remember your preferences, such as your chosen language settings and responsible gaming tool configurations. These persist across sessions and improve your experience on return visits.
• Analytics Cookies: Used on an anonymised basis to understand how players navigate the Platform — which pages are visited most, where users encounter friction, and how sessions are structured. This data informs platform improvements and is not linked back to individual player identities.
• Security Cookies: Used as part of fraud detection and account protection systems to identify unusual login patterns or suspicious device changes associated with your account.

6.3 Managing Cookies. You may manage cookie preferences via your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling analytics or functional cookies will not prevent access but may affect your user experience. Note that clearing cookies will log you out of your current session.

7. Data Retention

7.1 Active Accounts. While your account remains active, 44kb retains all data categories associated with your account to provide the services you have registered to use and to meet ongoing legal obligations.

7.2 Closed Accounts. Following the closure of your account — whether initiated by you or by 44kb — personal data is retained for a minimum period of five years from the date of closure. This retention period reflects applicable financial record-keeping and anti-money laundering compliance requirements. After this period, data is securely deleted or irreversibly anonymised.

7.3 Self-Exclusion Data. Where a player has requested self-exclusion, the data necessary to enforce that exclusion — specifically the player's registered mobile number and email address — is retained for the full duration of the self-exclusion period and for one year thereafter, to prevent re-registration in breach of the exclusion request.

7.4 KYC Documents. Identity and address verification documents submitted during the KYC process are retained for five years from the date of submission, in line with standard anti-money laundering record-keeping obligations. Documents are stored in an encrypted format with access restricted to authorised personnel only.

7.5 Support Communications. Records of support interactions are retained for two years from the date of the interaction, to support dispute resolution and quality assurance processes.

7.6 Anonymised Analytics Data. Anonymised and aggregated platform analytics data — which cannot be linked back to individual players — may be retained indefinitely for platform improvement purposes.

8. Data Security

8.1 Technical Safeguards. 44kb employs industry-standard technical security measures to protect your personal data, including:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the 44kb Platform.
• One-way cryptographic hashing (bcrypt) for all stored passwords — passwords are never held or transmitted in plain text.
• Tokenisation of payment method references — full card numbers and mobile wallet PINs are never stored on 44kb systems.
• Encrypted storage for all KYC documentation with access logging and role-based access controls.
• Regular security assessments and vulnerability scanning of the Platform infrastructure.
• Two-factor authentication (2FA) available to all players via SMS OTP to further protect account login.

8.2 Organisational Safeguards. Access to personal data within 44kb is restricted to staff members who require it to perform their specific job function. All staff with access to personal data are bound by confidentiality obligations. Data access is logged and audited on a regular basis.

8.3 Data Breach Response. In the event of a confirmed personal data breach that poses a risk to your rights and freedoms, 44kb will notify affected players without undue delay via the email address registered on their account. The notification will describe the nature of the breach, the data involved, the likely impact, and the steps 44kb has taken or will take to address it.

9. Your Privacy Rights

As a player on the 44kb Platform, you hold the following rights in respect of your personal data:

• Right of Access: You may request a copy of all personal data held about you by 44kb at any time. We will provide this in a structured, commonly used format within 30 calendar days of receiving your verified request.
• Right to Rectification: If any personal data held about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account details via your Account profile settings; more sensitive changes (such as name corrections) require contact with the support team and may require supporting documentation.
• Right to Erasure: You may request deletion of your personal data. Note that this right is subject to limitations where retention is required by law — for example, financial transaction records retained for anti-money laundering compliance cannot be deleted before the mandatory retention period expires.
• Right to Restriction: You may request that 44kb restrict the processing of your personal data in certain circumstances — for example, while a complaint about the accuracy of your data is being investigated.
• Right to Data Portability: You may request a copy of the personal data you have provided to 44kb in a portable, machine-readable format (such as JSON or CSV) for transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interest (such as analytics) or direct marketing at any time. Processing for direct marketing purposes will cease immediately upon receipt of a valid objection.
• Right to Withdraw Consent: Where processing is based on your consent (specifically, promotional communications), you may withdraw consent at any time via your Account notification settings or by contacting support. Withdrawal does not affect processing carried out before the withdrawal.

9.1 Exercising Your Rights. To exercise any of the rights listed above, please email [email protected] with the subject line "Data Rights Request — [Your Account Username]". Include a brief description of the right you wish to exercise and any relevant details. We may ask you to verify your identity before processing the request. We aim to respond within 30 calendar days.

10. Protection of Minors

10.1 Age Requirement. The 44kb Platform is strictly for adults aged 21 and above. We do not knowingly collect or process personal data belonging to individuals under the age of 21. Registration requires acceptance of the minimum age requirement, and accounts are subject to age verification through mobile OTP and KYC document checks.

10.2 Discovery of Underage Account. If 44kb discovers or is notified that an account has been registered by a person under 21, the account will be immediately suspended and all associated personal data will be reviewed. Any real-money balance will be returned to the payment method used for deposit after verification that no prohibited activity occurred. The data of underage users will be handled in accordance with applicable child data protection standards and deleted promptly.

10.3 Parental Guidance. We encourage parents and guardians in Bangladesh to use internet filtering and parental control software to restrict access to gambling websites for minors. If you believe a minor has accessed the 44kb Platform, please contact us immediately at [email protected] so we can investigate and take appropriate action.

11. International Data Transfers

11.1 Transfer Circumstances. In the course of operating the Platform, personal data may be processed by third-party service providers whose infrastructure is located outside of Bangladesh — for example, cloud hosting providers or game technology suppliers. Where such transfers occur, 44kb takes steps to ensure that appropriate data protection safeguards are in place.

11.2 Safeguards. Transfers to third parties outside Bangladesh are governed by contractual data processing agreements that require the receiving party to apply a standard of data protection equivalent to that applied by 44kb. 44kb conducts due diligence on all third-party data processors before entering into a data processing relationship with them.

11.3 Payment Processors in Bangladesh. All transactions processed via bKash, Nagad, Rocket, and Upay are handled by financial technology providers operating within Bangladesh under applicable Bangladeshi financial regulations. Transaction data shared with these providers stays within Bangladesh's financial infrastructure.

12. Changes to This Policy

12.1 Right to Update. 44kb reserves the right to update and amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform features, or data processing practices. The "Effective Date" displayed at the top of this policy indicates when the current version came into force.

12.2 Notification of Material Changes. Where a proposed change to this Privacy Policy materially affects the way we process your personal data, 44kb will notify registered players via email to the address on file at least 14 days before the change takes effect. Non-material changes — such as corrections to typographical errors or improved plain-language explanations with no change in substance — may be made without prior notification.

12.3 Continued Use. Your continued use of the Platform after an updated Privacy Policy has taken effect constitutes your acknowledgement of the revised terms. If you do not agree with the changes, you may close your account by contacting [email protected] prior to the effective date of the updated policy.

12.4 Policy Archive. Previous versions of this Privacy Policy are available upon request by emailing [email protected] with the subject line "Privacy Policy Archive Request".

13. Contact & Data Requests

13.1 General Privacy Enquiries. For any question or concern relating to this Privacy Policy or the way 44kb processes your personal data, please contact the support team via live chat (available 24/7 in English) or by email at [email protected]. Our support team operates on Bangladesh Standard Time (BST, UTC+6).

13.2 Data Rights Requests. To exercise any data rights described in Section 9 of this policy — including access, rectification, erasure, portability, restriction, or objection — please email [email protected] with the subject line "Data Rights Request — [Your Account Username]". We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.

13.3 Data Breach Notifications. If you believe your personal data held by 44kb has been compromised, please notify us immediately at [email protected] with the subject line "Security Concern — [Your Account Username]". We will investigate promptly and notify you of our findings within 72 hours where possible.

13.4 Contact Details. 44kb support team email (plain text, not a clickable link): [email protected]. Live chat is accessible via the Platform after login. Support availability: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6).