c44km Privacy Policy

This Privacy Policy (hereinafter "the Policy" or "this Policy") is issued by the operator of the c44km online casino and sports betting platform (hereinafter "c44km", "we", "us", or "our") and governs the collection, processing, storage, and disclosure of personal data relating to all individuals who visit, register with, or otherwise interact with the Platform at https://c44km.net and any associated mobile-optimised versions of that service.

By accessing the c44km Platform or creating a registered account, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must cease using the Platform immediately and contact [email protected] to request account closure and data deletion where applicable.

This Policy should be read alongside the c44km Terms & Conditions, which form the broader legal framework governing your use of the Platform.

1 Data Controller Information

For the purposes of this Policy, c44km is the data controller in respect of all personal data collected through the Platform. As data controller, c44km determines the purposes for which personal data is processed and the means by which that processing is carried out.

1.1 Contact Details for Privacy Matters

All privacy-related enquiries, subject access requests, data deletion requests, and complaints regarding c44km's data processing practices should be directed in writing to the c44km Privacy team. The designated contact channel for all privacy matters is the support email address: [email protected]. Please include the subject line "Privacy Request" so that your communication is routed to the correct team member without delay. The Privacy team will acknowledge your correspondence within 72 hours and provide a substantive response within 14 calendar days of receipt.

1.2 Scope of This Policy

This Policy covers all personal data collected and processed by c44km in connection with the Platform. It applies to:

• Registered c 44km account holders based in Bangladesh and internationally;
• Unregistered visitors who browse the Platform without creating an account;
• Individuals who contact c44km via email or live chat for support purposes;
• Former account holders whose data is retained in accordance with Section 6 of this Policy.

This Policy does not apply to third-party websites, applications, or services that may be linked to or accessible from the Platform. c44km is not responsible for the privacy practices of any third-party operator, and you are encouraged to review the privacy policies of any external service you access independently of the c44km Platform.

2 Personal Data We Collect

c44km collects personal data from users through several channels: directly from you when you register an account or complete identity verification, automatically through your interaction with the Platform, and in limited circumstances from third-party service providers such as payment processors. The categories of personal data we collect are set out below.

2.1 Registration and Identity Data

When you create a c44km account, we collect the following information as part of the registration process:

• Your full legal name as it appears on your government-issued identity document;
• Your date of birth (for age verification — confirming you are 18 years or older);
• Your email address;
• Your Bangladesh mobile phone number;
• Your chosen username and encrypted password hash (we never store your plain-text password);
• Your residential address (required for Know Your Customer (KYC) verification on accounts that exceed defined transaction thresholds).

2.2 Identity Verification (KYC) Documents

For the purpose of fulfilling our anti-money-laundering (AML) obligations and confirming player age, c44km may collect copies of identity documents including:

• Bangladesh National Identity Card (NID) — front and back scan or photograph;
• Valid passport (biographical data page);
• Driving licence;
• Proof of address documents such as utility bills or bank statements dated within the previous three months.

2.3 Financial and Transaction Data

When you make deposits or withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, or other accepted payment channels, c44km records the following transaction data:

• Transaction reference numbers and amounts (in BDT ৳);
• Payment method used and the last four digits of card numbers where applicable;
• Mobile wallet account identifiers (e.g., registered bKash or Nagad mobile number — not your wallet PIN);
• Timestamps of all deposit and withdrawal events;
• Running account balance history.

c44km does not store full card numbers, CVV codes, or mobile financial service PINs. All sensitive payment credentials are processed exclusively by our PCI-DSS-compliant third-party payment processors.

2.4 Technical and Usage Data

When you access the Platform, our servers automatically record the following technical data:

3 How We Use Your Data

c44km processes personal data only for specific, lawful purposes. We do not sell your personal data to third parties for commercial advertising. The primary purposes for which we process your data are as follows:

3.1 Account Management and Service Delivery

The core purpose for which we hold your registration and identity data is to create and maintain your c44km account, authenticate your identity at login, process your financial transactions, credit bonuses and promotions to your account, and provide you with access to the full range of games and betting markets available on the Platform. Without this processing, the contractual relationship between you and c44km cannot be fulfilled.

3.2 Legal and Regulatory Compliance

c44km is required to process certain categories of personal data to comply with applicable legal obligations. These include identity verification under anti-money-laundering (AML) requirements, age verification under our 18+ policy, transaction monitoring for the detection of suspicious financial activity, and the maintenance of records that may need to be disclosed to competent authorities in the event of a lawful request. Processing for this purpose is not optional — it is a condition of operating a responsible online gaming platform.

3.3 Fraud Prevention and Platform Security

Technical and usage data — including IP addresses, device fingerprints, login patterns, and transaction histories — is analysed by c44km's security systems to detect and prevent fraud, multi-accounting, bonus abuse, money laundering, and other activities that violate the c44km Terms & Conditions or applicable law. Where suspicious activity is detected, account access may be suspended pending investigation and, if necessary, relevant data may be shared with fraud-prevention agencies or law enforcement authorities.

3.4 Responsible Gaming Monitoring

c44km uses gameplay data, session duration records, deposit histories, and wagering patterns to monitor for indicators of problem gambling behaviour. This processing is carried out in the legitimate interest of protecting our users' wellbeing. Where our monitoring systems or support team identify a player whose behaviour may indicate a gambling problem, we may proactively reach out to offer responsible gaming tools such as deposit limits, cooling-off periods, or self-exclusion.

3.5 Customer Support

When you contact c44km via email or live chat, we retain records of that communication — including your account details as they appeared at the time of the interaction and the full content of the support exchange — for the purpose of resolving your query, maintaining quality standards, training support staff, and retaining an evidence trail in the event of a later dispute.

3.6 Service Improvement and Analytics

Aggregated, anonymised usage data is analysed to understand how players navigate the Platform, which games are most popular among Bangladesh-based users, and where technical performance improvements can be made. This analytics processing does not identify you personally — it operates on anonymised data sets only.

3.7 Marketing Communications

With your explicit consent (which you may withdraw at any time), c44km may send you promotional communications by email or SMS regarding new games, bonus offers, BPL season promotions, Eid deposit bonuses, and other time-sensitive offers. You may opt out of marketing communications at any time by emailing [email protected] with the subject line "Unsubscribe". Opt-out requests are processed within five business days. Withdrawing consent to marketing communications does not affect your ability to use the Platform or the processing of data for the other purposes described in this Section.

4 Cookies & Tracking Technologies

The c44km Platform uses cookies and similar client-side tracking technologies to deliver core Platform functionality, maintain your authenticated session, remember your preferences, and — with your consent — to analyse usage patterns for the purpose of improving the user experience.

4.1 What Is a Cookie?

A cookie is a small text file placed on your device by a web server when you visit a website. Cookies are widely used to make websites work, to make them work more efficiently, and to provide information to the website operator. Cookies do not contain executable code and cannot access other files on your device.

4.2 Categories of Cookies Used by c44km

4.3 Managing Cookies

You can control and delete cookies through your browser settings. Instructions for the most common browsers are available on the browser developer's help pages. Note that disabling strictly necessary cookies will prevent you from logging into your c44km account, as session management relies on these cookies. Disabling analytics cookies will not affect your ability to use the Platform in any way.

5 Data Sharing & Third Parties

c44km does not sell, rent, or trade your personal data to third parties for commercial purposes. We share personal data only in the limited circumstances described below, and in each case we take reasonable steps to ensure that the recipient processes your data in a manner consistent with this Policy.

5.1 Payment Processors

To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer, c44km shares the minimum necessary financial data with the respective payment processor. Each payment processor operates under its own privacy policy and is independently responsible for the data it collects through its own interface. c44km does not receive or store full card numbers or mobile wallet PINs — these are entered directly in the payment provider's secure environment.

5.2 Game Software Providers

Games on the c44km Platform are powered by licensed third-party software providers including Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, Spribe, and Ezugi, among others. In order to load and record game rounds correctly, these providers receive your c44km player identifier, game session tokens, and bet/win records. They do not receive your full name, NID number, or financial account details unless required for a specific technical or regulatory purpose that c44km has authorised in writing.

5.3 Identity Verification Services

c44km may use third-party identity verification (KYC) service providers to assist in the verification of documents submitted by players. These providers process the document images and personal data contained therein solely for the purpose of identity verification and are prohibited by contract from using your data for any other purpose.

5.4 Legal and Regulatory Authorities

c44km will disclose personal data to law enforcement agencies, regulatory bodies, courts, or other government authorities where required to do so by applicable law, by a valid court order, or where disclosure is necessary to protect the rights, property, or safety of c44km, its users, or the public. In such cases, c44km will disclose the minimum data required to satisfy the lawful request and will, where legally permitted, notify the affected user of the disclosure.

5.5 Business Transfers

In the event that c44km undergoes a merger, acquisition, corporate restructuring, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity by email prior to the transfer taking effect, and you will retain all rights described in Section 7 of this Policy.

6 Data Retention & Deletion

c44km retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods applicable to the main categories of data we hold are set out below.

6.1 Retention Schedule

6.2 Requesting Deletion

Subject to the retention obligations set out above, you have the right to request deletion of your personal data at any time. To submit a deletion request, email [email protected] with the subject line "Data Deletion Request" and include your registered username and email address. c44km will respond to your request within 14 calendar days and will confirm which data can be deleted immediately, which data must be retained for legal or regulatory reasons, and the anticipated timeline for deletion of any data that is eligible for erasure.

7 Your Privacy Rights

As a data subject whose personal data is processed by c44km, you hold the following rights in relation to that data. To exercise any of these rights, contact [email protected] with the subject line "Privacy Request — [Right Name]" and your registered account details. c44km will respond within 14 calendar days.

7.1 Right of Access

You have the right to request a copy of all personal data that c44km holds about you. This is commonly referred to as a Subject Access Request (SAR). c44km will provide a structured, machine-readable copy of your data free of charge within 14 calendar days of receiving your SAR. For manifestly unfounded or excessive repeat requests, c44km reserves the right to charge a reasonable administrative fee.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (e.g., updating your email address or phone number) can be made directly within your account settings. For corrections to KYC identity data, you must submit supporting documentation to [email protected].

7.3 Right to Erasure

Subject to the legal retention obligations described in Section 6, you have the right to request that c44km delete your personal data. This right applies where the data is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where the data has been processed unlawfully. Erasure requests cannot override data that must be retained to comply with a legal obligation.

7.4 Right to Restrict Processing

You have the right to request that c44km temporarily suspend the processing of your personal data while a dispute about its accuracy or the lawfulness of its processing is resolved. During a processing restriction, c44km will continue to store your data but will not actively process it beyond what is necessary to maintain the restriction itself.

7.5 Right to Data Portability

For data that you have provided to c44km directly and that is processed on the basis of your consent or contractual necessity, you have the right to receive that data in a structured, commonly used, machine-readable format (such as JSON or CSV) suitable for transfer to another service provider.

7.6 Right to Withdraw Consent

Where c44km processes your data on the basis of your explicit consent — such as for marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal. To withdraw consent, email [email protected] with the subject line "Withdraw Consent".

8 Data Security Measures

c44km implements a range of technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. While no online system can guarantee absolute security, c44km applies industry-standard practices appropriate to the sensitivity of the data it processes.

8.1 Technical Security Controls

• TLS/SSL Encryption: All data transmitted between your device and the c44km Platform is encrypted using TLS 1.2 or higher. The padlock icon visible in your browser's address bar confirms that your connection to c44km.net is secured.
• Password Hashing: Account passwords are stored exclusively as one-way cryptographic hashes using industry-standard algorithms. c44km staff cannot retrieve your plain-text password under any circumstances.
• Two-Factor Authentication: c44km offers optional two-factor authentication (2FA) for all registered accounts. Enabling 2FA substantially reduces the risk of unauthorised account access.
• Intrusion Detection: c44km's infrastructure is monitored continuously for anomalous access patterns, brute-force login attempts, and other indicators of compromise.
• Access Controls: Access to production systems and user data by c44km staff is strictly controlled on a need-to-know basis. All staff access to personal data is logged and auditable.

8.2 Organisational Security Measures

c44km staff who handle personal data are subject to confidentiality obligations and receive regular data protection training. Third-party service providers who process personal data on c44km's behalf are required to maintain equivalent security standards and are bound by data processing agreements that restrict their use of your data to the purposes described in this Policy.

8.3 Data Breach Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected users, c44km will notify affected individuals without undue delay and, where required, will report the breach to the relevant competent authority within the timeframe required by applicable law. Notification to affected users will be made by email to the registered address on file and will include a description of the nature of the breach, the categories of data affected, the likely consequences, and the measures c44km has taken or proposes to take to address the breach.

8.4 Your Role in Keeping Your Data Secure

Data security is a shared responsibility. You contribute significantly to the security of your personal data by using a strong, unique password for your c44km account, enabling two-factor authentication, logging out after each session — particularly on shared or public devices — and notifying c44km immediately at [email protected] if you believe your account credentials have been compromised. c44km accepts no liability for data breaches that result from your failure to maintain reasonable account security practices on your own devices.