cd444 Privacy Policy

1. About This Policy

This Privacy Policy applies to all personal data collected, processed, and stored by cd444 in connection with the operation of the online gaming and sports betting platform accessible at https://cd444.onl (the "Platform"). It covers data collected through the website, mobile-optimised interfaces, customer support interactions, and any other channel through which Users communicate with cd444.

cd444 acts as the data controller in respect of all personal data collected from registered Users and visitors. This means that cd444 determines the purposes for which, and the means by which, your personal data is processed.

This Policy should be read alongside the cd444 Terms & Conditions, which are available at cd444.onl/terms-conditions. In the event of any conflict between this Privacy Policy and the Terms & Conditions in respect of data protection matters, this Privacy Policy shall prevail.

This document is written in formal English and is the authoritative version of the cd444 Privacy Policy. The Effective Date of this version is 1 January 2026.

2. Personal Data We Collect

cd444 collects the following categories of personal data from Users and prospective Users:

cd444 does not knowingly collect or process sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health records, or biometric data, except where a User voluntarily discloses such information in the context of a responsible gaming support interaction, in which case it is processed solely for the purpose of providing appropriate assistance.

3. How We Collect Your Data

cd444 collects personal data through the following methods:

• Direct submission: Data you provide when creating an account, completing KYC verification, making a deposit or withdrawal request, contacting support, or updating your account profile.
• Automated technical collection: Data collected automatically when you access the Platform, including IP address, device identifiers, browser fingerprint, and session activity logs. This data is collected via server logs and first-party analytics tools.
• Payment processors: Transaction confirmation data received from payment partners such as bKash, Nagad, Rocket, and Upay when you initiate a financial transaction on the Platform.
• Identity verification partners: Confirmation of identity document authenticity returned by third-party KYC service providers where cd444 uses such providers to assist with the verification process.
• Communications: Data contained in messages you send to cd444 via live chat, email, or any other supported communication channel.

4. Legal Basis for Processing

cd444 processes your personal data on one or more of the following legal grounds, depending on the specific purpose of the processing activity:

• Contractual necessity: Processing is necessary to perform the contract between you and cd444, including account management, payment processing, bet settlement, and customer support.
• Legal obligation: Processing is required for cd444 to comply with applicable legal requirements, including anti-money laundering (AML) obligations, age verification duties, and financial record-keeping requirements.
• Legitimate interests: Processing is necessary for cd444's legitimate business interests, including fraud detection, platform security, abuse prevention, responsible gaming monitoring, and general platform improvement, provided that those interests are not overridden by your data protection rights.
• Consent: Where processing is based on consent — for example, sending marketing communications via SMS or email — cd444 will only process your data for that purpose if you have given clear, freely withdrawable consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. How We Use Your Personal Data

cd444 uses the personal data described in Section 2 for the following purposes:

• Account creation and management: To register your account, verify your identity and age, maintain your account profile, and manage your login credentials and security settings.
• Payment processing: To process deposits, settle withdrawals, verify payment method ownership, and maintain accurate financial transaction records in compliance with applicable laws.
• Platform delivery: To provide access to sports betting markets, casino games, live dealer tables, and all other features available on the cd444 platform.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, bonus abuse, and other forms of prohibited conduct as defined in the cd444 Terms & Conditions.
• Customer support: To respond to your enquiries, resolve complaints, process account change requests, and provide assistance with responsible gaming tools.
• Legal and regulatory compliance: To fulfil obligations under applicable laws, respond to lawful requests from regulatory authorities, and maintain records required for audit and compliance purposes.
• Responsible gaming: To monitor account activity for signs of problem gambling, apply deposit limits and self-exclusion requests, and provide proactive outreach where responsible gaming concerns are identified.
• Marketing communications (opt-in only): To send promotional offers, bonus notifications, and event updates via the communication channels you have opted into. These communications will always include a clear and easy opt-out mechanism.
• Platform analytics and improvement: To understand how Users interact with the cd444 platform, identify technical issues, and make improvements to the User experience. This analysis is conducted on aggregated or anonymised data wherever possible.

6. Sharing Your Personal Data

cd444 does not sell your personal data. We share your data only with the following categories of third parties, and only to the extent necessary for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks (including Dutch-Bangla Bank, BRAC Bank, City Bank, and others) receive the minimum transaction data necessary to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers receive identity documents submitted during the verification process for the sole purpose of confirming document authenticity and the User's age.
• Game content providers: Game studios and live casino operators including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe receive session data necessary to render game content and log game outcomes. These providers operate under their own independently audited data protection frameworks.
• Technology and hosting partners: Cloud infrastructure and hosting providers who process data on cd444's behalf under strict data processing agreements that require them to implement appropriate security measures and prohibit them from using data for their own purposes.
• Legal and regulatory authorities: cd444 will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by a valid legal order or where disclosure is necessary to protect the safety of Users or the public.

7. Cookies & Tracking Technologies

cd444 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. They allow cd444 to recognise your browser across sessions and provide a consistent, personalised experience.

cd444 uses the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cookies cannot be disabled without disrupting core platform functionality.
• Functional cookies: Remember your preferences, such as language settings and account display options, to improve your experience across sessions.
• Analytics cookies: Collect aggregated, anonymised data about how Users navigate and interact with the Platform, allowing cd444 to identify performance bottlenecks and prioritise improvements.
• Responsible gaming cookies: Store session-level data used to enforce session time reminders and cooling-off periods set by the User in their account settings.

cd444 does not use third-party advertising cookies or behavioural tracking cookies that build profiles for use by external advertising networks. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may prevent you from accessing certain features of the Platform.

8. Data Retention

cd444 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for a minimum of five (5) years following permanent account closure, to meet anti-money laundering and financial compliance record-keeping obligations.
• Transaction records: Retained for a minimum of seven (7) years from the date of the transaction, in accordance with standard financial record-keeping requirements.
• Customer support communications: Retained for three (3) years from the date of the interaction, to facilitate resolution of any subsequent disputes or complaints.
• Technical and usage data (logs): Retained for twelve (12) months, after which they are either deleted or anonymised and retained in aggregate form for platform analytics purposes only.
• Marketing consent records: Retained for three (3) years from the date consent was last given or withdrawn, to maintain a demonstrable audit trail of consent status.
• Responsible gaming records: Self-exclusion and deposit limit records are retained for the duration of the self-exclusion period plus five (5) years to prevent re-registration during an active exclusion period.

At the end of the applicable retention period, personal data is securely deleted using industry-standard deletion protocols, or irreversibly anonymised so that it can no longer be associated with any identifiable individual.

9. Data Security

cd444 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the cd444 platform.
• Encryption of sensitive data fields at rest within cd444's database infrastructure.
• Role-based access controls ensuring that only authorised personnel with a legitimate need can access specific categories of personal data.
• Regular penetration testing and security audits conducted by independent security professionals.
• Multi-factor authentication requirements for all administrative access to systems holding personal data.
• Automated anomaly detection systems that flag unusual access patterns for immediate investigation.
• Staff training on data protection and information security obligations, conducted at least annually.

Notwithstanding the above, no data transmission over the internet or storage system can be guaranteed to be 100% secure. In the event of a personal data breach that poses a material risk to Users, cd444 will notify affected Users without undue delay following discovery of the breach, in accordance with applicable data breach notification obligations.

10. Your Privacy Rights

As a User of the cd444 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact cd444 support via live chat with the subject "Privacy Rights Request". cd444 will respond to all valid requests within thirty (30) calendar days.

• Right of access: You may request a copy of all personal data that cd444 holds about you, along with information about the purposes for which it is processed and the categories of third parties with whom it is shared.
• Right to rectification: You may request correction of any personal data that is inaccurate, incomplete, or out of date. For data you can edit directly in your account profile, you are encouraged to update it yourself without needing to contact support.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and there is no other legal basis for processing, or where the data has been unlawfully processed. Erasure requests are subject to cd444's legal retention obligations, as described in Section 8.
• Right to restriction of processing: You may request that cd444 restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested or while a legitimate-interests objection is being assessed.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that cd444 provide your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You may object to processing of your personal data where that processing is based on cd444's legitimate interests. cd444 will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

11. Children's Privacy

The cd444 platform is strictly intended for individuals aged 21 years and above. cd444 does not knowingly collect, solicit, or process personal data from individuals under the age of 21. The Platform employs age verification controls during the registration process to prevent access by minors.

If cd444 becomes aware that personal data has been collected from an individual who is under 21 years of age, that account will be immediately suspended, all associated data will be deleted, and any funds held in the account will be returned to the verified payment source following an investigation.

If you have reason to believe that a minor has registered an account on cd444, please notify our support team via live chat immediately so that the matter can be investigated without delay.

12. International Data Transfers

Some of the third-party service providers with whom cd444 shares personal data, as described in Section 6, may be based in or operate data infrastructure located outside of Bangladesh. Where personal data is transferred to a recipient in another country, cd444 takes steps to ensure that appropriate safeguards are in place to protect that data to a standard equivalent to the protections described in this Privacy Policy.

Such safeguards include requiring all international data processors to sign data processing agreements that impose data protection obligations consistent with applicable law, and conducting periodic assessments of processors' security practices and compliance status.

Game content providers such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, and Microgaming are subject to regulation by internationally recognised gaming authorities and maintain their own certified data protection frameworks, which are available for review on their respective corporate websites.

13. Changes to This Privacy Policy

cd444 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, evolving best practices, changes to the Platform's features, or changes to our data processing activities. The updated Policy will be published on this page with a revised Effective Date.

Where changes are material — meaning they significantly affect the way in which cd444 processes your personal data or the rights available to you — cd444 will endeavour to provide advance notice via a platform notification or email to your registered address, where practicable.

Your continued use of the cd444 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not accept the changes, you should discontinue use of the Platform and contact support to request account closure and deletion of your data in accordance with Section 10.

Version: 2.4  |  Last Reviewed: 1 January 2026  |  Effective Date: 1 January 2026

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which cd444 processes your personal data, please contact our Data Protection team via one of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the cd444 platform. This is the fastest way to reach the support team for data-related enquiries.
• Email: [email protected] — Please include "Privacy Request" in the subject line and provide your registered username to help us locate your account quickly.

All privacy-related correspondence is handled by cd444's dedicated data protection function, which operates during Bangladesh Standard Time (BST, UTC+6) business hours. Formal written requests submitted via email will receive an acknowledgement within two (2) business days and a substantive response within thirty (30) calendar days.

cd444 takes all privacy complaints seriously. If you are not satisfied with the response you receive, you have the right to escalate your complaint to the appropriate data protection authority or to seek independent legal advice.