Privacy Policy — 444ak Online Casino Bangladesh

Section 01

Information We Collect

444ak collects personal data from players in Bangladesh and other regions in order to operate the Platform safely, process transactions accurately, comply with our anti-money-laundering obligations, and provide a personalised, high-quality gaming experience. We collect data in three primary ways: information you provide directly to us, information generated automatically by your use of the Platform, and information we receive from trusted third-party partners.

Information You Provide Directly

When you register an account, complete identity verification (KYC), contact our support team, or interact with any feature of the 444ak Platform, you voluntarily provide personal information that we collect and process. This includes:

Data Category	Specific Data Points	When Collected
Identity Data	Full legal name, date of birth, national ID or passport number	Registration & KYC verification
Contact Data	Email address, mobile phone number, district/city of residence	Registration & account management
Financial Data	bKash/Nagad/Rocket account number, Visa/Mastercard last four digits, transaction history	Deposit, withdrawal, and payment processing
Account Credentials	Username, hashed password, security question responses	Account creation
Communication Data	Live chat transcripts, support emails, dispute records	Customer support interactions
Verification Documents	Scanned copies of national ID, passport, proof of payment method	KYC and withdrawal verification

Information Collected Automatically

When you access the 444ak Platform — whether via a desktop browser or a mobile device — certain technical data is collected automatically through cookies, log files, and similar tracking technologies. This data helps us maintain platform security, detect fraud, and improve the user experience. Automatically collected data includes:

IP address and approximate geographic location (city/region level, derived from IP).
Device type, operating system, browser type and version.
Pages visited, features accessed, time spent on each section, and clickstream data.
Date and time of each session, session duration, and login/logout timestamps.
Game activity logs including game titles played, bet amounts, game outcomes, and session length.
Referral source (e.g., which link or search result brought you to the Platform).
Cookie identifiers and similar tracking tokens — see the Cookies section for full details.

Information from Third Parties

444ak may receive supplementary personal data about you from trusted third-party partners in the following contexts: (a) payment processors such as bKash, Nagad, Rocket, Upay, and card networks may confirm transaction outcomes and flag potential fraud indicators; (b) identity verification service providers may return a verification result (pass or fail) along with confidence scores as part of our KYC process; (c) game providers such as Pragmatic Play, Evolution Gaming, Spribe, and WM Live may share session data related to your gameplay on their platforms for reconciliation and fairness audit purposes.

          Minimisation Principle: 444ak collects only the personal data that is strictly necessary for the purposes described in this Privacy Policy. We do not collect sensitive data categories such as racial or ethnic origin, religious beliefs, political opinions, or medical history unless specifically required by applicable law or expressly provided by you in a support context.
        

Section 02

How We Use Your Data

444ak processes your personal data on a number of legal bases depending on the purpose. For registered players in Bangladesh, the primary lawful bases for processing are: (a) the performance of the contract between you and 444ak (i.e., operating your account and delivering the Services); (b) compliance with legal obligations (KYC, anti-money-laundering, age verification); (c) our legitimate interests in operating a safe, commercially viable, and fair gaming platform; and (d) your consent where processing is based on a freely given, specific, and informed opt-in.

The following table summarises the specific purposes for which your personal data is used and the legal basis applicable to each:

Purpose	Data Used	Legal Basis
Account creation & management	Identity, contact, credential data	Contractual necessity
Processing deposits & withdrawals	Financial data, identity data	Contractual necessity
Age & identity verification (KYC)	Identity data, verification documents	Legal obligation
Fraud prevention & security monitoring	Technical data, financial data, behavioural data	Legitimate interests
Responsible gaming monitoring	Game activity logs, session data, deposit patterns	Legitimate interests & legal obligation
Customer support	Communication data, account data	Contractual necessity
Promotional communications (email/SMS)	Contact data, game preferences	Consent (opt-in)
Platform analytics & improvement	Technical data, clickstream data	Legitimate interests
Legal compliance & dispute resolution	All relevant data categories	Legal obligation & legitimate interests

Promotional Communications

If you have opted in to receive marketing communications from 444ak, we may send you emails or SMS messages relating to new game launches, seasonal promotions (such as Eid, Pohela Boishakh, or BPL season offers), deposit bonuses, and other platform news. You may withdraw your consent to receive marketing communications at any time by updating your notification preferences in your account dashboard or by contacting support at support@444ak.app. Withdrawing marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.

          No Data Selling: 444ak does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Your data is used exclusively for the purposes described in this Privacy Policy and in the performance of the services you have signed up for on the 444ak Platform.
        

Section 03

Data Sharing & Disclosure

444ak treats the confidentiality of your personal data with the utmost seriousness. We do not disclose your personal data to any third party except in the specific circumstances set out below. In every case where data is shared with a third party, 444ak applies contractual and technical safeguards to ensure that the recipient processes your data only for the stated purpose and with an appropriate level of security.

Service Providers & Data Processors

444ak works with a number of third-party service providers who process personal data on our behalf in order to deliver the Platform and its associated services. These providers act as data processors under our instruction and are contractually prohibited from using your data for their own independent purposes. Current categories of data processor include:

Payment processors: bKash, Nagad, Rocket, Upay, and card network processors receive the minimum financial data necessary to execute deposit and withdrawal transactions.
Identity verification providers: Third-party KYC and anti-fraud service providers receive identity documents and verification data solely for the purpose of confirming your identity and age.
Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, WM Live, and other certified game studios receive session tokens and player identifiers necessary to launch and operate their games on the 444ak Platform. Game providers do not receive your full identity or financial data.
Cloud hosting & infrastructure providers: Our hosting and database service providers store Platform data on encrypted servers and may process technical data as part of infrastructure operations.
Customer support tools: Live chat and support ticketing platforms process communication data (chat transcripts, email content) in order to facilitate our customer support operations.
Analytics providers: Aggregated, anonymised usage data may be processed by analytics tools to help us understand platform performance and user behaviour trends.

Legal Disclosures

444ak may disclose your personal data to law enforcement agencies, regulatory authorities, courts, or other government bodies where we are required to do so by applicable law, a valid court order, or a lawful regulatory direction. In such cases, 444ak will disclose only the minimum data required to satisfy the legal obligation and, where permitted by law, will endeavour to notify the affected user of the disclosure.

Business Transfers

In the event that 444ak undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, personal data held by the Company may be transferred to the acquiring or merging entity as part of that transaction. In such an event, affected users will be notified via their registered email address and the incoming entity will be required to honour the commitments made in this Privacy Policy.

International Transfers: Some of our service providers — particularly cloud hosting and game provider partners — may process your data in countries outside Bangladesh. Where data is transferred internationally, 444ak ensures appropriate safeguards are in place, including contractual data protection clauses, to maintain an equivalent standard of protection to that described in this Privacy Policy.

Section 04

Cookies & Tracking Technologies

444ak uses cookies and similar tracking technologies — including pixel tags, web beacons, and local storage objects — to operate the Platform, maintain your login session, remember your preferences, protect against fraud, and analyse how players interact with our games and features. This section explains what cookies we use, why, and how you can manage them.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, maintain session continuity, and remember certain preferences. Cookies do not contain executable code and cannot access files stored elsewhere on your device. They can be session cookies (deleted when you close your browser) or persistent cookies (stored on your device for a defined period).

Categories of Cookies Used by 444ak

Cookie Type	Purpose	Duration
Strictly Necessary	Maintain your login session, secure account access, prevent cross-site request forgery, load balance server traffic. These cannot be disabled without breaking core platform functionality.	Session
Functional	Remember your language preference, display settings, and last-viewed game category so the Platform loads faster on your next visit.	Up to 12 months
Performance / Analytics	Collect anonymised data on page views, click paths, session duration, and error rates to help us improve Platform performance and user experience.	Up to 24 months
Security / Anti-Fraud	Detect unusual login patterns, flag suspicious account activity, and cross-reference device fingerprints to prevent account takeover and bonus abuse.	Up to 6 months

Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, delete, and block cookies from specific websites. Please note that disabling strictly necessary cookies will prevent you from logging in to your 444ak account and using core platform features. Disabling functional or analytics cookies will not prevent you from using the Platform but may result in a less personalised experience. Instructions for managing cookies in popular browsers are available via each browser's official help documentation. Clearing your browser cookies will also remove your saved login session, requiring you to log in again on your next visit.

          No Third-Party Advertising Cookies: 444ak does not currently place third-party advertising or retargeting cookies on the Platform. We do not share cookie data with external advertising networks or social media platforms for the purpose of serving targeted advertisements to you on other websites.
        

Section 05

Data Retention & Storage

444ak retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The retention periods applied to different categories of personal data are set out below. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

Data Category	Retention Period	Reason
Account & identity data	Duration of account + 5 years after closure	Anti-money-laundering compliance and dispute resolution
KYC verification documents	Duration of account + 5 years after closure	Regulatory and legal compliance obligations
Financial transaction records	7 years from date of transaction	Financial record-keeping requirements
Game activity logs	3 years from date of activity	Fair play audit, dispute resolution, responsible gaming monitoring
Customer support communications	2 years from date of interaction	Quality assurance and dispute resolution
Marketing consent records	Until consent is withdrawn + 1 year	Evidence of lawful processing basis
Analytics / technical data	Up to 24 months (anonymised after 6 months)	Platform performance analysis

Storage Location & Security

All personal data processed by 444ak is stored on encrypted servers operated by reputable cloud hosting providers. Data at rest is encrypted using industry-standard AES-256 encryption. Data in transit between your device and the 444ak Platform is protected by TLS 1.2 or higher (SSL) encryption, as indicated by the padlock icon in your browser's address bar. Access to personal data within 444ak's internal systems is restricted on a strict need-to-know basis, with all access logged and audited. Staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.

          Data Breach Response: In the event of a personal data breach that poses a risk to your rights and freedoms, 444ak will notify affected users via their registered email address without undue delay. We maintain an internal incident response protocol to contain, assess, and remediate any data security incidents in the shortest possible timeframe.
        

Section 06

Your Privacy Rights

As a user of the 444ak Platform, you hold a number of rights in relation to the personal data we hold about you. 444ak is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights described in this section, please contact our support team at support@444ak.app with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and aim to complete all requests within 30 calendar days. In cases of complexity or high volume, this period may be extended by up to a further 30 days, with notice provided to you.

Right of Access: You have the right to request a copy of all personal data we hold about you, along with information about the purposes for which it is processed, the categories of data held, and any third parties with whom it has been shared. This is sometimes referred to as a Subject Access Request (SAR).
Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update many standard account details (such as your email address and phone number) directly via your account dashboard.
Right to Erasure: You may request the deletion of your personal data where: it is no longer necessary for the purposes for which it was collected; you withdraw consent and there is no other legal basis for processing; or the data has been processed unlawfully. Please note that the right to erasure is not absolute — we may be required to retain certain data to comply with legal obligations (e.g., KYC records and transaction data required for anti-money-laundering compliance).
Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of your data is being contested, or while a legitimate interests objection is being assessed.
Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV).
Right to Object: You have the right to object at any time to the processing of your personal data where that processing is based on 444ak's legitimate interests. You also have an unconditional right to object to the processing of your data for direct marketing purposes, including profiling related to direct marketing.
Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

          Identity Verification for Rights Requests: To protect the security of your personal data, 444ak is required to verify your identity before actioning any privacy rights request. You will be asked to confirm certain account details and may be required to provide a copy of your identity document. This is a standard precaution to ensure that personal data is not disclosed to, or deleted on the instruction of, an unauthorised third party.
        

Section 07

Data Security Measures

Protecting the personal data of our players is a core operational priority at 444ak. We have implemented a layered security architecture combining technical, organisational, and procedural controls designed to prevent unauthorised access, accidental loss, alteration, or disclosure of personal data. The key security measures in place include the following:

256-Bit SSL Encryption

All data transmitted between your browser or app and the 444ak Platform is protected by TLS 1.2+ with AES-256 encryption. Look for the padlock icon in your browser address bar as confirmation.

Encrypted Data Storage

All personal data held in 444ak databases is encrypted at rest using AES-256. Database access is restricted to authorised system processes only — no staff member has unmediated access to raw personal data.

Role-Based Access Control

Internal access to personal data is governed by a strict role-based access control (RBAC) policy. Staff members are granted only the minimum level of data access required to perform their specific job function.

Fraud Detection Systems

444ak operates automated fraud detection and anomaly-monitoring systems that analyse login patterns, transaction behaviour, and session data in real time to identify and block suspicious activity before it causes harm.

Secure Password Hashing

Account passwords are never stored in plain text. 444ak uses a modern, salted cryptographic hashing algorithm to store password credentials so that even in the event of a database compromise, plaintext passwords cannot be recovered.

Regular Security Audits

The 444ak Platform undergoes regular internal and third-party security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses before they can be exploited.

While 444ak takes every reasonable precaution to protect your personal data, no online platform can guarantee absolute security against all possible threats. You also play an important role in keeping your account secure: choose a strong, unique password, do not share your login credentials with anyone, and contact support immediately if you notice any suspicious activity on your account. For guidance on secure account use, visit the FAQ page.

Section 08

Contact & Data Controller

444ak is the data controller responsible for the personal data collected and processed through the 444ak Platform at https://444ak.app. As data controller, 444ak determines the purposes and means of processing your personal data in accordance with this Privacy Policy. If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which your personal data is handled, please contact us using the details below.

          Privacy & Data Protection Enquiries

          For all privacy-related queries, Subject Access Requests, erasure requests, consent withdrawal, and data breach reports, please contact us at:

          Email: support@444ak.app (subject line: "Privacy Rights Request")

          Response time: Within 5 business days of receipt (Bangladesh Standard Time, UTC+6)

          Our support team is available 24 hours a day, 7 days a week via live chat on the 444ak Platform for general account and privacy queries. For formal legal data protection requests, email is the preferred and most reliable channel.

Updates to This Privacy Policy

444ak reserves the right to update or amend this Privacy Policy at any time. When changes are made, the revised policy will be published at https://444ak.app/privacy-policy with an updated effective date in the hero section of this page. Where changes are material — for example, a new category of data being collected or a new purpose for processing — registered users will be notified via the email address associated with their 444ak account. Your continued use of the Platform after a revised Privacy Policy has been published constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed of how your data is being protected.

Complaints

If you believe that 444ak has processed your personal data in a manner that does not comply with this Privacy Policy or applicable data protection principles, you have the right to raise a complaint with us directly. We take all privacy complaints seriously and will investigate and respond to every complaint received. Please contact support@444ak.app with full details of your concern. If you are not satisfied with our response, you may also seek independent legal advice or raise the matter with any relevant data protection authority in your jurisdiction.

444ak Privacy Policy