ch44 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

ch44 is an online betting and casino platform accessible at https://ch44.io, operated for the benefit of players located in Bangladesh. References to "ch44", "we", "us", or "our" in this Privacy Policy refer to the ch44 platform and the entity responsible for its operation.

For the purposes of data protection law, ch44 acts as the data controller in respect of the personal data of registered players and platform visitors. As data controller, ch44 determines the purposes for which personal data is collected and the means by which it is processed. ch44 takes this responsibility seriously and has implemented appropriate technical and organisational measures to meet its obligations.

If you have any questions about this Privacy Policy or about how ch44 handles your personal data, you may contact our support team at support@ch44.io at any time. All privacy-related enquiries are handled with priority and treated as confidential.

The categories of personal data that ch44 may collect and process about you are described in the table below. Not all categories apply to every player — the specific data collected depends on which services you use and how you interact with the platform.

ch44 collects personal data through the following channels and mechanisms:

• When you complete the ch44 registration form and create an account.
• When you submit identity and address documents as part of the KYC verification process.
• When you make a deposit or request a withdrawal, providing payment method details.
• When you contact ch44 customer support via email or live chat.
• When you update your account profile, change your password, or adjust responsible gaming settings.
• When you respond to surveys, promotions, or provide feedback through the platform.

When you access the ch44 platform, our servers and analytics systems automatically record certain technical and usage data. This includes your IP address, the device and browser you use, the pages and games you access, the duration of your sessions, and timestamps of key actions. This data is collected using server logs, cookies, and similar tracking technologies as described in Section 9.

ch44 may receive personal data about you from trusted third-party sources in the following circumstances:

• KYC and identity verification providers who confirm whether your submitted identity documents are genuine and match your registration details.
• Payment processors including mobile wallet operators (bKash, Nagad, Rocket, Upay) and banking partners, who provide transaction confirmation data.
• Fraud detection and anti-money laundering (AML) screening services that flag accounts associated with known fraudulent activity or sanctions lists.
• Analytics providers who supply aggregated and anonymised data to help ch44 understand platform usage trends.

Data received from third parties is subject to the same security and processing standards applied to data collected directly from you.

ch44 processes your personal data only where a lawful basis under applicable data protection law exists. The table below sets out the primary purposes for which your data is processed and the corresponding legal basis for each:

ch44 does not sell, rent, or trade your personal data to any third party for commercial gain. Your data is shared only in the limited circumstances described below, and always subject to appropriate contractual safeguards:

ch44 engages third-party service providers who process personal data on our behalf and under our instruction as data processors. These include:

• KYC and identity verification vendors who validate the authenticity of identity documents.
• Payment processors and mobile wallet operators (bKash, Nagad, Rocket, Upay) who facilitate deposits and withdrawals.
• Banking partners (BRAC Bank, Dutch-Bangla Bank, City Bank, Islami Bank, Sonali Bank) for bank-transfer transactions.
• Game software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who may receive session data required to deliver their games.
• Fraud detection and AML screening service providers.
• Cloud hosting and infrastructure providers who store platform data in secure, encrypted environments.
• Customer support platform providers who power our live chat and email support systems.

All service providers are bound by data processing agreements requiring them to protect your personal data to the same standard as ch44 and to process it only for the purposes specified by ch44.

ch44 may disclose your personal data to law enforcement agencies, regulatory authorities, financial intelligence units, or courts where required to do so by applicable law, regulatory direction, or valid legal process. Such disclosures are made without prior notice to you where legally required or permitted. ch44 does not voluntarily disclose player data to government bodies beyond what is legally required.

In the event that ch44 undergoes a merger, acquisition, restructuring, or sale of all or a substantial portion of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via your registered email address and will be provided with an opportunity to delete your account before the transfer is completed if you do not wish your data to be transferred.

ch44's primary platform infrastructure is hosted in data centres serving the South and Southeast Asian region to minimise latency for Bangladeshi players and to keep data geographically proximate to the jurisdiction of origin.

In certain circumstances, personal data may be accessed by or transferred to service providers located outside Bangladesh — for example, when a game software provider headquartered in a different country processes game session data, or when our cloud infrastructure provider routes data through servers in multiple geographic locations for redundancy and performance purposes.

Where such international transfers occur, ch44 ensures that appropriate safeguards are in place to protect your personal data. These safeguards may include:

• Standard contractual clauses or equivalent data transfer agreements with the recipient organisation.
• Transfers to recipients in jurisdictions that provide a comparable level of data protection.
• End-to-end encryption of data in transit such that no intermediate party can access plain-text personal data.

You may request information about the specific safeguards in place for any international data transfer by contacting support@ch44.io.

ch44 retains personal data for the periods described below, after which data is securely deleted or irreversibly anonymised. Retention periods are set with reference to the purpose for which the data was collected and any applicable legal requirements to retain records:

Upon expiry of the applicable retention period, ch44 will delete or anonymise your personal data without further notice. If you request account closure before the retention period expires, ch44 will cease active use of your data for commercial purposes but will retain it in a restricted archive for the period required by law.

ch44 applies a multi-layered technical and organisational security framework to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures in place include:

• Encryption in transit: All data exchanged between your device and the ch44 platform is encrypted using TLS 1.2 or higher. The ch44 platform operates exclusively over HTTPS.
• Encryption at rest: Sensitive personal data stored on ch44 servers — including identity documents, financial data, and password hashes — is encrypted using AES-256.
• Access controls: Access to personal data within ch44 is restricted to authorised personnel on a strict need-to-know basis. Role-based access controls and multi-factor authentication are enforced for all internal system access.
• Password security: Player passwords are never stored in plain text. ch44 uses industry-standard one-way hashing with salting (bcrypt) to store password credentials.
• Penetration testing: ch44's platform infrastructure undergoes regular third-party security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: ch44 maintains a documented data breach response procedure. In the event of a breach that poses a risk to player rights and freedoms, affected players and relevant authorities will be notified in accordance with applicable legal timeframes.
• Staff training: All ch44 personnel with access to personal data receive regular data protection and security awareness training.

ch44 uses cookies and similar tracking technologies on the platform to deliver core functionality, analyse usage patterns, and improve the player experience. The types of cookies ch44 uses are described below:

• Strictly Necessary Cookies: These cookies are essential for the ch44 platform to function correctly. They enable session management, login authentication, and security features. Without these cookies, the platform cannot operate. These cookies do not require your consent.
• Functional Cookies: These cookies remember your preferences — such as your preferred language settings, the last game you played, and responsible gaming tool settings — so that you do not need to re-enter them on each visit.
• Analytics Cookies: These cookies collect aggregated, anonymised data about how players use the ch44 platform — which pages are visited most frequently, where players spend most time, and how they navigate between sections. This data is used to improve platform design and content. Analytics cookies are only placed with your consent.
• Security Cookies: These cookies assist ch44's fraud detection systems by flagging unusual device or session behaviour that may indicate account takeover attempts or bot activity.

You may manage cookie preferences through your browser settings at any time. Blocking strictly necessary cookies will impair or prevent access to the ch44 platform. Blocking functional or analytics cookies will not prevent you from using the platform but may reduce personalisation features.

Under applicable data protection law, you have the following rights in respect of your personal data held by ch44. To exercise any of these rights, submit a written request to support@ch44.io from your registered email address. ch44 will verify your identity before processing any data rights request and will respond within 30 days.

• Right of Access: You have the right to obtain a copy of all personal data that ch44 holds about you, along with information about how it is being used. This is commonly referred to as a Subject Access Request (SAR).
• Right to Rectification: You have the right to have inaccurate or incomplete personal data corrected without undue delay. You can update most account information directly through your account settings panel; for identity data, contact support.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where you object to processing and there is no overriding legitimate interest. This right is subject to legal retention obligations — ch44 may be required to retain certain data for specified periods as described in Section 7.
• Right to Restriction: You have the right to request that ch44 restrict the processing of your personal data in certain circumstances, for example while a complaint or accuracy dispute is being investigated.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another data controller.
• Right to Object: You have the right to object at any time to processing of your personal data where the legal basis is legitimate interest. ch44 will cease processing unless it can demonstrate compelling legitimate grounds that override your rights, or where processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where ch44 processes your data based on your consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

The ch44 platform is strictly intended for use by individuals who are 21 years of age or older. ch44 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the ch44 registration and KYC process, and accounts found to belong to underage individuals are closed immediately with all deposits returned.

If you believe that ch44 has inadvertently collected personal data relating to a person under 21, please notify us immediately at support@ch44.io. Upon receiving such a notification, ch44 will promptly investigate, close the account if the player is confirmed to be underage, and delete all associated personal data within 30 days of confirmation, subject to any legal obligation to retain records of the incident.

Parents or guardians who are concerned that a minor in their care may have accessed or registered on the ch44 platform are encouraged to contact our support team as a matter of urgency. ch44 takes underage gambling prevention seriously and cooperates fully with such requests.

ch44 may send you promotional communications about bonuses, new game releases, seasonal offers (such as Eid promotions, Pohela Boishakh specials, and BPL cricket season offers), and platform updates. Marketing communications are sent only where you have given your explicit consent to receive them, typically during the registration process or through your account notification preferences.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "unsubscribe" link at the bottom of any marketing email sent by ch44.
• Updating your notification preferences in your ch44 account settings panel.
• Sending a written request to support@ch44.io specifying that you wish to opt out of marketing communications.

Withdrawal of marketing consent will take effect within 5 business days. You will continue to receive service notifications — such as deposit confirmations, withdrawal alerts, security alerts, and policy update notices — regardless of your marketing preference, as these are sent on the basis of contractual necessity and legitimate interest rather than consent.

The ch44 platform may contain references to or links to third-party services — for example, links to game providers, payment partners, or sports data feeds. These third-party services operate under their own privacy policies, which are entirely independent of this Privacy Policy. ch44 has no control over, and accepts no responsibility for, the privacy practices or content of any third-party service.

When you navigate away from the ch44 platform to a third-party site or service, you do so at your own risk. ch44 strongly recommends that you review the privacy policy of any third-party service before providing your personal data to it. The inclusion of a reference or link to a third-party service on the ch44 platform does not constitute an endorsement of that service or its privacy practices.

ch44 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. The effective date at the top of this document indicates when the current version came into force.

Where a change is material — meaning it affects your rights, introduces new categories of data collection, or changes the purposes for which your data is used — ch44 will notify you via your registered email address at least 14 days before the change takes effect. This advance notice period gives you the opportunity to review the updated policy and, if you disagree with the changes, to close your account before they apply to you.

For minor, non-material amendments — such as corrections to typographical errors, clarifications of existing language that do not alter the substance of our commitments, or updates to contact information — ch44 may update the policy without advance individual notice, though the revised document will always be published on this page with an updated effective date.

Continued use of the ch44 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the updated Privacy Policy, you must cease using the platform and may request closure of your account by contacting support@ch44.io.

If you have any questions, concerns, or complaints relating to this Privacy Policy or to the way ch44 handles your personal data, please contact our support team in the first instance:

• Email: support@ch44.io (plain text — not a clickable link)
• Response time: All privacy-related enquiries are acknowledged within 5 business days and resolved within 30 calendar days where possible.
• Language: You may correspond with ch44 in English. Responses will be provided in English.

ch44 is committed to resolving all privacy complaints fairly and transparently through direct dialogue. We encourage you to contact us directly before escalating any concern, as most issues can be resolved quickly through our internal process.