ch4444 Privacy Policy

This Privacy Policy ("Policy") sets out how ch4444 ("we", "us", "our") collects, uses, processes, stores, and protects the personal data of individuals ("you", "player", "user") who access ch4444.app and use our online casino and sports betting services. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, which collectively govern your relationship with ch4444. We process your personal data responsibly and with full respect for your rights as a player.

1 Data Controller Information

ch4444 acts as the data controller in respect of all personal data collected from players who register and use the Platform at ch4444.app. As data controller, ch4444 determines the purposes for which your personal data is processed and the means by which that processing is carried out. All data-related enquiries, requests, and complaints should be directed to our dedicated Privacy team.

1.1 How to Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Policy or the handling of your personal data, you may contact our Privacy team through any of the following channels:

• Email: [email protected] (subject line: "Privacy Request")
• Live Chat: Available 24/7 via the Platform — ask to speak with the Privacy team
• Response time: We aim to acknowledge all privacy-related requests within 2 business days and to provide a full response within 10 business days of receipt.

2 Personal Data We Collect

ch4444 collects personal data that you provide directly to us, data generated automatically through your use of the Platform, and in certain limited cases, data obtained from trusted third-party sources for identity verification and fraud prevention purposes. The categories of personal data we collect are set out below.

2.1 Data You Provide Directly

• Registration data: Full name, date of birth, Bangladeshi mobile number, chosen username, and password (stored as a salted hash — we never store plaintext passwords).
• KYC and identity documents: Scanned copies or photographs of your National Identity Card (NID), passport, or driver's licence, and supporting address-verification documents such as utility bills or bank statements.
• Payment information: Mobile banking account details (bKash, Nagad, Rocket, Upay) or bank account details used for deposits and withdrawals. Full card numbers are never stored on ch4444 servers — payment processing is handled by PCI-DSS-compliant payment partners.
• Communication data: Content of messages sent through our live chat system, emails sent to [email protected], and any feedback or complaints submitted via the Platform.
• Preference and self-exclusion data: Responsible gaming limits, time-out elections, self-exclusion requests, and any voluntary information you provide when setting up player protection tools.

2.2 Data Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and time-zone settings.
• Usage and behavioural data: Pages visited on the Platform, games played, bet amounts and frequencies, session duration, login timestamps, and click-stream data.
• Transaction data: Full record of all deposits, withdrawals, bonus credits, wagers placed, winnings, and refunds associated with your account.
• Cookies and tracking data: Information collected via cookies, pixel tags, and similar tracking technologies as described in Section 5 of this Policy.

2.3 Data from Third Parties

ch4444 may receive personal data about you from the following third-party sources where this is necessary for identity verification, fraud prevention, or compliance:

• Identity verification and KYC service providers who cross-reference the documents you submit against government databases.
• Payment providers (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank) who confirm the status and ownership of the payment method you use.
• Fraud detection and risk-scoring services that analyse transaction patterns to flag unusual activity for manual review.

2.4 Summary of Data Categories

3 Lawful Basis for Processing

ch4444 processes your personal data only where a lawful basis for that processing exists. The applicable lawful bases for our core processing activities are described below.

• Contractual necessity: Processing your registration data, KYC documents, transaction records, and account communications is necessary to perform the contract between you and ch4444 — specifically, to operate your account, process your deposits and withdrawals, and provide the Platform services you have signed up to use.
• Legal obligation: ch4444 is required by applicable anti-money laundering (AML), counter-terrorism financing (CTF), and responsible gaming obligations to collect and retain certain categories of personal data, including identity and transaction records, for defined minimum retention periods.
• Legitimate interests: ch4444 processes technical, usage, and behavioural data on the basis of its legitimate interest in operating a safe, fair, and secure platform — including fraud prevention, security monitoring, abuse detection, and Platform performance analysis. We conduct a balancing test to ensure our legitimate interests do not override your fundamental privacy rights.
• Consent: Where we send you optional promotional communications (such as bonus notifications or seasonal offer alerts), we do so only on the basis of your consent, which you may withdraw at any time through your account notification preferences or by contacting [email protected].

4 How We Use Your Data

The personal data we collect is used for the purposes described below. We will not use your personal data for any purpose that is materially different from those listed here without providing you with advance notice and, where required, obtaining your consent.

4.1 Platform Operations

• Creating, maintaining, and managing your ch4444 player account.
• Processing deposits and withdrawals through your chosen payment method.
• Verifying your age and identity in compliance with our KYC programme.
• Enabling you to place bets, play casino games, and access all Platform features.
• Crediting bonuses, Rewards points, and promotional offers to your account.

4.2 Safety, Security, and Compliance

• Detecting, investigating, and preventing fraud, money laundering, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Verifying that you are not a self-excluded player or a previously banned account holder.
• Complying with applicable legal, regulatory, and reporting obligations including AML and CTF requirements.
• Monitoring and investigating suspicious betting patterns that may indicate match-fixing or integrity violations.

4.3 Customer Support

• Responding to your support queries, complaints, and feedback received via live chat or email.
• Maintaining records of support interactions for quality assurance and dispute resolution purposes.
• Proactively contacting you about account security events (e.g., unusual login attempts, failed payment transactions).

4.4 Responsible Gaming

• Administering and enforcing the responsible gaming limits, time-out periods, and self-exclusion elections you have set.
• Monitoring play patterns that may indicate problem gambling and, where appropriate, proactively reaching out with responsible gaming information.
• Ensuring that self-excluded players cannot access the Platform during their exclusion period, including by checking registration details against our self-exclusion database.

4.5 Marketing and Personalisation

With your consent, ch4444 may use your usage data and game preferences to personalise in-Platform content recommendations and to send you information about promotions, bonuses, and seasonal offers that are relevant to your playing habits. You may withdraw marketing consent at any time through your account settings or by emailing [email protected] with the subject line "Unsubscribe — Marketing". Withdrawal of marketing consent does not affect the lawfulness of any processing carried out before withdrawal.

5 Cookies & Tracking Technologies

ch4444 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain your session state, to prevent fraud, and to analyse how players interact with our services so that we can improve them. This section explains the types of cookies we use and how you can manage them.

5.1 What Are Cookies?

Cookies are small text files stored on your device (computer, smartphone, or tablet) when you visit a website. They allow the site to recognise your device on subsequent visits and to retain information about your preferences and session state. Cookies cannot execute programs or deliver viruses to your device.

5.2 Types of Cookies We Use

5.3 Managing Your Cookie Preferences

Strictly necessary cookies cannot be disabled as they are essential for the Platform to function. For all other cookie categories, you may update your preferences through your browser settings. Most modern browsers allow you to refuse all non-essential cookies, delete existing cookies, and receive notifications when new cookies are set. Please note that disabling functional or analytics cookies may affect the quality of your experience on ch4444 — for example, your game display preferences may not be retained between sessions.

6 Data Sharing & Third Parties

ch4444 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

6.1 Service Providers and Data Processors

ch4444 engages a number of third-party service providers who process personal data on our behalf under written data processing agreements. These providers are contractually required to process your data only according to ch4444's instructions and to maintain appropriate technical and organisational security measures. Categories of service provider include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank — to facilitate deposits and withdrawals.
• KYC and identity verification providers: To cross-reference identity documents against authoritative databases for age and identity confirmation.
• Fraud and risk management services: To score transactions and flag unusual account activity for manual review.
• Game software providers: Including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — who receive pseudonymised session and wager data necessary to operate the game servers.
• Cloud infrastructure and hosting providers: Who store Platform data on servers protected by industry-standard encryption and physical security controls.
• Customer support platform providers: Who host our live chat and email ticketing systems.

6.2 Legal and Regulatory Disclosures

ch4444 may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where we are legally required to do so — for example, in response to a valid court order, a regulatory investigation, or a mandatory AML/CTF suspicious activity report. In such cases, ch4444 will disclose only the minimum data necessary to comply with the legal obligation and will, where legally permitted, notify the affected player of the disclosure.

6.3 Business Transfers

In the event that ch4444 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal data may be transferred to the successor entity as part of that transaction. ch4444 will notify registered players via email or prominent in-Platform notice prior to any such transfer, and the successor entity will be bound by a privacy policy that provides at least equivalent protections to this Policy.

6.4 No Cross-Border Transfers Without Safeguards

Where ch4444 transfers personal data to service providers located outside Bangladesh, we ensure that appropriate safeguards are in place — including contractual data transfer agreements that impose equivalent data protection standards on the recipient. ch4444 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing such contractual safeguards.

7 Data Retention & Deletion

ch4444 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. When personal data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with an individual.

7.1 Retention Periods by Data Category

7.2 Account Closure and Data Deletion Requests

If you close your ch4444 account, your active account data will be deactivated immediately and you will no longer be able to log in. However, ch4444 is legally required to retain certain categories of data — particularly identity records and financial transaction history — for a minimum of five years after account closure in accordance with AML obligations. Data that is not subject to a mandatory retention period will be deleted or anonymised within 90 days of your account closure request.

To request account closure and initiate the data deletion process, contact ch4444 support via live chat or at [email protected] with the subject line "Account Closure & Data Deletion Request". You will be required to verify your identity before the closure is processed.

8 Your Privacy Rights

ch4444 recognises and respects the privacy rights of all players. You have the following rights with respect to your personal data held by ch4444. To exercise any of these rights, contact our Privacy team at [email protected] with the subject line "Privacy Rights Request". We will respond within 10 business days of receipt.

• Right of Access: You have the right to request a copy of the personal data ch4444 holds about you, along with information about how it is being processed. This is commonly referred to as a Subject Access Request (SAR).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update certain account details directly through your account settings panel.
• Right to Erasure: In certain circumstances, you have the right to request that ch4444 delete your personal data. This right is subject to exceptions where we are legally required to retain data, such as AML retention obligations described in Section 7.
• Right to Restrict Processing: You have the right to request that ch4444 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being verified following a rectification request.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to request that it be transferred directly to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on ch4444's legitimate interests. You also have an absolute right to object to your data being used for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.