at44 Privacy Policy — How We Handle Your Personal Data

at44 is an online sports betting and casino platform operated under the brand name at44, accessible at https://at44.io. We serve players across Bangladesh, offering cricket betting, live casino games, slots, and digital payment services through the Finance / Wallet system.

For the purposes of this Privacy Policy, at44 is the data controller — meaning we determine the purposes and means by which your personal data is collected and processed. When we use terms such as "we", "us", or "our", we are referring to at44 and its platform operations.

We understand that entrusting your personal information to an online platform requires confidence in how that data is managed. This policy is written in plain English to give you a clear, honest account of our data practices — free from unnecessary legal complexity.

at44 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and from third-party service providers where necessary for payment processing and identity verification.

Information you provide directly:

• Registration data: Full legal name, date of birth, email address, mobile phone number, and residential address (including city — e.g., Dhaka, Chittagong, Sylhet, Khulna).
• Identity verification (KYC) documents: National ID card (NID), passport, or other government-issued identification; proof of address documentation where requested.
• Payment information: Mobile wallet identifiers (bKash, Nagad, Rocket, Upay numbers), bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, etc.), and card details (Visa, Mastercard) submitted during deposit or withdrawal. Full card numbers are never stored — only tokenised payment references are retained.
• Support communications: The content of any messages, chat logs, or emails you send to the at44 support team.
• Responsible gaming preferences: Self-exclusion requests, deposit limit settings, cooling-off period requests, and session time preferences you configure in your account.

Information collected automatically:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and language preference.
• Usage data: Pages visited, time spent on each page, games played, bets placed, bet amounts, game results, and navigation paths through the platform.
• Session data: Login timestamps, session duration, and logout events.
• Cookie and tracking data: As described in Section 05 of this policy.

at44 uses your personal data for clearly defined purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The following table summarises our primary data uses:

at44 will never sell your personal data to third parties for their own marketing purposes. Any promotional communications sent by at44 are based on your prior consent and may be withdrawn at any time by updating your notification preferences in your account settings or by contacting support.

at44 processes your personal data only where a valid legal basis exists for doing so. Our primary legal bases are as follows:

• Contractual necessity: Processing required to fulfil our obligations under the account agreement you entered into when registering — including account management, payment processing, and delivery of betting and gaming services.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) checks, know-your-customer (KYC) verification, and fraud prevention duties.
• Legitimate interests: Processing carried out for at44's legitimate business interests where those interests are not overridden by your rights — including platform security monitoring, fraud detection, responsible gaming analytics, and internal reporting. We always assess whether our legitimate interests are proportionate and do not unduly affect your privacy.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

at44 uses cookies and similar tracking technologies to ensure the platform functions correctly, to analyse usage patterns, and — where you have consented — to deliver relevant promotional content. The following categories of cookies are used on the at44 platform:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and user preference cookies (e.g., language setting). These cookies cannot be disabled without affecting your ability to use the platform.
• Performance and analytics cookies: Used to understand how players interact with the platform — for example, which pages are most visited, where users encounter errors, and how long sessions last. Data collected is aggregated and anonymised wherever possible.
• Functional cookies: Used to remember your preferences between sessions, such as preferred payment method, last-visited game category, and responsible gaming limit settings.
• Marketing cookies (consent-based): Used only where you have explicitly opted in, to tailor promotional content based on your betting activity and platform preferences. These cookies are not used to track you across unrelated third-party websites.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent you from accessing certain features of the at44 platform, including secure login and Finance / Wallet functionality.

at44 does not sell, rent, or trade your personal data to third parties. We share your data only in the limited circumstances described below, and only with parties who are contractually obligated to handle it securely and in accordance with this Privacy Policy.

• Payment processors: We share necessary payment data with approved processors and mobile wallet providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank) solely for the purpose of completing your requested transactions. These providers operate under their own privacy policies and are independently regulated.
• Identity verification providers: KYC documentation may be shared with accredited identity verification service providers who assist at44 in meeting its know-your-customer obligations. These providers process data under strict data processing agreements.
• Game providers: Certain game interaction data (e.g., session activity, game results) is shared with licensed game studios (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi) as required to deliver their services on the at44 platform.
• Fraud prevention and AML agencies: Where required, at44 may share data with fraud prevention organisations or financial intelligence units to meet anti-money laundering obligations or to investigate suspected criminal activity.
• Legal and regulatory authorities: at44 will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law, court order, or where at44 has a good-faith belief that disclosure is necessary to prevent imminent harm or criminal activity.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, provided that entity agrees to honour this Privacy Policy or provides you with notice and an equivalent level of protection.

at44 retains your personal data only for as long as is necessary for the purposes described in this policy, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your account and for a period of five (5) years following permanent account closure, in line with standard financial record-keeping and AML compliance obligations.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of submission or from account closure, whichever is later, to satisfy regulatory verification requirements.
• Transaction records: Deposit, withdrawal, and betting transaction records are retained for a minimum of five (5) years for financial compliance and dispute resolution purposes.
• Support communications: Chat logs and email correspondence with the at44 support team are retained for two (2) years following the closure of the relevant support case.
• Marketing data: Where you have consented to receive promotional communications, your marketing preferences are retained until you withdraw consent. Upon withdrawal, your data is removed from active marketing lists within 30 days.
• Cookie and analytics data: Aggregated, anonymised analytics data may be retained indefinitely. Individually identifiable session data is retained for no longer than thirteen (13) months.

When personal data is no longer required, at44 securely destroys or irreversibly anonymises it in accordance with industry-standard data disposal procedures.

As a player on the at44 platform, you hold the following rights in relation to your personal data. at44 is committed to honouring these rights promptly and without undue burden to you.

• Right of access: You may request a copy of the personal data at44 holds about you at any time. We will provide this information within 30 days of a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor updates (e.g., phone number, address) can be made directly in your account settings; changes to identity-linked data require KYC re-verification.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing and there is no overriding legitimate interest. Note that data subject to legal retention obligations (e.g., AML records) cannot be deleted before the legally required retention period expires.
• Right to restriction of processing: You may request that at44 limits how your data is used in certain circumstances — for example, while the accuracy of data is being contested, or while an objection is being assessed.
• Right to data portability: You may request your personal data in a structured, commonly used, machine-readable format where the processing is based on consent or contractual necessity and carried out by automated means.
• Right to object: You have the right to object to processing carried out on the basis of at44's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, contact the at44 support team via live chat (available 24/7, Bangladesh Standard Time) or by writing to support at at44.io. We may request proof of identity before processing your request to protect against unauthorised access to your data.

at44 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction.

• 256-bit SSL/TLS encryption: All data transmitted between your device and the at44 platform is encrypted using industry-standard 256-bit SSL/TLS protocols. Look for the padlock icon in your browser's address bar when using at44.
• Data-at-rest encryption: Sensitive personal data stored in at44's systems — including identity documents and payment references — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within at44's internal systems is restricted on a strict need-to-know basis. Staff access is governed by role-based permissions and logged for audit purposes.
• Two-step verification: at44 offers OTP-based two-step verification for player accounts. We strongly recommend all players enable this feature to add an additional layer of protection against unauthorised login attempts.
• Penetration testing and vulnerability monitoring: at44's platform undergoes regular security assessments, including penetration testing, to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a confirmed data breach that is likely to result in a risk to your rights, at44 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the incident.

While at44 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. Players are strongly advised to use strong, unique passwords for their at44 accounts and to enable two-step verification as described in the Account Security section of the Terms & Conditions.

at44 is strictly an adults-only platform. Registration and use of the at44 platform is prohibited for any individual under 21 years of age. This age restriction applies to all players regardless of location.

• at44 does not knowingly collect, store, or process personal data belonging to individuals under 21 years of age.
• All registration attempts are subject to date-of-birth verification, and accounts flagged as potentially belonging to a minor are suspended pending KYC review.
• If a parent or guardian believes that a minor has successfully registered an account on at44, they should contact the support team immediately at support at at44.io. The account will be closed and any personal data associated with it will be deleted from our active systems as promptly as legally permissible.
• at44 supports responsible gaming tools — including parental controls and self-exclusion — that can help prevent underage access. Further details are available on the Responsible Gaming page.

at44 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. When we make material changes to this policy, we will:

• Update the "Last Updated" date displayed at the top of this page and in the Table of Contents sidebar.
• Display a prominent notice on the at44 platform informing active players of the change, where the update materially affects how we use their personal data.
• Where required by applicable law or where changes significantly affect your rights, seek your renewed consent before the amended policy takes effect.

Your continued use of the at44 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how at44 protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or how at44 handles your personal data, please reach out to us through the following channels:

• Live Chat: Available 24/7 from your at44 account dashboard — the fastest way to reach our support team in Bangladesh Standard Time (BST, UTC+6).
• Email: support at at44.io — for written privacy requests, data subject access requests, or formal complaints. Please include "Privacy Request" in the subject line of your message.

at44 aims to respond to all privacy-related enquiries within 5 business days. Data subject access requests will be fulfilled within 30 days of identity verification, in line with standard data protection timelines.