sd444 Privacy Policy — How We Handle Your Personal Data

This Privacy Policy is issued by sd444 (referred to in this document as "sd444", "we", "us", or "our") and applies to all personal data processed in connection with the sd444 online casino and sports betting platform, accessible at https://sd444.pro. The policy covers all registered account holders and visitors to the sd444 platform, including players based in Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, and elsewhere in Bangladesh.

By registering an account on sd444 or by continuing to use the platform after this policy has been published or updated, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this policy, you must not use the sd444 platform and should contact our support team to request account closure.

sd444 collects personal data through the account registration process, through your ongoing use of the platform, and through technical means such as cookies and server logs. The categories of personal data we collect include:

• Identity information: your full name, date of birth, and government-issued identification document details collected during KYC verification.
• Contact information: your registered Bangladeshi mobile number and, where provided, your email address.
• Financial information: records of deposits made via bKash, Nagad, Rocket, Upay, Visa, or Mastercard; withdrawal requests; transaction history; and wallet balances. Note that full payment card numbers are never stored on sd444 systems — card transactions are processed by certified third-party payment processors.
• Technical data: your IP address, device type, operating system, browser type, session duration, pages visited within the platform, and gameplay activity logs.
• Communications data: records of any communications you have with our support team, including support tickets, chat logs, and email correspondence.

We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, and we ask that you do not provide such information in any communication with sd444. Where you voluntarily disclose health-related information in the context of a responsible gaming request (for example, disclosing a gambling-related health concern to our support team), that information will be treated with strict confidentiality and used solely for the purpose of providing appropriate responsible gaming support.

sd444 uses the personal data it collects for the following purposes, all of which are necessary to operate the platform lawfully and effectively for our players in Bangladesh:

• Account management: to create, maintain, and administer your sd444 account, including verifying your identity and age as required by our Terms & Conditions.
• Payment processing: to process your deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to process withdrawal requests to your registered payment method.
• Platform delivery: to deliver the games, sports betting markets, bonuses, and other features of the sd444 platform to you, and to personalise your experience based on your activity.
• Compliance and fraud prevention: to comply with applicable legal and regulatory obligations, to detect and prevent fraud, money laundering, and other prohibited activities, and to cooperate with law enforcement or regulatory authorities where required.
• Responsible gaming: to monitor gameplay patterns and identify players who may be showing signs of problem gambling, in order to offer appropriate responsible gaming interventions and tools.
• Customer support: to respond to your support requests, complaints, and enquiries, and to maintain records of communications for quality assurance and dispute resolution purposes.

sd444 processes your personal data on the following legal bases, depending on the purpose for which the data is being processed:

• Contract performance: processing necessary to open and manage your account, process transactions, and deliver the services you have requested by registering with sd444.
• Legal obligation: processing required to comply with anti-money laundering laws, identity verification requirements, and any other applicable legal obligations.
• Legitimate interests: processing carried out for fraud prevention, responsible gaming monitoring, platform security, and improvement of our services, where these interests are not overridden by your own rights and interests.
• Consent: where we send you optional marketing communications about promotions and bonuses, we do so on the basis of your consent, which you may withdraw at any time by contacting our support team.

sd444 does not sell your personal data. We share personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: we share financial transaction data with bKash, Nagad, Rocket, Upay, and card processing partners solely for the purpose of processing your deposits and withdrawals.
• Game providers: we share session identifiers and game activity data with our certified game providers — including Evolution Gaming, Pragmatic Play, Ezugi, Spribe, NetEnt, and Microgaming — to the extent required to deliver their games within the sd444 platform.
• Legal authorities: we disclose personal data to law enforcement, regulatory bodies, or other competent authorities when required to do so by applicable law, court order, or regulatory directive.
• Service providers: we engage third-party service providers for functions such as platform hosting, analytics, and customer support tooling. These providers process personal data only on our instructions and are contractually bound to maintain appropriate security measures.

All third parties with whom sd444 shares personal data are required to handle that data in accordance with applicable data protection standards. sd444 does not authorise third parties to use your personal data for their own marketing or commercial purposes. Where third-party providers are located outside Bangladesh, sd444 takes appropriate steps to ensure that data transfers are subject to adequate protections.

When you deposit funds using bKash, Nagad, Rocket, or Upay, sd444 receives confirmation of the transaction from the mobile financial service provider, including the transaction reference number, the amount, and your registered mobile number. sd444 does not receive or store your full bKash or Nagad PIN. When you deposit using a Visa or Mastercard, the transaction is processed by a certified PCI-DSS compliant payment gateway. sd444 does not receive or store your full card number, CVV, or card expiry date — only a masked reference is retained for transaction matching purposes.

All financial transaction records are retained by sd444 for a minimum of five years from the date of the transaction, in accordance with anti-money laundering record-keeping obligations. These records include deposit amounts, withdrawal amounts, dates, payment methods, and transaction reference numbers. Access to financial records is restricted to authorised sd444 compliance and finance personnel only.

sd444 uses cookies and similar technologies to operate the platform, maintain login sessions, and analyse platform usage. The cookies used on sd444 fall into the following categories:

• Strictly necessary cookies: these are essential to the operation of the sd444 platform. They include session cookies that keep you authenticated during an active login session. Without these cookies, the platform cannot function. You cannot opt out of strictly necessary cookies while using sd444.
• Analytics cookies: sd444 uses limited analytics data to understand how players navigate the platform, which games are most popular, and where technical issues occur. This data is aggregated and does not identify you personally.
• Preference cookies: these cookies remember your platform preferences — such as language selection — so that you do not need to re-set them on each visit.

sd444 does not use third-party advertising cookies or cross-site tracking technologies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent the sd444 platform from functioning correctly. As sd444 is a mobile-first platform optimised for use on Android and iOS browsers in Bangladesh, most session management is handled server-side, and cookie usage is kept to the minimum necessary for secure platform operation.

sd444 retains your personal data for as long as your account remains active and for a defined period after account closure, as follows: account identity and contact data is retained for a minimum of five years following account closure to meet anti-money laundering and know-your-customer record-keeping obligations; financial transaction records are retained for a minimum of five years from the date of each transaction; gameplay and betting activity logs are retained for three years from the date of the activity; support communications are retained for two years from the date of the last communication in the relevant thread.

When the retention period for a category of data expires, sd444 will securely delete or anonymise that data so that it can no longer be linked to you as an individual. Where data is anonymised rather than deleted, the anonymised data may be retained for longer periods for statistical and platform improvement purposes. If you request deletion of your personal data before the end of the applicable retention period, sd444 will action that request to the extent permitted by its legal obligations — meaning that data required to be retained for compliance purposes will not be deleted until the mandatory retention period has elapsed.

sd444 takes the security of your personal data seriously and implements appropriate technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. Security measures include SSL/TLS encryption for all data transmitted between your device and the sd444 platform; secure hashing of account passwords; access controls that restrict personal data access to authorised sd444 personnel on a need-to-know basis; regular security assessments of platform infrastructure; and monitoring for unusual access patterns or potential security incidents.

While sd444 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights or interests, sd444 will notify affected account holders without undue delay and will take all appropriate remedial steps. You are responsible for keeping your own login credentials secure and for not sharing your password with any third party. If you believe your account has been compromised, contact sd444 support immediately.

As an sd444 account holder, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with your full name and registered mobile number so we can verify your identity before processing your request:

• Right of access: you may request a copy of all personal data that sd444 holds about you. We will provide this within 30 days of receiving a verified request.
• Right of rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it.
• Right of erasure: you may request deletion of your personal data where we no longer have a legal basis to retain it. Note that some data must be retained for compliance purposes and cannot be deleted on request until the applicable retention period has elapsed.
• Right to restrict processing: in certain circumstances you may request that we restrict the processing of your personal data — for example, while you contest the accuracy of data we hold.
• Right to withdraw consent: where we process your data on the basis of consent (for example, for optional marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

sd444 will respond to all verified data rights requests within 30 days. In complex cases we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. There is no fee for exercising your data rights. If you are not satisfied with our response to a data rights request, you may escalate your complaint to our senior compliance team by contacting [email protected] and marking your message for the attention of the Data Compliance Officer.

sd444 is strictly an adults-only platform. We do not knowingly collect personal data from persons under the age of 21. The sd444 platform is not directed at, designed for, or marketed to individuals under 21 years of age. If we become aware that we have collected personal data from a person who is under 21, we will take immediate steps to close the relevant account, delete all associated personal data to the extent permitted by law, and return any deposited real-money funds via the original payment method. If you believe that an underage person has registered an sd444 account, please notify us immediately at [email protected]. Parents and guardians in Bangladesh are encouraged to use device-level parental controls to prevent underage access to online gambling platforms.

sd444 reserves the right to update or amend this Privacy Policy at any time. When we make material changes to the policy, we will notify registered account holders via the contact details held on their account — which may include a notification displayed upon next login to the sd444 platform. The date of the most recent update is always displayed at the top of this page. Your continued use of the sd444 platform following notification of a policy change constitutes your acceptance of the updated Privacy Policy. We recommend that you review this page periodically to stay informed of how sd444 handles your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way sd444 handles your personal data, please contact our support team. All privacy-related enquiries are handled by sd444's data compliance team, who will respond within the timeframes described in Section 10 above.

You may contact the sd444 data compliance team by email at [email protected]. Please include your full name and registered mobile number in any privacy-related correspondence so that we can verify your identity efficiently. If your request relates to a specific transaction or account action, please also include the relevant date and transaction reference where available. sd444 is committed to resolving all privacy enquiries fairly, transparently, and within the timescales set out in this policy.