sd444 Privacy Policy

sd444 collects personal data through several distinct channels depending on how you interact with the platform. The categories of data we may collect are set out below.

1.1 Registration Data

When you create an sd444 account, you provide us with information necessary to establish and manage your membership. This includes your full legal name, date of birth, residential address in Bangladesh (including district, division, and postcode), email address, mobile phone number, and a username and password of your choosing. This data is collected because it is contractually necessary to open and maintain a player account.

1.2 Identity Verification (KYC) Data

To comply with our responsible gaming obligations and to protect the integrity of our platform, sd444 may request the following identity documents before processing your first withdrawal:

• A copy of a government-issued photo ID (National ID Card, Passport, or Driving Licence)
• Proof of your current residential address (utility bill or bank statement dated within 90 days)
• Evidence of ownership of the payment method used for deposits (e.g., screenshot of your registered bKash or Nagad account)
• A selfie photograph for facial verification, where required by our fraud prevention protocols

1.3 Financial Transaction Data

sd444 records information about every deposit and withdrawal processed on your account. This includes the transaction amount in BDT, the payment method used (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard), the date and time of the transaction, and a reference identifier. We do not store full card numbers or full mobile wallet PINs — these are handled directly by your payment provider under their own security protocols.

1.4 Gaming and Betting Activity Data

We maintain a record of your gaming and betting activity on sd444, including games played, wagers placed, results, bonus participation, and session durations. This data is used to manage your account accurately, to detect problem gambling behaviour under our responsible gaming obligations, and to resolve any disputes about game outcomes.

1.5 Technical and Device Data

When you access sd444 from any device, our servers automatically record certain technical data. This includes your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), referring URL, pages visited within sd444, and timestamps of those visits. This data is used for fraud detection, security monitoring, and to improve the performance of the platform for players in Bangladesh.

1.6 Communications Data

If you contact sd444 via live chat, email, or any other support channel, we retain a record of that communication, including your messages, the support agent's responses, and any attachments or screenshots you provide. This data is used to resolve your query, to train our support team, and to maintain an audit trail in the event of a subsequent dispute.

sd444 uses the personal data we collect for specific, documented purposes. We do not process personal data in ways that are incompatible with the purposes for which it was originally collected. The table below sets out our primary processing activities and their corresponding justification.

Processing Purpose	Data Used	Lawful Basis
Creating and managing your player account	Registration data, KYC data	Contractual necessity
Processing deposits and withdrawals in BDT	Financial transaction data, KYC data	Contractual necessity
Verifying your identity and age (18+)	KYC documents, registration data	Legal obligation
Detecting and preventing fraud and money laundering	Transaction data, device data, gaming activity	Legitimate interest / Legal obligation
Monitoring for problem gambling behaviour	Gaming activity, session data	Legal obligation / Legitimate interest
Providing customer support and resolving disputes	Communications data, account data	Contractual necessity
Sending promotional offers and bonus notifications	Email address, preferences	Consent (opt-in at registration)
Improving platform performance and user experience	Technical/device data (anonymised)	Legitimate interest

2.1 Marketing Communications

If you opted in to marketing communications during registration, sd444 may send you promotional emails, SMS messages, or in-platform notifications about new games, seasonal bonuses (such as Eid ul-Fitr reload bonuses or BPL season offers), and VIP programme updates. You may withdraw your consent to marketing communications at any time by updating your account preferences or by contacting support at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to that withdrawal.

2.2 Automated Decision-Making

sd444 uses automated systems to flag accounts for fraud review, to identify potential problem gambling patterns, and to apply bonus eligibility rules. Where an automated decision has a significant effect on your account (such as suspension or withdrawal restriction), you have the right to request a human review of that decision by contacting our support team.

sd444 does not sell or rent your personal data to any third party. We share personal data only in the limited circumstances described below, and only with parties who are contractually bound to handle it with the same level of care that we apply ourselves.

3.1 Payment Processing Partners

To facilitate BDT deposits and withdrawals, sd444 shares the minimum necessary transaction data with our payment processing partners, including mobile financial service providers (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank). These partners process your data under their own published privacy policies and are responsible for the security of data within their own systems.

3.2 Game Software Providers

sd444 integrates games and live dealer content from third-party software studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a session token and anonymised player identifier to authenticate your game session and to log game outcomes for audit purposes. They do not receive your full name, contact details, or payment information.

3.3 Identity Verification Services

sd444 may engage specialist KYC and identity verification service providers to assist in validating the documents you submit during the verification process. These providers are vetted for compliance with data protection standards and process your KYC documents solely for the purpose of verification.

3.4 Legal and Regulatory Disclosure

sd444 will disclose personal data to law enforcement authorities, financial intelligence bodies, or courts of competent jurisdiction where we are required to do so by applicable law, by a valid court order, or where disclosure is necessary to protect the safety of our players or the integrity of our platform. We will notify you of such disclosures where legally permitted to do so.

sd444 uses cookies and similar technologies to ensure the platform functions correctly, to keep your session secure, and to collect anonymised analytics data that helps us improve the experience for all players in Bangladesh. We do not use cookies to serve third-party advertisements.

4.1 Types of Cookies We Use

Cookie Category	Purpose	Can Be Disabled?
Strictly Necessary	Session authentication, security tokens, CSRF protection, load balancing	No — required for the platform to function
Functional	Remembering your language preference, game lobby layout, and notification settings	Yes — disabling may reduce personalisation
Analytics	Anonymised page view tracking, session duration, feature usage patterns (no PII stored)	Yes — opt out via account settings
Fraud Detection	Device fingerprinting signals used to identify suspicious or duplicate account behaviour	No — required for platform integrity

4.2 Managing Cookies

You can control non-essential cookies through your sd444 account settings. You may also configure your browser to block or delete cookies; however, disabling strictly necessary or fraud detection cookies may prevent you from accessing your account or using certain features of the platform. Instructions for managing cookies in common browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help documentation.

sd444 retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, to comply with legal obligations, or to defend against potential legal claims. The following retention periods apply to the main categories of data we hold.

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years post-closure	Legal obligation, dispute resolution
KYC identity documents	Duration of account + 5 years post-closure	Regulatory compliance, fraud prevention
Financial transaction records	7 years from transaction date	Financial record-keeping obligations
Gaming and betting activity logs	5 years from account closure	Dispute resolution, responsible gaming audit
Customer support communications	3 years from last interaction	Quality assurance, dispute history
Marketing preferences and opt-in records	Until consent is withdrawn + 1 year	Evidence of consent
Anonymised analytics data	Indefinite (no PII, aggregated only)	Platform improvement

Once a retention period expires, sd444 will securely delete or irreversibly anonymise the relevant data. Deletion requests submitted by you under your right to erasure (see Section 6) will be processed subject to any overriding legal obligation to retain the data.

As a player on sd444, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us in writing at [email protected] with the subject line "Privacy Request — [Your Username]". We will acknowledge your request within 5 business days and provide a full response within 30 calendar days.

6.1 Right of Access

You have the right to request a copy of all personal data that sd444 holds about you. We will provide this in a structured, commonly used, machine-readable format (such as CSV or JSON) where technically feasible.

6.2 Right to Rectification

If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. Minor corrections (such as phone number or email address updates) can be made directly through your account settings panel.

6.3 Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the data has been processed unlawfully. This right is subject to sd444's legal obligation to retain certain financial and gaming records as set out in Section 5.

6.4 Right to Restrict Processing

You may request that sd444 restricts the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of the data is being resolved. During a restriction period, sd444 may continue to store your data but will not actively process it beyond what is strictly required by law.

6.5 Right to Data Portability

Where processing is based on your consent or on a contract with you, you have the right to receive your personal data in a portable format and to request that we transmit it directly to another service provider where technically feasible.

6.6 Right to Object to Marketing

You have the absolute right to object to the processing of your personal data for direct marketing purposes at any time. Following an objection, sd444 will cease all marketing communications to you within 5 business days.

sd444 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our key security measures include the following.

• Transport Encryption: All data transmitted between your browser or app and sd444 servers is protected by TLS 1.2 or higher with 256-bit symmetric encryption. Our SSL certificate is issued by a globally recognised Certificate Authority.
• Data-at-Rest Encryption: Personal data stored in sd444 databases is encrypted using AES-256 encryption. Encryption keys are managed using a dedicated key management system with strict access controls.
• Access Controls: Internal access to personal data is governed by a role-based access control (RBAC) system. Only employees with a documented operational need to access specific data categories are granted permission to do so.
• Fraud Detection Systems: sd444 operates real-time fraud detection algorithms that monitor account activity, transaction patterns, and login behaviour to identify and respond to suspicious activity before it results in harm to the player.
• Two-Factor Authentication: sd444 supports two-factor authentication (2FA) on player accounts and mandates it for all internal administrative access. Players are encouraged to enable 2FA via their account security settings.
• Penetration Testing: sd444 engages independent security researchers to conduct regular penetration testing of our platform infrastructure. Critical findings are remediated on a priority basis.
• Incident Response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, sd444 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

While sd444 takes every reasonable measure to protect your data, no digital platform can provide an absolute guarantee of security. You are responsible for maintaining the confidentiality of your own login credentials and for notifying sd444 immediately if you suspect your account has been compromised.

sd444 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, to comply with new legal requirements, or to improve clarity for our players. When we make a material change to this policy — meaning a change that significantly affects how we process your personal data — we will notify you by email to your registered address and by displaying a prominent notice on the sd444 platform for a period of not less than 14 days before the change takes effect.

For minor clarifications or non-material amendments, the updated policy will be published on this page with a revised effective date, and your continued use of sd444 following the publication date constitutes your acceptance of those changes.

8.1 Contact for Privacy Enquiries

If you have any questions about this Privacy Policy, about how sd444 handles your personal data, or if you wish to exercise any of your rights as described in Section 6, please contact our data protection team using the details below. All privacy-related enquiries will receive a response within 5 business days.

• Email: [email protected] — subject line: "Privacy Enquiry"
• Live Chat: Available 24/7 via the sd444 platform (Bangladesh Standard Time, UTC+6)