cl44 Privacy Policy

This Privacy Policy applies to all personal data collected, processed, stored, or transmitted by cl44 in connection with the operation of the cl44 platform at cl44.io (hereinafter referred to as "the Platform", "cl44", or "we"). It covers data collected from registered account holders, visitors who browse the Platform without a registered account, and individuals who contact cl44 via its support channels.

By accessing or using the cl44 platform — including creating an account, placing a bet, participating in a casino game, making a deposit or withdrawal, or submitting a support request — you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Privacy Policy is intended to be read alongside cl44's Terms & Conditions and Responsible Gaming Policy. Where any provision of this Privacy Policy conflicts with the Terms & Conditions on a data-protection matter, this Privacy Policy shall take precedence. cl44 reserves the right to update this Privacy Policy at any time. Where material changes are made, we will notify registered users via email or in-platform notification prior to the changes taking effect.

cl44 acts as the data controller in respect of all personal data collected and processed through the Platform. As data controller, cl44 determines the purposes and means by which your personal data is processed and bears responsibility for ensuring that such processing is conducted lawfully, fairly, and transparently.

For all data protection enquiries, requests to exercise your rights, or complaints regarding cl44's data practices, please contact our dedicated support team using the contact details provided in the Contact & Support section of this Platform. cl44 will acknowledge data protection requests within two business days and aims to resolve them within thirty (30) calendar days of receipt, in line with good-practice standards applicable to online platforms serving the Bangladesh market.

cl44 collects personal data through several channels: directly from you during account registration and use of the Platform, automatically as you interact with the Platform, and from third-party service providers where permitted. The categories of personal data we collect are described below.

3.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, or other), email address, and mobile telephone number.
• Identity verification data: Government -issued photo identification (National ID Card, Passport, or Driver's Licence), proof of residential address, and proof of payment method ownership, submitted when requested by cl44 for account verification purposes.
• Payment data: Mobile wallet identifiers (bKash account number, Nagad account number, Rocket number, Upay number), bank account details where applicable, and Visa or Mastercard details. Full card numbers are never stored directly by cl44 — card data is handled exclusively by our PCI-DSS compliant payment processor.
• Communication data: The content of any messages, queries, complaints, or feedback you submit to cl44 via live chat, WhatsApp, or email.
• Responsible gaming data: Deposit limit settings, cooling-off requests, self-exclusion requests, and any supporting information you provide when activating responsible gaming tools.

3.2 Information Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device type, screen resolution, and time zone setting.
• Usage data: Pages visited, features used, bets placed, games played, session duration, referral source, and navigation paths within the Platform.
• Transaction data: Records of all deposits, withdrawals, bets placed, winnings received, and bonus transactions associated with your account.
• Cookie and tracking data: Data collected via cookies and similar tracking technologies as described in Section 7 of this Privacy Policy.

3.3 Information from Third Parties

• Identity verification providers: Where cl44 uses third-party identity verification services to confirm the accuracy of the information you have provided during registration, those providers may supply confirmation results or flags to cl44.
• Payment processors: Transaction status confirmations and fraud screening signals received from bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank in the course of processing your deposits and withdrawals.
• Fraud and risk intelligence services: Risk scores or flagging data from third-party anti-fraud services used to protect all cl44 users from account compromise and financial crime.

cl44 uses the personal data it collects for the following specific purposes:

cl44 does not use your personal data to make fully automated decisions that produce legal or similarly significant effects without human review. Where automated processes are used (for example, in fraud screening), a human review is available upon request.

cl44 does not use your personal data for profiling for third-party advertising purposes, nor do we sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own marketing use.

cl44 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and cl44, including operating your account, processing transactions, and providing gaming services.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) obligations, age verification requirements, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing carried out in pursuit of cl44's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your fundamental rights.
• Consent: Where cl44 relies on your consent as the legal basis for a specific processing activity (for example, sending you promotional communications), you have the right to withdraw that consent at any time by contacting cl44 support. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

cl44 shares personal data only where strictly necessary and under appropriate data protection safeguards. The categories of recipients with whom cl44 may share your personal data are as follows:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by applicable financial regulations.
• Identity verification providers: Third-party KYC (Know Your Customer) service providers who assist cl44 in verifying the identity and age of account holders receive only the data necessary for the verification process.
• Game content providers: Platform partners including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymous session identifiers and game-state data necessary to deliver their gaming content within the cl44 platform. These providers do not receive your full personal profile.
• Fraud prevention and security services: Third-party providers who assist cl44 in identifying and preventing fraudulent activity, account takeover, and financial crime.
• IT and infrastructure providers: Cloud hosting, data storage, and platform maintenance providers who process data on cl44's behalf under contractual data processing agreements.
• Legal and regulatory authorities: cl44 may disclose personal data to law enforcement agencies, courts, financial intelligence units, or other public authorities where required to do so by applicable law, a court order, or a lawful regulatory request. cl44 will, where legally permissible, notify the affected account holder of such a disclosure.

cl44 does not engage in cross-border data transfers to jurisdictions that do not provide an adequate level of data protection without first ensuring that appropriate safeguards are in place.

cl44 uses cookies and similar tracking technologies to operate the Platform efficiently, remember your preferences, analyse usage patterns, and detect fraud. The types of cookies used by cl44 are described below:

• Strictly necessary cookies: These cookies are essential for the Platform to function correctly. They enable core features such as session management, account authentication, and security controls. These cookies cannot be disabled without significantly impairing your ability to use the Platform.
• Functional cookies: These cookies allow the Platform to remember choices you have made — such as your preferred language or display settings — and to provide a more personalised experience. Disabling these cookies may limit some Platform features.
• Analytics cookies: cl44 uses privacy-respecting analytics tools to collect aggregated, anonymised data about how users navigate the Platform. This data helps us identify which features are most valued by our players and where improvements can be made. Analytics data is not used to identify individual users.
• Security and fraud detection cookies: These cookies collect device and session signals that assist cl44 in identifying suspicious activity, preventing account takeover, and protecting your funds.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your cl44 account. cl44 does not use third-party advertising cookies or cookies that track your activity across unrelated websites for commercial profiling purposes.

cl44 retains personal data for as long as necessary to fulfil the purposes for which it was collected, to maintain your account in active status, and to comply with applicable legal obligations. The following general retention periods apply:

• Account and registration data: Retained for the duration of your account and for a minimum period of five (5) years following permanent account closure, in line with standard financial services record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required for anti-money laundering compliance and financial audit purposes.
• Identity verification documents: Retained for five (5) years from account closure or the date of verification (whichever is later), unless a longer retention period is required by a specific legal obligation.
• Communication records: Support communications and related correspondence are retained for a minimum of two (2) years, and longer where they relate to a dispute or compliance matter that remains unresolved.
• Technical and usage logs: Retained for up to twelve (12) months for operational and security purposes, after which they are anonymised or deleted.

At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data is anonymised rather than deleted, the anonymised data set may be retained for analytical purposes without time limit, as it no longer constitutes personal data.

cl44 employs a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures in place at cl44 include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the cl44 Platform, protecting your login credentials, payment details, and personal information in transit.
• Encryption at rest for sensitive stored data, including account credentials and payment method identifiers.
• Access controls that restrict access to personal data to authorised cl44 personnel only, on a strict need-to-know basis. All personnel with access to personal data are subject to confidentiality obligations.
• Regular security assessments and vulnerability testing to identify and remediate potential weaknesses in Platform infrastructure and code.
• Fraud monitoring systems that operate continuously to detect unusual account activity, unauthorised login attempts, and suspicious transactions.
• Incident response procedures to enable cl44 to detect, respond to, and recover from data security incidents promptly and to notify affected users where required.

While cl44 takes all reasonable precautions to protect your personal data, no online platform can guarantee absolute security. You play an important role in keeping your account secure by maintaining the confidentiality of your login credentials and notifying cl44 immediately if you suspect any unauthorised access to your account.

As a user of the cl44 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact cl44 support via live chat or WhatsApp. cl44 will respond to all valid requests within thirty (30) calendar days.

• Right of access: You have the right to request a copy of the personal data cl44 holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data be corrected without undue delay. You may update some account details directly through your cl44 account settings.
• Right to erasure ("right to be forgotten"): You may request that cl44 delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and no other legal basis applies. This right is subject to cl44's legal obligations to retain certain data (see Section 8).
• Right to restriction of processing: You may request that cl44 suspend processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or have objected to processing pending a determination of cl44's legitimate interests.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data where cl44 relies on legitimate interests as the legal basis, and where your particular circumstances give grounds for objection. cl44 will cease that processing unless cl44 can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

cl44 will not charge a fee for handling data rights requests in ordinary circumstances. Where a request is manifestly unfounded or excessive, cl44 reserves the right to charge a reasonable administrative fee or decline to act on the request, providing written reasons for doing so.

cl44 is strictly intended for use by adults aged 21 years and above. cl44 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. If cl44 discovers or is notified that personal data belonging to a person under 21 years of age has been collected — whether through a falsified registration or any other means — cl44 will take immediate steps to permanently close the relevant account and securely delete all associated personal data, subject to any overriding legal obligation to retain records related to the age verification failure for compliance purposes.

Parents and guardians who believe that a minor in their care may have registered an account with cl44 are urged to contact cl44 support immediately via live chat or WhatsApp. cl44 will prioritise such reports and act within one business day of receiving notification.

cl44 reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, applicable law, or Platform features. The date of the most recent revision is shown at the top of this document. Where changes are material — meaning they significantly affect your rights or the way in which cl44 processes your personal data — cl44 will notify registered users via email or in-platform notification at least seven (7) days before the updated policy takes effect.

Your continued use of the cl44 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Privacy Policy, you should discontinue use of the Platform and contact cl44 support to request account closure.

For any questions, concerns, or requests related to this Privacy Policy or cl44's data practices, please contact our support team via live chat, WhatsApp, or email at [email protected]. Our team is available 24/7, aligned with Bangladesh Standard Time (BST, UTC+6).