Privacy Policy

What Personal Data We Collect

44db collects only the personal data necessary to provide you with a secure, compliant, and personalised platform experience. The categories of data we collect are described below.

How We Collect Your Data

44db collects personal data through several channels, each serving a specific operational or compliance purpose. Data is never collected passively beyond what is technically necessary to deliver the platform service.

• Direct registration: when you create a 44db account, you provide your mobile number, chosen username, and password. If KYC verification is required, you additionally provide your full name, date of birth, and a copy of a government-issued photo ID.
• Transactional data: when you make a deposit or request a withdrawal, 44db records the transaction amount, timestamp, and the payment method identifier associated with the transaction.
• Automated technical collection: when you access the 44db platform, our servers automatically log your IP address, device fingerprint, browser version, and session duration. This data is used for fraud detection, platform security, and performance analytics.
• Support communications: when you contact 44db support by email or messaging, the content of those communications is retained for quality assurance, dispute resolution, and regulatory compliance purposes.
• Cookie and tracking data: 44db uses essential session cookies and analytics tools to maintain login sessions, detect suspicious activity, and analyse aggregate platform usage patterns. See Section 7 for full cookie details.

44db does not purchase, rent, or acquire personal data from third-party data brokers or marketing lists. All personal data held by 44db was provided directly by the player or generated through their use of the platform.

How We Use Your Personal Data

44db uses personal data for three primary categories of purpose: account operations, platform security and compliance, and service improvement. The specific uses within each category are set out below.

Account Operations

• To create and maintain your player account, process deposits and withdrawals, authenticate your identity during login, and provide access to games and betting markets.
• To send account-related communications including deposit confirmations, withdrawal updates, security alerts, and promotional notifications (where you have opted in).
• To manage your responsible gaming settings including deposit limits, session limits, and self-exclusion requests.
• To resolve disputes, investigate complaints, and respond to support queries relating to your account or transactions.

Security & Compliance

• To conduct KYC identity verification, age verification (21+ requirement), and anti-money-laundering screening on accounts that meet applicable thresholds.
• To detect, investigate, and prevent fraudulent activity, bonus abuse, multi-accounting, and any other conduct prohibited under the 44db Terms & Conditions.
• To comply with applicable legal and regulatory obligations, including responding to court orders, regulatory requests, and law enforcement enquiries.

Service Improvement

• To analyse aggregate platform usage data — such as popular games, peak usage periods, and common support query categories — in order to improve the platform's features, performance, and user experience.
• To personalise your platform experience, such as displaying games relevant to your demonstrated preferences or notifying you of promotions aligned with your betting activity.
• To conduct internal testing and quality assurance on new features, payment integrations, and responsible gaming tools before they are made available to all players.

Legal Basis for Processing

44db processes personal data only where a valid legal basis exists for doing so. The legal bases relied upon for each category of processing are as follows:

• Contractual necessity: processing your identity data, contact data, financial data, and behavioural data is necessary to fulfil our contractual obligations to you as a registered player — specifically, to provide access to the platform, process your transactions, and manage your account.
• Legal obligation: processing for KYC, age verification, anti-money-laundering screening, and responding to law enforcement or regulatory requests is required by applicable law and cannot be waived by player consent or objection.
• Legitimate interests: processing technical data, device fingerprints, and session logs for fraud detection, platform security, and aggregate analytics serves 44db's legitimate interest in protecting the platform and its players from fraudulent and abusive activity.
• Consent: where 44db sends you optional marketing communications (promotional SMS or email notifications), this processing is based on your explicit opt-in consent. You may withdraw consent at any time without penalty by contacting support or updating your account notification settings.

Sharing Your Personal Data

44db does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. Data is shared with third parties only in the following specific circumstances, each subject to appropriate data protection safeguards.

Circumstances Under Which Data May Be Shared

• Payment processing partners (bKash, Nagad, Rocket, Upay, and banking partners): limited financial data — transaction amount, timestamp, and your registered payment identifier — is shared solely to process your deposit or withdrawal instruction. These partners process this data under their own privacy policies and applicable financial regulations.
• Game technology providers (Pragmatic Play, Evolution Gaming, Spribe, and other certified studios): session token data is exchanged with game providers to authenticate your gaming session. These providers do not receive your full personal profile, payment details, or contact information.
• Identity verification and fraud screening services: where KYC verification is required, your identity documents and personal details may be shared with a third-party identity verification service. These services are bound by strict data processing agreements and may not use your data for any purpose beyond the verification task.
• Legal and regulatory authorities: where 44db is required by law, court order, or regulatory directive to disclose personal data to a government authority, law enforcement agency, or regulatory body, we will comply with that requirement. Where legally permissible, we will notify the affected player of such a disclosure.

Payment Data & Financial Privacy

44db processes all financial transactions exclusively in Bangladeshi Taka through established mobile financial service networks and partner banks operating in Bangladesh. The financial data collected in connection with deposits and withdrawals is limited to what is technically necessary to complete the transaction: the amount, the timestamp, and an identifier for the payment method used (such as the last four digits of a bKash wallet number or a masked bank account reference).

Full payment credentials — including complete wallet numbers, bank account numbers, card numbers, and mobile banking PINs — are never stored by 44db. Payment authentication is handled directly by the respective payment provider's own secure environment. 44db receives only a transaction reference and a success or failure status from the payment provider once the transaction is complete.

KYC & Identity Verification

44db is committed to preventing underage gambling and financial crime. As part of this commitment, we apply a Know Your Customer (KYC) process to player accounts that reach defined activity thresholds or that are flagged by our automated risk systems. KYC may be requested at registration or at any subsequent point during the account lifecycle.

• Government-issued photo identification: a national identity card (NID), passport, or driving licence. The document must show your full legal name, date of birth, and photograph.
• Proof of payment method ownership: evidence that the bKash, Nagad, Rocket, or bank account used for deposits and withdrawals is registered in your name. This may include a screenshot of the mobile financial service account details screen.
• Proof of address (where required): a recent utility bill, bank statement, or official correspondence addressed to you at your registered address in Bangladesh, dated within the last three months.

KYC documents are stored securely and retained only for as long as required by applicable anti-money-laundering and record-keeping regulations. Documents are not used for any purpose beyond identity verification and compliance. Players who have submitted KYC documents may request confirmation of what documents are held by contacting support.

Cookies & Tracking Technologies

44db uses cookies and similar client-side storage mechanisms to deliver essential platform functionality and to understand aggregate usage patterns. We do not use advertising cookies, cross-site tracking cookies, or any cookie that shares your data with advertising networks or social media platforms.

Types of Cookies Used

• Session cookies (essential): these are temporary cookies that are deleted when you close your browser. They are required to maintain your login session, remember your in-session game preferences, and protect your account against cross-site request forgery attacks.
• Persistent preference cookies (functional): these cookies remember your language preference and display settings between sessions. They expire after a maximum of 12 months and contain no personal identification data.
• Analytics cookies (functional): 44db uses privacy-respecting analytics to count aggregate page visits, measure session durations, and identify which platform features are most used. Analytics data is processed in aggregate and is not linked to individual player identities.
• Security and fraud detection cookies: these cookies record device fingerprint signals and session anomaly indicators. They are used exclusively for fraud detection and account security and are not shared with any third party beyond 44db's fraud screening service provider.

You may disable non-essential cookies through your mobile browser settings. Note that disabling session cookies will prevent you from logging in to your 44db account, as session authentication depends on essential cookie functionality.

Data Retention

44db retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of data:

• Account data (identity, contact, and login credentials): retained for the duration of the account's active period plus a minimum of five (5) years following permanent account closure, to satisfy anti-money-laundering regulatory requirements.
• Financial and transaction data: retained for a minimum of five (5) years from the date of each transaction, in compliance with financial record-keeping obligations. Some transaction data may be retained for up to seven (7) years where required by specific regulatory or tax obligations.
• Support communications and dispute records: retained for a minimum of three (3) years from the date of the last communication in a support thread or the resolution date of a dispute, to facilitate the review of historical interactions if a subsequent complaint arises.

When a retention period expires and no legal obligation requires continued storage, 44db will securely delete or anonymise the relevant personal data. Anonymised data — from which no individual can be identified — may be retained indefinitely for aggregate statistical analysis.

Data Security

44db applies industry-standard technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. While no online platform can guarantee absolute security, 44db's security framework includes the following protections:

• SSL/TLS encryption on all data transmitted between your device and the 44db platform. All connections are encrypted using current TLS standards; plain-text HTTP connections are not accepted.
• Encryption at rest for all sensitive personal data stored in 44db's databases, including identity documents, financial records, and account credentials.
• Role-based access controls that restrict access to personal data to authorised 44db staff whose job function requires it. Access to sensitive data categories (KYC documents, financial records) is further restricted to named individuals and is logged for audit purposes.
• Automated intrusion detection systems that monitor for unusual access patterns, bulk data queries, and other indicators of a potential security incident. Where a security incident is detected, 44db's incident response procedure is activated immediately.

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, 44db will notify affected players without undue delay, providing details of the nature of the breach, the data affected, and the steps being taken to address it.

Your Data Rights

As a player on the 44db platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact 44db support at [email protected]. 44db will respond to all data rights requests within 30 days.

Marketing Communications

44db may send you promotional communications — including bonus offers, tournament announcements, and seasonal promotions for events such as BPL, IPL, Eid, and Pohela Boishakh — where you have explicitly opted in to receive such communications at registration or through your account settings. Marketing messages are sent via SMS to your registered mobile number and, where provided, to your registered email address.

You may opt out of marketing communications at any time by contacting 44db support at [email protected] and requesting removal from the promotional list, or by updating your notification preferences in your account settings. Opting out of marketing will not affect transactional communications — you will still receive deposit confirmations, withdrawal updates, and security alerts as these are essential account communications, not marketing.

Children's Privacy

The 44db platform is strictly intended for adults aged 21 and above. 44db does not knowingly collect personal data from individuals under the age of 21. Registration requires users to confirm they meet the age eligibility requirement, and age verification checks are applied to accounts as part of our KYC process.

Third-Party Links

The 44db platform does not contain links to third-party websites for commercial or referral purposes. Any references to external services (such as payment providers bKash, Nagad, and Rocket, or game studios such as Pragmatic Play and Evolution Gaming) are made solely for the purpose of describing services used within the 44db platform. 44db is not responsible for the privacy practices of these third-party services. Players who interact directly with a payment provider's own application or website should review that provider's privacy policy separately.

Changes to This Privacy Policy

44db reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made to this policy, 44db will notify registered players by posting a notice on the platform and, where contact details are available, by sending a notification to the registered mobile number or email address. The updated policy will take effect seven (7) days after notification for existing players.

The current version of this Privacy Policy is always available on the 44db platform. The "Last updated" date at the top of this policy indicates when it was most recently revised. We encourage you to review this policy periodically to stay informed of how your personal data is handled.

Contact & Data Requests

For all privacy-related enquiries — including data access requests, rectification requests, erasure requests, objections to processing, and general questions about how your data is used — please contact the 44db data support team. All requests are handled confidentially and responded to within 30 days.

Email: [email protected]

Please include your registered mobile number (or username) and a clear description of your request in all data-related communications. 44db will verify your identity before processing any request that involves disclosing, amending, or deleting personal data.