ct44 Privacy Policy

ct44 is an online casino and sports betting platform operated for the Bangladesh market and accessible at https://ct44.io. ct44 acts as the data controller in respect of the personal data collected through the Platform — meaning ct44 determines the purposes for which your personal data is processed and the manner in which that processing takes place.

All data protection enquiries, access requests, correction requests, and erasure requests should be directed to the ct44 data privacy team at [email protected]. Our support team operates 24 hours a day, 7 days a week and responds to all privacy-related enquiries within 5 business days.

ct44 collects personal data through several distinct channels and for specific, documented purposes. The categories of personal data we collect are set out in the table below:

ct44 does not intentionally collect any special categories of sensitive personal data (such as health data, racial or ethnic origin, religious beliefs, political opinions, or biometric data) unless such data is directly relevant to a responsible gaming or identity verification requirement and you have provided explicit consent for its collection.

ct44 uses the personal data it collects for the following specific and documented purposes:

• Account management: To create, operate, and maintain your ct44 player account, including processing your registration details and managing account security.
• Identity and age verification: To verify that you are who you say you are and that you meet the minimum age requirement of 21 years as required by ct44's eligibility rules.
• Transaction processing: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, and to maintain accurate records of all financial transactions on your account.
• Service delivery: To provide you with access to the full range of ct44 games, sports betting markets, promotions, and other platform features.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, cheating, collusion, bot usage, and other prohibited conduct on the ct44 Platform.
• Responsible gaming: To monitor your gaming behaviour for indicators of problem gambling, administer deposit limits and self-exclusion arrangements, and fulfil our duty of care obligations to you as a player.
• Legal compliance: To comply with applicable legal and regulatory obligations, including responding to lawful requests from law enforcement, tax authorities, and other competent authorities.
• Platform improvement: To analyse usage patterns and technical performance data in order to improve the ct44 Platform, fix bugs, and develop new features that better serve our player community.
• Marketing communications: To send you information about ct44 promotions, bonuses, new games, and seasonal offers — but only where you have provided consent or where we have a legitimate interest in doing so. You may withdraw consent at any time (see Section 11).

ct44 processes your personal data only where it has a valid legal basis for doing so. The legal bases we rely upon for each category of processing are as follows:

• Contractual necessity: Processing your identity data, contact data, and financial data to operate your account and process transactions is necessary to perform the contract between you and ct44 (the Terms and Conditions). Without this processing, we cannot provide you with ct44 services.
• Legal obligation: Processing your identity data for KYC/AML purposes, retaining your transaction records, and reporting to competent authorities where required by law are all based on legal obligations applicable to ct44's operations.
• Legitimate interests: Processing your technical data and usage data for fraud prevention, platform security, and service improvement is based on ct44's legitimate interests in operating a safe, reliable, and competitive platform. These interests are balanced against your privacy rights and do not override them.
• Consent: Processing your data for direct marketing communications by email or on-platform notification is based on your freely given, specific, and informed consent at the time of account registration. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

ct44 uses cookies and similar tracking technologies (collectively, "Cookies") to enhance your experience on the Platform, maintain session state across pages, remember your preferences, and analyse how players interact with the site. The following categories of Cookies are used on the ct44 Platform:

• Strictly necessary Cookies: These Cookies are essential for the Platform to function and cannot be disabled. They include session authentication tokens, load-balancing identifiers, and security Cookies that protect against cross-site request forgery. No consent is required for these Cookies.
• Functional Cookies: These Cookies remember your language preferences, display settings, and responsible gaming configurations. They improve your experience by personalising the Platform based on your previous choices.
• Analytical Cookies: ct44 uses first-party analytical tools to collect aggregated data on page views, session durations, device types, and feature usage. This data helps us understand which parts of the Platform are performing well and which require improvement. Individual player data is anonymised before analysis wherever possible.
• Security Cookies: These Cookies support ct44's fraud detection and risk management systems. They help identify unusual access patterns, multiple account attempts, and bot activity that may indicate a security threat to the Platform or to individual player accounts.

You may control non-essential Cookie categories through your browser settings. Please note that disabling functional or analytical Cookies may affect the quality of your experience on the ct44 Platform. Disabling strictly necessary Cookies will prevent the Platform from functioning correctly and you will be unable to log in to your account.

ct44 does not sell your personal data. We share your personal data with third parties only in the following strictly limited circumstances:

• Payment processors: Your financial data (account identifiers, transaction amounts) is shared with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and Islami Bank solely for the purpose of processing your deposits and withdrawals. Each payment processor operates under its own privacy policy and data protection obligations.
• Game providers: When you play a game supplied by a third-party provider (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), certain technical identifiers are shared with that provider to facilitate game session management. Game providers do not receive your name, payment details, or any other personally identifiable information beyond what is required for session management.
• Identity verification services: Your identity documents and personal details may be shared with third-party KYC and identity verification service providers for the purpose of completing mandatory age and identity checks. These providers are contractually bound to use your data only for the purposes specified by ct44.
• Fraud and risk management partners: Anonymised or pseudonymised data may be shared with fraud detection and risk management service providers for the purpose of identifying and preventing fraudulent activity on the Platform.
• Legal and regulatory authorities: ct44 may disclose your personal data to law enforcement agencies, tax authorities, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or regulatory directive. ct44 will notify you of any such disclosure to the extent permitted by law.
• Professional advisers: ct44 may share your personal data with its legal advisers, accountants, and auditors on a strictly need-to-know basis where required in connection with legal proceedings, regulatory compliance, or corporate governance matters. All professional advisers are bound by confidentiality obligations.

ct44 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of personal data held by ct44:

Upon expiry of the applicable retention period, ct44 will securely delete or permanently anonymise your personal data so that it can no longer be attributed to you as an identifiable individual. Anonymised data may be retained for statistical or research purposes beyond the standard retention periods, as it no longer constitutes personal data.

ct44 employs a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security programme includes the following measures:

• SSL/TLS encryption: All data transmitted between your device and the ct44 Platform is encrypted using TLS 1.2 or higher. This applies to all page loads, login sessions, form submissions, and payment interactions.
• Encryption at rest: Sensitive personal data (including payment account identifiers and identity document data) is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the data they protect.
• Access controls: Access to personal data held by ct44 is restricted on a strict need-to-know basis. All internal systems require multi-factor authentication. Access logs are maintained and reviewed regularly for anomalous activity.
• Vulnerability management: The ct44 Platform undergoes regular security assessments, penetration tests, and code reviews conducted by qualified security professionals. Critical vulnerabilities are remediated within defined SLA timeframes.
• Staff training: All ct44 staff with access to personal data receive mandatory data protection and security awareness training at onboarding and annually thereafter.
• Incident response: ct44 maintains a documented data breach incident response plan. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ct44 will notify affected players without undue delay and in accordance with applicable notification requirements.

As a registered ct44 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected] with your full name, registered email address, and a clear description of the right you wish to exercise.

ct44 will respond to all data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window. ct44 will never charge a fee for processing a data rights request unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

Please note that certain rights are subject to limitations. For example, ct44 cannot erase personal data that it is legally required to retain for AML or financial record-keeping purposes, and ct44 cannot provide data portability for data that does not concern you personally. Where a limitation applies, ct44 will explain this clearly in its response to your request.

The ct44 Platform is strictly intended for adults aged 21 years or older. ct44 does not knowingly collect, process, or retain personal data from any individual who is under the age of 21. The minimum age requirement is enforced through mandatory age verification at the point of account registration and through ongoing KYC checks.

If ct44 discovers or is notified that it has inadvertently collected personal data from an individual under the age of 21, ct44 will take immediate steps to suspend and close the relevant account, cancel any pending transactions associated with the account, return any real-money balance to the payment source from which it originated, and permanently delete all personal data associated with the underage account from our active systems within 72 hours of discovery.

If you are a parent or guardian and you believe that a minor in your care may have registered a ct44 account or may have access to your own ct44 account, please contact us immediately at [email protected]. We will treat all such reports as urgent and will prioritise their investigation and resolution.

With your consent, ct44 may send you promotional communications about bonuses, new game releases, seasonal offers (such as Eid and Pohela Boishakh promotions), cricket tournament specials, and other platform news via email and on-platform notifications. Your consent to receive marketing communications is collected at the point of account registration and can be updated at any time through your account settings or by contacting [email protected].

If you choose to withdraw your consent to marketing communications, ct44 will cease sending you promotional messages within 5 business days of receiving your withdrawal request. Please note that withdrawing marketing consent does not affect your ability to receive transactional communications from ct44 — these include deposit confirmations, withdrawal notifications, account security alerts, KYC request notifications, and updates to the Terms and Conditions or this Privacy Policy, all of which are sent on a contractual or legal-obligation basis rather than a consent basis.

ct44 does not use third-party advertising networks, pixel tracking, or retargeting technologies that follow you across other websites after you leave the ct44 Platform. Our marketing communications are delivered directly by ct44 and are based solely on your activity and preferences within the ct44 Platform itself.

The ct44 Platform may contain informational references to third-party services such as payment processors (bKash, Nagad, Rocket, Upay) and game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). Where the Platform links to or integrates with a third-party service, that service operates under its own independent privacy policy and data protection practices.

ct44 is not responsible for the privacy practices, data security measures, or content of any third-party website, application, or service. We encourage you to review the privacy policy of any third-party service you interact with in connection with your use of the ct44 Platform, including the payment service you use to make deposits and withdrawals.

The inclusion of a third-party service name or logo on the ct44 Platform does not constitute an endorsement of that party's data protection practices. If you have a privacy concern relating to a third-party service, that concern should be directed to the third party directly.

ct44 reserves the right to update, amend, or replace this Privacy Policy at any time in response to changes in applicable law, changes in our data processing practices, changes in the services we offer, or for any other operational reason at our discretion.

Where a change to this Policy is material — meaning it significantly affects your privacy rights or the way in which ct44 processes your personal data — ct44 will provide you with not less than 14 days' advance notice by email to your registered account address before the revised Policy takes effect. The revised Policy will also be published on the ct44 website with the updated effective date clearly indicated at the top of the document.

Non-material changes — such as corrections to typographical errors, clarifications that do not alter the substance of any provision, or updates to contact details — may be made without advance notice. The effective date shown at the top of this Policy will be updated whenever any change, material or otherwise, is made.

Your continued use of the ct44 Platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised Policy, you should stop using the Platform and close your account before the effective date of the revision.

If you have any questions, concerns, or requests relating to this Privacy Policy or to ct44's data processing practices, please contact the ct44 data privacy team using the details below. All privacy-related enquiries are handled by trained staff with knowledge of data protection obligations applicable to the ct44 Platform.

• Email: [email protected] (plain text — not a clickable link)
• Response time target: Within 5 business days for general privacy enquiries; within 30 days for formal data rights requests
• Support hours: 24/7, 365 days per year including all Bangladeshi public holidays
• Language: English