Your Privacy Matters — cdd44 Data Policy

1. Information We Collect

1.1 Information You Provide Directly

When you register a cdd44 account, use our services, or contact our support team, you provide us with personal information. The categories of information we collect directly from you include:

• Identity information: Full legal name, date of birth, nationality, and a copy of your government-issued identity document (national ID card, passport, or driver's licence) when required for KYC verification.
• Contact information: Email address, mobile phone number, and residential address.
• Account credentials: Username and encrypted password. cdd44 never stores passwords in plain text.
• Financial information: Payment method details used to make deposits or request withdrawals, including bKash account numbers, Nagad account numbers, Rocket numbers, Upay details, and bank account information where applicable. cdd44 does not store full card numbers for Visa or Mastercard transactions — this data is handled directly by our certified payment processors.
• Support correspondence: Records of communications between you and the cdd44 support team, including live chat transcripts and email exchanges.

1.2 Information Collected Automatically

When you access or use the cdd44 platform, certain technical data is collected automatically by our systems. This includes:

• Device and browser information: IP address, device type, operating system, browser type and version, and screen resolution.
• Usage data: Pages visited, games played, session duration, click patterns, bet history, and deposit and withdrawal activity.
• Geolocation data: Approximate geographic location derived from your IP address, used to apply jurisdictional access controls and detect suspicious login activity.
• Log data: Server logs recording access timestamps, error events, and security-relevant platform events.

1.3 Information from Third Parties

In certain circumstances, cdd44 may receive personal information about you from third-party sources, including:

• Identity verification service providers used to validate KYC documents.
• Payment processors such as bKash, Nagad, Rocket, and Upay, who confirm transaction status and account holder names.
• Fraud prevention and anti-money laundering screening services.

Information received from third parties is used only to supplement our own records for the purposes of identity verification, fraud prevention, and legal compliance. cdd44 does not purchase personal data from data brokers.

2. How We Use Your Data

cdd44 processes personal data for the following specific and lawful purposes:

cdd44 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Our responsible gaming monitoring systems may flag accounts for manual review by our compliance team, but no automated action is taken without human assessment.

3. Data Sharing and Disclosure

3.1 Service Providers

cdd44 engages trusted third-party service providers to support the operation of the platform. These providers process personal data only on our behalf and under strict contractual data processing agreements. Categories of service providers with whom data may be shared include:

• Payment processors and financial institutions (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card-processing partners for Visa and Mastercard transactions)
• Identity verification and KYC service providers
• Fraud detection and anti-money laundering screening services
• Cloud hosting and data storage providers operating under certified security standards
• Customer support platform providers
• Game content providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — who may receive session identifiers necessary to deliver game content

3.2 Legal and Regulatory Disclosure

cdd44 may disclose personal information to government authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or binding regulatory directive. Such disclosures will be limited to the minimum information required to satisfy the legal obligation.

3.3 No Sale of Personal Data

cdd44 does not sell, rent, or otherwise commercially transfer your personal information to any third party. Data sharing is strictly limited to operational necessity and legal compliance. Any third party that receives personal data from cdd44 is contractually prohibited from using it for any purpose other than the specific service they are providing to cdd44.

3.4 Business Transfers

In the event that cdd44 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, personal data held by the platform may be transferred to the acquiring entity as part of that transaction. In such circumstances, cdd44 will take reasonable steps to ensure that the acquiring entity is bound by privacy obligations consistent with this Privacy Policy, and affected users will be notified prior to their data being transferred and made subject to a materially different privacy policy.

4. Cookies and Tracking Technologies

4.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. cdd44 uses cookies and similar tracking technologies — including pixel tags and local storage — to maintain session state, remember your preferences, detect suspicious activity, and understand how players interact with the platform.

4.2 Categories of Cookies Used by cdd44

• Essential cookies: Required for the platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your platform preferences such as language settings and display preferences to improve your experience across sessions.
• Analytics cookies: Collect anonymised data about how users navigate the cdd44 platform, which pages are visited most frequently, and where users encounter difficulties. This data is used to improve platform design and performance.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and other security threats. These cookies analyse behavioural patterns to distinguish legitimate players from automated systems.

4.3 Managing Cookies

You can control and manage non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies. Please note that disabling certain cookies may affect the functionality and security of the cdd44 platform. Comprehensive instructions for managing cookies are available in the help documentation of your specific browser (Chrome, Firefox, Safari, Edge, etc.).

5. Data Retention

cdd44 retains your personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention principles apply:

• Active accounts: Personal data associated with an active cdd44 account is retained for the lifetime of the account and for a period of five (5) years following permanent account closure.
• Transaction and financial records: Records of deposits, withdrawals, bets, and financial transactions are retained for a minimum of five (5) years from the date of the transaction, in accordance with anti-money laundering and financial record-keeping obligations.
• KYC documents: Identity verification documents submitted as part of the KYC process are retained for five (5) years following account closure, consistent with regulatory requirements.
• Support correspondence: Customer support tickets, live chat logs, and email exchanges are retained for three (3) years from the date of last interaction.
• Marketing preferences: Records of your marketing consent or opt-out are retained for the duration of the account relationship and for two (2) years following account closure.
• Technical log data: Server logs and security event data are retained for twelve (12) months unless a specific security investigation requires extended retention.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked back to any individual. Where anonymisation is not technically feasible, data is destroyed using certified data destruction procedures.

6. Data Security Measures

cdd44 implements a comprehensive set of technical and organisational security measures designed to protect your personal information against unauthorised access, accidental loss, destruction, or alteration. Our security framework includes:

• SSL/TLS encryption: All data transmitted between your device and the cdd44 platform is encrypted in transit using TLS 1.2 or higher.
• AES-256 data encryption: Sensitive personal data stored on cdd44 servers is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted to cdd44 employees and contractors with a genuine operational need. All access is logged and subject to regular audit review.
• Two-factor authentication: cdd44 supports two-factor authentication (2FA) for player accounts to add an additional layer of protection beyond a password.
• Penetration testing: The cdd44 platform undergoes regular third-party security assessments to identify and remediate vulnerabilities.
• Incident response: In the event of a data breach that poses a risk to your rights and freedoms, cdd44 will notify affected users without undue delay, and no later than 72 hours after becoming aware of the breach.

7. Your Privacy Rights

As a user of the cdd44 platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact the cdd44 privacy team at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days of receiving your request.

• Right of access: You have the right to request a copy of the personal data cdd44 holds about you, along with information about how it is processed.
• Right to rectification: If any personal data held by cdd44 is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations. Please note that cdd44 is required by law to retain certain categories of data (such as transaction records and KYC documents) for the retention periods described in Section 5 above, and these cannot be deleted upon request.
• Right to restriction of processing: You may request that cdd44 restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its processing.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on legitimate interest, including for direct marketing purposes. You may opt out of marketing communications at any time by contacting support.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

cdd44 will not charge a fee for reasonable data rights requests. Where a request is manifestly unfounded, excessive, or repetitive, cdd44 reserves the right to charge a reasonable administrative fee or decline to act on the request, with written reasons provided.

8. Contact and Policy Updates

8.1 How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cdd44 processes your personal data, please contact our privacy team using the following details:

Email: [email protected] (subject line: "Privacy Enquiry")
Response time: Within 5 business days for general queries; within 30 days for formal data rights requests.
Operating hours: 24/7, Bangladesh Standard Time (BST, UTC+6).

8.2 Policy Updates

cdd44 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, the updated Privacy Policy will be published on this page with a revised effective date. Where the changes are significant, cdd44 will provide additional notice via email or a prominent on-platform notification.

Your continued use of the cdd44 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how cdd44 protects your personal information.