dc44 Privacy Policy

1. Introduction

dc44 is an internationally operated online gaming platform providing sports betting, live casino, slots, racing, and related entertainment services to players in Bangladesh. As part of delivering these services, dc44 necessarily collects and processes certain personal data about the individuals who register for and use the Platform.

We take privacy seriously. This Policy has been written to be clear and transparent about our data practices. If you have any questions about how dc44 handles your personal data, you are encouraged to contact our support team at any time using the details provided in Section 15 of this Policy.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy. Together, these documents form the complete framework governing your relationship with dc44.

2. Data Controller

For the purposes of applicable data protection law, dc44 acts as the data controller in respect of personal data collected from players and visitors through the Platform. As data controller, dc44 determines the purposes for which personal data is processed and the manner in which it is processed.

dc44 operates as an internationally regulated online gaming service. All queries, data subject requests, and privacy-related correspondence should be directed to our dedicated support team whose contact details are set out in Section 15 of this Policy. We will respond to all data-related inquiries within the timeframes specified in Section 10.

3. Personal Data We Collect

dc44 collects the following categories of personal data, depending on the nature of your interaction with the Platform:

3.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (collected to verify the 21+ age eligibility requirement)
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi), district, and postal code
• Email address and contact telephone number
• Username and encrypted account password
• Nationality and country of residence

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (National ID card, passport, or driving licence)
• Proof of address documentation (utility bill, bank statement, or official letter dated within 90 days)
• Proof of payment method ownership (e.g., screenshot of bKash, Nagad, or Rocket account registered in your name)
• Source of funds documentation where required for enhanced due diligence

3.3 Financial & Transaction Data

• Payment method details (mobile wallet numbers for bKash, Nagad, Rocket, Upay; card type and last four digits for Visa and Mastercard)
• Deposit and withdrawal transaction history, including amounts in BDT, timestamps, and payment method used
• Account balance history
• Bonus and promotional credit history

3.4 Gaming & Betting Activity Data

• Complete betting and wagering history across all sports, casino, and slot products on dc44
• Game session logs including start time, duration, games played, and session outcomes
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

3.5 Technical & Device Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, browser type, and version
• Referring URL and on-Platform navigation paths
• Session identifiers and authentication tokens

3.6 Communications Data

• Support ticket content and correspondence history with dc44's customer service team
• Email and in-Platform notification preferences
• Promotional communication opt-in/opt-out status

4. How We Collect Your Data

dc44 collects personal data through the following channels:

Collection Method	Data Categories Collected	Trigger
Account Registration Form	Identity data, contact data, account credentials	When you create a new dc44 account
KYC Verification Submission	KYC documents, proof of address, payment proof	When account verification is required or requested
Deposit & Withdrawal Requests	Financial transaction data, payment method details	When you initiate a cashier transaction
Platform Usage	Gaming activity, session data, betting history	Continuously while you are logged in and active
Device & Browser	Technical data, IP address, device identifiers	Automatically when you access the Platform
Cookies & Tracking	Navigation behaviour, session tokens, preferences	Automatically on Platform access (see Section 8)
Support Communications	Communications data, any data you choose to share	When you contact dc44's support team
Third-Party Verification Services	Identity confirmation, fraud risk scores	During KYC and payment processing

5. Legal Basis for Processing

dc44 processes your personal data on the following legal bases, as applicable to each processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and dc44 — including account registration, processing deposits and withdrawals, maintaining your betting account, and delivering gaming services.
• Legal Obligation: Processing that dc44 is required to carry out under applicable law — including KYC identity verification, anti-money laundering (AML) record-keeping, and reporting to regulatory or law enforcement authorities where required.
• Legitimate Interests: Processing that serves dc44's legitimate business interests, provided those interests are not overridden by your privacy rights — including fraud prevention, platform security monitoring, responsible gaming analysis, and service improvement analytics.
• Consent: Processing that is based on your freely given, informed, and specific consent — primarily for the delivery of optional marketing communications and promotional materials. You may withdraw consent for marketing communications at any time by contacting [email protected] or using the unsubscribe mechanism in any marketing email.

6. How We Use Your Personal Data

dc44 uses collected personal data for the following purposes:

6.1 Account Administration

To create and maintain your registered dc44 account, verify your identity and age eligibility (21+), authenticate your login sessions, manage your account settings and preferences, and communicate important account-related updates such as security alerts, policy changes, and transaction confirmations.

6.2 Payment Processing

To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; to verify that payment methods are registered in your name; to detect and prevent fraudulent transactions; and to maintain accurate financial records as required by applicable law.

6.3 KYC & AML Compliance

To verify your identity, age, and residential address in compliance with Know Your Customer (KYC) requirements; to assess and monitor transactions for indicators of money laundering or other financial crime in accordance with applicable anti-money laundering standards; and to report suspicious activity to relevant authorities where legally required to do so.

6.4 Gaming Services Delivery

To provide access to and facilitate your use of dc44's sports betting, live casino, slots, racing, and other gaming products; to record and display your betting and gaming history; to calculate and credit winnings; and to administer bonus and promotional offers in accordance with applicable promotional terms.

6.5 Responsible Gaming

To monitor your gaming behaviour for indicators of problem gambling; to administer any responsible gaming tools you have activated (including deposit limits, session limits, reality checks, and self-exclusion); and to take proactive steps to protect players who may be at risk, in accordance with our Responsible Gaming Policy.

6.6 Platform Security & Fraud Prevention

To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, cheating, and other forms of prohibited conduct; to maintain the integrity of the Platform's systems and data; and to identify and mitigate security vulnerabilities and cyber threats.

6.7 Customer Support

To receive, investigate, and respond to support requests, complaints, and disputes submitted by registered players; to maintain records of support interactions for quality assurance and dispute resolution purposes; and to improve the quality of dc44's customer service operations.

6.8 Analytics & Service Improvement

To analyse aggregated, anonymised platform usage data to understand player behaviour patterns, identify areas for product improvement, optimise the performance and reliability of the Platform, and develop new features and services that better serve the needs of players in Bangladesh.

6.9 Marketing Communications (With Consent)

Where you have provided explicit consent, to send you promotional emails, in-Platform notifications, and personalised offers relating to dc44's products and services, including special promotions tied to major sporting events such as the BPL, IPL, T20 World Cup, and major cricket tournaments featuring the Bangladesh Tigers. You may opt out of marketing communications at any time without affecting your ability to use the Platform.

7. Data Sharing & Third Parties

dc44 does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly as necessary for the purposes described in this Policy:

7.1 Payment Service Providers

dc44 shares transaction data with licensed payment processors and mobile wallet operators (including bKash, Nagad, Rocket, Upay, and card networks Visa and Mastercard) to the extent necessary to process your deposit and withdrawal requests. These providers operate under their own privacy policies and are subject to regulatory oversight.

7.2 KYC & Identity Verification Providers

dc44 uses third-party KYC and identity verification service providers to assist with the verification of identity documents and the assessment of fraud risk. These providers are contractually bound to process your data only as directed by dc44 and for no other purpose.

7.3 Technology & Infrastructure Partners

dc44 uses third-party cloud hosting, content delivery, and cybersecurity service providers to operate and secure the Platform. These providers act as data processors under written agreements that require them to implement appropriate technical and organisational security measures.

7.4 Game Content Providers

dc44's gaming library is powered by certified providers including Pragmatic Play, Evolution Gaming, Spribe, Netent, Microgaming, and Ezugi. These providers may receive limited technical data (such as session tokens and game results) necessary to deliver their games within the dc44 environment. They do not receive your personal identity or financial data.

7.5 Legal & Regulatory Authorities

dc44 may disclose personal data to law enforcement agencies, regulatory bodies, sports integrity organisations, financial intelligence units, or courts where required to do so by applicable law, court order, or regulatory obligation. dc44 will only make such disclosures to the minimum extent required by the relevant legal obligation.

7.6 Business Transfers

In the event of a merger, acquisition, asset sale, or corporate restructuring involving dc44, your personal data may be transferred to the acquiring or successor entity as part of that transaction. You will be notified of any such transfer via the registered email address associated with your account, and your rights under this Policy will continue to apply.

8. Cookies & Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files that are stored on your device when you visit a website. dc44 uses cookies and similar tracking technologies (including local storage and session storage) to operate the Platform, maintain your login session, remember your preferences, and collect analytics data about how the Platform is used.

8.2 Types of Cookies dc44 Uses

Cookie Type	Purpose	Duration
Essential / Session	Maintain your authenticated login session; enable core Platform functions	Session (deleted on browser close)
Functional / Preference	Remember your language, odds format, and display preferences	Up to 12 months
Security	Detect and prevent fraudulent or unauthorised access attempts	Up to 24 hours
Analytics	Collect aggregated, anonymised data on Platform usage to improve services	Up to 24 months

8.3 Managing Cookies

You may configure your browser to refuse or delete cookies at any time. However, please note that disabling essential cookies will impair or prevent your ability to log in and use the dc44 Platform. Instructions for managing cookies in common browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help documentation.

9. Data Retention

dc44 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to any longer retention periods required by applicable law. The following retention guidelines apply:

• Active Account Data: Retained for the full duration of your registered account with dc44, plus a minimum of 5 years following account closure to satisfy legal record-keeping obligations.
• KYC & Identity Documents: Retained for a minimum of 5 years following the closure of your account, as required by applicable anti-money laundering regulations.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction in compliance with financial record-keeping requirements.
• Support Communications: Retained for 3 years from the date of the most recent support interaction, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of your opt-in status plus 2 years following opt-out, as evidence of consent management.
• Analytics Data: Aggregated analytics data that has been fully anonymised is retained indefinitely as it no longer constitutes personal data. Individual-level analytics data is retained for up to 24 months.
• Security Logs: Retained for 12 months for fraud monitoring and incident response purposes.

Upon expiry of the applicable retention period, dc44 will securely delete or irreversibly anonymise your personal data. Where deletion is not immediately possible due to technical constraints (such as data held in backup systems), the data will be isolated from active processing and deleted at the earliest practicable opportunity.

10. Your Data Protection Rights

As a player registered with dc44, you have the following rights in respect of your personal data. To exercise any of these rights, please contact dc44's support team at [email protected] with the subject line "Data Rights Request". dc44 will acknowledge your request within 5 business days and will provide a full response within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data held by dc44 about you, along with information about how it is processed. This is sometimes referred to as a Subject Access Request (SAR).
• Right to Rectification: You have the right to request correction of any personal data held by dc44 that is inaccurate or incomplete. Minor corrections (such as updating your contact number or address) can be made directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing and no overriding legitimate grounds exist. Please note that this right is subject to dc44's legal obligations to retain certain data (see Section 9).
• Right to Data Portability: You have the right to receive a copy of personal data you have provided to dc44 in a structured, commonly used, machine-readable format, and to request that this data be transmitted directly to another controller where technically feasible.
• Right to Object: You have the right to object at any time to the processing of your personal data for direct marketing purposes. You also have the right to object to processing based on legitimate interests, on grounds relating to your particular situation. dc44 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Restriction of Processing: You have the right to request that dc44 restricts the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or pending the outcome of an objection.
• Right to Withdraw Consent: Where dc44 processes your data based on your consent (primarily for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

11. Security Measures

dc44 implements a comprehensive suite of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security controls include:

• Encryption in Transit: All data transmitted between your device and dc44's servers is encrypted using 256-bit SSL/TLS encryption. dc44 enforces a minimum of TLS 1.2 and supports TLS 1.3 for all Platform connections.
• Encryption at Rest: Sensitive personal data and financial records stored on dc44's servers are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within dc44's internal systems is strictly limited on a need-to-know basis. All staff with data access undergo background screening and are subject to confidentiality obligations. Access logs are maintained and reviewed regularly.
• Multi-Factor Authentication: Internal systems that process sensitive player data require multi-factor authentication for all staff access. Players are also encouraged to enable any available multi-factor authentication options on their dc44 accounts.
• Penetration Testing: dc44's Platform and infrastructure undergo regular security assessments and penetration testing by qualified third-party security professionals to identify and remediate vulnerabilities.
• Incident Response: dc44 maintains a documented data breach incident response procedure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, dc44 will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.
• Certified RNG Technology: All casino and slot games on dc44 use certified Random Number Generator (RNG) technology from regulated providers. Game outcomes are independently audited and cannot be manipulated by dc44 or any third party.

12. Minors & Age Policy

dc44 strictly enforces a minimum age requirement of 21 years for all registered players. The dc44 Platform is not directed at, designed for, or intended to be used by individuals under the age of 21. dc44 does not knowingly collect personal data from individuals under 21.

If dc44 becomes aware or has reasonable grounds to believe that personal data has been submitted by an individual under the age of 21, that data will be deleted immediately and the associated account will be permanently closed. Any winnings generated from an account registered by an underage player will be forfeited.

If you are a parent or guardian and believe that your child (under 21) has registered an account or provided personal data to dc44, please contact our support team immediately at [email protected] so that we can take appropriate action without delay.

13. International Data Transfers

dc44 operates as an internationally based online gaming platform. Your personal data may be transferred to and processed in countries outside Bangladesh where dc44's servers, infrastructure partners, or third-party service providers are located. Such countries may have data protection laws that differ from those applicable in Bangladesh.

Where dc44 transfers personal data internationally, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy. These safeguards may include contractual data protection clauses agreed with third-party processors, technical encryption measures, and operational controls limiting data access to authorised personnel only.

By registering an account with dc44 and accepting this Privacy Policy, you consent to the international transfer of your personal data on the terms described above.

14. Changes to This Privacy Policy

dc44 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing or change the legal basis for existing processing — dc44 will notify registered players via the email address associated with their account and/or via a prominent notice on the Platform, in advance of the changes taking effect.

The "Last Updated" date at the top of this page reflects the date of the most recent amendment. Where changes require your renewed consent (for example, where a new processing purpose is based on consent), dc44 will request that consent separately before commencing the new processing activity.

Your continued use of the dc44 Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms, to the extent permitted by applicable law.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or dc44's data processing practices, please contact our dedicated support team using the details below. All privacy-related correspondence will be handled promptly and in strict confidence.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request — [Your Username]"
• Response Time: Acknowledgement within 5 business days; full response within 30 calendar days
• Operating Hours: 24 hours a day, 7 days a week
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

For responsible gaming assistance, please visit our Responsible Gaming page. For all other platform-related queries , please visit our FAQ page.