Privacy Policy — How bac444 Handles Your Data
At bac444, protecting the personal data of our players is a core operating principle — not an afterthought. This Privacy Policy sets out in plain, formal English exactly what information we collect, how we use it, who we share it with, how long we keep it, and what rights you hold over your own data as a registered user of the bac444 platform.
bac444 does not sell, rent, or trade your personal data to third-party advertisers or marketing networks under any circumstances. Your information exists solely to support your account and improve your experience on the platform.
Every data transmission between your device and the bac444 platform is protected with 256-bit TLS/SSL encryption — the same security standard used by major international banks. Your login credentials and payment data are never transmitted in plain text.
Registered bac444 players have the right to access, correct, export, and request deletion of their personal data at any time. Submit a data request by emailing [email protected] and our team will respond within the timeframes set out in this policy.
bac444 collects only the data that is strictly necessary for account operation, identity verification, payment processing, and regulatory compliance. We do not request information that serves no functional purpose for your account or for the platform's legal obligations.
We use cookies strictly for session management, platform performance, and fraud prevention. We do not deploy third-party advertising cookies or cross-site tracking pixels. Full details of every cookie category we use are set out in the Cookies section of this policy.
Personal data is not held indefinitely. bac444 applies defined retention periods to each data category, after which data is securely deleted or anonymised. Retention periods are determined by operational need and applicable legal obligations in Bangladesh.
Information We Collect
bac444 collects personal data through three primary channels: information you provide directly during account registration and account management; information generated automatically through your use of the platform; and, in limited circumstances, information obtained from third-party identity verification or payment processing partners. The specific categories of data we collect are set out below.
1.1 Registration and Account Data. When you create a bac444 account, you are required to provide: your full legal name; a valid email address; a date of birth (for age verification purposes); a username of your choosing; a secure password; and a mobile phone number linked to your preferred payment method — for example, the bKash, Nagad, or Rocket number you intend to use for deposits and withdrawals. You may also be asked to provide your residential address in Bangladesh (city-level data such as Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi is sufficient for most verifications).
1.2 Identity Verification Data. As part of our Know Your Customer (KYC) obligations and to prevent underage gambling, bac444 may request copies of government-issued identification documents — such as a National Identity Card (NID), passport, or driver's licence — and, in some cases, a selfie photograph for liveness verification. This data is collected and processed solely for compliance purposes and is not used for any other purpose.
1.3 Transaction and Payment Data. bac444 records all financial transactions conducted through your account, including deposit amounts, withdrawal requests, bonus credits, and wager history. Payment method identifiers — such as the registered bKash or Nagad wallet number associated with your account — are stored to facilitate payment matching and fraud prevention. Full payment credentials (e.g., mobile banking PINs) are never stored by bac444.
1.4 Platform Usage Data. We automatically collect certain technical data when you access bac444, including: your IP address; device type and operating system; browser type and version; session timestamps; pages and game types accessed; bet placement patterns; and referral source (where applicable). This data is used for fraud detection, platform performance monitoring, and service improvement.
How We Use Your Data
bac444 processes your personal data only for the specific, legitimate purposes set out in this section. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which bac444 uses personal data are as follows:
- Account Administration: Creating and maintaining your bac444 account, verifying your identity and age, managing your account settings, and processing your login and authentication requests.
- Transaction Processing: Facilitating deposits via bKash, Nagad, Rocket, Upay, and bank transfer; processing withdrawal requests; and maintaining accurate transaction records for your account history.
- Service Delivery: Enabling access to sports betting markets, live casino games, slots, and all other platform features that form part of the bac444 service offering.
- Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, identity theft, account takeover, and other security threats to the platform and to individual accounts.
- Regulatory Compliance: Meeting our legal and compliance obligations including KYC/AML (Anti-Money Laundering) requirements, responsible gambling monitoring, and record-keeping obligations.
- Customer Support: Responding to account enquiries, resolving disputes, processing complaints, and providing assistance through our support team at [email protected].
- Platform Improvement: Analysing aggregated, anonymised usage patterns to improve platform performance, game selection, user interface design, and overall service quality.
- Promotional Communications: Sending you information about bac444 bonuses, promotions, and seasonal offers — such as BPL cricket promotions, Eid special bonuses, or IPL betting events — where you have opted in to receive such communications. You may opt out at any time via your account notification settings or by emailing [email protected].
bac444 does not use personal data for automated individual decision-making that produces legal or similarly significant effects without human review. Where automated processes flag an account for review (for example, during fraud detection), a human member of the compliance team reviews the case before any consequential action is taken.
Data Sharing & Disclosure
bac444 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. Data is shared externally only in the specific, limited circumstances described below, and always subject to appropriate contractual protections.
| Recipient Category | Purpose of Sharing | Data Shared |
|---|---|---|
| Payment Processors bKash, Nagad, Rocket, Upay, partner banks |
To process deposit and withdrawal transactions on your behalf | Account holder name, registered wallet/bank number, transaction amount and reference |
| Identity Verification Partners | To perform KYC checks and verify age and identity as required by our compliance obligations | Name, date of birth, NID or passport data, selfie image (where applicable) |
| Game Technology Providers e.g., Pragmatic Play, Evolution Gaming, Spribe |
To deliver casino games, live dealer streams, and sports data feeds within the platform | Anonymised session token; no directly identifying personal data is shared with game studios |
| Fraud Prevention Services | To identify and block fraudulent activity, money laundering, and account abuse | IP address, device fingerprint, session behaviour data — no payment credentials |
| Legal and Regulatory Authorities | To comply with lawful requests, court orders, or regulatory investigations | Data specifically requested under the lawful authority — scope limited to what is legally required |
All third-party service providers with whom bac444 shares personal data are contractually required to process that data solely for the specified purpose, to maintain appropriate security standards, and not to retain data beyond the period required to fulfil the contracted service. bac444 does not transfer personal data to any country or territory that does not provide an adequate level of data protection without first implementing appropriate safeguards.
Cookies & Tracking
bac444 uses cookies and similar browser-based storage technologies to operate the platform effectively, maintain session security, and monitor for fraudulent activity. This section explains each category of cookie we deploy and the purpose it serves.
- Strictly Necessary Cookies: These cookies are essential for the bac444 platform to function. They maintain your login session, remember your account preferences within a session, and protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without breaking core platform functionality.
- Performance and Analytics Cookies: We use first-party analytics cookies to measure platform performance — page load times, game loading speeds, error rates, and session duration. This data is aggregated and anonymised. No third-party analytics network (such as Google Analytics) is used in a way that transmits personally identifying data off-platform.
- Fraud Prevention Cookies: These cookies capture device fingerprinting signals — browser type, screen resolution, time-zone, and installed font sets — to detect account takeover attempts, bot activity, and multi-accounting. They are a core part of our security infrastructure.
- Preference Cookies: These store non-sensitive user preferences such as your preferred language display, sport or game category, and notification settings between sessions, so you do not need to reset them on each visit.
Most browsers allow you to manage cookie preferences through their settings. You can choose to block or delete cookies; however, blocking strictly necessary cookies will prevent you from logging into your bac444 account and using the platform. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.
Data Retention
bac444 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, and for as long as required by applicable legal and regulatory obligations. The retention periods we apply to each major data category are set out in the table below.
| Data Category | Retention Period | Basis |
|---|---|---|
| Account Registration Data | Duration of account plus 5 years following closure | Legal compliance and dispute resolution |
| Identity Verification Documents | 5 years from date of verification or account closure | AML/KYC regulatory requirements |
| Transaction Records | 7 years from transaction date | Financial record-keeping obligations |
| Bet and Game History | 3 years from date of activity | Dispute resolution and responsible gambling monitoring |
| Support Correspondence | 3 years from date of last interaction | Quality assurance and dispute records |
| Platform Usage / Log Data | 13 months rolling | Fraud detection and performance analytics |
| Marketing Consent Records | Until consent is withdrawn, plus 1 year | Proof of lawful marketing basis |
At the end of the applicable retention period, personal data is either securely deleted from bac444 systems or irreversibly anonymised so that it can no longer be associated with any individual. In cases where deletion is requested by a user before the standard retention period has expired, bac444 will delete the data to the maximum extent permitted by our legal obligations — any data that must be retained for regulatory compliance will be held in restricted access storage and not used for any other purpose.
Your Data Rights
As a registered bac444 user, you hold a number of rights in relation to the personal data we hold about you. bac444 is committed to honouring these rights promptly and without charge, subject to any limitations required by law.
- Right of Access: You have the right to request a copy of all personal data bac444 holds about you. Upon receipt of a valid access request submitted to [email protected], bac444 will provide a structured copy of your data within 30 days.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as email address updates) can be made directly within your account settings. For corrections to identity documents or date of birth, please contact support.
- Right to Erasure: You may request deletion of your personal data. bac444 will comply to the fullest extent permitted by law. Data that must be retained for legal, regulatory, or dispute resolution purposes will be held in restricted storage until the applicable retention period expires, then deleted.
- Right to Restriction of Processing: In certain circumstances — for example, while the accuracy of data is being contested — you may request that bac444 restrict processing of your data to storage only, pending resolution of the relevant issue.
- Right to Data Portability: You may request that bac444 provide your account data in a structured, machine-readable format (CSV or JSON) so that you can transfer it to another service provider. This right applies to data you have actively provided and that is processed on the basis of your consent or a contract.
- Right to Object: You have the right to object to processing of your personal data for direct marketing purposes at any time. You may also object to other processing activities where our basis for processing is legitimate interest, subject to our demonstrating compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Where bac444 processes your data on the basis of consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw marketing consent, adjust your notification preferences in your account settings or email [email protected].
Security Measures
bac444 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. The security controls we maintain include, but are not limited to, the following:
- Transport Security: All data in transit between your device and bac444 servers is encrypted using TLS 1.2 or TLS 1.3. HTTP connections are automatically redirected to HTTPS. HSTS (HTTP Strict Transport Security) headers are applied to all platform domains.
- Data Encryption at Rest: Personal data stored in bac444 databases — including identity documents and payment references — is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data and are rotated on a regular schedule.
- Access Controls: Access to personal data within bac444's internal systems is restricted on a strict need-to-know basis. Staff access is role-based, individually authenticated, and comprehensively logged. Access rights are reviewed and audited regularly.
- Two-Factor Authentication: bac444 offers SMS OTP-based two-factor authentication (2FA) for all registered accounts and strongly encourages players to enable it. 2FA is mandatory for all internal staff accounts with access to player data.
- Fraud Monitoring: Automated systems monitor account activity 24 hours a day, 7 days a week for signals indicative of account compromise, credential stuffing, or fraudulent transactions. Anomalous activity triggers immediate investigation by our security team.
- Vendor Security Standards: Third-party service providers who process bac444 player data are contractually required to maintain security standards commensurate with those applied by bac444 itself. We conduct due diligence on vendors before engagement and review their security posture periodically.
- Incident Response: In the event of a data security incident that poses a risk to player data, bac444 has an incident response protocol in place. Affected users will be notified without undue delay, and bac444 will take all necessary steps to contain, investigate, and remediate the incident.
While bac444 maintains robust security infrastructure, no online platform can guarantee absolute security against all conceivable threats. Users play an important role in keeping their accounts secure by choosing strong, unique passwords, enabling 2FA, and reporting any suspected unauthorised access immediately to [email protected].
Privacy Contact & Updates
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bac444 handles your personal data, please contact the bac444 Privacy team using the details below. All privacy-related correspondence is handled in English, and responses are prioritised in line with Bangladesh Standard Time (BST, UTC+6).
Privacy Contact Email: [email protected]
Subject Line for Privacy Queries: "Privacy Policy Enquiry" or "Data Rights Request"
Response Commitment: Acknowledgement within 5 business days; full response within 30 calendar days.
bac444 reviews this Privacy Policy at least once per calendar year and whenever a material change to our data processing activities occurs. When this Policy is updated, the revised version will be published on this page with an updated effective date at the top of the document. For changes that materially affect how your personal data is used, bac444 will notify registered users by email to the address associated with their account prior to the changes taking effect.
By continuing to use the bac444 platform after an updated Privacy Policy has been published and (where required) notified to you, you acknowledge that you have read and understood the revised policy. If you do not agree with any material changes to this Policy, you have the right to close your account by contacting support before the changes take effect. Please refer to the Account Suspension & Closure section of the bac444 Terms & Conditions for the account closure procedure.
Questions About Your bac444 Privacy?
Review our FAQ for quick answers about account security, read our Terms & Conditions for the full platform rules, or visit the Responsible Gaming page for safe-play guidance. For adults aged 18 and above only.