cbe444 Privacy Policy

01 Data We Collect

cbe444 collects personal data only where there is a clear and lawful basis for doing so. The categories of data we collect, and the circumstances under which each category is gathered, are set out below. We collect the minimum data necessary to operate the cbe444 platform safely, legally, and in accordance with our anti-money-laundering (AML) and responsible gaming obligations.

cbe444 does not collect sensitive special-category personal data such as racial or ethnic origin, political opinions, religious beliefs, health records, or biometric data, except where explicitly required by applicable law enforcement or regulatory authority directive. Where such data is collected under regulatory compulsion, it is handled under a strict access-control regime and deleted as soon as the regulatory obligation is fulfilled.

02 How We Use Your Data

cbe444 processes your personal data on one or more of the following lawful bases: (a) performance of a contract — where processing is necessary to operate your account, process deposits and withdrawals, and deliver the games and sports markets you have requested; (b) legal obligation — where processing is required by applicable AML, KYC, or responsible gaming regulations; (c) legitimate interests — where cbe444 has a genuine operational need to process data that does not override your fundamental privacy rights; and (d) consent — where you have freely given specific, informed, and unambiguous consent for a particular processing activity, such as receiving promotional communications.

The specific purposes for which cbe444 uses your personal data include:

• Account management: Creating, verifying, and maintaining your cbe444 account; processing login authentication; managing account security settings including two-factor authentication via SMS OTP.
• Payment processing: Executing deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, and bank transfer; confirming the identity of the payment account holder to satisfy same-name payment policy requirements; detecting and preventing fraudulent transactions.
• Regulatory compliance: Conducting KYC identity verification; fulfilling AML transaction monitoring obligations; retaining records as required by applicable law; responding to requests from competent regulatory or law-enforcement authorities.
• Responsible gaming: Monitoring account activity for indicators of problem gambling; enforcing self-exclusion requests; applying deposit limits and cool-off periods where requested or where mandated by our responsible gaming policy.
• Platform operation and improvement: Analysing aggregated usage data to improve game performance, navigation, and mobile compatibility; detecting and resolving technical faults; conducting A/B testing on platform features.
• Customer support: Responding to your support requests; resolving disputes; retaining support interaction records for quality assurance and training purposes.
• Marketing communications: Sending promotional emails, SMS notifications, or in-platform messages about bonus offers, new game releases, cricket and BPL betting markets, and seasonal promotions — only where you have opted in to receive such communications. You may withdraw consent at any time via account settings.
• Fraud and security: Detecting multi-accounting, bonus abuse, collusion, and other prohibited conduct as defined in the cbe444 Terms & Conditions; maintaining a blocklist of suspended accounts for the protection of all platform users.

cbe444 does not use automated decision-making or profiling that produces legal or similarly significant effects for individual users, except where such processing is required for fraud detection or regulatory compliance, in which case you retain the right to request human review of any automated decision that adversely affects your account.

03 Data Sharing & Third Parties

cbe444 does not sell, rent, or otherwise transfer your personal data to third parties for their own independent commercial purposes. We share personal data only in the circumstances described below, and only to the extent strictly necessary for the stated purpose.

• Payment service providers: We share financial transaction data (wallet number, amount, transaction reference) with bKash, Nagad, Rocket, Upay, and partner banks solely to process your deposit or withdrawal. These providers operate under their own privacy frameworks and are subject to Bangladesh Bank's Mobile Financial Services Regulations.
• Identity verification partners: Where cbe444 uses a third-party KYC service provider to verify National ID or passport documents, your identity data is shared with that provider under a strict data-processing agreement. The provider may not use your data for any purpose beyond the verification task.
• Game software providers: Technical session data (player ID, game session token, wager amounts, round outcomes) is shared with game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to facilitate game delivery, fairness auditing, and technical support. These providers do not receive your name, contact details, or payment information.
• Platform infrastructure providers: cbe444 uses cloud hosting and content-delivery infrastructure providers who process data on our behalf under data-processing agreements that prohibit independent use of your data.
• Legal and regulatory authorities: cbe444 will disclose personal data to law-enforcement agencies, courts, or regulatory bodies where required to do so by a lawful order, warrant, or regulatory direction. We will notify affected users of such disclosures wherever legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the cbe444 business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified via your registered email address prior to any such transfer taking effect, and you will retain your right to request account deletion.

04 Cookies & Tracking Technologies

cbe444 uses cookies and similar tracking technologies (including local storage and session storage) to operate the platform, maintain your login session, detect fraudulent activity, and measure platform performance. A cookie is a small text file placed on your device by the cbe444 web server. Cookies do not contain executable code and cannot access other data stored on your device.

cbe444 does not use third-party advertising or retargeting cookies. You may configure your browser to block or delete cookies at any time; however, disabling strictly necessary cookies will prevent you from logging in to the cbe444 platform and will impair core functionality. Functional and analytics cookies may be disabled without affecting your ability to play games or process payments, though some personalisation features may be unavailable.

cbe444 may also use JavaScript-based analytics tools to collect anonymised, aggregated data about how players navigate the platform. No personally identifiable information is included in analytics data payloads. Analytics data is retained in aggregated form only and cannot be used to re-identify individual users.

05 Data Retention & Storage

cbe444 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies:

• Account and identity data: Retained for the duration of your active account and for a period of 5 years following permanent account closure. This retention period is set by our AML compliance obligations and aligns with standard financial record-keeping requirements.
• Transaction and payment data: Full transaction records (deposit amounts, withdrawal amounts, wallet references, timestamps) are retained for 5 years from the date of the transaction.
• KYC documentation: Identity documents (National ID scans, passport copies, proof of address) are retained for 5 years from the date of verification or from the date of account closure, whichever is later.
• Game and betting history: Individual wager records, game outcomes, and sports betting slip data are retained for 3 years from the date of the transaction for dispute resolution and responsible gaming monitoring purposes.
• Support and communications data: Live chat transcripts and support email correspondence are retained for 2 years from the date of the interaction.
• Technical and usage data: IP address logs, device identifiers, and session logs are retained for 12 months from the date of collection, after which they are permanently deleted or anonymised.
• Marketing consent records: Records of your opt-in to, or opt-out from, marketing communications are retained for 3 years from the date of the most recent consent action, to enable us to demonstrate compliance with marketing communication obligations.

Upon expiry of the applicable retention period, personal data is securely and permanently deleted or anonymised. Data subject to an active legal hold (for example, data relevant to an ongoing regulatory investigation or court proceeding) is retained beyond the standard schedule until the hold is lifted, after which it is deleted within 90 days.

06 Your Rights as a Data Subject

As a registered cbe444 account holder whose personal data we process, you have the following rights. To exercise any of these rights, contact the cbe444 support team via live chat inside the account dashboard, or send a written request to [email protected]. We will respond to all verifiable data subject requests within 30 calendar days of receipt.

• Right of access: You have the right to request a copy of all personal data cbe444 holds about you, along with information about the purposes for which it is processed, the categories of data held, and the third parties with whom it has been shared.
• Right to rectification: If any personal data cbe444 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Minor corrections (such as updating your mobile number or email address) can be made directly within your account settings.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to our legal obligation to retain certain data for AML and regulatory compliance purposes, as described in Section 5.
• Right to restrict processing: You have the right to request that cbe444 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data and we are in the process of verifying it.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to cbe444 in a structured, commonly used, machine-readable format, and to request that we transmit that data directly to another service provider where technically feasible.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, in which case cbe444 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing email communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Consent can be withdrawn via the notification preferences section of your cbe444 account settings.

cbe444 will not charge a fee for exercising any of the rights listed above unless a request is manifestly unfounded, repetitive, or excessive. In such cases, a reasonable administrative fee may be applied. Identity verification will be required before any data subject request is actioned, to ensure we do not disclose or delete data belonging to a different individual.

07 Data Security Measures

cbe444 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated regularly to reflect evolving security standards and threat landscapes.

• Encryption in transit: All data transmitted between your device and the cbe444 platform is encrypted using Transport Layer Security (TLS) version 1.2 or higher. Connections using older, insecure protocols are blocked at the network perimeter.
• Encryption at rest: Personal data stored in cbe444's databases is encrypted at rest using AES-256 encryption. Encryption keys are stored separately from the data they protect and are subject to regular rotation.
• Access controls: Access to systems containing personal data is restricted on a role-based, need-to-know basis. All staff access is logged and subject to quarterly access review. Administrative access to production systems requires multi-factor authentication.
• Penetration testing: cbe444's platform and infrastructure undergoes periodic third-party penetration testing. Critical and high-severity findings are remediated within defined SLA windows before any results are finalised.
• Incident response: cbe444 maintains a documented data-breach incident response plan. In the event of a personal data breach that poses a risk to affected individuals, cbe444 will notify impacted account holders via their registered email address within a reasonable timeframe following discovery of the breach.
• Staff training: All cbe444 staff who handle personal data as part of their role receive mandatory data protection training at onboarding and on an annual basis thereafter.

While cbe444 takes all reasonable precautions to protect your data, no internet-based system can guarantee absolute security. You are also responsible for maintaining the security of your own device, browser, and cbe444 account credentials. cbe444 strongly recommends enabling SMS OTP two-factor authentication from within your account security settings and ensuring your registered password is unique to the cbe444 platform.

08 Policy Updates & Contact

cbe444 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law, or platform features. When a material change is made to this Policy, cbe444 will publish the updated version on this page and, where the change significantly affects the way we use your personal data, notify you via the email address registered to your account. The "Effective Date" displayed at the top of this page reflects the date on which the current version came into force. Your continued use of the cbe444 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes.

We recommend reviewing this Privacy Policy periodically, particularly before making a deposit or providing any new personal information to the platform. Previous versions of this Policy are available on request by contacting the support team.

If you are not satisfied with cbe444's response to a privacy complaint, you have the right to escalate the matter through cbe444's formal dispute resolution process as described in the Terms & Conditions. cbe444 takes all privacy complaints seriously and will conduct a thorough internal review of every escalated complaint.

Last reviewed and updated: 1 January 2026. This Privacy Policy applies to all personal data collected by cbe444 in connection with accounts registered at https://cbe444.app.