Privacy Policy — How dl444 Collects, Uses, and Protects Your Personal Data

1. Information We Collect

dl444 collects personal data through several channels: directly from you during registration and account use, automatically via your use of the platform, and from third parties such as payment processors and identity verification services. The following table summarises the categories of personal data we collect and the source of each category.

1.1 Data We Do Not Collect

dl444 does not collect or process the following categories of sensitive personal data: racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data for identification purposes (other than as part of KYC document verification), or health data (except where voluntarily disclosed in a responsible gaming self-exclusion context). dl444 does not knowingly collect personal data from individuals under the age of 18.

2. How We Use Your Information

dl444 uses personal data collected from players for the following specific, legitimate purposes. We do not use personal data for any purpose that is incompatible with the purposes listed below without first obtaining your explicit consent.

2.1 Platform Operation and Account Management

• Creating and managing your dl444 player account
• Processing your deposits and withdrawals in BDT (৳) via bKash, Nagad, Rocket, Upay, and Bangladeshi bank transfers
• Authenticating your identity at login and during sensitive account actions
• Applying your responsible gaming settings, including deposit limits, loss limits, session timers, and self-exclusion periods
• Communicating with you about your account, transactions, and support requests

2.2 Legal Compliance and Fraud Prevention

• Conducting Know Your Customer (KYC) identity and age verification to confirm you are 18 years of age or older
• Meeting applicable anti-money laundering (AML) compliance obligations, including transaction monitoring and suspicious activity reporting
• Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, and other prohibited conduct as defined in the dl444 Terms & Conditions
• Complying with any lawful requests from competent authorities

2.3 Platform Improvement and Analytics

• Analysing aggregated, anonymised usage data to improve the dl444 platform experience, game catalogue, and payment processes
• Monitoring platform performance, uptime, and security vulnerabilities
• Conducting internal audits of game fairness, RNG performance, and payout accuracy

2.4 Marketing and Promotions

With your explicit consent at the point of registration (or subsequently via account settings), dl444 may use your contact data to send you promotional communications about bonuses, seasonal offers (Eid, Pohela Boishakh, BPL season promotions), and new game releases. You may withdraw your marketing consent at any time by updating your account preferences or contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before withdrawal.

3. Legal Basis for Processing

dl444 processes personal data only where a valid legal basis exists for doing so. The following legal bases apply to the processing activities described in this Privacy Policy:

4. Data Sharing and Third Parties

dl444 does not share personal data with third parties except in the specific circumstances described below. All third-party service providers engaged by dl444 are contractually required to process personal data only on dl444's instructions and to maintain appropriate security standards.

4.1 Payment Processing Partners

To process deposits and withdrawals in BDT (৳), dl444 shares relevant financial data with payment processing partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and card processing networks (Visa, Mastercard). Only the minimum data necessary to execute the payment transaction is shared with each partner.

4.2 Identity Verification Services

dl444 uses third-party identity verification and KYC service providers to authenticate the identity documents submitted by players. These providers process identity data — including NID scans and selfie images — on behalf of dl444 under strict data processing agreements. Identity data is not retained by verification service providers beyond the period required to complete the verification check.

4.3 Game Content Providers

Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate game servers that your device communicates with during gameplay. These providers may receive technical session data (such as your anonymised player ID, bet size, and game round results) as part of the game delivery mechanism. They do not receive your name, NID, or contact details.

4.4 Competent Authorities

dl444 will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, valid legal process, or where dl444 has a good-faith belief that disclosure is necessary to prevent fraud, protect player safety, or enforce its Terms & Conditions.

4.5 Business Transfers

In the event of a merger, acquisition, or transfer of all or substantially all of dl444's business assets, personal data held by dl444 may be transferred to the acquiring entity. In such circumstances, dl444 will provide notice to affected players via the registered email address on their account prior to any such transfer.

5. Cookies and Tracking Technologies

dl444 uses cookies and similar tracking technologies on its website to ensure correct platform functionality, maintain your login session, prevent fraud, and gather anonymised analytics to improve the platform experience. The following categories of cookies are used by dl444:

5.1 Managing Cookies

You may configure your browser to refuse all cookies, accept only essential cookies, or alert you when a cookie is being set. Please note that disabling essential session cookies will prevent you from logging in to your dl444 account and using real-money platform features. Disabling preference or analytics cookies will not affect your ability to play but may result in a reduced platform experience.

5.2 No Third-Party Advertising Cookies

dl444 does not currently use third-party advertising networks, retargeting pixels, or social media tracking cookies on its platform. If this changes in the future, this Privacy Policy will be updated and you will be notified via the registered email address on your account at least 14 days before such cookies are activated.

6. Data Retention Periods

dl444 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of meeting legal, accounting, and reporting obligations. The following retention periods apply to the principal categories of personal data held by dl444:

6.1 Secure Deletion

Upon expiry of the applicable retention period, dl444 will securely delete or irreversibly anonymise personal data in accordance with our internal data disposal procedures. Secure deletion means that the data cannot be reconstructed or recovered by any means after the deletion process is completed.

7. Data Security Measures

dl444 implements a layered approach to data security, combining technical, organisational, and procedural controls to protect personal data against unauthorised access, disclosure, alteration, or destruction. The following security measures are in place across all dl444 systems that process personal data:

7.1 Technical Controls

• TLS Encryption in Transit: All data transmitted between your device and dl444 servers is encrypted using TLS 1.2 or TLS 1.3. The dl444 website enforces HTTPS-only access with HTTP Strict Transport Security (HSTS) headers.
• AES-256 Encryption at Rest: Personal data stored in dl444 databases — including identity documents, financial records, and account data — is encrypted at rest using AES-256 encryption.
• Password Hashing: Player passwords are never stored in plain text. dl444 uses a strong, salted hashing algorithm (bcrypt) to store password credentials. Even dl444 staff cannot retrieve your plain-text password.
• Two-Factor Authentication: dl444 offers optional two-factor authentication (2FA) for player accounts to provide an additional layer of login security.
• Firewall and Intrusion Detection: dl444 infrastructure is protected by web application firewalls (WAF), network-level firewalls, and automated intrusion detection systems that monitor for anomalous access patterns.

7.2 Organisational Controls

• Access to personal data is restricted on a strict need-to-know basis. dl444 staff are granted only the minimum system privileges required for their role.
• All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Third-party service providers are subject to data processing agreements that require them to maintain security standards equivalent to those applied by dl444.

7.3 Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, dl444 will notify affected players without undue delay via the registered email address on their account. The notification will describe the nature of the breach, the categories and approximate number of individuals affected, the likely consequences, and the measures dl444 has taken or proposes to take to address the breach.

8. Your Data Rights

As a registered dl444 player, you hold the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact dl444 at [email protected] with the subject line "Data Rights Request" and include your registered username and a description of your request. dl444 will respond to all data rights requests within 30 days of receipt.

8.1 Right of Access

You have the right to request a copy of the personal data that dl444 holds about you. dl444 will provide a structured summary of your personal data categories, the purposes for which they are processed, and the third parties with whom they have been shared, free of charge.

8.2 Right to Rectification

If any personal data dl444 holds about you is inaccurate or incomplete, you have the right to request correction or completion of that data. For identity data that has been verified through KYC, corrections will require re-submission of appropriate verification documents.

8.3 Right to Erasure ("Right to Be Forgotten")

You may request deletion of your personal data where: the data is no longer necessary for the purposes for which it was collected; you withdraw consent (where consent is the legal basis); or the data has been unlawfully processed. Please note that dl444 may be unable to fulfil an erasure request where retention of the data is required by applicable legal or regulatory obligations — for example, AML record-keeping requirements mandate retention of identity and transaction data for defined periods even after account closure.

8.4 Right to Restriction of Processing

You have the right to request that dl444 restricts the processing of your personal data in certain circumstances — for example, while a dispute regarding the accuracy of your data is being resolved, or where you have objected to processing based on legitimate interest and a verification check is pending.

8.5 Right to Data Portability

Where processing is based on your consent or on performance of a contract, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) and to request that it be transmitted to another controller where technically feasible.

8.6 Right to Object to Marketing

You have the absolute right to object to processing of your personal data for direct marketing purposes at any time. To opt out of marketing communications from dl444, update your preferences in account settings or email [email protected] with the subject line "Unsubscribe". All marketing will cease within 5 business days of a valid opt-out request.

9. Children and Minors

dl444 is strictly an adults-only platform. Access to and use of dl444 is prohibited for any individual under the age of 18. dl444 does not knowingly collect, process, or retain personal data from individuals under the age of 18.

Age verification is conducted as part of the mandatory KYC process for all registered players. If dl444 discovers or has reason to believe that personal data has been collected from a minor, the affected account will be immediately suspended, all data will be securely deleted, and — where applicable — the matter will be referred to relevant child protection authorities.

If you are a parent or guardian and believe that your child may have provided personal data to dl444, please contact us immediately at [email protected] so that appropriate action can be taken without delay.

10. Changes to This Privacy Policy

dl444 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we provide. When material changes are made to this Privacy Policy, dl444 will provide advance notice to registered players via one or more of the following methods:

• A prominent notice displayed on the dl444 homepage and privacy policy page for a minimum of 14 days before the changes take effect
• An email notification sent to the registered email address on your dl444 account
• An in-platform notification visible upon your next login to dl444

10.1 Continued Use as Acceptance

Your continued use of the dl444 platform after the effective date of a revised Privacy Policy constitutes your acknowledgement and acceptance of the updated terms. If you do not agree with any changes to this Privacy Policy, you must cease using dl444 and may request account closure by contacting [email protected].

10.2 Contact for Privacy Queries

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way dl444 processes your personal data, please contact our support team. All privacy-related correspondence should be directed to [email protected] with the subject line "Privacy Query". dl444 will acknowledge receipt of all privacy queries within 2 business days and provide a substantive response within 14 business days.