co444 Privacy Policy — How We Handle Your Data

1 Data Controller Information

co444 ("the Company", "we", "us", "our") is the data controller responsible for the personal information collected through the co444 platform accessible at https://co444.io ("the Platform"). As data controller, co444 determines the purposes and means of processing personal data in accordance with applicable international data protection standards.

For all privacy-related queries, data subject access requests, or concerns, you may contact our data protection team directly at [email protected]. We aim to acknowledge all privacy-related communications within 3 business days and resolve them within 30 calendar days.

2 What Personal Data We Collect

co444 collects personal data through several channels: directly from you when you register or use the platform, automatically through your interaction with the platform, and in limited cases from third-party verification and payment service providers. The categories of personal data we collect include:

Category	Data Items Collected	Collection Method
Identity Data	Full name, date of birth, nationality, government ID number, passport number	Registration form, KYC verification
Contact Data	Email address, mobile number, residential address	Registration form
Financial Data	bKash / Nagad / Rocket / Upay account numbers, bank account details, transaction history, deposit and withdrawal records	Payment processor integration
Technical Data	IP address, device type, browser type and version, operating system, session duration, login timestamps	Automatic collection via cookies and server logs
Usage Data	Games played, bets placed, bet amounts, win/loss records, bonus participation history	Platform activity tracking
Communications Data	Support chat transcripts, email correspondence, feedback submissions	Customer support interactions

3 How We Use Your Personal Data

co444 processes your personal data only where we have a lawful basis for doing so. The lawful bases we rely on include: performance of a contract (operating your account), compliance with a legal obligation (KYC and anti-money-laundering requirements), your consent (marketing communications), and our legitimate interests (fraud prevention, platform security).

• Account management: To create, verify, maintain, and close your co444 player account in accordance with our Terms & Conditions.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank, and to maintain accurate financial records.
• Identity verification (KYC): To verify your identity and age as required by anti-money-laundering obligations and our responsible gaming commitments.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account compromise, money laundering, and other illegal activity on the platform.
• Customer support: To respond to your enquiries, resolve disputes, and improve our support services.
• Platform improvement: To analyse usage patterns, fix bugs, and improve the overall co444 platform experience for players in Bangladesh and beyond.
• Responsible gaming compliance: To monitor gambling behaviour, enforce self-exclusion requests, apply deposit and loss limits, and fulfil our responsible gaming obligations.
• Marketing communications: To send you promotional offers, bonus notifications, and news about co444 events — only where you have opted in to receive such communications. You may opt out at any time.
• Legal compliance: To comply with applicable laws, regulations, court orders, and requests from competent authorities.

4 Sharing Your Personal Data

co444 does not sell your personal data to third parties. We share your personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank receive the financial data necessary to process your transactions. These providers operate under their own privacy policies and are bound by contractual data protection obligations.
• Identity verification providers: Third-party KYC service providers process identity documents to verify your age and identity as required for account activation and withdrawals.
• Fraud prevention and analytics services: Data may be shared with fraud detection and platform analytics partners in aggregated or pseudonymised form to maintain platform security and improve performance.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (such as session tokens) to deliver their games on the co444 platform.
• Legal and regulatory authorities: co444 will disclose personal data to law enforcement, regulators, or courts where required to do so by applicable law, valid legal process, or to protect the rights and safety of co444, its players, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the co444 business, player data may be transferred as part of that transaction, subject to equivalent privacy protections.

5 International Data Transfers

co444 operates internationally and your personal data may be transferred to, stored in, and processed in countries other than Bangladesh. Where such transfers occur, co444 ensures that appropriate safeguards are in place to protect your data in accordance with applicable data protection standards. These safeguards may include standard contractual clauses, binding corporate rules, or reliance on adequacy decisions as applicable.

By using the co444 platform, you acknowledge that your data may be processed in jurisdictions with different data protection laws than those in Bangladesh. co444 takes all reasonable steps to ensure that any international transfer of your data is handled securely and in accordance with the principles set out in this Privacy Policy.

6 Data Retention

co444 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention guidelines apply:

• Account data: Retained for the lifetime of your co444 account and for a period of at least 5 years following account closure, in line with anti-money-laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction, as required by financial regulation and fraud prevention obligations.
• KYC and identity verification documents: Retained for the duration of your account and for at least 5 years post-closure.
• Customer support communications: Retained for up to 3 years from the date of the interaction, unless the matter relates to a dispute or legal claim, in which case retention may be extended.
• Technical and usage data (logs): Retained for up to 12 months, after which they are aggregated or deleted.
• Marketing consent records: Retained from the date of consent until you withdraw it, plus a reasonable period thereafter for audit purposes.

When personal data is no longer required, co444 will securely delete or anonymise it so that it can no longer be attributed to you as an individual.

7 Cookies and Tracking Technologies

The co444 platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to gather analytical data that helps us improve the platform experience. The categories of cookies used by co444 are as follows:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, display preferences, and login status. These improve your experience on the co444 platform.
• Analytical cookies: Used to collect anonymised data about how players navigate the co444 platform. This data helps us identify performance issues and improve the user experience. No personally identifiable information is collected through analytical cookies.
• Security cookies: Used to detect fraudulent activity, protect against cross-site request forgery (CSRF), and maintain the integrity of player sessions.

Most web browsers allow you to manage cookie preferences through their settings. However, disabling strictly necessary cookies may prevent you from accessing certain features of the co444 platform, including the ability to log in to your account.

8 Your Data Rights

Subject to applicable law, you have the following rights in respect of your personal data held by co444. To exercise any of these rights, please contact us at [email protected] with your full name, registered email address, and a description of your request.

• Right of access: You may request a copy of the personal data co444 holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification: If any personal data co444 holds about you is inaccurate or incomplete, you may request that we correct or update it.
• Right to erasure ("right to be forgotten"): You may request that co444 delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent. Note that we may be legally required to retain certain data for specified periods even following an erasure request.
• Right to restrict processing: You may request that co444 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its processing.
• Right to data portability: Where processing is based on your consent or on a contract, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to the processing of your personal data where co444 relies on legitimate interests as the lawful basis for processing, unless co444 can demonstrate compelling legitimate grounds that override your interests.

co444 will respond to all valid data subject requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

9 Data Security Measures

co444 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and co444 servers.
• Encryption of sensitive data at rest, including financial and identity information.
• Role-based access controls ensuring that only authorised co444 personnel can access personal data, and only to the extent required for their role.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Automated monitoring and alerting systems to detect unusual account activity or attempted breaches.
• Strict data processor agreements with all third-party service providers who handle personal data on co444's behalf.
• Employee training on data protection obligations and security best practices.

10 Children and Minors

The co444 platform is strictly for adults aged 21 and above. co444 does not knowingly collect or process personal data from individuals under the age of 21. If co444 becomes aware that personal data has been collected from a person under 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and permanently close the associated account.

If you are a parent or guardian and believe that a minor has registered on the co444 platform, please contact us immediately at [email protected]. We will investigate and take appropriate action within 48 hours of receiving your report.

11 Changes to This Privacy Policy

co444 reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, applicable law, or platform features. The effective date at the top of this policy indicates when it was last revised. Where changes are material — meaning they significantly affect how we use your data or your rights — co444 will notify you via email or an in-platform notification at least 14 days before the changes take effect.

Your continued use of the co444 platform following the notification of changes constitutes your acceptance of the updated Privacy Policy. If you do not agree to the revised policy, you must cease using the platform and may request account closure by contacting [email protected].

12 Contact and Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or the way co444 handles your personal data, please contact our data protection team in the first instance:

• Email: [email protected] (plain text — not a clickable link)
• Response time: Typically under 3 minutes during Bangladesh peak hours (6 PM – 2 AM BST, UTC+6); within 3 business days at all other times.
• Formal data subject requests: Please include your full name, registered email address, and a clear description of your request to ensure we can process it efficiently.

co444 takes all privacy complaints seriously and will work with you in good faith to resolve any concern. If you are not satisfied with the outcome of your complaint, you may have the right to escalate the matter to a relevant data protection authority in your jurisdiction.