Privacy Policy — How cd44bd Protects Your Data

This Privacy Policy ("Policy") describes how cd44bd ("the Platform", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "the Player") who register for, access, or otherwise interact with the cd44bd website located at https://cd44bd.biz and any associated services, applications, and tools.

cd44bd is committed to maintaining the highest standards of data privacy and security. We understand that players entrust us with sensitive personal and financial information, and we take that responsibility seriously. This Policy is designed to give you a clear, honest, and complete picture of our data practices so that you can make informed decisions about your relationship with our platform.

By creating a cd44bd account, making a deposit, using any of our games or betting markets, or simply browsing the platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming Policy, both of which form part of your agreement with cd44bd.

cd44bd collects personal data in several categories depending on how you interact with the platform. The table below summarises the main categories of data we may hold about you:

We do not collect or store full payment card numbers, CVV codes, or mobile banking PINs. Full card data is processed directly by our certified payment gateway partners and is never transmitted to or stored on cd44bd's own servers.

We do not collect special category data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless it is incidentally present in identity verification documents you submit, in which case it is processed solely for the purpose of verifying your identity and is not used for any other purpose.

cd44bd collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting our support team, or responding to a survey or promotion.
• Automated technologies: Technical and usage data collected automatically when you access the platform, including through cookies, web beacons, pixel tags, and server log files. This data helps us maintain platform security, analyse performance, and tailor your experience.
• Third-party payment providers: When you initiate a deposit or withdrawal, our payment partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank) share transaction confirmation data with us to credit your account or process your payment. These providers have their own privacy policies governing how they handle your data.
• Identity verification services: Where we use a third-party KYC service to verify your identity documents, that service may share the results of their verification check with us. We do not receive raw biometric data through this process — only a verification outcome.
• Publicly available sources: In limited circumstances related to fraud prevention or anti-money laundering compliance, we may cross-reference data you provide against publicly available records or sanctions lists.

cd44bd uses your personal data only for legitimate, specified purposes. The following table outlines our primary use cases:

We do not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Where automated processes flag an account for review (for example, due to unusual betting patterns or a failed identity check), a member of our compliance or support team will assess the situation before any action is taken.

cd44bd processes your personal data only where we have a valid legal basis to do so. The primary legal bases on which we rely are:

• Contractual necessity: Processing required to perform our contract with you — for example, creating your account, processing your deposits and withdrawals, providing game access, and delivering customer support.
• Legal obligation: Processing necessary to comply with applicable legal requirements, including anti-money laundering (AML) regulations, Know Your Customer (KYC) obligations, and fraud prevention duties.
• Legitimate interests: Processing in pursuit of cd44bd's legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms. This includes platform security monitoring, fraud detection, internal analytics, and responsible gaming enforcement.
• Consent: Where we rely on your consent — for example, to send you promotional emails or to set non-essential cookies — we will ask for your explicit agreement before processing begins. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Where your data is processed on the basis of legitimate interests, you have the right to object to that processing. Please contact us at [email protected] if you wish to raise an objection and we will assess your request in accordance with applicable data protection principles.

cd44bd does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own commercial use. We may share your data in the following limited and controlled circumstances:

• Payment processors: We share the minimum necessary data with approved payment partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank) to facilitate your transactions. These partners are contractually bound to use your data only for the purpose of processing your specific transaction.
• Identity verification providers: Third-party KYC and AML screening services receive your identity documents and personal details for the sole purpose of completing your verification check. These providers are subject to strict data processing agreements.
• Game software suppliers: Providers such as Pragmatic Play, Evolution Gaming, Microgaming, Spribe, NetEnt, and Ezugi may receive your player ID and session token to deliver their games within the cd44bd platform. These providers do not receive your full personal profile or financial data.
• Legal and regulatory authorities: We may disclose your data to law enforcement agencies, financial intelligence units, or other regulatory bodies where we are legally required or compelled to do so, or where disclosure is necessary to protect the rights, property, or safety of cd44bd, its players, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of cd44bd's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the implications for your data.

cd44bd uses cookies and similar technologies (such as web beacons, local storage, and session tokens) to operate and improve the platform. A cookie is a small text file placed on your device by a website server. Cookies do not harm your device and do not contain executable code.

We use the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the platform to function correctly. They include session authentication tokens, security cookies, and load-balancing cookies. These cookies cannot be disabled without breaking core platform functionality. No consent is required for strictly necessary cookies.
• Performance & Analytics Cookies: These cookies collect aggregated, anonymised data about how players use the platform — for example, which pages are visited most frequently, how long sessions last, and where errors occur. We use this data to improve platform performance and user experience. These cookies require your consent.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, currency display settings (BDT / ৳), and game display options — so that you do not need to re-enter them on every visit. These cookies require your consent.
• Responsible Gaming Cookies: These cookies store data related to your responsible gaming settings, such as active session time limits and deposit limit configurations, to ensure those controls are enforced consistently across devices.

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies; however, disabling strictly necessary cookies will prevent you from logging in and using the platform. Disabling performance or functional cookies will not prevent access but may reduce the quality of your experience.

cd44bd retains your personal data only for as long as is necessary for the purposes for which it was collected, and in accordance with our legal and regulatory obligations. The following retention periods apply:

• Account data and identity records: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction.
• Support and communication records: Retained for up to three (3) years from the date of the most recent interaction, to allow us to provide informed support if you re-open a previously discussed issue.
• Identity verification documents: Retained for five (5) years from the date of verification or account closure, whichever is later.
• Marketing preferences and consent records: Retained for the duration of your account and for one (1) year following account closure, to evidence any consent given or withdrawn.
• Technical and usage logs: Typically retained for thirteen (13) months before being anonymised or deleted, unless a specific security incident requires extended retention.

Upon expiry of the applicable retention period, your data will be securely deleted or anonymised so that it can no longer be associated with you as an individual. Where anonymisation is not technically feasible within a reasonable timeframe, the data will be isolated from active processing systems until secure deletion can be completed.

cd44bd implements a comprehensive set of technical and organisational security measures to protect your personal data against accidental loss, unauthorised access, alteration, disclosure, or destruction. Our security framework includes:

• Transport encryption: All data transmitted between your browser or device and our servers is protected using 128-bit SSL/TLS encryption. You can verify this by checking for the padlock icon in your browser's address bar.
• At-rest encryption: Sensitive personal data — including identity documents and payment references — is encrypted at rest on our database servers using AES-256 encryption.
• Access controls: Access to personal data is restricted on a strictly need-to-know basis. Staff who handle player data are subject to confidentiality obligations and receive regular data protection training.
• Multi-factor authentication: Internal administrative systems that contain personal data are protected by multi-factor authentication requirements for all staff access.
• Security monitoring: Our systems are subject to continuous monitoring for suspicious activity, including intrusion detection, anomaly detection, and DDoS mitigation controls.
• Regular security assessments: We conduct periodic security reviews and vulnerability assessments to identify and remediate potential weaknesses in our infrastructure.

Despite these measures, no system connected to the internet can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, cd44bd will notify affected individuals promptly and take all reasonable steps to contain and mitigate the incident.

As a player on the cd44bd platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with a clear description of your request. We will respond within 48 hours to acknowledge your request and fulfil it within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to overriding legal obligations that may require us to retain certain data (for example, AML record-keeping requirements).
• Right to Restriction: You may request that we restrict the processing of your personal data — for example, while a correction request is being assessed, or where you have objected to processing based on legitimate interests.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests. You also have an unconditional right to object to the use of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

We will not charge a fee for processing a data rights request unless the request is manifestly unfounded or excessive. In such cases we may charge a reasonable fee or refuse the request, and we will inform you of our reasoning.

The cd44bd platform is strictly intended for adults aged 18 years and older. We do not knowingly collect, store, or process personal data belonging to individuals under the age of 18. Age verification is a mandatory step in the account registration and KYC process, and any account found to be registered by a minor will be immediately closed.

If you believe that a minor has registered on the cd44bd platform, or that we have inadvertently collected personal data from a person under 18, please contact us immediately at [email protected]. We will investigate the report promptly and take all necessary steps to remove the account and delete any associated personal data.

The cd44bd platform may contain references to or integrations with third-party services, including game software providers such as Pragmatic Play, Evolution Gaming, Microgaming, Spribe, NetEnt, and Ezugi. These providers operate their own game environments, which may be delivered in iframes or through direct integrations within the cd44bd platform.

While cd44bd takes care to work only with reputable and established software partners, we are not responsible for the privacy practices of third-party game providers or payment processors. Each third party operates under its own privacy policy and data handling standards. We encourage you to review the privacy policies of any third-party service you interact with, particularly before sharing personal information directly with those services.

cd44bd is not responsible for the content, security, or privacy practices of any external website or service that you access through links present on the platform. Navigating away from the cd44bd platform is done at your own discretion and risk.

cd44bd reserves the right to update, amend, or replace this Privacy Policy at any time. We will notify active players of material changes via email or through a prominent on-platform notice prior to the changes taking effect. The "Last updated" date at the top of this page and in the sidebar will always reflect when the most recent revision was made.

Your continued use of the cd44bd platform following the effective date of any update to this Policy constitutes your acknowledgement of the changes and your agreement to the revised terms. If you do not agree with any changes to this Policy, you should cease using the platform and may request account closure by contacting our support team.

We recommend that you review this Privacy Policy periodically to stay informed about how we are protecting your information and any changes to your rights or our obligations.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way cd44bd handles your personal data, please contact our dedicated support team using the information below. All correspondence should be in English to ensure the fastest and most accurate response.

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week, 365 days a year
• Response Time: Acknowledgement within 48 hours; full response within 30 calendar days for data rights requests
• Subject Line: Please include "Privacy Request" or "Data Rights" in your subject line for faster routing to our compliance team

For responsible gaming support, please visit our dedicated Responsible Gaming page. For general platform queries, our FAQ is available at cd44bd.biz/faq.