cr444 Privacy Policy — How We Protect Your Personal Data

This Privacy Policy ("Policy") describes how cr444 ("cr444", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes personal data about individuals ("you", "your", "the Player") who access or use the cr444 website located at https://cr444.io and all associated services, products, and features offered through that platform (collectively, the "Platform").

cr444 takes the privacy and security of your personal data seriously. This Policy is intended to give you a clear and transparent account of our data practices so that you can make informed decisions about your use of the Platform. By registering an account with cr444 or otherwise accessing the Platform, you confirm that you have read this Policy and that you understand and accept its terms.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming page, both of which are incorporated by reference and form part of your overall agreement with cr444.

cr444 collects personal data in the categories described below. The specific data points collected may vary depending on the features you use and the level of account verification required.

2.1 Registration and Identity Data

When you create a cr444 account, we collect the following information:

• Full legal name
• Date of birth (to verify that you are aged 21 or above)
• Residential address (including city, district, and postcode)
• Email address
• Mobile phone number
• Username and encrypted password
• Gender (optional)

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) and anti-money laundering obligations, we may collect:

• Copies of government-issued photo identification (National ID card, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or similar document dated within 90 days)
• Proof of ownership of the payment method used (e.g., screenshot of bKash or Nagad account registered in your name)
• Source of funds documentation where required by our compliance procedures

2.3 Financial Transaction Data

When you make deposits or withdrawals through cr444, we record:

• Transaction amounts (in BDT)
• Payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank)
• Transaction timestamps and reference numbers
• Account wallet balance history

2.4 Gameplay and Betting Data

• Games played, bet amounts, wagering history, win and loss records
• Session durations and login/logout timestamps
• Sports betting selections, odds accepted, and markets wagered on
• Bonus and promotion usage records

2.5 Technical and Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type and version
• Referring URLs and navigation paths within the Platform
• Cookie identifiers and session tokens (see Section 7)

2.6 Communications Data

• Content of messages sent to cr444 support via email or live chat
• Records of promotional communications sent to you and your interaction with them
• Responsible gaming tool selections (deposit limits, self-exclusion requests, cooling-off periods)

cr444 collects personal data through the following channels:

• Directly from you: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting our support team, or updating your account profile settings.
• Automatically during Platform use: Technical and behavioural data collected through cookies, web beacons, server logs, and similar technologies as you navigate and interact with the Platform (see Section 7 for full cookie details).
• From payment processors: Transaction status and confirmation data received from bKash, Nagad, Rocket, Upay, and banking partners as part of deposit and withdrawal processing.
• From identity verification providers: Where cr444 uses third-party KYC services to assist with document verification, we may receive verification results and related data from those providers.
• From fraud prevention and AML partners: Data related to fraud risk scores or watchlist checks from compliance data providers used to meet our anti-money laundering obligations.

cr444 uses the personal data we collect for the purposes set out in the table below. Each purpose is linked to a specific legal basis, which is described in Section 5.

cr444 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and cr444 — including operating your account, processing transactions, and delivering gaming services.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering regulations, age verification requirements, and financial record-keeping obligations.
• Legitimate interests: Processing for purposes that serve cr444's legitimate business interests, provided those interests are not overridden by your rights and freedoms. This includes fraud detection, platform security, responsible gaming monitoring, and analytics to improve the service.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — principally for the sending of marketing communications. You may withdraw consent at any time by updating your preferences in your account settings or by contacting support.

cr444 does not sell, rent, or trade your personal data to third parties for their own independent commercial purposes. We share personal data only in the circumstances described below, and only to the extent necessary for the specified purpose.

6.1 Service Providers

cr444 engages third-party service providers who process data on our behalf under contractual data processing agreements. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank — to process deposit and withdrawal transactions.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified studios — who may receive session tokens and game round identifiers necessary to deliver their game content.
• KYC and identity verification providers: Third-party services that assist with document verification and identity authentication as part of our onboarding process.
• Fraud prevention and AML screening services: Providers used to screen transactions and player activity against watchlists and fraud risk databases.
• IT infrastructure and hosting providers: Cloud and server infrastructure partners on whose systems Platform data is stored and processed.
• Customer support platforms: Software providers that power our live chat and email ticketing systems.

6.2 Legal and Regulatory Disclosure

cr444 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are required to do so by applicable law, court order, or regulatory directive. We will notify affected players of any such disclosure to the extent permitted by law.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of cr444's assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you in advance of any such transfer and the acquiring entity will be required to honour the commitments made in this Policy.

cr444 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage patterns, and support fraud prevention. Cookies are small text files placed on your device by your browser when you visit the Platform. They do not contain executable code and cannot directly access other data stored on your device.

7.1 Types of Cookies Used

• Strictly necessary cookies: Required for the Platform to function correctly. These include session authentication cookies that keep you logged in during an active session, CSRF protection tokens, and cookies that remember your language and currency preferences. These cookies cannot be disabled.
• Functional cookies: Enable enhanced functionality such as remembering your responsible gaming limit settings, your preferred deposit method, and your last-visited game category. Disabling these cookies may affect your experience.
• Analytics cookies: Used to understand how players interact with the Platform — for example, which pages receive the most visits and where players encounter difficulties. Data collected through analytics cookies is aggregated and anonymised before analysis. cr444 uses privacy-respecting analytics tools that do not share raw data with third-party advertising networks.
• Security and fraud prevention cookies: Used to identify anomalous browsing patterns, detect bot traffic, and flag potentially fraudulent activity. These form part of our platform integrity infrastructure.

7.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please note that blocking strictly necessary cookies will prevent the Platform from functioning correctly and may make it impossible to access your account. For full instructions on managing cookies in your specific browser, refer to your browser's help documentation.

cr444 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption applied to all data transmitted between your browser and the cr444 Platform.
• Encrypted storage of sensitive data fields, including passwords (stored as salted hashes), payment details, and identity documents.
• Role-based access controls that restrict access to personal data to only those employees and contractors who require it to perform their specific job functions.
• Access logging and monitoring to detect and investigate any unusual or unauthorised access to data systems.
• Regular security assessments including vulnerability scanning and penetration testing of the Platform's infrastructure.
• Incident response procedures to ensure that any data security breach is identified, contained, and reported to affected players and relevant authorities promptly.

While cr444 takes all reasonable precautions to secure your data, no internet-based platform can guarantee absolute security against all threats. You are responsible for ensuring that your cr444 account credentials are kept confidential and not shared with others. If you suspect that your account has been compromised, please contact cr444 support immediately.

cr444 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is either securely and permanently deleted or anonymised in a manner that prevents re-identification. Where data is anonymised rather than deleted, it may be retained indefinitely for statistical and analytical purposes.

Subject to applicable law and certain conditions and limitations, you have the following rights in relation to the personal data cr444 holds about you:

• Right of Access: You may request a copy of all personal data cr444 holds about you, together with information about how it is being used. cr444 will provide this information within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may update many data fields directly through your account profile page.
• Right to Erasure: You may request that cr444 delete your personal data. This right applies in certain circumstances, such as where the data is no longer needed for the purpose it was collected. However, it does not apply where retention is required by law (for example, AML record-keeping obligations).
• Right to Restriction of Processing: In certain circumstances, you may request that cr444 restrict the processing of your data — for example, where you contest the accuracy of the data, while that accuracy is being verified.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that cr444 provide your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on cr444's legitimate interests, including profiling. You also have an unconditional right to object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

To exercise any of the above rights, please contact cr444 support at [email protected]. Please provide sufficient information to verify your identity and describe your request clearly. cr444 will respond within 30 days of receiving a verified request. In complex cases, this period may be extended by a further 30 days, in which case cr444 will notify you of the extension and the reasons for it.

The cr444 Platform is strictly restricted to individuals aged 21 years and above. cr444 does not knowingly collect, process, or retain personal data from any person under the age of 21. Age verification is a mandatory step in the account registration process, and cr444 reserves the right to require documentary proof of age at any point.

If cr444 becomes aware that personal data has been collected from an individual under the age of 21 without appropriate parental or guardian consent, that data will be deleted immediately and the associated account will be closed. Any funds held in the account will be handled in accordance with cr444's responsible gaming obligations.

If you are a parent or guardian and you believe that a person under 21 in your care has registered a cr444 account, please contact [email protected] immediately so that the matter can be investigated and resolved without delay.

The cr444 Platform may contain references to third-party services such as payment providers (bKash, Nagad, Rocket, Upay) and game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). When you interact with these services — for example, when initiating a bKash deposit — you will be subject to that provider's own privacy policy and data practices, which are independent of cr444's.

cr444 is not responsible for the privacy practices of any third-party service and makes no representations about how those parties handle your personal data. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of the cr444 Platform.

cr444 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the features and services offered through the Platform. When we make material changes to this Policy, we will notify you by posting a prominent notice on the cr444 Platform and, where we hold a valid email address for you, by sending a notification to that address.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the cr444 Platform following the posting of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with any changes made to this Policy, you should discontinue use of the Platform and may request account closure by contacting our support team.

cr444 recommends that you review this Privacy Policy periodically to stay informed about how we are protecting your personal data. Archived versions of previous policies are available on request by contacting [email protected].

If you have any questions, concerns, or complaints about this Privacy Policy or about the way cr444 handles your personal data, please do not hesitate to get in touch with our support team. We are committed to resolving all privacy-related enquiries promptly and transparently.

Email: [email protected]

Please include "Privacy Enquiry" in the subject line of your message and provide sufficient detail about your concern so that we can respond effectively. cr444 aims to acknowledge all privacy-related enquiries within 2 business days and to resolve them within 30 days of receipt.