ci44 Privacy Policy

1. Introduction

ci44 ("we", "us", "our") operates the online casino and sports betting platform available at https://ci44.io (the "Platform"). In the course of providing our services to registered players in Bangladesh, ci44 necessarily collects and processes certain personal data about you. This Privacy Policy (the "Policy") explains in clear terms what personal data we collect, the purposes for which we process it, with whom we share it, how long we retain it, and the rights you have in relation to your data.

This Policy applies to all personal data collected through the ci44 Platform, including data collected via the website, mobile-optimised browser interface, customer support channels, and any promotional communications. It should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference.

ci44 acts as the data controller in respect of personal data collected from players based in Bangladesh. If you have any questions about how your data is handled, please contact us at the details provided in Section 15 of this Policy.

2. Personal Data We Collect

ci44 collects the following categories of personal data from registered players and visitors to the Platform:

2.1 Identity Data

• Full legal name as it appears on your national identity document
• Date of birth (used to verify the 21+ age requirement)
• Nationality and country of residence
• National Identity Card (NID) number or passport number where provided for KYC purposes
• Photographs or scanned copies of identity documents submitted during account verification

2.2 Contact Data

• Mobile phone number registered with your ci44 account
• Email address (where provided)
• Residential address in Bangladesh (district, city, postcode)

2.3 Financial Data

• Mobile financial service (MFS) account numbers for bKash, Nagad, Rocket, or Upay
• Bank account details where bank transfer is used as a payment method
• Transaction history, including deposit amounts, withdrawal amounts, dates, and reference numbers
• Bonus and promotional credit history

2.4 Account & Gaming Data

• ci44 username and encrypted password
• Betting and wagering history across all sports markets and casino games
• Game session data, including session start/end times, stakes placed, and outcomes
• Responsible gaming settings you have activated (deposit limits, self-exclusion status, etc.)
• Account preferences and communication settings

2.5 Technical Data

• IP address at time of login and transaction
• Device type, operating system, and browser version
• Cookie identifiers and session tokens (see Section 7)
• Referring URL and on-site navigation path
• Geolocation data (country/region level, derived from IP address)

2.6 Communications Data

• Content of messages sent to ci44 customer support via email or live chat
• Records of promotional emails, SMS messages, or in-platform notifications sent to you
• Your responses to surveys or feedback requests (where you choose to participate)

3. How We Collect Your Data

ci44 collects personal data through the following means:

• Directly from you: When you register a ci44 account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or respond to a promotion.
• Automatically: When you access the Platform, our servers and analytics tools automatically record technical data such as your IP address, device identifiers, and browsing behaviour on our site (see Section 7 on cookies).
• From payment providers: When you initiate a bKash, Nagad, Rocket, or bank transfer transaction, the relevant payment provider shares transaction confirmation data with ci44 to allow us to credit your account.
• From identity verification services: ci44 may use third-party KYC or identity verification services to validate the documents you submit. These services return a verification result to ci44 along with any flagged discrepancies.
• From fraud prevention and security tools: ci44 employs fraud detection systems that analyse account behaviour and transaction patterns. These systems may cross-reference data points to identify suspicious activity.

4. How We Use Your Personal Data

The table below sets out the primary purposes for which ci44 processes your personal data and the type of data used for each purpose.

ci44 does not use automated decision-making or profiling that produces legal or similarly significant effects on players without providing a mechanism for human review.

5. Legal Basis for Processing

ci44 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing required to deliver the services you have contracted for when registering a ci44 account — including account management, transaction processing, and game delivery.
• Legitimate interests: Processing necessary for ci44's legitimate business interests, such as fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided those interests are not overridden by your privacy rights.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) obligations, identity verification requirements, and data retention mandates.
• Consent: Processing based on your freely given, specific, informed consent — primarily for marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

6. Data Sharing & Third Parties

ci44 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following circumstances:

6.1 Service Providers

ci44 engages carefully selected third-party service providers who process personal data on our behalf and under our instruction. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners — to facilitate deposits and withdrawals.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe, and others — who deliver the casino game software. These providers receive technical session data necessary to run game rounds.
• Identity verification (KYC) providers: Third-party services used to verify documents submitted during account verification.
• Fraud prevention and security vendors: Tools that analyse transaction and behavioural data to detect and prevent fraudulent activity.
• Customer support platform providers: Software that facilitates live chat or email support communications.
• Email and SMS service providers: Used to deliver account notifications and, where consented, promotional messages.

All third-party service providers engaged by ci44 are required to handle your personal data in accordance with applicable data protection standards and are prohibited from using your data for any purpose beyond delivering the contracted service.

6.2 Legal & Regulatory Disclosure

ci44 may disclose personal data to law enforcement agencies, financial intelligence units, courts, or other government authorities where required to do so by applicable law, court order, or regulatory obligation — including obligations arising under anti-money laundering and counter-terrorism financing frameworks.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a substantial portion of ci44's business assets, personal data held by ci44 may be transferred to the acquiring entity. In such circumstances, ci44 will take reasonable steps to notify affected players and to ensure that the acquiring entity honours the commitments in this Privacy Policy.

7. Cookies & Tracking Technologies

ci44 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. The table below describes the types of cookies ci44 uses.

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform, including logging into your account. ci44 does not use third-party advertising or retargeting cookies.

8. Data Security

In addition to transport-layer encryption, ci44 implements the following security measures to protect stored personal data:

• Role-based access controls ensuring that only authorised ci44 personnel can access personal data, and only to the extent required for their specific job function.
• Encryption of sensitive stored data fields, including payment account numbers and identity document references.
• Regular security assessments and penetration testing of the Platform infrastructure.
• Multi-factor authentication requirements for administrative access to data systems.
• Incident response procedures to detect, report, and address personal data breaches in a timely manner.

While ci44 applies rigorous security measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your ci44 login credentials and for notifying us promptly at [email protected] if you believe your account has been compromised.

9. Data Retention

ci44 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping obligations.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of each transaction, consistent with financial record-keeping requirements.
• Customer support communications: Retained for three (3) years from the date of the last communication, to support dispute resolution and quality assurance.
• Technical and analytics data: Aggregated analytics data is retained indefinitely in anonymised form. Raw technical logs are retained for up to ninety (90) days.
• Marketing consent records: Retained for as long as you remain an active subscriber and for two (2) years following withdrawal of consent, to evidence the consent history.

When personal data is no longer required and retention obligations have expired, ci44 securely deletes or irreversibly anonymises that data. Anonymised data (from which you cannot be identified) may be retained and used for statistical and analytical purposes without restriction.

10. Your Privacy Rights

As a ci44 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request" and include your registered mobile number or username to allow us to identify your account.

• Right of Access: You may request a copy of the personal data ci44 holds about you. We will provide this within a reasonable period, typically thirty (30) days of receiving a valid request.
• Right to Rectification: If any personal data ci44 holds about you is inaccurate or incomplete, you may request that it be corrected. Some data corrections (e.g., legal name changes) may require supporting documentation.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where processing was unlawful. This right is subject to override by legal retention obligations — for example, ci44 cannot delete transaction records during a legally mandated retention period.
• Right to Restriction: You may request that ci44 restrict processing of your data in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request a machine-readable export of your personal data.
• Right to Object: You may object to processing based on legitimate interests at any time. ci44 will cease such processing unless compelling legitimate grounds for the processing override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

ci44 aims to respond to all privacy rights requests within thirty (30) days. In complex cases, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.

11. Children's Privacy

The ci44 Platform is strictly for individuals aged 21 years and above. ci44 does not knowingly collect personal data from anyone under the age of 21. If we become aware that a registered account belongs to an individual under the age of 21, we will immediately suspend the account, void any associated transactions, and delete the personal data associated with that account.

If you believe that a minor has registered a ci44 account or accessed the Platform, please contact us immediately at [email protected] so that we can take prompt action. Responsible gaming and the protection of minors are priorities at ci44.

12. Marketing Communications

ci44 may send you promotional communications — including bonus offers, game launch announcements, and seasonal promotions relevant to the Bangladesh market — via SMS to your registered mobile number and, where provided, via email. These communications are sent only where you have provided your consent during registration or have opted in at a later stage through your account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Adjusting your notification preferences in your ci44 account settings, or
• Contacting ci44 support at [email protected] with the subject line "Unsubscribe".

Opting out of marketing communications does not affect the delivery of essential transactional communications, such as deposit confirmations, withdrawal notifications, account security alerts, and KYC-related messages. These operational communications are sent regardless of your marketing preference, as they are necessary for the delivery of the service.

13. Third-Party Links

The ci44 Platform may contain references or links to third-party payment providers and game software providers. These third parties operate under their own privacy policies, and ci44 is not responsible for the content, privacy practices, or data handling of any third-party service. We encourage you to review the privacy policies of any third-party services you interact with in connection with your ci44 account.

14. Updates to This Privacy Policy

ci44 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will publish the updated Policy on the Platform with a revised effective date. Where practicable, we will notify registered players of significant changes via SMS or in-platform notification before the changes take effect.

Your continued use of the ci44 Platform after a revised Privacy Policy has been published constitutes your acceptance of the updated Policy. If you disagree with any change, you must stop using the Platform and may request account closure in accordance with the Terms & Conditions.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ci44 handles your personal data, please contact the ci44 Data Privacy team using the details below:

• Email: [email protected]
• Subject Line: Privacy Policy Enquiry
• Response Time: Within 5 business days for general enquiries; within 30 days for formal rights requests
• Support Hours: 24 hours a day, 7 days a week
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

For responsible gaming support, please visit our Responsible Gaming page. For full platform rules, see our Terms & Conditions.