Privacy Policy – cd44

cd44 ("we", "us", "our") is the operator of the cd44.buzz website and the online gaming and sports betting services accessible through it. This Privacy Policy sets out how cd44 collects, processes, stores, shares, and protects the personal data of users ("you", "your") who access or use the platform. This policy applies to all interactions with cd44, including account registration, deposits, withdrawals, game play, promotional participation, and customer support communications.

cd44 is committed to user privacy and to being clear about how personal data is handled. This policy is written in plain, direct English so that every player — whether based in Dhaka, Chittagong, Sylhet, or anywhere else in Bangladesh — can understand exactly what rights they have and exactly what cd44 does with their information. If any part of this policy is unclear, you are encouraged to contact us at [email protected] before continuing to use the platform.

cd44 collects personal data in several ways: directly from you when you register or interact with the platform, automatically when you use the platform, and in some cases from third-party verification providers as part of our identity and payment verification processes. The categories of data we collect are set out below.

cd44 uses personal data for specific, defined purposes only. We do not use your data for purposes beyond those listed below without first obtaining your explicit consent. The purposes for which we process your data are as follows:

• Account management: to create, maintain, and operate your cd44 account, process your deposits and withdrawals, and manage your bonus entitlements.
• Identity and age verification: to carry out KYC checks required to confirm that you are who you say you are and that you meet the 21+ age requirement before we allow real-money activity on your account.
• Fraud prevention and security: to monitor account activity for signs of fraud, money laundering, collusion, or other prohibited behaviour, and to protect the security of the platform and of other users.
• Customer support: to respond to your enquiries, complaints, and support requests in a timely and accurate manner, and to maintain records of those communications for quality assurance.
• Responsible gaming compliance: to monitor your activity for indicators of problem gambling, to enforce any deposit limits or self-exclusion requests you have set, and to contact you where we are concerned about your gambling behaviour.
• Service improvement and analytics: to analyse aggregate, anonymised usage patterns to identify how the platform can be improved, which game categories are most popular, and how to make the user experience better for Bangladesh players.

cd44 does not use personal data to build advertising profiles or to sell targeted advertising inventory to third parties. If cd44 wishes to use your data for a purpose not covered by this policy, we will contact you to obtain explicit consent before doing so.

cd44 processes personal data only where there is a valid legal basis for doing so. Depending on the purpose, the legal basis we rely on is one or more of the following:

• Contractual necessity: processing is necessary to perform our contract with you — without it we cannot operate your account, process your transactions, or deliver the services you signed up for.
• Legal obligation: processing is necessary to comply with applicable laws and regulatory requirements, including anti-money-laundering obligations, age verification requirements, and fraud reporting obligations.
• Legitimate interests: processing is necessary for our legitimate interests in operating a secure and fair platform, preventing fraud, improving our services, and protecting the platform and its users — provided those interests are not overridden by your fundamental rights.
• Consent: where processing is not covered by one of the three bases above (for example, sending you optional promotional communications), we will ask for your explicit consent first and will provide a simple way to withdraw that consent at any time.

cd44 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment processors and mobile wallet operators: bKash, Nagad, Rocket, Upay, and our card processing partners receive transaction data (amount, reference, account identifier) strictly as needed to process your deposits and withdrawals. They do not receive your full identity file or game history.
• Identity verification providers: third-party KYC service providers may receive a copy of your identity document and a facial image (where biometric verification is used) for the sole purpose of confirming your identity and age. These providers are contractually bound to use that data only for the stated purpose.
• Regulatory and law-enforcement authorities: cd44 will disclose personal data to government agencies, regulators, or law-enforcement bodies where required to do so by applicable law, court order, or official regulatory request. We will not notify you of such disclosure where doing so would be unlawful or would compromise an investigation.
• Business transfers: in the event that cd44's business or assets are acquired by or merged with another entity, your personal data may be transferred as part of that transaction. You will be notified in advance of any such transfer and of any changes to this Privacy Policy that result from it.

All third parties with whom cd44 shares data are required to handle that data securely and in accordance with applicable data protection standards. cd44 does not permit its data-sharing partners to use your personal data for their own marketing or commercial purposes.

cd44 uses cookies and similar tracking technologies on the cd44.buzz website to support the operation of the platform and to improve your user experience. A cookie is a small text file placed on your device by a website server. The categories of cookies we use are as follows:

• Essential cookies: strictly necessary for the platform to function. These include session authentication cookies that keep you logged in while you navigate between pages and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: collect anonymised data about how users interact with the platform — which pages are visited most, how long sessions last, and which features are used. This data is processed in aggregate and is never used to identify individual users. Analytics cookies may be disabled via your browser settings.
• Preference cookies: remember your platform settings such as preferred language and display preferences so that you do not need to reset them each time you visit. These cookies may be disabled but doing so will reset your preferences on each visit.

Most web browsers allow you to manage, block, or delete cookies through their settings menus. Please note that blocking essential cookies will prevent the platform from operating correctly. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

cd44 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following general retention periods apply: account data is retained for the duration of your active account plus 5 years after account closure; transaction records are retained for 7 years from the date of each transaction to comply with financial record-keeping obligations; identity verification documents are retained for 5 years after account closure; support communications are retained for 3 years from the date of the last relevant interaction.

Where retention beyond these standard periods is required by a specific legal obligation (for example, an ongoing regulatory investigation), data will be retained until that obligation is resolved and for the applicable statutory period thereafter. When data is no longer required, it is securely deleted or irreversibly anonymised.

cd44 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data transmitted between your device and the cd44 platform; encryption at rest for sensitive data categories including identity documents and financial records; role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific role; regular security reviews and monitoring for unusual access patterns or potential vulnerabilities.

No data transmission over the internet or electronic storage method is 100% secure. While cd44 applies commercially reasonable security practices, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, cd44 will notify affected users without undue delay and will take prompt steps to contain and remediate the breach.

As a user of the cd44 platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected]. We will respond within 5 business days and will complete the request within 30 days of receipt, unless the volume or complexity of requests requires a longer period (in which case we will notify you).

cd44 will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse the request. We may ask you to verify your identity before processing a data rights request to ensure we do not disclose data to the wrong person.

The cd44 platform may contain references to third-party payment providers such as bKash, Nagad, and Rocket. These providers operate their own platforms governed by their own privacy policies, which are separate from this policy. cd44 is not responsible for the privacy practices of third-party payment platforms. When you complete a transaction via a third-party payment provider, the data you submit directly to that provider (such as your mobile wallet PIN or bank credentials) is handled by that provider under their own terms, not cd44's. We encourage you to read the privacy policy of any third-party provider you use in connection with cd44.

The cd44 platform is strictly for adults aged 21 and above. cd44 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in our account registration process. If we become aware that we have inadvertently collected personal data from a person under the age of 21, we will delete that data without delay and close the associated account. If you believe that a minor has registered on the platform, please contact us immediately at [email protected].

cd44 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform functionality. Where changes are material — for example, where we introduce a new category of data processing or a new sharing arrangement — we will notify registered users by email at least 7 days before the changes take effect. Minor changes (such as typographical corrections or clarifications that do not alter the substance of the policy) may take effect immediately.

Your continued use of the cd44 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. The date at the top of this page shows when this policy was last updated. If you do not agree with any update to this policy, you must stop using the platform and may request account closure by contacting [email protected].