hck44 Privacy Policy

1. Information We Collect

hck44 collects personal data from you in three principal ways: information you provide directly, information generated automatically by your use of the platform, and information obtained from third-party verification and payment partners. Each category is described in detail below.

1.1 Information You Provide Directly

When you register an account, complete KYC verification, make deposits or withdrawals, contact support, or participate in promotions, you may provide some or all of the following:

• Identity data: full legal name, date of birth, gender;
• Contact data: email address, mobile phone number, residential address (including district and division within Bangladesh, e.g., Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh);
• Identity document data: National Identity Card (NID) number, passport number, driving licence number, and copies of the relevant documents submitted during KYC;
• Payment data: bKash account number, Nagad account number, Rocket account number, Upay account number, bank account name and number, Visa/Mastercard card type and last four digits (we do not store full card numbers or mobile banking PINs);
• Account preferences: communication preferences, language settings, responsible gaming limit settings;
• Support communications: the content of any messages exchanged with the hck44 support team via live chat, email, or other channels.

1.2 Information Collected Automatically

When you access or use the hck44 platform, certain technical and behavioural data is collected automatically by our systems:

• Device and access data: IP address, device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution;
• Usage data: pages visited, time spent on each page, links clicked, game sessions played (game title, session start and end times, stakes placed, outcomes), sportsbook markets viewed and bets placed;
• Session data: login timestamps, session duration, logout method;
• Location data: approximate geographic location derived from your IP address (country and city level only — we do not use GPS or precise device location).

1.3 Information from Third Parties

hck44 may receive personal data about you from the following categories of third party:

• KYC and identity verification providers: the results of document verification checks and database screening (e.g., politically exposed persons (PEP) screening, sanctions list screening);
• Payment processors: transaction confirmation data, chargeback or dispute notifications;
• Fraud prevention and AML screening services: risk scores and flags associated with your device fingerprint or payment method;
• Analytics partners: aggregated, anonymised behavioural data used to improve the platform experience (no personally identifiable information is included in this data set).

2. How We Use Your Data

hck44 processes your personal data only for specific, lawful purposes. The table below maps each category of data to the purposes for which it is used and the legal basis for that processing.

2.1 Marketing Communications

hck44 will send you promotional communications — including bonus offers, seasonal promotions (e.g., Eid, Pohela Boishakh, IPL season, BPL season), and platform announcements — only if you have explicitly opted in to receiving such communications during registration or through your account settings. You may withdraw this consent at any time by updating your communication preferences in the account settings panel or by contacting support. Withdrawal of consent for marketing does not affect the lawfulness of processing carried out prior to withdrawal.

2.2 Responsible Gaming Monitoring

hck44 uses automated analysis of your betting and gaming behaviour — including stake amounts, session frequency, loss patterns, and use of responsible gaming tools — to identify potential indicators of problematic gambling. Where such indicators are detected, our responsible gaming team may make contact proactively. This processing is conducted in your interest and is a core part of hck44's duty of care to its players. For more information, visit the Responsible Gaming page.

2.3 Automated Decision-Making

hck44 uses automated systems to make certain decisions, including: approving or flagging transactions for manual review based on AML risk scores; applying bonus eligibility checks based on account history; and triggering responsible gaming alerts based on behavioural patterns. Where an automated decision has a significant effect on your account (such as a transaction hold or account restriction), you have the right to request human review of that decision by contacting the support team.

3. Data Sharing & Disclosure

hck44 does not sell your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

3.1 Service Providers

We share data with carefully selected service providers who process data on our behalf under written data processing agreements. These include:

• KYC and identity verification providers — to verify your identity and screen against sanctions and PEP databases;
• Payment processors and gateway operators — to facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, and card networks;
• Game content providers — studios such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe receive anonymised session data necessary to deliver and audit game rounds; they do not receive your identity or contact data;
• Cloud infrastructure and hosting providers — who store platform data on servers secured to industry-standard specifications;
• Fraud prevention and cybersecurity services — who analyse device and behavioural signals to detect and prevent account takeover and financial fraud.

3.2 Legal and Regulatory Disclosure

hck44 may disclose personal data to law enforcement, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or regulatory direction. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement and, where permitted by law, will notify the affected player of the disclosure.

3.3 Business Transfers

In the event that hck44 undergoes a merger, acquisition, restructuring, or sale of substantially all of its assets, player data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified by email in advance of any such transfer, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

3.4 No Cross-Border Transfers Without Safeguards

Where personal data is transferred to service providers located outside of Bangladesh, hck44 ensures that appropriate contractual safeguards are in place — including standard contractual clauses or equivalent data transfer mechanisms — to protect your data to a standard equivalent to that provided under this Policy.

4. Cookies & Tracking Technologies

hck44 uses cookies and similar tracking technologies (including local storage, session storage, and device fingerprinting) to operate the platform efficiently, maintain your session, prevent fraud, and where you have consented, to analyse and improve the user experience.

4.1 Categories of Cookies Used

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. They cannot be disabled without breaking core functionality.
• Functional cookies: Remember your preferences (e.g., game lobby view, language setting, last-visited section) to personalise your experience on return visits.
• Analytics cookies: Collect anonymised data about how you interact with the platform — which pages are visited most, where sessions drop off, which game categories attract the most engagement. This data is used exclusively to improve the service.
• Fraud-detection cookies: Store a device fingerprint token used by our security systems to identify known fraudulent devices and protect against account takeover attacks.

4.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies via the settings or preferences menu. Please note that disabling strictly necessary cookies will impair your ability to log in and use the platform. Disabling analytics cookies will not affect your access to games or account features. Detailed instructions for managing cookies in popular browsers are available from the respective browser's help documentation.

5. Data Retention

hck44 retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. The following retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years following account closure, to satisfy anti-money laundering record-keeping requirements and to resolve any post-closure disputes.
• KYC documents: Retained for 5 years from the date of verification or from account closure, whichever is later.
• Transaction records: Retained for 5 years from the date of each transaction, in line with standard financial record-keeping obligations.
• Support communications: Retained for 3 years from the date of the communication, to support quality assurance and dispute resolution.
• Usage and session data: Retained in identifiable form for 24 months, then anonymised or deleted. Anonymised aggregates may be retained indefinitely for statistical analysis.
• Marketing consent records: Retained for the period during which you have consented to marketing, plus 3 years following withdrawal of consent, to demonstrate compliance with consent obligations.

When personal data is no longer required for any of the above purposes, it is securely deleted or anonymised in accordance with hck44's data destruction procedures.

6. Data Security

hck44 implements a layered security architecture to protect your personal data against unauthorised access, alteration, disclosure, and destruction. Our security measures include the following:

• Transport Layer Security (TLS/SSL): All communications between your browser or device and hck44's servers are encrypted using 256-bit TLS. The padlock icon in your browser's address bar confirms this encryption is active during your session.
• Encrypted data storage: Sensitive fields — including identity document references, payment method identifiers, and KYC data — are stored using industry-standard encryption at rest.
• Access controls: Access to personal data within hck44's systems is restricted on a strict need-to-know basis. Staff with access to player data undergo background checks and are bound by confidentiality obligations.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their accounts. Internal systems that process personal data require 2FA for all staff access.
• Penetration testing: hck44's platform undergoes periodic security assessments and penetration testing by independent cybersecurity specialists.
• Incident response: hck44 maintains a documented security incident response plan. In the event of a confirmed data breach, affected players are notified within 72 hours as described in Section 1 above.

7. Your Rights Over Your Data

hck44 recognises and upholds the following data subject rights. To exercise any of these rights, contact our support team at the email address listed below. We will respond within 30 days of receiving a valid request. We may ask you to verify your identity before processing a rights request to prevent unauthorised disclosure.

7.1 Right of Access

You have the right to request a copy of the personal data that hck44 holds about you. We will provide this in a structured, commonly used format. Where the volume of data is large, we may provide a summary first and invite you to specify which categories you require in full.

7.2 Right to Rectification

If any personal data held on your account is inaccurate or incomplete, you have the right to request that it be corrected. Minor contact details (email address, phone number) can be updated directly in the account settings panel. Changes to name or date of birth require supporting documentation and will be processed by the support team following KYC verification.

7.3 Right to Erasure

You may request that hck44 delete your personal data. This right is not absolute — it does not apply where hck44 is required to retain data to comply with a legal obligation (such as AML record-keeping requirements) or to establish, exercise, or defend a legal claim. Where erasure is possible, it will be completed within 30 days of a valid request. Account closure does not automatically trigger erasure, given the retention obligations described in Section 5.

7.4 Right to Restrict Processing

In certain circumstances — for example, where you contest the accuracy of data we hold and we are in the process of verifying it — you may request that we restrict processing of your data to storage only, while the dispute is resolved.

7.5 Right to Data Portability

Where hck44 processes your personal data on the basis of your consent or to perform a contract with you, and that processing is carried out by automated means, you have the right to receive your data in a structured, machine-readable format and to have it transmitted to another data controller where technically feasible.

7.6 Right to Object

You have the right to object to processing of your personal data where hck44 relies on its legitimate interests as the legal basis. You also have an absolute right to object to the use of your data for direct marketing purposes at any time, which can be exercised via the account settings panel or by contacting support.

8. Policy Updates & Contact

8.1 Updates to This Policy

hck44 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform functionality. Material changes will be communicated to registered players by email at least 14 days before they take effect. The date of the most recent revision is displayed at the top of this document. Your continued use of the platform after the effective date of an updated Policy constitutes acceptance of the revised terms.

8.2 How to Contact Us

For all privacy-related enquiries, data subject rights requests, or concerns about how your personal data is handled, please contact the hck44 data protection team using the following details:

Email: [email protected]
Response time: Within 2 business days for general enquiries; within 30 days for formal data subject rights requests.
Language: English preferred; requests in English will receive the fastest response.