cdd44 Privacy Policy

1 Introduction

cdd44 operates the online betting and gaming platform available at cdd44.io, providing sports betting markets, live casino tables, slot games, specialty titles, and related services to players based in Bangladesh. As a platform that handles real-money transactions and personal account information, cdd44 takes its obligations with respect to user privacy with the utmost seriousness.

This Privacy Policy sets out in detail the categories of personal data we collect, the specific purposes for which that data is processed, the lawful basis on which processing takes place, the circumstances under which data may be shared with third parties, the security measures we employ to protect your information, and the rights available to you as a data subject. This policy applies to all personal data processed by cdd44 in connection with your use of the cdd44 platform, whether accessed via desktop browser or mobile device.

This Privacy Policy should be read alongside cdd44's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference and together form the full legal framework governing your use of the platform. By accessing or registering on the cdd44 platform, you confirm that you are at least 21 years of age and that you accept the terms of this Privacy Policy in full.

2 Personal Data We Collect

cdd44 collects personal data in several ways: directly from you when you register, deposit, or contact support; automatically as you interact with the platform; and occasionally from third-party sources such as payment providers and fraud-prevention services. The categories of data we collect are set out below.

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (to verify the mandatory 21+ age requirement);
• Email address;
• Mobile phone number (used for account verification and security alerts);
• Residential address;
• Username and encrypted password hash.

2.2 Know Your Customer (KYC) Documents

• Copy of National Identity Card (NID), passport, or driving licence;
• Proof of payment method ownership (for example, a screenshot confirming the bKash, Nagad, Rocket, or Upay account is registered in your name);
• Any additional documentation requested by our compliance team in the course of an enhanced due-diligence review.

2.3 Financial & Transaction Data

• Deposit amounts, dates, and payment method references;
• Withdrawal requests, amounts, and processing status;
• Account balance history;
• Bonus crediting, wagering activity, and bonus expiry records;
• Mobile financial service (MFS) account references for bKash, Nagad, Rocket, and Upay transactions.

2.4 Betting & Gaming Activity Data

• Sports bets placed, including market, selection, stake amount in BDT, odds, and settlement outcome;
• Casino and slot game sessions, including game title, provider, session duration, stake amounts, and win/loss records;
• Responsible gaming tool activations (deposit limits, session limits, self-exclusion requests).

2.5 Technical & Device Data

• IP address at login and during active sessions;
• Device type, operating system, and browser version;
• Geolocation data (country and region level, derived from IP address);
• Session timestamps, page navigation paths, and feature interaction logs;
• Cookie identifiers and similar tracking technologies (see Section 6).

2.6 Communications Data

• Content of support tickets and live chat transcripts;
• Email correspondence with the cdd44 support and compliance teams;
• Records of promotional communications sent and your opt-in or opt-out preferences.

3 How We Use Your Personal Data

The personal data collected by cdd44 is used exclusively for the purposes listed in the table below. We do not use your data for purposes incompatible with those stated at the time of collection without first obtaining your explicit consent or unless required to do so by a legal obligation.

Marketing Communications

cdd44 may send you promotional emails, SMS messages, or in-platform notifications regarding bonuses, new game launches, seasonal promotions (such as Eid offers or Pohela Boishakh specials), and platform updates. All marketing communications are sent on an opt-in basis only. You may withdraw your consent to receive marketing communications at any time by updating your account preferences or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of communications sent prior to opt-out.

4 Legal Basis for Processing

cdd44 processes your personal data on one or more of the following lawful grounds, depending on the specific processing activity:

• Contractual necessity: Processing required to enter into and perform the contract between you and cdd44 — including account registration, bet acceptance, payment processing, and customer support. Without this processing, cdd44 cannot provide its services to you.
• Legal obligation: Processing required to comply with applicable legal requirements, including identity verification, age verification, anti-money laundering record-keeping, and responsible gaming obligations.
• Legitimate interests: Processing carried out in pursuit of cdd44's legitimate business interests — including fraud detection, platform security, abuse prevention, and internal analytics for service improvement — where those interests are not overridden by your fundamental privacy rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily applicable to optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Data Sharing & Third Parties

cdd44 does not sell, rent, or trade your personal data to any third party for that party's own marketing or commercial purposes. We share your personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

5.1 Game Providers

cdd44's platform integrates games from certified third-party providers including Evolution Gaming, Pragmatic Play, Pragmatic Play Live, NetEnt, Microgaming, Spribe, and Ezugi, among others. When you access these games, certain technical data (such as a session token and account reference) is transmitted to the provider to initiate and record your game session. Game providers operate under strict data processing agreements with cdd44 and are not permitted to use your data for their own independent purposes.

5.2 Payment Service Providers

To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and other supported payment channels, cdd44 shares the minimum necessary transaction data (such as transaction amount, account reference, and timestamp) with the relevant payment processor. Payment service providers are bound by their own privacy policies and financial services regulations and process data under their own independent data controller status.

5.3 Fraud Prevention & KYC Services

cdd44 may engage specialist third-party identity verification and fraud detection services to assist with KYC compliance and the detection of prohibited account behaviour. These providers process identity documents and device fingerprint data strictly on cdd44's behalf and under binding data processing agreements.

5.4 Legal & Regulatory Disclosures

cdd44 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by a valid legal order, court directive, or applicable statutory obligation. cdd44 will notify you of any such disclosure where legally permitted to do so.

5.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of cdd44's business, your personal data may be transferred to the acquiring entity as part of the transaction. cdd44 will notify affected players of any such transfer and will ensure that the acquiring entity is bound by privacy obligations at least equivalent to those set out in this policy.

6 Cookies & Tracking Technologies

cdd44 uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate the platform, maintain your logged-in session, remember your preferences, and collect analytics data to improve the user experience.

Types of Cookies Used

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without preventing core platform functionality.
• Functional Cookies: Remember your preferences such as language setting (English), display options, and last-visited game category. These improve your experience but are not strictly required for basic operation.
• Analytics Cookies: Collect anonymised or pseudonymised data about how users navigate the platform — including pages visited, time on page, and feature usage — to help cdd44 identify improvements. This data is aggregated and does not identify individual users.
• Security Cookies: Used to detect suspicious login activity, bot behaviour, and multiple-account creation attempts.

cdd44 does not use third-party advertising cookies or permit ad-tech networks to place cookies on the cdd44 platform for the purpose of building user profiles for external advertising. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the platform.

7 Data Retention

cdd44 retains your personal data for as long as your account remains active and for such additional period as is required to fulfil the purposes described in this policy or to comply with legal retention obligations. The specific retention periods applied to key data categories are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player. Anonymised aggregate data (for example, platform usage statistics) may be retained indefinitely for analytical purposes.

8 Data Security

cdd44 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the cdd44 platform is encrypted using industry-standard Transport Layer Security. This protects your login credentials, payment details, and personal information in transit.
• Encrypted Data Storage: Sensitive data fields — including passwords (stored as salted cryptographic hashes) and payment account references — are encrypted at rest using current industry-standard encryption algorithms.
• Access Controls: Access to personal data within cdd44's systems is restricted on a strict need-to-know basis. Staff members can only access the data categories required for their specific role. All internal access is logged and audited.
• Multi-Factor Authentication: Internal system access for cdd44 staff requires multi-factor authentication. Players are encouraged to enable any additional account security features available within their account settings.
• Regular Security Audits: cdd44's platform and data systems undergo periodic security reviews and vulnerability assessments to identify and remediate potential weaknesses before they can be exploited.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, cdd44 will notify affected players by email without undue delay, describing the nature of the breach, the data affected, and the steps taken to mitigate the impact.

9 Your Privacy Rights

As a player on the cdd44 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact [email protected] with the subject line "Privacy Rights Request" and include sufficient information to verify your identity. cdd44 will respond to all verified requests within 30 calendar days.

• Right of Access: You have the right to request confirmation of whether cdd44 processes personal data about you and, if so, to receive a copy of that data along with information about the purposes, categories, and recipients of processing.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. For straightforward updates (such as email address or phone number), you can make changes directly within your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and no other lawful basis applies, or where the data has been processed unlawfully. This right is subject to cdd44's legal retention obligations — for example, AML records must be retained for the statutory period regardless of an erasure request.
• Right to Restriction of Processing: You have the right to request that cdd44 restrict processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to cdd44 in a structured, commonly used, machine-readable format, and to request that this data be transmitted directly to another controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on cdd44's legitimate interests. You also have an unconditional right to object to processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

cdd44 will not charge a fee for responding to a privacy rights request unless the request is manifestly unfounded or excessive. In such cases, cdd44 reserves the right to charge a reasonable administrative fee or to refuse to act on the request, with written explanation provided to the requesting player.

10 Children's Privacy

The cdd44 platform is strictly intended for adults aged 21 years and over. cdd44 does not knowingly collect, store, or process personal data relating to any individual under the age of 21. If cdd44 discovers that personal data has been collected from a person below the minimum age threshold, that data will be deleted immediately and the associated account permanently closed.

If you believe that a person under the age of 21 has registered on the cdd44 platform, please notify us immediately at [email protected] so that appropriate action can be taken without delay. cdd44's commitment to under-age exclusion extends across all its responsible gaming practices — further details are available on the Responsible Gaming page.

11 International Data Transfers

cdd44 serves players in Bangladesh and processes the majority of personal data within its primary operating infrastructure. However, some data may be transferred to and processed by third-party service providers (such as game providers and fraud-prevention services) whose servers are located outside Bangladesh.

Where such international transfers occur, cdd44 ensures that appropriate safeguards are in place to protect the transferred data to a standard at least equivalent to the protections described in this policy. Safeguards may include standard contractual clauses incorporated into data processing agreements with the relevant third-party recipients, binding corporate rules where applicable, or transfers to jurisdictions recognised as providing an adequate level of data protection.

By using the cdd44 platform, you acknowledge and consent to the transfer of your personal data to cdd44's authorised service providers in other countries as described in this section, subject to the safeguards outlined above.

12 Third-Party Links

The cdd44 platform may display references to third-party game providers, payment services, or sports organisations (such as the BPL, IPL, ICC, and FIFA). While cdd44 exercises care in the parties it associates with, cdd44 has no control over the privacy practices of external organisations and cannot accept responsibility for the content of their privacy policies or the manner in which they handle personal data.

This Privacy Policy applies solely to personal data processed by cdd44 in connection with the cdd44.io platform. If you follow any reference to a third-party organisation and provide personal data to that organisation, your data will be governed by their privacy policy, not this one. cdd44 encourages you to review the privacy policies of any third parties whose services you access in connection with your use of the cdd44 platform.

13 Changes to This Privacy Policy

cdd44 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services offered on the platform. When material changes are made to this policy, cdd44 will notify registered players by email to the address associated with their account and will update the "Effective Date" at the top of this page.

Minor or clarificatory changes that do not materially affect your rights or cdd44's data practices may be made without individual notification, although the updated policy will always be accessible on this page. Your continued use of the cdd44 platform following notification of a material change constitutes acceptance of the revised Privacy Policy. If you do not accept the revised terms, you should discontinue use of the platform and contact [email protected] to request account closure.

cdd44 recommends that all players review this Privacy Policy periodically to remain informed of how their personal data is being protected. The date on which this policy was last reviewed appears in the callout box in Section 14 below.

14 Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about how cdd44 handles your personal data, please contact the cdd44 privacy team using the details below. All privacy correspondence is handled in English.

• Privacy Enquiries Email: [email protected] — use subject line "Privacy Enquiry" or "Privacy Rights Request"
• Data Breach Reports: [email protected] — use subject line "Data Security Concern"
• Live Chat: Available directly on the cdd44 platform, 8:00 AM – 12:00 AM BST daily, with responses under 2 minutes
• Email Response Time: Within 2 hours during operating hours; privacy rights requests responded to within 30 calendar days