hck44 Privacy Policy

This Privacy Policy ("Policy") describes how hck44 ("hck44", "we", "us", or "our") collects, processes, stores, and shares personal information about individuals ("you", "your", or "User") who visit or use the hck44 website and online casino platform located at https://hck44.io (the "Platform"). This Policy applies to all Users located in Bangladesh and any other jurisdiction from which the Platform is accessed.

hck44 is committed to protecting the privacy and personal data of all Users in accordance with applicable data protection principles. By registering an account, making a deposit, placing a wager, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and hck44. In the event of any conflict between this Policy and the Terms & Conditions regarding the handling of personal data, this Policy shall prevail.

hck44 collects personal data through several channels: directly from you when you register or interact with the Platform, automatically through technical systems as you use the Platform, and occasionally from trusted third-party sources such as payment processors and identity verification providers. The categories of personal data we collect are described below.

2.1 Registration & Account Data. When you create an hck44 account, we collect your full legal name, date of birth, gender, residential address (including city, district, and postal code within Bangladesh), email address, and a username of your choosing. This information is required to open and maintain your account. Without it, we cannot provide our services.

2.2 Identity Verification (KYC) Data. To comply with our Know Your Customer obligations and to verify that you are 21 years of age or older, we may collect copies of government-issued identification documents (such as a National ID card or passport), proof of address documents (such as a utility bill or bank statement), and, where applicable, source-of-funds documentation. KYC documents are processed securely and are not used for any purpose other than verification and legal compliance.

2.3 Financial & Transaction Data. We collect records of all deposits and withdrawals made through your hck44 account, including the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard), transaction amounts in Bangladeshi Taka (BDT), transaction timestamps (in Bangladesh Standard Time, UTC+6), and transaction reference numbers. We do not store raw card numbers or full mobile wallet credentials — these are tokenised by the respective payment provider.

2.4 Gaming Activity Data. We record all gaming and betting activity associated with your account, including game sessions, bet amounts, game outcomes, bonus usage, wagering progress, and session durations. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance purposes.

2.5 Communications Data. If you contact our support team by email or any other channel we make available, we retain records of that correspondence including your name, email address, the content of your messages, and the timestamps of our responses.

2.6 Technical & Device Data. When you access the Platform, our systems automatically collect certain technical information including your IP address, browser type and version, operating system, device type (desktop, mobile, or tablet), screen resolution, referring URL, pages visited within the Platform, and session duration. This data is collected via standard web server logs and analytics tools.

2.7 Cookie & Tracking Data. We use cookies and similar tracking technologies as described in Section 6 of this Policy. Cookies may collect information about your browsing behaviour within the Platform, your language preferences, and authentication state. For full details, please refer to Section 6.

hck44 uses the personal data we collect strictly for the purposes outlined below. We do not use personal data for any purpose that is incompatible with the reasons for which it was originally collected without your explicit consent.

• Account Creation and Management: To register your hck44 account, authenticate your identity at login, maintain accurate account records, and provide you with access to the Platform's features and services.
• Age and Identity Verification: To confirm that you are 21 years of age or older before permitting access to real-money games and betting markets, and to verify your identity in accordance with our KYC obligations.
• Transaction Processing: To process your deposits via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, to credit winnings and bonus funds to your account balance, and to process withdrawal requests to your nominated payment method.
• Responsible Gaming: To monitor your gaming patterns for signs of problem gambling behaviour, to apply deposit limits, loss limits, time-out periods, or self-exclusion measures that you have requested, and to proactively reach out if your activity raises responsible gaming concerns.
• Customer Support: To respond to your enquiries, resolve disputes regarding game outcomes or transactions, and to maintain records of your support history for continuity of service.
• Legal and Regulatory Compliance: To meet our anti-money laundering obligations, to respond to lawful requests from authorities, to retain records for audit purposes, and to enforce our Terms & Conditions.
• Security and Fraud Prevention: To detect and prevent fraudulent activity, multi-account abuse, bonus abuse, unauthorised account access, and any other activity that violates our platform rules.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the performance, design, and content of the Platform. Individual profiles are not used for A/B testing without appropriate consent mechanisms.
• Marketing Communications: To send you promotional emails, bonus offers, and platform news — but only where you have opted in to receive such communications. You may opt out at any time by contacting [email protected].

hck44 processes personal data only where a lawful basis for doing so exists. The primary legal bases on which we rely are as follows:

• Contractual Necessity: The majority of data processing described in this Policy is necessary for the performance of the contract between you and hck44 as defined in our Terms & Conditions. Without processing your registration data, financial data, and gaming activity data, we cannot provide the services you have signed up for.
• Legal Obligation: Certain processing activities — particularly KYC identity verification, anti-money laundering record-keeping, and the retention of transaction logs — are required by applicable law. hck44 cannot waive these obligations on a User's request.
• Legitimate Interests: We process technical and device data, security monitoring data, and aggregated analytics data on the basis of our legitimate interest in operating a secure, functional, and continuously improving platform. We have assessed that this processing does not override your privacy rights in these contexts.
• Consent: Where we send marketing communications or use non-essential cookies, we rely on your explicit consent. You may withdraw consent for marketing communications at any time by contacting [email protected]. Withdrawal of consent does not affect processing that took place before the withdrawal.

hck44 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

5.1 Game Providers. To deliver casino games and sports betting markets, hck44 passes certain technical session data (such as an anonymised session token and game-specific identifiers) to our certified game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers use this data solely to serve game content and return game results. They are contractually prohibited from using it for any other purpose.

5.2 Payment Processors. To process your deposits and withdrawals, we share the minimum necessary financial data with our payment partners including bKash, Nagad, Rocket, Upay, Visa, and Mastercard. Each payment partner operates under its own privacy and security framework. hck44 does not receive or store raw payment credentials from these providers.

5.3 Identity Verification Providers. Where KYC verification is required, hck44 may use a third-party identity verification service to validate your documents. These providers receive only the documents and data required for verification and are contractually obligated to delete data after verification is complete.

5.4 Legal and Regulatory Authorities. hck44 may disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by applicable law, court order, or lawful regulatory request. We will notify you of such disclosure where we are legally permitted to do so.

5.5 Business Transfers. In the event of a merger, acquisition, sale of assets, or restructuring of hck44's business, personal data held by hck44 may be transferred to the acquiring entity as part of that transaction. Users will be notified of any material change to the data controller's identity before such a transfer takes effect.

6.1 What Are Cookies. Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember certain information about your visit — such as your login session, language preference, and browsing behaviour — to improve your experience on subsequent visits.

6.2 Types of Cookies Used by hck44. hck44 uses the following categories of cookies on the Platform:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core features such as user authentication, session management, and security token validation. Without these cookies, the Platform cannot operate. No consent is required for strictly necessary cookies.
• Functional Cookies: These cookies remember your preferences (such as your chosen display settings or previously entered form data) to personalise your experience. They are not strictly necessary but improve Platform usability.
• Analytics Cookies: We use anonymised analytics cookies to understand how Users interact with the Platform — which pages are visited most frequently, how long sessions last, and where Users encounter navigation difficulties. This data is aggregated and does not identify individual Users. Analytics cookies require your consent.
• Security Cookies: These cookies help us identify and prevent fraudulent activity, detect unusual login patterns, and protect User accounts from unauthorised access.

6.3 Managing Cookies. You may configure your browser to block or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your hck44 account and using the Platform's core features. Instructions for managing cookies are available in the help documentation of all major browsers.

7.1 Active Accounts. Personal data associated with an active hck44 account is retained for as long as the account remains open and for a minimum period of five (5) years following account closure. This retention period reflects our obligations under anti-money laundering record-keeping requirements and our need to resolve any post-closure disputes.

7.2 Transaction Records. All financial transaction records — including deposit histories, withdrawal records, and bet settlement logs — are retained for a minimum of seven (7) years from the date of each transaction. This period aligns with standard financial record-keeping obligations.

7.3 KYC Documents. Identity verification documents submitted during the KYC process are retained for a minimum of five (5) years following account closure or the conclusion of any investigation in which the documents were relevant, whichever is later. Documents are stored in encrypted form and access is restricted to authorised compliance personnel only.

7.4 Support Communications. Records of support interactions are retained for three (3) years from the date of the last communication in each support thread, unless the interaction relates to an ongoing dispute or investigation, in which case it is retained until the matter is fully resolved.

7.5 Analytics and Technical Data. Anonymised analytics data is retained in aggregated form for up to two (2) years. Raw server log data (including IP addresses) is retained for no more than twelve (12) months unless required for an active security investigation.

7.6 Deletion Requests. Where you request deletion of your personal data and we are not subject to a legal obligation to retain it, we will process your request within 30 days. We will confirm in writing when deletion has been completed. Please note that where retention is legally mandated, we will inform you of the specific obligation and the earliest date on which deletion can be performed.

8.1 Encryption. All data transmitted between your device and the hck44 Platform is protected by 256-bit SSL (Secure Sockets Layer) encryption. This is the same standard used by major international banking institutions and ensures that data in transit cannot be intercepted by third parties.

8.2 Payment Tokenisation. hck44 does not store raw payment credentials. When you make a deposit via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the transaction is handled directly by the respective payment provider. hck44 stores only a tokenised reference that cannot be reversed to recover the original payment details.

8.3 Access Controls. Access to personal data stored by hck44 is restricted on a strict need-to-know basis. Internal systems employ role-based access controls, and all staff with access to personal data are subject to confidentiality obligations. Access logs are maintained and reviewed regularly.

8.4 Infrastructure Security. hck44's platform infrastructure is hosted on servers employing industry-standard physical and logical security measures including firewalls, intrusion detection systems, and regular vulnerability assessments. Backups are encrypted and stored separately from primary data.

8.5 Incident Response. In the event of a personal data breach that poses a risk to Users, hck44 will notify affected Users without undue delay and, where applicable, within 72 hours of becoming aware of the breach. Notifications will include a description of the nature of the breach, the categories of data affected, the likely consequences, and the measures taken or proposed to address it.

hck44 respects your rights over your personal data. The following rights are available to all registered Users. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and we will respond within 30 days.

• Right of Access: You have the right to request a copy of the personal data that hck44 holds about you, including information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update certain account details (such as your email address or contact number) directly within your account settings.
• Right to Erasure: You have the right to request that hck44 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is otherwise unlawful. This right is subject to our legal retention obligations as described in Section 7.
• Right to Restrict Processing: You have the right to request that hck44 restrict the processing of your personal data in certain circumstances — for example, while a dispute regarding the accuracy of the data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing of your personal data that is based on our legitimate interests. If you object, hck44 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent (such as for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before the withdrawal.

10.1 Age Restriction. The hck44 Platform is strictly intended for adults aged 21 years and above. hck44 does not knowingly collect personal data from individuals under the age of 21. Access to real-money gambling features by anyone under this age threshold is expressly prohibited under our Terms & Conditions.

10.2 Underage Registration. If hck44 becomes aware that personal data has been collected from a User who is under 21 years of age, we will immediately suspend the relevant account, void any game activity conducted on that account, and permanently delete the User's personal data from our systems as soon as legally permissible. Any deposited funds may be withheld pending investigation and returned to the original payment source.

10.3 Parental Guidance. If you are a parent or guardian and have reason to believe that your child has created an hck44 account, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate and take appropriate action within 48 hours of receiving your report.

11.1 Cross-Border Processing. hck44 primarily processes and stores personal data within secure server infrastructure. Certain data may be processed by third-party game providers and payment processors whose technical infrastructure is located outside Bangladesh. Where such transfers occur, hck44 ensures that appropriate contractual safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

11.2 Game Provider Infrastructure. Certified game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate global technical infrastructure. Session tokens passed to these providers for game delivery purposes are anonymised and do not include full personally identifiable information. Full personal data is never transferred to game providers.

11.3 Payment Provider Infrastructure. International card networks (Visa, Mastercard) process transaction authorisation data through their own global networks in accordance with their own independently certified security and privacy frameworks. hck44 has no control over data routing within those networks beyond the tokenised transaction reference it receives in return.

12.1 Right to Amend. hck44 reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. Where changes are material, we will notify registered Users via email to their registered address and/or via a prominent notice on the Platform prior to the changes taking effect.

12.2 Continued Use. Your continued use of the hck44 Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with the changes, you must discontinue use of the Platform and contact [email protected] to request account closure.

12.3 Version Control. The version number and effective date displayed at the top of this Policy identify the currently applicable version. Previous versions are available upon written request to [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way hck44 handles your personal data, please contact our dedicated data support team using the details below. We are committed to responding to all privacy-related enquiries within 30 days.

• Email: [email protected]
• Subject Line for Data Requests: "Data Rights Request"
• Subject Line for Underage Reports: "Underage Account Report"
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)
• Response Language: English
• Target Response Time: Within 30 calendar days for formal data rights requests; within 48 hours for urgent matters such as underage account reports or suspected data breaches