cr44 Privacy Policy — How We Handle Your Data

cr44 ("we", "us", "our", or "the Platform") operates the website at cr44.club and is the data controller responsible for the personal information collected through the platform. This Privacy Policy explains how we collect, use, store, share, and protect personal data relating to our players, registered account holders, and visitors to the cr44 website.

This Privacy Policy applies to all services provided by cr44, including online casino games, sports betting, live casino tables, payment processing, customer support interactions, and all other features accessible through the cr44 platform. By using any cr44 service or registering an account, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

cr44 collects personal data in the following categories. We collect only what is reasonably necessary for the legitimate purposes described in this policy:

cr44 uses personal data for specific, documented purposes. We do not use your data for any purpose incompatible with the purposes set out below:

• Account creation and management: to register your account, verify your identity, process your login sessions, and maintain your account profile and preferences throughout your use of the platform.
• Payment processing: to process your deposit and withdrawal transactions, reconcile payment records, and comply with financial reporting and anti-money-laundering obligations applicable to online gaming operators.
• Customer support: to respond to your queries, complaints, and support requests, record communication history for quality assurance purposes, and provide you with timely assistance regarding your account or any cr44 service.
• Responsible gaming compliance: to monitor your account activity for signs of problem gambling, apply responsible gaming tools such as deposit limits and self-exclusion at your request or where required by our responsible gaming obligations, and fulfil our duty of care to all players.
• Platform security and fraud prevention: to detect, investigate, and prevent fraudulent transactions, cheating, collusion, money laundering, identity theft, and any other conduct that constitutes a breach of cr44's Terms and Conditions or applicable law.
• Service improvement and analytics: to analyse aggregated and anonymised usage data to understand how our platform is used, identify areas for improvement, test new features, and make informed product development decisions. This analysis does not involve identifying individual players.

cr44 does not use your personal data for automated profiling that produces legal or similarly significant effects on you without your explicit consent and without providing you with a meaningful opportunity to contest that profiling decision.

cr44 processes personal data only where a valid legal basis exists. The legal bases we rely on are:

• Contractual necessity: processing required to perform our contract with you, including account registration, payment processing, and service delivery. Without this processing, cr44 cannot provide its services to you.
• Legal obligation: processing required to comply with applicable laws, including KYC identity verification, anti-money-laundering checks, responsible gaming obligations, and financial record-keeping requirements.
• Legitimate interests: processing for fraud prevention, platform security, abuse detection, and internal analytics, where cr44's legitimate business interest in maintaining a secure and fair platform is not outweighed by any adverse impact on your individual rights.
• Consent: where we rely on consent as a legal basis (for example, for certain marketing communications or non-essential cookies), we will obtain your explicit consent beforehand. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

cr44 does not sell your personal data to any third party. We share personal data only in the following limited circumstances and only to the extent necessary for the specific purpose:

• Payment service providers: cr44 shares payment-related data with bKash, Nagad, Rocket, Upay, and card payment processors solely to process your transactions. These providers are contractually bound to handle your data securely and may not use it for any other purpose.
• Game content providers: limited technical data (such as session tokens and account status) is shared with licensed game providers including Pragmatic Play, Evolution Gaming, NetEnt, and Spribe to enable gameplay. These providers do not receive your full identity data.
• Legal and regulatory authorities: cr44 may disclose personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts when required to do so by applicable law, legal process, or a lawful order. cr44 will endeavour to notify you of such disclosure unless prohibited from doing so by law.
• Service providers operating on our behalf: cr44 engages third-party vendors to support platform operations, including IT infrastructure providers, cybersecurity firms, and analytics services. These vendors act as data processors under written agreements that bind them to cr44's data protection standards and prohibit them from using your data for their own purposes.

In all cases where data is shared with third parties, cr44 ensures that appropriate contractual protections are in place and that shared data is limited to what is strictly necessary for the stated purpose. cr44 does not permit any third party to use your personal data for their own marketing or commercial purposes.

cr44 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit cr44.club. We use three categories of cookies:

• Strictly necessary cookies: these cookies are essential for the cr44 platform to function. They enable core features such as logging in, maintaining your session, remembering your language preference, and processing payments. These cookies cannot be disabled without breaking platform functionality.
• Performance and analytics cookies: these cookies collect anonymised information about how visitors use cr44, such as which pages are visited most often and how long sessions last. This data helps us improve the platform experience. These cookies do not identify you personally.
• Functional cookies: these cookies remember choices you make on the platform — such as your preferred language or display settings — so that your preferences are retained across sessions. Disabling these cookies may result in certain platform features behaving differently from your saved preferences.

You can manage or delete cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to use the cr44 platform. For more information on how to manage cookies in your specific browser, please consult your browser's help documentation.

cr44 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Account data is generally retained for the duration of your active account relationship with cr44, plus an additional period as required by financial record-keeping and anti-money-laundering regulations. For Bangladesh-based players, cr44 retains KYC and financial transaction records for a minimum of five years following account closure, in line with applicable regulatory requirements.

When personal data is no longer required for any lawful purpose, cr44 will securely delete or anonymise it in a manner that prevents recovery. If you request deletion of your data prior to the expiry of any mandatory retention period, cr44 will restrict processing of that data to the minimum necessary to fulfil its legal obligations during the retention period.

cr44 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for all data in transit between your device and our servers, encrypted storage of sensitive data at rest, strict internal access controls limiting data access to authorised personnel only, regular security assessments and vulnerability testing of the platform, and automated monitoring systems designed to detect and respond to suspicious activity in real time.

While cr44 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, cr44 will notify you and relevant authorities in accordance with applicable legal requirements. You can contribute to your own account security by using a strong, unique password and by contacting cr44 support immediately if you believe your account has been accessed without your authorisation.

As an individual whose personal data is processed by cr44, you hold the following rights in relation to that data. To exercise any of these rights, please contact us using the details in Section 13:

• Right of access: you have the right to request a copy of the personal data cr44 holds about you, along with information about how and why it is being processed.
• Right to rectification: if any personal data cr44 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or supplemented without undue delay.
• Right to erasure: you may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn your consent and no other legal basis applies, or where the data has been unlawfully processed. This right is subject to cr44's legal retention obligations.
• Right to restriction of processing: in certain circumstances you may request that cr44 restrict the processing of your personal data — for example, while the accuracy of the data is being contested, or while you have objected to processing based on legitimate interests.
• Right to object: where cr44 processes your personal data on the basis of legitimate interests, you have the right to object to that processing. cr44 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or for the establishment, exercise, or defence of legal claims.

cr44 will respond to all valid data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, in which case cr44 will notify you of the extension and the reason for it. cr44 will not charge a fee for handling data rights requests unless the request is manifestly unfounded or excessive.

The cr44 platform may contain references to third-party services, including payment providers and game studios. cr44 is not responsible for the privacy practices of any third-party websites or services. We encourage you to review the privacy policies of any third-party service you interact with through the cr44 platform. This Privacy Policy applies solely to data processed directly by cr44 in connection with its own platform and services.

cr44 enforces a strict minimum age of 21 for all account holders and services. cr44 does not knowingly collect personal data from any individual under the age of 21. If cr44 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed without notice. If you believe that a person under 21 has registered a cr44 account, please notify us immediately at [email protected].

cr44 reserves the right to update or revise this Privacy Policy at any time. The most current version will always be published on the cr44 platform with the date of the most recent revision shown at the top of the page. Where a change to this Privacy Policy is material — meaning it significantly affects how we collect, use, or share your personal data — cr44 will endeavour to provide reasonable advance notice via the platform or by email to your registered address.

Your continued use of the cr44 platform following the publication of a revised Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with any change, you should stop using the platform and may request deletion of your account data by contacting [email protected].

If you have any questions, concerns, or complaints about this Privacy Policy, about how cr44 handles your personal data, or if you wish to exercise any of your data rights described in Section 9 above, please contact cr44's support team. Our team is available 24 hours a day, 7 days a week, including Bangladesh public holidays, and will handle all privacy-related enquiries with the confidentiality they require.

Email us at: [email protected]