md44 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") is published by md44 ("md44", "we", "us", or "our") and applies to all personal data collected from individuals ("you", "the Player", or "the User") who access or use the md44 online betting and casino platform available at md44.io ("the Platform").

This Policy describes the categories of personal data we collect, the purposes for which we process that data, the legal bases on which we rely, the circumstances in which we may share data with third parties, the security measures we apply, and the rights you hold in relation to your personal data.

By registering an account or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this Policy, please do not use the Platform.

2. Data Controller

md44 acts as the data controller in respect of personal data collected through the Platform. As data controller, md44 determines the purposes and means of processing your personal data. All questions, requests, and complaints relating to personal data should be directed to:

• Contact: Data Privacy Team, md44
• Email: [email protected]
• Response Language: English
• Response Time: Within 30 calendar days of receipt

3. Personal Data We Collect

md44 collects the following categories of personal data. The specific data points collected depend on the nature of your interaction with the Platform:

Category	Data Points	Collected At
Identity Data	Full legal name, date of birth, gender, nationality, government-issued ID number	Registration & KYC verification
Contact Data	Email address, mobile phone number, residential address (including city, district, postcode)	Registration
Financial Data	Payment method identifiers (bKash/Nagad/Rocket account numbers, Visa/Mastercard last four digits), transaction history, deposit and withdrawal amounts in BDT	Deposit & withdrawal processing
KYC Documents	Scanned copies of National ID, passport, driving licence, proof of address documents	Account verification
Technical Data	IP address, device type, operating system, browser type and version, session timestamps	Automatic collection on Platform access
Usage Data	Pages visited, games played, bet history, session duration, click-path data	Automatic collection during Platform use
Communications Data	Content of emails, live chat transcripts, and support tickets exchanged with md44	Support interactions
Responsible Gaming Data	Self-exclusion records, deposit limit settings, cooling-off period requests	Responsible gaming tool use

md44 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where identity documents submitted during KYC verification incidentally contain such information. Where this occurs, such data is processed only for the purpose of verifying your identity and is not used for any other purpose.

4. How We Collect Your Data

md44 collects personal data through the following means:

• Directly from you: when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion.
• Automatically: through cookies, server logs, and analytics tools when you access and navigate the Platform. Technical and usage data is collected automatically during every session.
• From third-party service providers: identity verification agencies may provide confirmed identity data as part of the KYC process; payment processors may provide transaction confirmation data; fraud prevention services may provide risk-scoring data based on your device and behavioural fingerprint.

5. Legal Basis for Processing

md44 processes your personal data on the following legal bases:

• Performance of a contract: processing that is necessary to create and manage your account, process deposits and withdrawals, and provide access to betting and gaming services.
• Legal obligation: processing necessary to comply with applicable anti-money laundering (AML) laws, age verification requirements, fraud prevention obligations, and other regulatory requirements to which md44 is subject.
• Legitimate interests: processing carried out for md44's legitimate business interests, including platform security, fraud detection, service improvement, and responsible gaming monitoring — provided those interests are not overridden by your rights and interests.
• Consent: where you have given explicit consent to receive promotional communications or to the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. How We Use Your Data

md44 uses your personal data for the following specific purposes:

• To create, verify, and manage your player account, including authenticating your identity at login.
• To process deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, Visa, and Mastercard.
• To conduct Know Your Customer (KYC) and age verification checks to comply with applicable regulatory requirements.
• To detect, investigate, and prevent fraud, money laundering, collusive betting, and other prohibited activities on the Platform.
• To monitor and enforce responsible gaming obligations, including identifying players who may be showing signs of problem gambling behaviour.
• To provide customer support and respond to your queries, complaints, and requests.
• To send you transactional communications (e.g., deposit confirmations, withdrawal notifications, account security alerts). These are not optional as they are necessary for account operation.
• To send you promotional communications, bonus offers, and personalised recommendations — but only where you have given explicit consent or where md44 has a legitimate interest and you have not opted out.
• To improve the Platform's functionality, user experience, and game offering through analysis of anonymised usage data.
• To comply with requests from law enforcement or regulatory authorities where md44 is legally required to do so.

7. Sharing of Personal Data

md44 does not sell, rent, or trade your personal data. We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: bKash, Nagad, Rocket, Upay, and card networks (Visa, Mastercard) receive the minimum data necessary to authorise and complete financial transactions.
• Identity verification providers: third-party KYC and age verification services receive identity documents and personal data for the sole purpose of verifying your identity and checking against relevant watchlists.
• Fraud prevention and security services: specialist providers who help md44 detect and prevent fraudulent activity, account takeovers, and money laundering.
• Game content providers: where game studios (such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, or Ezugi) operate their games on the Platform, they may receive a player identifier and session token to facilitate gameplay. They do not receive your full personal profile.
• IT infrastructure and hosting providers: cloud and server providers who host the Platform and store data on md44's behalf, under strict data processing agreements.
• Law enforcement and regulatory authorities: md44 will disclose personal data to competent authorities when required to do so by applicable law, court order, or regulatory obligation. Where permitted, md44 will notify you of such a disclosure.

All third parties who receive personal data from md44 are required to process that data only in accordance with md44's instructions and for the specified purpose. md44 does not permit third-party processors to use your data for their own marketing or commercial purposes.

8. Cookies and Tracking Technologies

md44 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device when you visit a website. md44 uses the following categories of cookies:

• Strictly necessary cookies: essential for the Platform to function. These include session cookies that maintain your logged-in state and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: remember your preferences such as language settings, preferred payment method display, and last-visited game categories to improve your experience. These are activated on the basis of your consent.
• Analytics cookies: collect anonymised data about how players use the Platform — which pages are most visited, how long sessions last, and where players encounter difficulties. This data is used to improve the Platform. These are activated on the basis of your consent.

md44 does not use third-party advertising or cross-site tracking cookies. You can manage your cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will impair the functionality of the Platform.

9. Data Security

md44 applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and md44 servers.
• Encryption of sensitive personal data (including identity documents and financial records) at rest using industry-standard encryption algorithms.
• Role-based access controls ensuring that only authorised md44 personnel with a legitimate operational need can access personal data.
• Multi-factor authentication for internal system access by md44 staff and administrators.
• Regular security audits and penetration testing of the Platform and underlying infrastructure.
• Formal data breach response procedures, including notification to affected players within 72 hours of discovery of a breach that poses a risk to their rights and freedoms.

While md44 takes all reasonable precautions to protect your data, no system connected to the internet can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for ensuring your device is protected by up-to-date security software.

10. Data Retention

md44 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Account and identity data: retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering and fraud prevention obligations.
• Financial transaction records: retained for a minimum of five (5) years from the date of the transaction.
• KYC documents: retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Support communications: retained for three (3) years from the date of the last interaction, unless they are relevant to an ongoing dispute or investigation.
• Technical and usage data: retained in anonymised or aggregated form indefinitely for analytics purposes; in identifiable form, retained for a maximum of 24 months from collection.
• Responsible gaming records: retained for a minimum of five (5) years from the date of the relevant self-exclusion or limit request.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with md44's data disposal procedures.

11. Your Rights

Subject to applicable law, you have the following rights in relation to the personal data md44 holds about you:

• Right of access: you may request a copy of the personal data md44 holds about you, together with information about how it is processed.
• Right to rectification: you may request that md44 correct any inaccurate or incomplete personal data without undue delay.
• Right to erasure: you may request that md44 delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: you may request that md44 restrict the processing of your data in certain circumstances, for example while the accuracy of the data is disputed.
• Right to data portability: you may request that md44 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to object: you may object to the processing of your personal data where md44 relies on legitimate interests as its legal basis, and where your rights and interests override those of md44.
• Right to withdraw consent: where md44 processes your data on the basis of your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Subject Request". md44 will respond within 30 calendar days of receipt. We may need to verify your identity before processing your request.

12. Children's Privacy

The md44 Platform is strictly intended for individuals aged 21 years and above. md44 does not knowingly collect personal data from anyone under the age of 21. If md44 discovers or is notified that personal data has been collected from a minor, that account will be immediately suspended, the data will be deleted without undue delay, and any funds associated with the account will be handled in accordance with md44's Terms and Conditions.

If you believe that a minor has created an account on the Platform, please contact md44 immediately at [email protected] so that appropriate action can be taken.

13. Third-Party Links

The md44 Platform may contain references to or links to third-party game providers, payment processors, or other services. This Privacy Policy applies only to the md44 Platform and not to any third-party websites, platforms, or services that may be accessible from it. md44 is not responsible for the privacy practices of third parties and encourages players to review the privacy policies of any third-party services they access.

14. Changes to This Policy

md44 reserves the right to update or modify this Privacy Policy at any time. Where a change is material — meaning it significantly affects the way we collect, use, or share your personal data — md44 will provide at least 14 days' advance notice to registered players via the email address associated with their account, prior to the change taking effect.

Minor or clarificatory changes (such as corrections to grammar or formatting, or updates that do not affect the substance of the Policy) may be made without advance notice, but the effective date at the top of the Policy will always be updated to reflect the date of the most recent revision.

The current version of this Privacy Policy is always available at md44.io/privacy-policy. We recommend that players review this page periodically to stay informed of any changes.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data md44 holds about you, please contact us using the following details:

• Team: Data Privacy Team, md44
• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week
• Response Language: English
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

Please include your registered account username, your full name as registered on your account, and a clear description of your request or concern to enable our team to assist you as efficiently as possible.