as444 Privacy Policy

as444 uses your personal data for specific, documented purposes. We do not use data for any purpose that has not been disclosed to you in this policy. The primary uses are as follows:

• Account creation, verification, and ongoing administration — including KYC compliance checks and identity confirmation.
• Processing deposits and withdrawals securely via bKash, Nagad, Rocket, Upay, and supported banking channels.
• Delivering and operating casino games, sports betting markets, and all other platform features you access.
• Fraud detection, money laundering prevention, and platform security monitoring.
• Responsible gaming monitoring — including detecting patterns that may indicate problem gambling and activating protective tools on a player's account.
• Sending you service notifications and, where you have opted in, promotional communications about as444 bonuses, cricket betting markets, and seasonal offers.

as444 does not use automated decision-making or profiling to make decisions that produce legal or similarly significant effects on players without human review. Any account restriction or closure decision involving material impact is reviewed by a member of the as444 compliance team.

as444 does not sell personal data. We share data only with trusted parties where it is necessary to operate our services or where we are legally obligated to do so. Sharing occurs with the following categories of recipients:

• Payment processors and mobile wallet operators — bKash, Nagad, Rocket, Upay, and partnered banking institutions — solely to facilitate deposits and withdrawals on your account.
• Game providers and software suppliers — including Pragmatic Play, Evolution Gaming, and other licensed studios — who need session data to deliver game outcomes and record results accurately.
• KYC and identity verification partners who perform document checks on our behalf. These partners are contractually bound to use your data only for the purpose of identity verification and to maintain the same security standards as444 requires.
• Regulatory authorities, law enforcement agencies, or other government bodies — but only where as444 is legally compelled to disclose information, such as in response to a valid court order, anti-money laundering investigation, or fraud inquiry.

All third parties with whom as444 shares personal data are required to handle that data securely, to use it only for the purpose it was shared, and to comply with applicable data protection standards. as444 does not permit third-party recipients to use player data for their own marketing or commercial purposes.

as444 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. Account data — including identity, contact, and financial records — is retained for the duration of the active account relationship and for a minimum of five years following account closure, in line with anti-money laundering record-keeping requirements. KYC documents are retained for the same minimum period. Gaming activity logs are retained for a minimum of three years for dispute resolution and responsible gaming audit purposes.

Technical data such as IP logs and session records are retained for a shorter period of up to 12 months unless a security incident or ongoing investigation requires extended retention. Marketing preference records (opt-in / opt-out) are retained for three years following the last interaction to maintain an accurate suppression list. When data is no longer required, it is securely deleted or anonymised so that it cannot be linked back to an individual.

as444 implements a layered security architecture to protect player data against unauthorised access, accidental loss, destruction, or disclosure. Security measures in place include SSL/TLS encryption for all data in transit, hashed and salted password storage, role-based access controls limiting who within as444 can access personal data, regular security assessments and penetration testing, and real-time fraud and anomaly detection systems.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, as444 will notify affected individuals without undue delay. Notification will be provided via the email address or mobile number registered on the affected account and will describe the nature of the breach, the data affected, and the steps as444 is taking to address it. Players should ensure their registered contact details are kept up to date so that breach notifications can be delivered promptly.

as444 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes — meaning changes that significantly affect how we collect, use, or share your personal data — we will notify registered players via their registered email or mobile number at least 7 days before the changes take effect. The updated policy will always be available on the as444 website, dated with the effective date of the most recent revision. Your continued use of the as444 platform after the effective date of any revised policy constitutes your acceptance of the updated terms.