cz444 Privacy Policy — How We Protect Your Personal Data

This Privacy Policy ("Policy") describes how cz444 ("cz444", "we", "us", "our"), the operator of the online gaming platform accessible at https://cz444.io ("Platform"), collects, uses, stores, and protects the personal data of individuals ("you", "your", "Player", "User") who access or use the Platform.

cz444 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy applies to all personal data collected through the Platform, including data provided during account registration, identity verification, deposits and withdrawals, gameplay activity, and any communications you have with our support team.

This Policy should be read together with the cz444 Terms & Conditions, which also form part of your agreement with us. All natural-language content on the cz444 Platform, including this Policy, is provided in English for players in Bangladesh.

cz444 collects personal data in several ways: directly from you when you register, use the Platform, or contact support; automatically through your device and browser when you visit the Platform; and, where necessary, from third-party identity verification and payment processing partners. The categories of personal data we collect are set out below.

2.1 Registration and Identity Data

• Full legal name
• Date of birth (to verify you are aged 21 or above)
• Email address
• Mobile phone number (used for account verification and communications)
• Residential address (city, district, postal code)
• Username and encrypted password

2.2 Identity Verification Documents

• National Identity Card (NID), passport, or driving licence number and copy
• Proof of address (utility bill, bank statement, or government-issued correspondence)
• Selfie or live photograph (where enhanced verification is required)
• Source-of-funds documentation (for large transactions or where required by anti-money laundering procedures)

2.3 Financial and Transaction Data

• bKash, Nagad, Rocket, or Upay account number (associated with your deposits and withdrawals)
• Transaction history (deposit amounts, withdrawal amounts, dates, and payment method used)
• Account balance history
• Bonus credits received and wagering activity

2.4 Gameplay and Behavioural Data

• Game sessions played (game title, session duration, stakes, outcomes)
• Sports betting history (markets selected, odds, bet amounts, results)
• Platform navigation and feature interaction logs
• Responsible gaming tool usage (deposit limits set, cooling-off periods requested, self-exclusion requests)

2.5 Technical and Device Data

• IP address
• Device type, operating system, and browser version
• Unique device identifiers
• Session timestamps and log-in history
• Cookie identifiers (see Section 8 for full cookie details)

2.6 Communications Data

• Content of support enquiries submitted to [email protected]
• Records of complaints and dispute correspondence
• Marketing preference settings (opt-in or opt-out status)

Data Category	Primary Purpose	Collected At
Registration & Identity	Account creation and age verification	Sign-up
Verification Documents	KYC compliance and fraud prevention	Verification stage
Financial & Transaction	Payment processing and AML compliance	Deposit / withdrawal
Gameplay & Behavioural	Platform improvement and responsible gaming	During active play
Technical & Device	Security, fraud detection, platform stability	Every visit
Communications	Support resolution and dispute records	On contact

cz444 uses the personal data described in Section 2 for the following specific purposes:

• Account management: To create, maintain, and administer your cz444 player account, including processing login requests, managing account settings, and communicating account-related notifications.
• Age and identity verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity as part of our know-your-customer (KYC) process.
• Payment processing: To process deposits and withdrawals made via bKash, Nagad, Rocket, and Upay, and to maintain accurate financial records of all transactions on your account.
• Platform security and fraud prevention: To detect, investigate, and prevent fraudulent activity, multiple-account registrations, money laundering, collusion, and other prohibited conduct described in our Terms & Conditions.
• Anti-money laundering (AML) compliance: To monitor transaction patterns and, where required, report suspicious activity to relevant authorities as mandated by applicable law.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour and to enforce responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusions.
• Platform improvement: To analyse aggregated, anonymised gameplay and navigation data in order to improve the cz444 Platform, fix technical issues, and develop new features.
• Customer support: To respond to your enquiries, process complaints, and maintain records of support interactions for quality assurance purposes.
• Marketing communications (with consent): To send you promotional offers, bonus notifications, and updates about new games or seasonal events (such as BPL, Eid, or Pohela Boishakh promotions) where you have consented to receive such communications. You may withdraw consent at any time by contacting [email protected].
• Legal compliance: To comply with applicable laws, respond to lawful requests from regulatory or government authorities, and enforce our Terms & Conditions and this Privacy Policy.

cz444 does not use personal data for automated decision-making processes that produce significant legal effects without human oversight.

cz444 processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform our contractual obligations to you under the Terms & Conditions — for example, creating your account, processing deposits and withdrawals, and delivering the gaming services you have requested.
• Legal obligation: Processing that is required for cz444 to comply with applicable legal requirements, including anti-money laundering regulations, identity verification obligations, and record-keeping requirements.
• Legitimate interests: Processing that is necessary for the pursuit of cz444's legitimate business interests, provided those interests are not overridden by your rights and interests. This includes fraud prevention, platform security, responsible gaming monitoring, and Platform improvement through anonymised analytics.
• Consent: Processing that is based on your freely given, informed, and specific consent — primarily for marketing communications. Where consent is the legal basis, you retain the right to withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

cz444 does not sell, rent, or trade your personal data to or with third parties for their independent commercial use. We may share personal data in the limited circumstances described below:

• Payment processors: bKash, Nagad, Rocket, and Upay receive transaction data necessary to process your deposits and withdrawals. Each provider operates under its own privacy policy and is independently responsible for data it processes on its own systems.
• Identity verification providers: Third-party KYC and document verification services may receive copies of identity documents submitted during the verification process. These providers are bound by strict data processing agreements and may not use your data for any purpose other than identity verification on behalf of cz444.
• Game content providers: Certified game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session-level data (e.g., player ID, bet amounts, game outcomes) as part of game delivery. This data is used solely to operate the game and to resolve disputes.
• Regulatory and law enforcement authorities: cz444 may disclose personal data to relevant government bodies or law enforcement agencies where required by law, court order, or regulatory obligation. We will notify you of such disclosures where legally permitted to do so.
• Professional advisers: Legal, accounting, or auditing firms that provide services to cz444 may access limited personal data on a need-to-know basis and are bound by professional confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of cz444, personal data held by cz444 may be transferred to the acquiring entity, subject to equivalent data protection commitments. You will be notified in advance of any such transfer where reasonably practicable.

All third parties with whom cz444 shares personal data are required to handle that data securely and in accordance with applicable data protection principles. cz444 does not permit third-party service providers to use your data for their own marketing or commercial purposes.

cz444 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account relationship with cz444, plus a minimum of five (5) years following account closure, in order to comply with anti-money laundering record-keeping requirements.
• Transaction records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by applicable financial regulations.
• Identity verification documents: Retained for five (5) years after account closure or five (5) years from the date the document was submitted, whichever is later.
• Gameplay data: Retained for three (3) years from the date of the relevant session or activity, after which it is anonymised or securely deleted.
• Support communications: Records of support interactions are retained for three (3) years from the date of the most recent interaction, or longer if the interaction relates to an unresolved complaint or legal matter.
• Marketing preferences: Retained for as long as your account is active, or until you withdraw your consent to receive marketing communications.

Upon expiry of the applicable retention period, personal data is securely deleted, anonymised, or pseudonymised in a manner that prevents re-identification. Where deletion is not immediately possible due to technical constraints, data will be isolated from further active processing until deletion can be completed.

cz444 takes the security of your personal data seriously and employs a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, disclosure, or destruction.

• Encryption in transit: All data transmitted between your device and the cz444 Platform is encrypted using 256-bit SSL/TLS technology, ensuring that your personal and financial information cannot be intercepted during transmission.
• Encryption at rest: Sensitive personal data stored on cz444 servers, including identity verification documents and financial records, is encrypted at rest using industry-standard encryption protocols.
• Access controls: Access to personal data is restricted to cz444 personnel who have a genuine need to process it as part of their job responsibilities. All staff with access to personal data are trained in data protection obligations and are bound by confidentiality agreements.
• Intrusion detection: cz444 employs automated intrusion detection and monitoring systems to identify and respond to potential security threats in real time.
• Penetration testing: The cz444 Platform undergoes regular security assessments, including penetration testing, to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a personal data breach that poses a risk to your rights and interests, cz444 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

cz444 uses cookies and similar tracking technologies (such as web beacons and local storage) on the Platform. Cookies are small text files placed on your device when you visit a website. They serve a number of functions that are essential to the operation of the cz444 Platform.

Cookie Type	Purpose	Duration
Strictly Necessary	Maintain your logged-in session, remember your security preferences, and ensure the Platform functions correctly. Cannot be disabled without breaking core functionality.	Session / up to 30 days
Functional	Remember your language preferences, display settings, and responsible gaming tool configurations so you do not need to re-enter them each visit.	Up to 12 months
Performance / Analytics	Collect anonymised, aggregated data on how players navigate and use the Platform. Used solely to improve Platform performance and identify technical issues. No personally identifiable information is included.	Up to 24 months

cz444 does not use third-party advertising cookies, social media tracking pixels, or cross-site behavioural advertising technologies. You may configure your browser to refuse or delete cookies; however, doing so may impair your ability to log in to and use the cz444 Platform.

Subject to applicable law, you have the following rights in relation to the personal data that cz444 holds about you:

• Right of access: You may request a copy of the personal data cz444 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held by cz444. Where possible, corrections to account profile data (such as your email address or phone number) can be made directly through your account settings.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. Please note that cz444 may be required by law to retain certain data (such as transaction records) even following an erasure request.
• Right to restriction: You may request that cz444 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is being considered.
• Right to data portability: Where processing is based on your consent or on a contract and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You may object to the processing of your personal data where cz444 relies on legitimate interests as the legal basis. You also have an absolute right to object to the processing of your data for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact cz444 at [email protected]. We will acknowledge your request within 5 business days and aim to respond fully within 30 calendar days. Where a request is complex or numerous, we may extend this period by up to a further 30 days, in which case we will notify you.

cz444 may need to verify your identity before processing a privacy rights request to ensure that data is not disclosed to, or acted upon at the request of, an unauthorised person.

The cz444 Platform is strictly intended for adults aged 21 years and above. cz444 does not knowingly collect, process, or retain personal data from any person under the age of 21.

As part of the account registration process, all players are required to declare that they are aged 21 or above and to provide date-of-birth information. Where cz444 has reason to believe that a registered player is under the age of 21, the account will be immediately suspended pending age verification. If verification confirms that the player is underage, the account will be permanently closed, any deposited funds will be returned (minus any bonuses claimed), and any winnings accrued will be voided.

cz444 primarily stores and processes personal data within secure data centre facilities. In certain circumstances, personal data may be transferred to or accessed from locations outside Bangladesh — for example, when working with third-party game content providers or identity verification services that operate internationally.

Where personal data is transferred internationally, cz444 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that described in this Privacy Policy. These safeguards may include:

• Contractual data processing agreements incorporating standard data protection clauses.
• Transfer only to providers operating in jurisdictions with adequate data protection frameworks.
• Technical security measures including encryption and access controls regardless of processing location.

By using the cz444 Platform, you acknowledge that your personal data may be processed in locations outside Bangladesh subject to the safeguards described above.

cz444 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, if we begin processing a new category of personal data or share data with a new class of third party — we will take reasonable steps to notify registered players before the changes take effect. Such notification may be provided via email to your registered address, via a notice on the Platform, or both.

The effective date at the top of this Policy will be updated each time changes are made. Your continued use of the cz444 Platform after the revised Policy has been published constitutes your acceptance of the updated terms.

We recommend reviewing this Privacy Policy periodically to stay informed of how cz444 handles your personal data. The current version is always accessible at https://cz444.io/privacy-policy.

If you have any questions, concerns, or complaints about this Privacy Policy or about how cz444 handles your personal data, please contact our support team using the details below. We take all privacy enquiries seriously and will respond promptly.

For privacy rights requests (access, rectification, erasure, portability, objection), please email [email protected] with the subject line "Privacy Rights Request" and include your registered username and a clear description of your request. cz444 will verify your identity before processing the request and will respond within the timeframes set out in Section 9.