444c Privacy Policy —
How We Protect Your Data

This Privacy Policy ("Policy") sets out how 444c ("the Company", "444c", "we", "us", "our") collects, processes, uses, stores, shares, and protects the personal information of individuals who access or use the 444c online gaming platform at 444c.bid, including all associated subdomains, mobile-optimised versions, and any related applications (collectively, "the Platform").

This Policy applies to all registered account holders, prospective users, and visitors to the 444c Platform, regardless of the device or method of access used. It is intended to meet the data transparency standards required under the terms of 444c's international gaming license and to provide Pakistani users with a clear understanding of their privacy rights and 444c's obligations in relation to their personal data.

This Policy should be read alongside the 444c Terms & Conditions and Responsible Gaming Policy, both of which are published on the Platform and incorporated into the overall framework of your relationship with 444c.

2.1 Identity of Controller. For the purposes of applicable data protection standards, the data controller responsible for personal data collected through the 444c Platform is the entity that operates 444c under its international gaming license. The Platform is operated at the domain 444c.bid.

2.2 Contact for Privacy Matters. All privacy-related requests, queries, and complaints should be directed to the 444c privacy team via the support contact address published on the Platform. Written enquiries are preferred for formal data subject requests to ensure they are properly recorded and actioned within the required timeframe.

2.3 Licensing Authority. 444c operates under an international gaming license. The licensing authority associated with that license also has oversight of 444c's data handling practices insofar as they relate to the conditions of the gaming license. Players who have unresolved data protection complaints with 444c may escalate to the relevant licensing authority.

444c collects the following categories of personal data from users of the Platform, limited to what is necessary and proportionate for the stated purposes:

444c does not collect sensitive special categories of personal data (such as health data, racial or ethnic origin, or religious beliefs) unless specifically required by applicable responsible gaming obligations and only with your explicit consent.

444c collects personal data through the following channels and mechanisms:

• Direct interactions: Data you provide when completing the 444c account registration form, submitting KYC documents, contacting customer support, completing responsible gaming self-assessments, or updating your account profile.
• Automated technical collection: Technical data collected automatically when you access the 444c Platform, including IP address, device identifiers, browser type and version, session start and end times, and navigation data, collected through server logs and first-party cookies.
• Payment processing: Financial data provided in connection with deposits and withdrawals, received from or verified against JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card network processors.
• Gaming activity: Records generated automatically as a result of your gaming and betting activity on the 444c Platform, including bet placements, game results, bonus claims, and session data.
• Third-party verification: Identity verification data obtained through CNIC verification processes conducted in connection with KYC and AML compliance obligations.

444c processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform the contract between you and 444c — including account management, game delivery, payment processing, and customer support.
• Legal obligation: Processing required for compliance with applicable legal and regulatory requirements, including KYC verification, AML record-keeping, age verification, responsible gaming monitoring, and the conditions of our international gaming license.
• Legitimate interests: Processing carried out in pursuit of 444c's legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security, internal analytics, and product improvement. 444c conducts a balancing assessment before relying on legitimate interests as a processing basis.
• Consent: Processing carried out on the basis of your explicit consent — including marketing communications and the use of non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

444c uses personal data collected from Pakistani users for the following specific purposes:

• Creating, verifying, and managing your 444c account, including login authentication and session management
• Processing deposits and withdrawals in PKR via JazzCash, EasyPaisa, and other accepted payment methods
• Delivering the gaming and sports betting services available on the 444c Platform, including recording and settling bets and game outcomes
• Conducting mandatory Know Your Customer (KYC) identity and age verification in compliance with our gaming license conditions
• Monitoring transactions for anti-money laundering (AML) compliance purposes and detecting and preventing fraud
• Delivering and administering promotional offers and bonuses, including tracking wagering requirements
• Providing responsible gaming tools and monitoring for indicators of problem gambling behaviour as required by our licensing obligations
• Communicating with you about your account, transactions, security events, and platform changes
• Responding to customer support enquiries and resolving complaints and disputes
• Analysing platform usage patterns to improve the functionality, performance, and content of the 444c Platform
• Enforcing the 444c Terms & Conditions and other applicable policies
• Complying with legal, regulatory, and licensing requirements applicable to 444c's operations

7.1 444c does not sell your data. 444c does not sell, rent, trade, or otherwise transfer your personal data to third parties for their own independent commercial purposes. Any sharing of personal data by 444c is limited to the specific circumstances described in this section.

7.2 Service Providers. 444c shares personal data with carefully selected third-party service providers who process data on 444c's behalf and under 444c's instruction, subject to appropriate data processing agreements. Categories of service providers include:

• Payment processors — JazzCash, EasyPaisa, Visa/Mastercard networks, and banking partners (HBL, UBL, Meezan Bank) for transaction processing
• Identity verification providers — for CNIC-based KYC verification services
• Fraud prevention and security technology providers
• Game software providers — to deliver certified game content to the Platform
• IT infrastructure and cloud hosting providers for secure platform operation
• Customer support platform providers for live chat and ticketing systems

7.3 Regulatory and Legal Disclosure. 444c may disclose personal data to regulatory authorities, law enforcement agencies, or other competent bodies where required by law, by court order, or by the conditions of our international gaming license. Such disclosures are made only to the extent necessary to satisfy the specific legal or regulatory requirement.

7.4 Business Transfers. In the event of a merger, acquisition, or sale of all or a substantial part of 444c's assets, personal data held by 444c may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to the privacy terms applicable to your data.

8.1 Cross-Border Processing. As an internationally licensed online gaming platform, 444c's operations, data storage infrastructure, and some service providers are located in jurisdictions outside Pakistan. Accordingly, your personal data may be processed in countries other than the country in which you reside.

8.2 Safeguards for Transfers. Where personal data is transferred outside of Pakistan to a country that may not provide an equivalent level of data protection, 444c implements appropriate safeguards to protect your data, including data processing agreements with service providers that incorporate appropriate contractual protections for transferred personal data.

8.3 Acceptance. By creating an account with 444c and using the Platform, you acknowledge that your personal data may be transferred to, stored in, and processed in countries outside Pakistan in connection with the operation of the 444c Platform.

9.1 Retention Principle. 444c retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, and no longer than is required by our international gaming license, applicable AML regulations, or other binding legal obligations.

9.2 Retention Periods. The following general retention periods apply to the main categories of personal data held by 444c:

• Account registration and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements
• KYC documentation: Retained for a minimum of five (5) years from the date of verification, as required by gaming license conditions
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction
• Gaming and betting history: Retained for the duration of the account and for a minimum of three (3) years following account closure
• Customer support records: Retained for a minimum of three (3) years from the date of the interaction
• Technical and session data: Retained for up to twelve (12) months from collection, unless required to be retained longer for security or fraud investigation purposes

9.3 Secure Deletion. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Anonymised data (from which all identifying information has been removed) may be retained indefinitely for statistical and analytical purposes.

10.1 Use of Cookies. The 444c Platform uses cookies and similar tracking technologies (collectively "Cookies") to operate core Platform functionality, remember your preferences, monitor Platform performance, and — where you have given your consent — to deliver relevant promotional content.

10.2 Types of Cookies Used. The following categories of cookies are used on the 444c Platform:

10.3 Cookie Management. You may adjust your browser settings to block or delete cookies at any time. Note that blocking strictly necessary cookies will impair Platform functionality. Cookie preferences for non-essential cookies can also be managed through your 444c account settings.

Subject to applicable law and the conditions of 444c's licensing obligations (which may in some cases require us to retain data regardless of your request), you have the following rights with respect to your personal data held by 444c:

• Right of Access (Subject Access Request): You have the right to request a copy of all personal data 444c holds about you. 444c will respond to verified access requests within thirty (30) calendar days. In cases of complexity or volume, this period may be extended by a further thirty (30) days, with notification provided to you.
• Right to Rectification: You have the right to request correction of any personal data held by 444c that is inaccurate, outdated, or incomplete. Many data fields can be updated directly through your 444c account settings. For data that cannot be self-updated (such as CNIC-verified identity data), corrections must be requested through our support team with supporting documentation.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (for consent-based processing only), or where processing is unlawful. This right is subject to 444c's legal and regulatory obligations to retain certain data (particularly AML and KYC records), which will take precedence.
• Right to Restriction of Processing: You may request that 444c temporarily restricts the processing of your data — for example, while you contest the accuracy of data held, while a complaint or dispute is pending resolution, or where you have objected to processing pending a legitimate interests assessment.
• Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or on a contractual basis, you may request that 444c provides your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON), suitable for transfer to another service provider.
• Right to Object: You have an unconditional right to object to processing of your personal data for direct marketing purposes, which will be actioned immediately. You may also object to processing based on legitimate interests, in which case 444c will conduct a re-assessment of the balancing test applied.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, contact the 444c privacy team via the support channels published on the Platform. 444c will verify your identity before actioning any data subject request to protect against fraudulent requests for access to another person's data.

12.1 Technical Safeguards. 444c implements and maintains a comprehensive set of technical security measures to protect the personal data of its users from unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 444c Platform
• Encryption at rest for all personal data stored on 444c's servers
• Tokenisation of payment card data — full card details are never stored on 444c's systems
• Multi-factor authentication requirements for administrative access to systems containing personal data
• Regular security assessments, penetration testing, and vulnerability scanning of Platform infrastructure
• Intrusion detection systems monitoring for unauthorised access attempts
• Automated threat intelligence monitoring and incident response protocols

12.2 Organisational Safeguards. Access to personal data within 444c is controlled on a strict need-to-know basis. All personnel with access to personal data are subject to confidentiality obligations. 444c conducts regular data protection training for all staff with access to user data.

12.3 Data Breach Notification. In the event of a personal data breach that poses a risk to your rights and freedoms, 444c will notify affected users without undue delay after becoming aware of the breach. Notification will be provided through available contact details and will include a description of the nature of the breach, the categories of data affected, and the steps taken to address it.

13.1 Age Restriction. The 444c Platform is strictly intended for adults aged twenty-one (21) years and above. 444c does not knowingly collect personal data from individuals under the age of 21. Age verification via CNIC is a mandatory step in the 444c account registration process specifically to prevent access by minors.

13.2 Discovery of Minor's Data. If 444c discovers or has reasonable grounds to believe that personal data has been collected from an individual under the age of 21, the relevant account will be immediately suspended, all gaming activity will be voided in accordance with the 444c Terms & Conditions, and all personal data relating to that individual will be securely deleted as soon as practicable, to the extent permitted by applicable regulatory requirements.

13.3 Parental Awareness. Parents and guardians are encouraged to utilise available parental control and filtering tools to prevent minors from accessing online gaming sites. If you believe a minor has accessed the 444c Platform, please contact our support team immediately to enable us to take appropriate action.

14.1 Consent-Based Marketing. 444c sends promotional and marketing communications — including information about bonuses, new games, cricket betting offers, and platform promotions — only to users who have given their explicit consent to receive such communications during registration or at a later point through account settings.

14.2 Opting Out. You may withdraw your consent to receive marketing communications from 444c at any time by:

• Updating your communication preferences in your 444c account settings
• Contacting 444c customer support with a request to opt out of marketing communications

Opt-out requests are processed within 48 hours. You may continue to receive transactional communications (such as deposit confirmations, withdrawal notifications, security alerts, and account verification messages) regardless of your marketing communication preferences, as these are necessary for the operation of your account.

14.3 Responsible Gaming Communications. 444c may send responsible gaming reminders, self-assessment prompts, and information about available support resources to all account holders as part of its responsible gaming obligations under the international gaming license. These communications are not marketing communications and cannot be opted out of while your account is active.

15.1 Right to Update. 444c reserves the right to update or modify this Privacy Policy at any time to reflect changes in applicable data protection standards, changes in the Platform's data processing activities, changes to 444c's licensing obligations, or for any other legitimate operational reason.

15.2 Notification of Changes. Where changes to this Policy are material — meaning they affect the manner in which 444c collects, uses, or shares your personal data in a way that is less protective of your rights than the previous version — 444c will notify you by email to your registered address and/or by a prominent notice on the Platform at least fourteen (14) days prior to the change taking effect.

15.3 Continued Use as Acceptance. Your continued use of the 444c Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the updated terms. The effective date of the current version of this Policy is always displayed at the top of the Policy document.

16.1 Privacy Enquiries. For any questions about this Privacy Policy, about how 444c handles your personal data, or to exercise any of your data rights described in Section 11, please contact the 444c privacy team via the support contact channels available on the Platform. Written enquiries are preferred for formal data subject access requests.

16.2 Response Timeframe. 444c will acknowledge receipt of all privacy enquiries within 48 hours and will provide a substantive response to formal data subject requests within thirty (30) calendar days of identity verification. Complex requests may require additional time, in which case 444c will notify you and provide an estimated completion date.

16.3 Complaints. If you are not satisfied with how 444c has handled a privacy concern, you have the right to escalate the matter to the relevant supervisory authority associated with 444c's international gaming license. Contact details for the relevant authority are available on request from the 444c support team.

16.4 Support Contact. The 444c support team is available 24 hours a day, seven days a week via live chat on the Platform for general privacy queries and account-related matters. The support email address is displayed in the Platform footer for written enquiries.