Privacy Policy — How bi44 Protects Your Personal Data

This Privacy Policy ("Policy") describes the data practices of bi44 ("bi44", "we", "us", "our") in connection with the bi44 online betting and casino platform operated at bi44.io, including all associated games, services, payment features, promotional systems, and account management tools.

bi44 is committed to handling all personal information of its registered players and website visitors ("you", "User", "Player") with care, integrity, and transparency. We collect only the personal data that is necessary for the legitimate operation of the bi44 platform, the prevention of fraud and money laundering, the provision of responsible gaming services, and the delivery of a high-quality entertainment experience tailored to the Bangladeshi market.

This Policy applies to all personal data collected through:

• The bi44 website at bi44.io and all sub-pages thereof;
• The bi44 account registration and login process;
• Deposit and withdrawal transactions conducted via bKash, Nagad, Rocket, Upay, or any other supported BDT payment method;
• Customer support communications, including emails sent to [email protected];
• Participation in bi44 promotions, bonuses, tournaments, and prize draws;
• Cookies, analytics tools, and similar tracking technologies operating on the bi44 platform.

bi44 does not sell, rent, or trade your personal data to third-party marketers. Your data is used exclusively to operate the bi44 platform, fulfil our legal obligations, protect players and the platform from harm, and improve the quality of our services.

bi44 collects personal data through several channels: directly from you when you register or interact with the platform, automatically as you use the platform, and from third-party verification partners where required for identity or payment verification. The categories of data we collect are as follows:

bi44 processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes listed below. The primary purposes for which bi44 uses your personal data are:

• Account creation and management: To register your bi44 account, authenticate your identity at login, maintain your account settings, and provide personalised access to your balance, bet history, and responsible gaming tools;
• Payment processing: To facilitate BDT deposits and withdrawals through bKash, Nagad, Rocket, and Upay; to reconcile transaction records; and to investigate disputed or failed transactions;
• Identity and age verification (KYC): To confirm that you are at least 21 years of age and that your identity matches the registration details provided, in compliance with our anti-money-laundering (AML) obligations;
• Platform operation and service delivery: To provide access to sports betting markets, live casino games (powered by Evolution Gaming, Ezugi, and Pragmatic Play Live), slots (Pragmatic Play, NetEnt, Microgaming, Spribe), and all other bi44 platform features;
• Customer support: To respond to your enquiries, investigate complaints, and resolve disputes in a timely and fair manner;
• Responsible gaming compliance: To administer deposit limits, loss limits, session time controls, cooling-off periods, and self-exclusion requests; to identify players who may be exhibiting signs of problem gambling; and to communicate relevant support resources;
• Fraud prevention and security: To detect and prevent fraud, account takeover, money laundering, bonus abuse, and other prohibited activities; to monitor suspicious login patterns and unusual transaction behaviour;
• Legal and regulatory compliance: To satisfy bi44's obligations under applicable law, including record-keeping requirements, responding to lawful requests from law enforcement authorities, and enforcing our Terms & Conditions;
• Marketing communications (with consent): To send you information about bi44 promotions, new game launches, seasonal offers (e.g., BPL cricket season bonuses, Eid promotions), and platform updates — only where you have provided explicit consent and have not subsequently opted out;
• Platform analytics and improvement: To analyse aggregated usage patterns, identify platform performance issues, improve the user interface, and optimise the overall player experience on bi44.io.

bi44 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract performance: Processing is necessary for the performance of the contract between you and bi44 — specifically, to operate your bi44 account, process your BDT payments, and deliver the gaming and betting services you have requested;
• Legal obligation: Processing is necessary to comply with bi44's legal obligations, including KYC/AML verification requirements, data retention obligations, and cooperation with law enforcement authorities;
• Legitimate interests: Processing is necessary for bi44's legitimate business interests, including fraud prevention, platform security, abuse detection, and the improvement of platform services — provided that such interests are not overridden by your fundamental rights and privacy interests;
• Consent: For marketing communications and the use of non-essential cookies and tracking technologies, bi44 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

bi44 does not sell, rent, or otherwise transfer your personal data to third-party marketers or data brokers. Your personal data may be shared with the following categories of recipients only where strictly necessary and under appropriate data protection safeguards:

• Payment service providers: bKash, Nagad, Rocket, Upay, and other BDT mobile financial service providers receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and security frameworks;
• Game and platform technology providers: Licensed game studios and RNG platform providers (including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe) receive the minimum technical data necessary to operate their game engines securely within the bi44 platform;
• Identity verification (KYC/AML) partners: Third-party identity verification services may receive your identity documents and personal details for the purpose of completing the bi44 KYC process. All such partners are contractually bound to process your data only for that purpose;
• IT infrastructure and hosting providers: Cloud hosting, database, and cybersecurity service providers that support the bi44 platform may process personal data as part of their service delivery, subject to strict data processing agreements;
• Law enforcement and regulatory authorities: bi44 will disclose personal data to the relevant Bangladeshi law enforcement or regulatory authorities where required to do so by applicable law, court order, or legitimate legal process. bi44 will not notify you of such disclosure where notification is prohibited by law;
• Professional advisers: Lawyers, auditors, and other professional advisers engaged by bi44 may access personal data on a need-to-know basis, subject to professional confidentiality obligations.

bi44 uses cookies and similar tracking technologies (including local storage, session tokens, and analytics scripts) on the bi44.io platform to ensure the platform functions correctly, to maintain your login session, and to improve the quality of your experience. The categories of cookies used on bi44 are as follows:

• Strictly Necessary Cookies: These cookies are essential for the bi44 platform to operate. They maintain your authenticated login session, store your language and currency preferences, and enable core gaming and payment functions. These cookies cannot be disabled without impairing platform functionality;
• Performance and Analytics Cookies: These cookies collect anonymised or pseudonymised data about how players use the bi44 platform — such as which pages are visited most frequently, how long sessions last, and which games are most popular — to help bi44 improve its services. These cookies require your consent;
• Functional Cookies: These cookies remember your preferences (such as preferred bet amounts, favourite games, or promotional notification settings) to provide a more personalised experience. These cookies require your consent;
• Security Cookies: These cookies support bi44's fraud detection and account security systems, including session integrity verification and login anomaly detection. These are strictly necessary and cannot be disabled.

You may manage your cookie preferences by adjusting your browser settings. Note that disabling strictly necessary cookies will prevent the bi44 platform from functioning correctly and may result in your inability to log in or process transactions. For non-essential cookies, you may withdraw consent at any time via your browser settings without affecting the lawfulness of prior processing.

bi44 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the primary categories of personal data held by bi44:

Upon expiry of the applicable retention period, bi44 will securely delete or anonymise your personal data so that it can no longer be associated with your identity. Where anonymisation is not technically feasible, the data will be securely destroyed.

bi44 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and bi44's servers;
• Encryption of data at rest for all sensitive personal and financial data stored in bi44's databases;
• Access controls and role-based permissions ensuring that bi44 staff can only access personal data where strictly required for their job function;
• Multi-factor authentication (MFA) for bi44 staff accessing internal systems that contain player data;
• OTP-based two-factor authentication available to all bi44 players to protect account access;
• Real-time fraud detection and anomaly monitoring systems that flag suspicious login attempts, unusual transaction patterns, and potential account takeover behaviour;
• Regular security assessments and penetration testing conducted by qualified information security professionals;
• Incident response procedures that ensure any personal data breach is investigated promptly, contained, and — where required — reported to the affected players and relevant authorities.

While bi44 takes all reasonable steps to protect your personal data, no digital system is entirely immune to security threats. You are also responsible for maintaining the security of your bi44 account by using a strong, unique password, not sharing your login credentials, and logging out of your account when using shared or public devices. If you suspect that your bi44 account has been compromised, you must contact support immediately at [email protected].

bi44 respects your rights over your own personal data. You may exercise any of the following rights at any time by contacting bi44 support at [email protected] with the subject line "Data Rights Request":

• Right of access: You have the right to request a copy of all personal data that bi44 holds about you, together with information about how it is processed;
• Right to rectification: You have the right to request that bi44 correct any inaccurate or incomplete personal data held about you. For account-level corrections (name, contact details), you may also update your information directly via your bi44 account settings;
• Right to erasure ("right to be forgotten"): You have the right to request that bi44 delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and there is no other legal basis for continued processing. Note that bi44 is not able to erase data that it is legally required to retain (e.g., KYC and financial records required under AML law);
• Right to restriction of processing: You have the right to request that bi44 restrict its processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing and a decision on that objection is pending;
• Right to data portability: Where processing is based on your consent or on contract performance, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format;
• Right to object: You have the right to object to the processing of your personal data where bi44 relies on legitimate interests as the legal basis, and where your individual circumstances mean that the processing should not continue;
• Right to withdraw consent: Where processing is based solely on your consent (e.g., marketing emails), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

bi44 will respond to all data rights requests within 30 days of receipt. Where a request is complex or numerous, bi44 may extend this period by a further 60 days and will notify you of the extension within the initial 30-day period. bi44 will not charge a fee for handling data rights requests unless they are manifestly unfounded or excessive.

If bi44 discovers or is notified that personal data has been collected from a person under the age of 21, bi44 will immediately suspend the relevant account, delete all associated personal data, and return any funds that may have been deposited to the payment method of origin, subject to bi44's standard verification procedures.

If you are a parent or guardian and you believe that your child or a minor in your care has registered a bi44 account or submitted personal data to bi44, please contact bi44 support immediately at [email protected]. bi44 will treat all such reports as urgent and will investigate and respond within 24 hours.

bi44 employs age verification as part of its standard KYC process. All players are required to confirm their date of birth at registration, and identity documentation confirming age may be requested at any time. Providing false age information constitutes a serious breach of bi44's Terms & Conditions and may result in the forfeiture of all account funds.

bi44 primarily processes and stores player data within secure data centre infrastructure serving the Bangladesh region and South Asia. However, some of bi44's third-party service providers — including certain game technology providers and cloud infrastructure partners — may operate servers located outside Bangladesh.

Where personal data is transferred to recipients in countries that do not provide an equivalent level of data protection to Bangladesh, bi44 ensures that appropriate safeguards are in place, including but not limited to:

• Standard contractual data protection clauses incorporated into bi44's agreements with international service providers;
• Requiring international recipients to implement technical and organisational security measures that meet or exceed bi44's own internal standards;
• Minimising the scope of personal data transferred internationally to only what is strictly necessary for the relevant service.

bi44 does not transfer the financial data or KYC identity documents of Bangladeshi players to any international recipient except where specifically required by the relevant KYC/AML service provider and where appropriate data protection safeguards are confirmed in writing.

bi44 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the features and services offered on the bi44 platform. The effective date at the top of this Policy will be updated whenever a new version is published.

Where changes to this Policy are material — that is, where they significantly affect how bi44 collects, uses, or shares your personal data — bi44 will provide advance notice to active players via their registered contact details or via a prominent notice on the bi44.io platform before the changes take effect.

Your continued use of the bi44 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must cease using the platform and may request account closure by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bi44 handles your personal data, please contact the bi44 Data Support team using the details below. All privacy-related communications are handled in English and treated with strict confidentiality.

bi44 is committed to resolving all privacy-related concerns fairly and promptly. If you are not satisfied with bi44's response to your privacy enquiry, you may escalate the matter through the formal complaints process described in bi44's Terms & Conditions.