Privacy Policy —
How l444 org Protects Your Data

l444 org collects personal data from players in Bangladesh through three primary means: information you provide directly when registering or using the platform, information generated automatically through your use of the platform, and information received from authorised third parties such as payment processors and KYC verification partners. The categories of data we collect are set out below.

1.1 Data You Provide Directly

• Registration data: Full legal name, email address, mobile phone number, date of birth, and a username and password of your choosing.
• Identity verification (KYC) data: Copies or images of government-issued identity documents, such as your National Identity Card (NID) or passport, submitted to complete KYC verification before withdrawals are processed.
• Payment data: Mobile wallet numbers (bKash, Nagad, Rocket, Upay) and card details (Visa, Mastercard) used to make deposits or receive withdrawals. Full payment card numbers are not stored by l444 org — card processing is handled exclusively by our PCI-DSS compliant payment partners.
• Support communications: Records of any messages, emails, or live chat transcripts exchanged between you and l444 org's customer support team.
• Responsible gaming preferences: Deposit limit settings, session time preferences, self-exclusion requests, and cooling-off period selections you configure on the platform.

1.2 Data Collected Automatically

• Device and browser data: IP address, browser type and version, operating system, device model, screen resolution, and time zone.
• Usage and behavioural data: Pages visited, games played, bet amounts, session duration, navigation paths, and feature interactions within the l444 org platform.
• Transaction logs: A complete record of all deposits, withdrawals, bets placed, wagers settled, bonus credits, and balance adjustments associated with your account.
• Cookies and local storage: Session identifiers, authentication tokens, and preference settings stored in your browser. See Section 4 for full cookie details.

1.3 Data Received from Third Parties

l444 org may receive limited personal data about you from authorised third-party sources, including: fraud prevention databases, payment processors confirming the status of a transaction, and KYC verification services confirming the authenticity of an identity document. Data received from third parties is used only for the purpose for which it was shared and is subject to the same security standards as all other personal data held by l444 org.

l444 org processes personal data only where there is a valid legal basis for doing so. The primary legal bases on which we rely are: (a) performance of a contract — processing necessary to operate your account and provide the services you have signed up for; (b) legal obligation — processing required to comply with applicable laws, including anti-money laundering (AML) regulations and age verification requirements; (c) legitimate interests — processing for fraud prevention, platform security, and service improvement, where those interests are not overridden by your privacy rights; and (d) consent — where you have given explicit, informed consent for a specific use, such as receiving marketing communications.

2.1 Marketing Communications

l444 org will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, or special events if you have explicitly opted in to receive such communications during registration or via your account settings. You may withdraw your consent to receive marketing communications at any time by updating your notification preferences in your account dashboard or by contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out before the withdrawal.

l444 org does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data with external parties only where necessary to operate the platform, comply with legal obligations, or protect the security of the platform and its players. All third parties with whom l444 org shares personal data are required to handle that data in accordance with applicable data protection standards and are bound by written data processing agreements.

3.1 Categories of Third-Party Recipients

• Payment processing partners: bKash, Nagad, Rocket, Upay, and card processing partners (Visa/Mastercard acquiring banks) receive transaction data necessary to process deposits and withdrawals. These partners operate under their own published privacy policies and are bound by payment industry data security standards (PCI-DSS).
• KYC and identity verification services: Third-party identity verification providers receive copies of identity documents submitted for KYC purposes. Verification partners are contractually prohibited from using this data for any purpose other than verifying the authenticity and validity of the documents submitted.
• Game content providers: Casino game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive a session token and your account's player ID for the purposes of initialising a game session and recording game results. These providers do not receive your full registration data or payment information.
• IT infrastructure and hosting providers: Cloud hosting and data centre partners who store platform data on behalf of l444 org are bound by strict data processing agreements and are not permitted to access or process player data for their own purposes.
• Fraud prevention and AML compliance services: Industry fraud detection databases and anti-money laundering screening services may receive limited transactional and identity data where required to fulfil our legal compliance obligations.

3.2 Legal Disclosures

l444 org may disclose personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where we are legally required to do so — for example, in response to a valid court order, regulatory investigation, or mandatory reporting obligation under applicable anti-money laundering legislation. In such cases, l444 org will disclose only the minimum personal data necessary to satisfy the legal requirement and will, where permitted by law, notify the affected player of the disclosure.

l444 org uses cookies — small text files stored in your browser — and similar local storage technologies to ensure the platform functions correctly, to remember your preferences, and to analyse aggregate usage patterns. We do not use advertising cookies, behavioural profiling cookies, or cross-site tracking technologies of any kind.

4.1 Managing Cookies

You may control and delete cookies through your browser settings at any time. Most modern browsers allow you to block all cookies, accept only certain categories, or delete stored cookies on demand. Please note that disabling essential cookies (l444_session and l444_csrf) will prevent you from logging in to your l444 org account and will impair the normal functioning of the platform. Disabling functional or analytical cookies will not prevent you from using core platform features but may affect the persistence of your preferences between sessions.

l444 org implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security programme is reviewed and updated on a regular basis to reflect evolving threats and best practices in data protection.

5.1 Technical Security Measures

• Transport encryption: All data transmitted between your device and l444 org's servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to the main platform interface, the payment portal, the customer support chat, and all API endpoints.
• Data-at-rest encryption: Personal data stored in l444 org's databases is encrypted at rest using AES-256 encryption. Database access is restricted to authorised system processes and vetted system administrators only.
• Password hashing: Account passwords are never stored in plain text. l444 org uses industry-standard bcrypt hashing with a high work factor to store password credentials securely.
• Access controls: Access to systems containing personal data is governed by strict role-based access controls (RBAC). Staff members are granted access only to the data categories necessary for their specific role.
• Intrusion detection: l444 org's infrastructure is monitored continuously by automated intrusion detection and anomaly alerting systems. Suspicious activity triggers an immediate security review.
• Two-factor authentication (2FA): All internal staff accounts with access to player data require 2FA. Players are also strongly encouraged to enable 2FA on their own accounts.

5.2 Data Breach Response

In the unlikely event of a personal data breach that is likely to result in a risk to affected players, l444 org will notify affected players as promptly as practicable — and no later than 72 hours after becoming aware of the breach — by email to the address registered on the affected account. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps l444 org is taking to address the breach and mitigate its impact.

5.3 Data Storage Location

l444 org's primary player data is stored on servers located in secure, access-controlled data centres. Data may be replicated to geographically separate backup locations for disaster recovery purposes. All locations at which l444 org stores personal data are subject to the same security standards and contractual obligations described in this policy.

As a player on l444 org, you hold a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact l444 org's customer support team via live chat or by email to [email protected]. All rights requests are acknowledged within 48 hours and responded to in full within 30 calendar days.

l444 org retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting obligations. The retention periods for each principal category of personal data are set out in the table below. When a retention period expires, the relevant data is either securely deleted from our systems or anonymised so that it can no longer be attributed to an identified or identifiable individual.

Upon expiry of the applicable retention period, personal data is deleted through a secure deletion process that renders it unrecoverable. Backup copies of data are subject to the same retention schedule and are deleted from backup storage within 90 days of the primary deletion date.

l444 org reviews this Privacy Policy on a regular basis and may update it from time to time to reflect changes in our data processing practices, new legal or regulatory requirements, or feedback from players. The effective date at the top of this page will always reflect the date on which the current version came into force.

Where a change to this Privacy Policy is material — for example, a change to the categories of data we collect, a new category of third-party recipient, or a significant change to retention periods — l444 org will notify registered players by email to their registered address at least 14 calendar days before the change takes effect. Continued use of the l444 org platform after a notified update constitutes acceptance of the revised Privacy Policy.

The most current version of the l444 org Privacy Policy is always available on this page. If you have any questions about this policy, how your personal data is handled, or how to exercise your privacy rights, please contact our support team via live chat on the platform or by email at [email protected]. Our team responds to all privacy enquiries within 48 hours (BST, UTC+6).