dc44 Privacy Policy — How We Handle Your Personal Data

When you register for a dc44 account, deposit funds, withdraw winnings, contact customer support, or interact with promotions, you provide us with personal data that may include:

• Full name and date of birth
• Contact information including email address and, where provided, phone number
• Residential address
• Identity and address verification documents submitted during KYC review (e.g., national ID, passport, utility bill)
• Payment method details, including the mobile wallet number (e.g., bKash or Nagad number) or bank account details used to deposit and withdraw

When you use the dc44 platform, we automatically collect certain technical and behavioural data. This data is used to operate the platform, detect fraud, and improve the player experience. It includes:

• IP address, device type, operating system, and browser information
• Login timestamps and session duration data
• Game history, bet amounts, win/loss records, and responsible gaming tool usage
• Transaction history including deposits, withdrawals, bonus credits, and adjustments

dc44 may receive personal data about you from third-party sources where this is necessary and proportionate to a legitimate purpose. For example, dc44 may receive data from identity verification service providers used to conduct KYC checks, from payment processors to confirm transaction completion, or from fraud-prevention services. Any third-party data is handled in accordance with this Policy and is used only for the purpose for which it was received.

dc44 does not sell your personal data. We may share your data with third parties only in the following circumstances, and only to the extent necessary for the stated purpose:

• Payment processors and mobile wallet operators (bKash, Nagad, Rocket, Upay, partner banks) for the purpose of processing your deposits and withdrawals
• KYC and identity verification service providers engaged to confirm player eligibility and verify documents
• Fraud prevention and platform security vendors who assist in monitoring for suspicious activity
• Regulatory or law enforcement authorities where dc44 is legally required to disclose data

dc44 uses game content from third-party providers including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi. When you launch a game, limited technical data (such as a session token and stake amount) is passed to the game provider to enable the game session. The following applies:

• Game providers receive only the minimum data required to operate the game session
• Your full name, payment details, and contact information are not shared with game providers
• All game provider integrations are governed by data processing agreements that restrict use of player data to the agreed purposes
• dc44 remains the data controller for all player data regardless of which game studio provides the game content

dc44 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law or regulation. As a general guide: account data and transaction records are retained for a minimum of 5 years from the date of the last account activity to meet anti-money laundering record-keeping obligations; KYC documentation is retained for a minimum of 5 years from the date of verification; support communications are retained for a minimum of 2 years. When your account is closed and the applicable retention period has expired, dc44 will securely delete or anonymise your personal data. You may request deletion of your data in advance of the retention period expiry, subject to dc44's legal obligations to retain certain records.

As a dc44 account holder, you have the following rights in relation to your personal data. To exercise any of these rights, contact dc44 support via the email in the site footer. dc44 will respond to all verified data rights requests within a reasonable time period. Your rights include:

• Right of access — to request a copy of the personal data dc44 holds about you
• Right to rectification — to request correction of any inaccurate or incomplete personal data
• Right to erasure — to request deletion of your personal data, subject to dc44's legal retention obligations
• Right to object — to object to dc44 processing your data for marketing communications at any time
• Right to data portability — to request that dc44 provide your data in a structured, machine-readable format where technically feasible

dc44 employs a layered security architecture to protect player data. All connections to dc44.ws are encrypted using TLS/SSL. Player account credentials are stored using strong one-way hashing algorithms — dc44 staff cannot view your password in plaintext. Payment data is processed through PCI-compliant payment gateways; dc44 does not store full card numbers or full mobile wallet PINs on its servers. Access to player data within dc44 is restricted on a strict need-to-know basis, with role-based access controls and audit logging applied to all data access events. dc44 conducts regular internal security reviews and engages third-party assessors periodically to test platform security. In the event of a data breach that is likely to result in a risk to player rights, dc44 will notify affected players promptly in accordance with applicable obligations.

dc44 is strictly an adult platform. Registration is open only to individuals aged 21 and above. dc44 does not knowingly collect or process personal data relating to individuals under the age of 21. If dc44 becomes aware that personal data of a person under 21 has been collected, that data will be deleted and the associated account will be permanently closed. If you believe that a person under 21 has registered a dc44 account, please contact dc44 support immediately via the email address in the site footer.