cy444 Privacy Policy

1. Introduction

cy444 ("the Company", "we", "us", "our") is the operator of the online casino and sports betting platform accessible at cy444.io. As an operator serving players in Bangladesh, cy444 is committed to maintaining the highest practicable standards of data privacy and information security in respect of the personal data entrusted to us by our players.

This Privacy Policy ("Policy") sets out in clear, plain English what personal data cy444 collects from you when you use our platform, the purposes for which that data is used, the legal bases on which we rely to process it, the circumstances in which it may be shared with third parties, the period for which it is retained, the security measures we apply to protect it, and the rights you hold as a data subject.

This Policy should be read alongside the cy444 Terms & Conditions and the cy444 Responsible Gaming Policy, both of which are available on the cy444 platform. In the event of any conflict between this Policy and another document, this Policy governs in respect of data privacy matters.

2. Personal Data We Collect

cy444 collects the following categories of personal data from players in the course of operating the platform and providing services:

2.1 Identity Data

Full legal name, date of birth, gender, nationality, and copies of government-issued identification documents such as a National Identity Card (NID), passport, or driving licence submitted during the Know Your Customer (KYC) verification process.

2.2 Contact Data

Email address, mobile phone number, and current residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi) and postal code.

2.3 Account Data

Your chosen username, encrypted account password, account registration date and time, account status, communication preferences, and records of any responsible gaming settings you have applied to your account (such as deposit limits or self-exclusion periods).

2.4 Financial Data

Details of the payment methods you have linked to your cy444 account, including mobile wallet identifiers associated with bKash, Nagad, Rocket, or Upay accounts, and bank account details for players using Dutch-Bangla Bank, City Bank, or BRAC Bank. Full payment credentials are not stored directly by cy444 — these are held by our payment processing partners under their own security frameworks.

2.5 Transaction Data

A complete record of all deposits, withdrawals, bonus credits, wagering activity, game results, and account balance movements associated with your cy444 account.

2.6 Technical Data

IP address, device type, device identifier, browser type and version, operating system, screen resolution, referring URL, and session duration data collected automatically when you access the cy444 platform.

2.7 Usage Data

Records of your interactions with the cy444 platform, including games played, betting markets accessed, promotional offers viewed or claimed, pages visited, and features used.

2.8 Communications Data

The content and metadata of communications you send to cy444's customer support team via email, live chat, or any other support channel, including complaint records and resolution notes.

3. How We Collect Your Data

cy444 collects personal data through the following channels:

• Direct submission: Data you provide actively when registering your account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or updating your account profile.
• Automated collection: Technical and usage data collected automatically via cookies, server logs, and analytics tools when you browse and interact with the cy444 website or mobile platform.
• Payment processors: Transaction confirmation data received from payment service providers such as bKash, Nagad, Rocket, and Upay when a deposit or withdrawal is initiated through their platforms.
• Identity verification partners: Where cy444 engages a third-party KYC or identity verification service to validate documents submitted by a player, that service may provide us with a verification result and associated data.
• Fraud and security tools: Risk assessment data generated by anti-fraud systems that analyse technical signals such as device fingerprints, IP geolocation, and login patterns to protect player accounts.

4. How We Use Your Personal Data

cy444 uses the personal data it collects for the following specific purposes:

• Account creation and management: To register your cy444 account, maintain your player profile, and provide you with access to the full range of platform services.
• Identity and age verification: To confirm that you are at least 21 years of age and to verify your identity in compliance with our KYC obligations before processing withdrawals or at any other appropriate stage.
• Payment processing: To facilitate deposits from and withdrawals to your registered payment methods, and to maintain accurate financial records of all account transactions.
• Customer support: To respond to your enquiries, process your complaints, and maintain records of your support interactions for quality assurance and training purposes.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised account access, and other illegal or abusive conduct on the cy444 platform.
• Responsible gaming: To monitor player activity for signs of problem gambling behaviour, to enforce responsible gaming tools you have activated (such as deposit limits and self-exclusion), and to fulfil our duty of care to players.
• Legal and regulatory compliance: To fulfil our obligations under applicable anti-money laundering, counter-terrorism financing, and data protection laws, and to respond to lawful requests from competent authorities.
• Platform improvement: To analyse usage patterns, diagnose technical issues, and develop new features and content that improve the cy444 player experience.
• Promotional communications: Where you have opted in to receive marketing communications, to send you information about bonuses, promotions, and new games that may be of interest to you. You may withdraw this consent at any time by contacting [email protected].

5. Legal Basis for Processing

cy444 processes your personal data only where a valid legal basis exists. The legal bases we rely upon are as follows:

• Contractual necessity: Processing that is necessary to perform the contract between cy444 and you as a registered player — for example, verifying your identity before processing a withdrawal, or crediting a deposit to your account balance.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering legislation, tax reporting obligations, and responses to lawful requests from competent authorities.
• Legitimate interests: Processing that serves cy444's legitimate business interests (or those of a third party), where those interests are not outweighed by your rights and interests — for example, fraud detection, platform security, and internal analytics for product development.
• Consent: Where you have given your explicit, freely given, and informed consent to a specific processing activity — for example, receiving marketing emails about cy444 promotions. Consent may be withdrawn at any time without detriment to your account standing.

6. Data Sharing & Disclosure

cy444 does not sell, rent, or trade your personal data. We share data only in the following strictly limited circumstances:

6.1 Payment Service Providers

We share the minimum necessary financial and identity data with payment partners — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank — solely to process deposits and withdrawals on your behalf. These partners process your data under their own privacy policies and are bound by contractual data protection obligations imposed by cy444.

6.2 Identity Verification Partners

Where a third-party KYC verification service is used to validate identity documents, your identity data is shared with that service for the sole purpose of document authentication. The service is prohibited from using your data for any other purpose.

6.3 Game Content Providers

Game providers such as Evolution Gaming, Ezugi, Pragmatic Play, Spribe, NetEnt, and Microgaming may receive a pseudonymous player identifier and session data necessary to deliver their game content within the cy444 platform. These providers do not receive your full name, contact details, or payment information.

6.4 Legal and Regulatory Disclosure

cy444 may disclose your personal data to law enforcement agencies, financial intelligence units, courts, or other competent authorities where required to do so by law, court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other criminal activity.

6.5 Business Transfers

In the event that cy444 undergoes a merger, acquisition, or sale of all or substantially all of its assets, player data may be transferred to the successor entity as part of that transaction, subject to the same data protection obligations described in this Policy.

7. Data Retention

cy444 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

After the applicable retention period has elapsed, cy444 will securely delete or anonymise your personal data so that it can no longer be associated with your identity. Where anonymisation is applied, the resulting aggregated data may be retained indefinitely for statistical analysis.

8. Security Measures

cy444 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your browser or app and cy444's servers is encrypted using industry-standard SSL/TLS protocols, ensuring that data in transit cannot be intercepted by third parties.
• Encrypted data storage: Sensitive data fields — including passwords (stored as salted hashes), payment identifiers, and identity document scans — are encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within cy444's systems is restricted on a strict need-to-know basis. Staff access permissions are reviewed regularly and revoked immediately upon employment termination.
• Two-factor authentication (2FA): cy444 supports and encourages the use of two-factor authentication for player accounts, adding an additional layer of protection against unauthorised login.
• Intrusion detection: cy444's technical infrastructure is monitored continuously for suspicious activity, attempted intrusions, and anomalous access patterns by automated security systems.
• Security audits: cy444 conducts periodic internal and third-party security assessments to identify and remediate vulnerabilities in the platform before they can be exploited.
• Staff training: All cy444 personnel with access to personal data receive regular data protection and information security training.

9. Cookies & Tracking Technologies

cy444 uses cookies and similar tracking technologies on the cy444 platform to deliver a functional, secure, and personalised experience. A cookie is a small text file placed on your device by a website server. Cookies do not contain executable code and cannot access other files on your device.

9.1 Types of Cookies Used

• Strictly necessary cookies: Essential to the operation of the cy444 platform. Without these cookies, core functions such as maintaining your login session, processing your account settings, and remembering items in your account cannot be performed. These cookies do not require your consent.
• Functional cookies: Used to remember your preferences — such as your chosen language, display settings, and responsible gaming tool configurations — so you do not need to re-enter them on each visit.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate and interact with the cy444 platform. This information helps us understand which features are most used, where players encounter difficulties, and how to improve the overall experience.
• Security cookies: Used to support fraud detection and account security functions, including identifying unusual login patterns and cross-site request forgery (CSRF) prevention.

9.2 Cookie Management

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies from specific websites. Please be aware that blocking strictly necessary cookies will impair the functionality of the cy444 platform and may prevent you from logging in or using core features. For detailed guidance on managing cookies in your browser, consult your browser's official help documentation.

10. Your Data Rights

As a cy444 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact cy444's data support team at [email protected]. cy444 will respond to all valid rights requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of all personal data cy444 holds about you, along with information about how it is used and with whom it has been shared.
• Right to Rectification: If any personal data cy444 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain details directly within your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request that cy444 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to our legal obligations to retain certain data (see Section 7).
• Right to Restriction of Processing: In certain circumstances, you may request that cy444 restrict the processing of your data — for example, while a rectification request is being evaluated — without requiring its deletion.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Object: You have the right to object at any time to the processing of your personal data where cy444 relies on legitimate interests as its legal basis, including for profiling purposes. You also have an unconditional right to object to the processing of your data for direct marketing purposes.
• Right to Withdraw Consent: Where cy444 processes your data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

cy444 will not charge a fee for the processing of data rights requests in ordinary circumstances. Where requests are manifestly unfounded, excessive, or repetitive, cy444 reserves the right to charge a reasonable administrative fee or to decline the request, providing written reasons for any refusal.

11. Protection of Minors

The cy444 platform is strictly intended for adults aged 21 and above. cy444 does not knowingly collect personal data from individuals under the age of 21. The registration process includes an age verification step, and all players are required to confirm that they are at least 21 years of age at the time of account creation.

Where cy444 discovers or has reasonable grounds to believe that a registered account belongs to an individual under the age of 21, the account will be immediately suspended, all associated personal data will be reviewed, and any funds on account will be handled in accordance with our Terms & Conditions and legal obligations.

12. International Data Transfers

cy444 is an internationally operated platform. Your personal data may be processed by cy444's servers or by authorised third-party processors located outside Bangladesh. Where personal data is transferred to a country that does not provide a level of data protection equivalent to that available in your home jurisdiction, cy444 will implement appropriate safeguards to ensure the security and integrity of that data.

Safeguards used by cy444 for international transfers include standard contractual clauses (SCCs) that impose binding data protection obligations on the recipient, and the selection of third-party processors that maintain independent security certifications such as ISO 27001 or SOC 2 Type II compliance.

By using the cy444 platform, you acknowledge that your personal data may be transferred to and processed in countries other than Bangladesh in the manner described in this section, subject to the protections outlined above.

13. Changes to This Privacy Policy

cy444 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. The date of the most recent revision is displayed at the top of this document under "Last Updated".

Where a material change is made to this Policy — for example, a significant change to the categories of data collected, a new category of third-party sharing, or a change to your rights — cy444 will notify registered players via the email address on file or by displaying a prominent notice on the cy444 platform prior to the change taking effect.

Your continued use of the cy444 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should cease using the platform and may request account closure by contacting [email protected].

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cy444 handles your personal data, please contact our data support team using the details below. cy444 is committed to addressing all data privacy enquiries promptly and transparently.

• Email: [email protected]
• Subject line (recommended): "Privacy Policy Enquiry — [Your Username]"
• Response time: cy444 aims to respond to all data privacy enquiries within 5 business days (Bangladesh Standard Time, UTC+6).
• Data rights requests: All formal subject access requests, erasure requests, and other rights requests will be acknowledged within 3 business days and fully responded to within 30 calendar days of receipt.

cy444 values your trust and takes every data privacy enquiry seriously. If you are not satisfied with cy444's response to a data privacy concern, you retain the right to escalate the matter through appropriate legal channels in your jurisdiction.