444c Privacy Policy — How We Collect, Use, and Protect Your Data

1.1 This Privacy Policy describes how 444c ("the Company," "we," "us," or "our") collects, processes, stores, and protects the personal data of individuals who use the 444c online casino and sports betting platform, accessible at 444c.one ("the Platform").

1.2 This Privacy Policy applies to all personal data processed in connection with your registration, use of casino games, sportsbook activities, payment transactions, customer support interactions, and any other activity conducted through the 444c Platform or related communications.

1.3 By registering a 444c account, making a deposit, or using any feature of the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the data processing activities described herein to the extent that consent is the applicable legal basis for such processing.

1.4 This Privacy Policy is to be read in conjunction with the 444c Terms & Conditions. Capitalised terms not otherwise defined in this Privacy Policy carry the meaning given to them in the Terms & Conditions.

1.5 444c is committed to the responsible handling of personal data in compliance with applicable international data protection standards and the requirements of our gaming licence. If you have any questions about this Privacy Policy or about how your data is handled, please contact our Data Protection team using the contact details in Section 16.

2.1 For the purposes of applicable data protection law, 444c is the data controller responsible for the personal data of players who use the Platform. As data controller, 444c determines the purposes and means by which personal data is processed.

2.2 Where 444c engages third-party service providers who process personal data on 444c's behalf (for example, KYC verification providers, payment processors, and game studios), those third parties act as data processors and are bound by data processing agreements that require them to handle personal data only in accordance with 444c's documented instructions and applicable data protection law.

2.3 All data protection and privacy queries should be directed to the 444c support team as described in Section 16 of this Policy.

3.1 444c collects the following categories of personal data from players. We collect only what is necessary for the stated purposes and do not collect sensitive personal data (such as racial origin, religious beliefs, or biometric data) beyond what is required by our KYC and AML obligations.

3.2 You are not required to provide all categories of data at the time of registration. However, certain data (particularly KYC Identity Data and Financial Data) must be provided before withdrawal rights are activated, as required under our licensing obligations.

4.1 Directly from you. The majority of personal data that 444c processes is provided directly by you — through the account registration form, the KYC verification process, deposit and withdrawal requests, customer support communications, and your interaction with Platform features.

4.2 Automatically during Platform use. When you access and use the 444c Platform, certain Technical Data and Usage Data is collected automatically through server logs, session cookies, and analytics tools. This includes your IP address, device identifiers, the games you access, bets placed, and login activity. This automated collection is necessary for Platform security, fraud prevention, and responsible gaming monitoring.

4.3 From third-party verification providers. During the KYC process, 444c may use third-party identity verification services to validate documents and confirm your identity. These providers may return verified data points to 444c (for example, confirmed name, date of birth, or document status) as part of the KYC result.

4.4 From payment service providers. 444c receives transaction confirmation data from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT payment processors in order to credit deposits and process withdrawals. This data includes transaction reference numbers, amounts, and counterparty mobile or account identifiers.

5.1 444c processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Performance of a contract: Processing necessary to provide you with the services described in the 444c Terms & Conditions — including account management, game access, bet settlement, and payment processing.
• Legal obligation: Processing required to comply with 444c's obligations under its international gaming licence, including KYC verification, anti-money laundering (AML) checks, responsible gaming monitoring, and regulatory reporting.
• Legitimate interests: Processing necessary for 444c's legitimate business interests, including fraud prevention, platform security, technical improvement, and statistical analysis, provided such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in connection with direct marketing communications via email, SMS, or push notifications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5.2 Where 444c relies on legitimate interests as the legal basis for processing, we conduct a balancing test to ensure that our interests do not override your fundamental privacy rights. Players may object to processing conducted on legitimate interest grounds by contacting the 444c support team.

6.1 444c uses personal data for the following purposes:

• Account creation and management: To register your account, verify your identity, maintain your player profile, and manage your PKR wallet.
• Service delivery: To provide access to casino games, sportsbook markets, live dealer tables, fishing games, and all other Platform features available to registered 444c players.
• Payment processing: To process PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT, and to execute withdrawal requests to verified payment methods.
• KYC and AML compliance: To verify your age, identity, and the source of funds as required under 444c's international gaming licence and anti-money laundering obligations.
• Responsible gaming: To monitor betting and gaming activity for signs of problem gambling, to enforce deposit limits and self-exclusion requests, and to conduct responsible gaming outreach where appropriate.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, money laundering, and other prohibited conduct on the Platform.
• Customer support: To respond to your queries, process complaints, and provide technical assistance through live chat, email, and account ticketing.
• Platform improvement: To analyse usage patterns, identify technical issues, test new features, and improve the overall 444c player experience.
• Legal compliance and regulatory reporting: To comply with applicable laws, regulatory requirements, court orders, and the ongoing obligations of 444c's gaming licence.
• Marketing communications (with consent): To send promotional emails, SMS notifications, and in-platform messages about 444c bonuses, PSL promotions, new game releases, and other offers — only where you have provided consent or where permitted under applicable law.

7.1 444c does not sell, rent, or otherwise transfer personal data to third parties for their own commercial or marketing purposes under any circumstances.

7.2 444c shares personal data with third parties only in the following circumstances and only to the extent necessary for the stated purpose:

7.3 All third-party processors engaged by 444c are bound by contractual data processing agreements that require them to process personal data only in accordance with 444c's documented instructions, to maintain appropriate security standards, and to comply with applicable data protection law.

8.1 The 444c Platform uses cookies and similar tracking technologies to maintain session continuity, improve Platform performance, support fraud prevention, and (with your consent) deliver relevant marketing content.

8.2 The following categories of cookies are used on the 444c Platform:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your login session, preserve your PKR wallet state, and enable core Platform features. These cookies cannot be disabled without disrupting your use of the Platform.
• Functional Cookies: These cookies remember your preferences (such as language settings and game lobby filters) to provide a more personalised experience. They are not essential but improve usability.
• Analytics Cookies: These cookies collect anonymised data about how players use the Platform — which pages are visited, how long sessions last, and where technical errors occur. This information helps 444c improve the Platform. Analytics data does not identify individual players.
• Marketing Cookies (Consent Required): These cookies track your Platform activity to enable targeted promotional communications. Marketing cookies are only set with your explicit consent and may be withdrawn at any time through your browser or account settings.

8.3 You may manage cookie preferences through your browser settings at any time. Disabling strictly necessary cookies will impair your ability to use the Platform. Disabling functional or analytics cookies will not prevent you from using core Platform features.

9.1 444c retains personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory obligations.

9.2 The following general retention periods apply. Specific circumstances (such as ongoing investigations or regulatory requirements) may require retention beyond these standard periods:

• Account and identity data: Retained for the duration of your active 444c account plus a minimum of 5 years following account closure, as required under AML and licensing regulations.
• KYC documents: Retained for a minimum of 5 years from the date of KYC completion or account closure (whichever is later), in accordance with anti-money laundering regulatory requirements.
• Transaction and payment records: Retained for a minimum of 5 years from the date of each transaction for AML compliance and financial audit purposes.
• Betting and gaming history: Retained for the duration of the active account plus 2 years following account closure, used for responsible gaming monitoring, dispute resolution, and regulatory compliance.
• Support communications: Retained for 3 years from the date of each interaction for customer service quality purposes and dispute resolution.
• Technical and session logs: Retained for up to 12 months for security and fraud prevention purposes, then anonymised or deleted.
• Marketing preference records: Retained for the duration of the account or until consent is withdrawn, plus a short period thereafter to demonstrate compliance with consent records obligations.

9.3 When personal data is no longer required and no legal obligation mandates its continued retention, 444c will securely delete or irreversibly anonymise that data.

10.1 444c implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures in place include:

• 256-bit SSL/TLS encryption on all data transmitted between player devices and 444c servers.
• Encryption of sensitive data at rest, including KYC documents, financial data, and account credentials.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Multi-factor authentication requirements for 444c staff accessing systems that process personal data.
• Regular independent security audits and penetration testing of the Platform infrastructure.
• Automated intrusion detection and real-time security monitoring systems.
• Documented data breach response procedures enabling rapid containment and notification.

10.2 Notwithstanding these measures, no system is entirely immune to security risks. 444c recommends that all players take appropriate steps to protect their own devices and account credentials. In particular, enabling two-factor authentication on your 444c account significantly reduces the risk of unauthorised access.

10.3 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 444c will notify affected players without undue delay and in accordance with our obligations under applicable law.

11.1 Depending on your location and the legal basis under which your data is processed, you may have some or all of the following rights in relation to the personal data that 444c holds about you. Requests to exercise any of these rights should be directed to the 444c support team as described in Section 16.

12.1 444c may send promotional communications about bonuses, PSL offers, new game releases, and other 444c Platform updates by email, SMS, or push notification. Marketing communications are sent only where:

• You have provided explicit consent to receive marketing communications during registration or through your account settings; or
• You are an existing 444c player and the communication concerns similar products or services to those you have previously used, and you have not opted out of such communications.

12.2 You may opt out of marketing communications at any time by:

• Updating your communication preferences in your 444c account settings panel;
• Clicking the "unsubscribe" link included in any marketing email from 444c; or
• Contacting the 444c support team via live chat and requesting to be removed from all marketing lists.

12.3 Opting out of marketing communications will not affect your ability to receive transactional communications that are necessary for the operation of your account — such as deposit confirmations, withdrawal notifications, KYC status updates, and account security alerts. These service communications are sent on the basis of contract performance and cannot be disabled while your account remains active.

12.4 444c does not share your contact details with third parties for the purpose of those third parties sending you their own marketing communications.

13.1 The 444c Platform is strictly for individuals aged 21 years and above. 444c does not knowingly collect, process, or retain personal data from individuals under the age of 21.

13.2 If 444c becomes aware that an account has been registered by, or that personal data has been collected from, an individual under the age of 21, that account will be immediately suspended. Any deposits made by or on behalf of that individual will be returned and all associated data will be securely deleted to the extent not required to be retained for regulatory compliance purposes.

13.3 If you are a parent or guardian and believe that a minor in your care has accessed or registered on the 444c Platform, please contact us immediately using the contact details in Section 16. We take these reports very seriously and will act on them promptly.

13.4 444c strongly recommends that all households with minors install parental control software on shared devices to prevent access to online gambling platforms. Several reputable parental control tools are available at no cost.

14.1 444c operates under an international gaming licence and engages service providers located in multiple countries. As a result, your personal data may be transferred to and processed in countries outside of Pakistan, including countries where 444c's servers, KYC providers, or game content providers are based.

14.2 Where personal data is transferred internationally, 444c ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within 444c's primary operating jurisdiction. These safeguards include contractual clauses in data processing agreements with all international service providers.

14.3 By registering a 444c account and accepting this Privacy Policy, you acknowledge that your personal data may be processed in international locations as described in this section, subject to the safeguards described herein.

15.1 444c reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. The most current version of this Privacy Policy will always be available on the 444c website and is marked with the effective date of the latest revision at the top of the document.

15.2 Where changes to this Privacy Policy are material — meaning they significantly affect your rights or how your data is used — 444c will notify registered players via email or SMS to the contact details on file at least 14 days before the changes take effect.

15.3 Continued use of the 444c Platform following notification of a material change constitutes your acknowledgment of the updated Privacy Policy. If you do not accept an updated Privacy Policy, you should cease using the Platform and may request account closure in accordance with the Terms & Conditions.

15.4 Non-material changes (such as corrections to typographical errors, clarifications that do not alter substantive meaning, or updates to contact details) may be made without prior notice and take effect upon publication.

16.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the way 444c handles your personal data, please contact the 444c Data Protection team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the 444c Platform. Select "Privacy / Data Query" from the support topic menu for fastest routing to the Data Protection team.
• Email: [email protected] — please include "Privacy Policy Query" in the subject line. This email address is displayed as plain text and is not a clickable link.
• Account Ticket: Log into your 444c account, navigate to the Support section, and submit a ticket under the category "Data & Privacy."

16.2 All privacy-related queries and data rights requests are handled by dedicated 444c staff. You will receive an acknowledgment of your request within 48 hours and a substantive response within 30 calendar days.

16.3 If you are not satisfied with 444c's response to a privacy complaint or data rights request, you may escalate the matter to the relevant regulatory authority responsible for overseeing 444c's gaming licence. Contact details for the applicable regulatory body are available from the 444c support team upon request.