Privacy Policy for bh44

1. Information We Collect

bh44 collects personal data from you in three primary ways: information you provide directly when registering and using the platform; information generated automatically by your use of the platform; and information obtained from authorised third-party sources as part of our verification processes. This section details each category.

1.1 Information You Provide Directly

When you register a bh44 account or interact with platform features, you may be asked to provide the following:

• Identity data: Full legal name, date of birth, national identity number (NID), passport number, or driver's licence number.
• Contact data: Email address, mobile phone number registered in Bangladesh, and residential address.
• Financial data: Mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank), and transaction history on the platform.
• Account credentials: Username and encrypted password. We never store passwords in plain text.
• Communication data: Any information you submit via live chat, support emails, or feedback forms, including the content of those exchanges.
• KYC documents: Scanned or photographed copies of government-issued identity documents and proof-of-address documents submitted during verification.

1.2 Information Collected Automatically

When you access bh44, our systems automatically collect certain technical and behavioural data. This includes:

1.3 Information from Third Parties

bh44 may receive personal data about you from the following categories of third parties, where permitted by applicable law:

• Payment processors: Transaction confirmation data, payment method ownership verification, and fraud-risk signals from bKash, Nagad, Rocket, Upay, and banking partners.
• Identity verification providers: Confirmation of identity document authenticity and facial recognition match results, used during KYC verification.
• Fraud and risk management services: Device fingerprint scores, IP reputation data, and prior flagging history shared by industry fraud-prevention networks.
• Responsible gaming databases: Where you have registered a self-exclusion with a recognised gambling self-exclusion scheme, we may receive a notification flag to prevent your access to our platform.

2. How We Use Your Data

bh44 uses the personal data we hold about you only for clearly defined, legitimate purposes. We do not sell your personal data to third parties for commercial gain under any circumstances. The following sets out the specific purposes for which your data is processed and the legal basis for each.

2.1 Account Management and Service Delivery

We use your identity data, contact data, and account credentials to create and maintain your bh44 account, authenticate your identity at login, process deposits and withdrawals via your registered payment methods, and provide customer support. This processing is necessary for the performance of the contract between you and bh44.

2.2 Legal and Regulatory Compliance

We are required by law to verify the identity of our players (KYC), monitor transactions for signs of money laundering or fraud, maintain financial records for audit purposes, and report suspicious activity to relevant authorities. Processing your data for these purposes is a legal obligation. We retain KYC documents and transaction records for a minimum of five years from the date of account closure to meet our record-keeping obligations.

2.3 Fraud Prevention and Security

We use technical and behavioural data — including IP address, device identifiers, login patterns, and transaction history — to detect and prevent fraudulent activity, unauthorised account access, money laundering, and bonus abuse. This processing is carried out in the legitimate interests of bh44 and our honest player community.

2.4 Responsible Gaming Monitoring

bh44 uses your session data, bet history, deposit frequency, and behavioural patterns to identify signs of problem gambling. Where our responsible gaming systems flag a concern, we may contact you directly with information about available tools or apply account-level protections. This processing is carried out in your vital interests and in the legitimate interests of bh44 as a responsible operator.

2.5 Platform Improvement and Analytics

We use aggregated and anonymised behavioural data to understand how players interact with the platform, which games are most popular, where technical issues arise, and how our user interface can be improved. This analytics processing does not identify you as an individual and is carried out in bh44's legitimate interests to improve its service.

2.6 Marketing Communications

Where you have given your explicit consent at registration or through your account settings, we may send you promotional emails or notifications about bh44 offers, new game launches, cricket betting specials (BPL, IPL, T20 World Cup), and seasonal promotions. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account dashboard or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out before that withdrawal.

3. Data Sharing and Disclosure

bh44 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

3.1 Payment and Financial Service Providers

To process deposits and withdrawals, bh44 shares necessary financial identifiers with your chosen payment provider — bKash, Nagad, Rocket, Upay, or your selected Bangladeshi bank. The data shared is limited to what is required to execute and confirm the transaction. Each payment provider operates under its own privacy policy and data-handling obligations.

3.2 Identity Verification Partners

During KYC verification, copies of your identity documents and, where applicable, a live facial comparison image may be transmitted to our identity verification partner. This partner processes your data solely to confirm the authenticity of your documents and to match your identity. They are contractually prohibited from using your data for any other purpose.

3.3 Game Content Providers

bh44's casino and sports betting products are powered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game delivered by one of these studios, your account identifier and game session data are transmitted to that provider's servers in order to run the game. These providers do not receive your full identity profile and are bound by contractual data-processing obligations consistent with this policy.

3.4 Fraud Prevention and Industry Networks

bh44 participates in industry-wide fraud prevention initiatives. Where we detect fraudulent, abusive, or criminal activity on an account, relevant data points (such as device fingerprints, IP addresses, and account identifiers — but not your full identity) may be shared with fraud prevention networks to protect the broader online gaming industry. Sharing in this context is carried out in our legitimate interests and those of other operators and their honest customers.

3.5 Legal and Regulatory Authorities

We will disclose personal data to law enforcement agencies, regulators, courts, or other governmental bodies when we are legally required to do so, when disclosure is necessary to protect the rights or safety of bh44 or third parties, or when we are responding to a valid legal process. We will notify you of any such disclosure where we are legally permitted to do so.

3.6 Business Transfers

In the event that bh44 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred as part of that transaction. We will notify registered players of any such transfer via email and will ensure that the acquiring entity honours the commitments set out in this Privacy Policy.

4. Cookies and Tracking Technologies

bh44 uses cookies and similar tracking technologies to keep the platform functional, secure, and responsive to your preferences. This section explains what types of cookies we use, what they do, and how you can manage them.

4.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit a website. They allow the website to recognise your device on subsequent visits, remember your preferences, and maintain your session state. Cookies do not give us access to your device and cannot execute code or transmit viruses.

4.2 Types of Cookies We Use

4.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block all cookies, accept only first-party cookies, or delete cookies already stored on your device. Please note that disabling essential cookies will prevent you from logging in or using core platform features. Disabling functional cookies will mean your preferences are not remembered between sessions.

Instructions for managing cookies in commonly used browsers are available in the Help section of Chrome, Firefox, Safari, and Edge. bh44 does not currently respond to browser-level "Do Not Track" signals, as no uniform industry standard for such signals has been established.

5. Data Retention

bh44 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately possible due to backup schedules, the data is isolated from active processing until it can be permanently removed.

6. Security Measures

bh44 takes the protection of your personal data seriously and has implemented a range of technical and organisational security measures to safeguard your information against unauthorised access, accidental loss, destruction, or disclosure.

6.1 Technical Safeguards

The following technical measures are in place across the bh44 platform:

• All data in transit is encrypted using TLS 1.2 or higher. The bh44 website operates exclusively over HTTPS.
• Passwords are stored using a one-way cryptographic hashing algorithm with a unique per-user salt. Plain-text passwords are never stored or logged.
• Access to production systems and databases containing personal data is restricted to authorised personnel only, via multi-factor authentication and role-based access controls.
• Regular automated vulnerability scanning and periodic security audits are conducted on the platform's infrastructure and application layer.
• Financial data processed via bKash, Nagad, Rocket, and Upay is handled through their PCI-DSS compliant payment gateways. bh44 does not store full payment instrument credentials on its own servers.

6.2 Organisational Safeguards

In addition to technical controls, bh44 maintains the following organisational security practices:

• All staff with access to personal data are subject to confidentiality obligations and receive data-handling training appropriate to their role.
• Data-processing activities involving personal data are documented in an internal processing register and reviewed periodically.
• Third-party service providers who handle personal data on bh44's behalf are assessed for their security practices before engagement and are bound by data-processing agreements.

6.3 Security Breach Response

In the event of a data security breach that is likely to result in a risk to your rights and freedoms, bh44 will notify affected players without undue delay after becoming aware of the breach, and will take immediate steps to contain and remediate the incident. Notification will be provided via the email address registered to your account. bh44 will also notify relevant authorities as required by applicable law.

7. Your Privacy Rights

As a player on bh44, you hold a number of rights in relation to the personal data we hold about you. bh44 is committed to respecting and facilitating these rights. To exercise any of the rights listed below, please contact our support team at [email protected] with a clear description of your request and sufficient information to verify your identity.

7.1 Right of Access

You have the right to request a copy of the personal data bh44 holds about you. We will provide this data in a structured, commonly used, machine-readable format within a reasonable timeframe. Your first access request in any twelve-month period is provided free of charge. Additional requests may be subject to a reasonable administrative fee.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay. Where data has been shared with third-party processors, we will notify them of the correction where reasonably practicable.

7.3 Right to Erasure

You may request that bh44 delete the personal data we hold about you. We will honour this request where the data is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Please note that we cannot delete data we are legally required to retain — such as KYC documents and transaction records subject to our five-year regulatory retention obligation.

7.4 Right to Restrict Processing

In certain circumstances — for example, while you contest the accuracy of data we hold, or where you have objected to processing and we are assessing your objection — you may request that we restrict active processing of your data. Data subject to a restriction will be stored but not actively used.

7.5 Right to Object to Marketing

You have an absolute right to object to processing of your personal data for direct marketing purposes. Once you exercise this right, we will cease all marketing communications immediately and will not use your data for that purpose again unless you positively opt back in.

7.6 Right to Data Portability

Where processing is based on your consent or on the performance of a contract and is carried out by automated means, you have the right to receive your personal data in a portable format and, where technically feasible, to have it transmitted directly to another data controller.

7.7 How to Exercise Your Rights

Submit your request by email to [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 48 hours and aim to fulfil it within 30 calendar days. If we are unable to fulfil your request — for example, because a legal retention obligation applies — we will explain our reasoning clearly in writing.

8. Updates to This Policy

bh44 reviews this Privacy Policy periodically and may update it to reflect changes in our data-processing practices, changes in applicable law, or improvements to the platform. The "Last updated" date at the top of this page will always reflect when the most recent revision was made.

Where we make material changes — that is, changes that significantly affect how your personal data is used or your rights in relation to it — we will notify you by email to your registered address and will display a prominent notice on the platform for a minimum of 30 days following the update. For minor or clarificatory changes, the updated policy will be posted on this page without separate notification.

Continued use of the bh44 platform after a policy update constitutes your acceptance of the revised terms. If you do not agree to any changes, you should stop using the platform and may request account closure by contacting our support team. The most current version of this Privacy Policy will always be accessible at https://bh44.app/privacy-policy.