cr44 Privacy Policy
At cr44, your privacy is a core responsibility, not an afterthought. This Privacy Policy explains exactly what personal data we collect when you use our platform, how we use it, who we may share it with, and the rights you hold over your own information. We encourage all players to read this document carefully alongside our Terms & Conditions.
How cr44 Handles Your Data
Six core principles guide every data decision we make at cr44. These are not aspirations — they are operational commitments embedded in our systems and processes.
Purpose Limitation
cr44 collects only the personal data that is strictly necessary for account operation, payment processing, identity verification, and regulatory compliance. We do not collect data speculatively or for undefined future uses.
Security First
All data transmitted between your browser and cr44 is protected by 256-bit SSL/TLS encryption. Stored data is held on secured servers with role-based access controls and continuous intrusion monitoring.
Your Control
You retain the right to access, correct, and request deletion of your personal data at any time. cr44 provides clear mechanisms for exercising these rights via our support team at [email protected].
No Third-Party Marketing
cr44 will never sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing companies. Data shared with partners is strictly limited to service delivery requirements.
Retention Limits
Personal data is retained only for as long as required by applicable law or for the legitimate operational purpose for which it was collected. Account data is held for a minimum of five years post-closure per anti-money laundering obligations.
Transparency
This Privacy Policy is written in plain English and kept up to date. We notify registered players by email whenever material changes are made so you are never surprised by how your data is being used.
What Information cr44 Collects and Why
The table below maps each category of personal data we collect to its specific purpose and the lawful basis on which we process it.
| Data Category | Examples | Purpose | Lawful Basis |
|---|---|---|---|
| Identity Data | Full name, date of birth, national ID number, passport number | Account registration, KYC verification, age verification (21+), fraud prevention | Legal obligation; contractual necessity |
| Contact Data | Email address, mobile number, residential address | Account communications, support correspondence, withdrawal confirmations, security alerts | Contractual necessity; legitimate interests |
| Financial Data | bKash number, Nagad number, Rocket number, Visa/Mastercard last 4 digits, transaction history | Deposit processing, withdrawal processing, anti-money laundering monitoring | Contractual necessity; legal obligation |
| Technical Data | IP address, browser type, device identifiers, operating system, session timestamps | Platform security, duplicate account detection, fraud prevention, performance optimisation | Legitimate interests |
| Usage Data | Games played, bets placed, markets accessed, session duration, feature interactions | Responsible gaming monitoring, personalisation, platform improvement, bonus eligibility checks | Legitimate interests; consent (where applicable) |
| Communications Data | Live chat transcripts, support email content, feedback submissions | Support quality assurance, dispute resolution, compliance audit trail | Legitimate interests; legal obligation |
Table of Contents
1. Who We Are
cr44 ("cr44", "we", "us", "our") is the operator of the online betting and gaming platform accessible at https://cr44.io (the "Platform"). We are the data controller responsible for all personal data collected through the Platform, meaning we determine the purposes and methods by which your personal data is processed.
This Privacy Policy applies to all persons who access or use the cr44 Platform, whether as registered account holders or as visitors browsing the site. It governs our practices with respect to the collection, use, storage, disclosure, and protection of personal data.
By registering an account on the cr44 Platform or by continuing to use the Platform after this Policy has been made available, you acknowledge that you have read and understood the terms of this Privacy Policy. If you do not agree with the terms described herein, you should discontinue use of the Platform and, if you hold a registered account, contact our support team to arrange account closure.
Data Controller Contact: All privacy-related enquiries, data subject access requests, and deletion requests should be directed to our support team in writing at [email protected]. We aim to acknowledge all privacy-related requests within 72 hours of receipt.
2. Data We Collect
cr44 collects personal data through several channels including direct input by the user during registration, automatic collection through platform technology, and occasional third-party verification sources. The categories of data we collect are as follows:
- Identity Data: Full legal name, date of birth, gender, and government-issued identification details (national ID card number, passport number, or equivalent) collected during the account registration and KYC verification process.
- Contact Data: Email address, mobile phone number, and residential address. These are required for account operation, support communications, and security notifications.
- Financial Data: Mobile financial service account references (bKash, Nagad, Rocket, Upay), bank card identifiers (last four digits of Visa or Mastercard), and a complete transaction history of all deposits, wagers, bonus credits, and withdrawals conducted through your cr44 account.
- Technical Data: IP address, browser type and version, device model and operating system, screen resolution, time zone (Bangladesh Standard Time, UTC+6), and session timestamps. This data is captured automatically when you access the Platform.
- Usage Data: Information about how you interact with the Platform, including which games you play, which betting markets you access, bet amounts, session duration, and promotional offers you engage with. This data is used to support responsible gaming monitoring, personalisation, and platform improvement.
- Communications Data: Content of live chat sessions with our support team, email correspondence, and any feedback or complaints you submit. This data is retained to support dispute resolution and quality assurance.
- Verification Documents: Scanned or photographed copies of identity documents, proof of address documents (such as utility bills or bank statements), and, where required, proof of payment method ownership. These are collected as part of our KYC and anti-money laundering compliance obligations.
cr44 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or political opinions. If any such data is disclosed to us incidentally through communications, it will not be processed beyond what is strictly necessary to handle the relevant communication.
3. How We Use Your Data
cr44 processes your personal data for the following specific and documented purposes:
- Account Management: To create, maintain, verify, and close your cr44 account, including verifying your age (21+) and identity as required by our Terms & Conditions.
- Service Delivery: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; to settle bets and game outcomes; and to manage bonus and promotional credits in your account.
- Security and Fraud Prevention: To detect and prevent fraudulent activity, duplicate account creation, money laundering, and other prohibited conduct as described in our Terms & Conditions. This includes automated monitoring of transaction patterns and login behaviour.
- Responsible Gaming: To monitor usage patterns for indicators of problem gambling behaviour, to enforce self-imposed limits set by the player, and to administer cooling-off periods and self-exclusion requests.
- Platform Improvement: To analyse aggregated usage data for the purpose of improving the Platform's performance, fixing bugs, and developing new features. Aggregated analytics data is anonymised wherever possible.
- Customer Support: To respond to enquiries, resolve disputes, and provide ongoing support to registered players through our 24/7 English-speaking support team.
- Legal and Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering legislation, financial record-keeping requirements, and any lawful requests from competent authorities.
- Communications: To send you transactional notifications (deposit confirmations, withdrawal updates, security alerts), and where you have given explicit consent, to send promotional communications about offers, bonuses, and new features on the cr44 Platform.
Marketing Communications: If you have opted in to receive promotional emails or SMS notifications from cr44, you may withdraw that consent at any time by contacting [email protected]. Withdrawal of marketing consent does not affect your ability to use the Platform or receive transactional communications necessary for account operation.
4. Cookies and Tracking Technologies
cr44 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file stored on your device by your browser when you visit a website. cr44 uses the following types of cookies:
- Essential Cookies: Required for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing identifiers. Essential cookies cannot be disabled without preventing you from using the Platform.
- Functional Cookies: Used to remember your preferences such as language settings, preferred deposit method, and responsible gaming limit settings, so you do not have to re-enter them on each visit.
- Analytical Cookies: Used to collect anonymised data about how players navigate and use the Platform. This data is used to identify performance bottlenecks and improve the user experience. Analytical cookies do not identify individual users.
- Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity, and other automated threats to Platform integrity.
cr44 does not use third-party advertising cookies or behavioural targeting cookies. We do not permit third-party advertisers to place cookies on the Platform.
You may manage cookie preferences through your browser settings. Please note that disabling essential or security cookies will impair your ability to log in and use the cr44 Platform. For guidance on managing cookies in your specific browser, refer to your browser's official help documentation.
5. Data Sharing and Disclosure
cr44 does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:
- Payment Processors: We share transaction-related data with our payment partners — bKash, Nagad, Rocket, Upay, Visa, and Mastercard — solely to the extent required to process your deposits and withdrawals. Each payment partner operates under its own privacy policy and security framework.
- Game Providers: We share non-financial session data (such as a pseudonymised player identifier and game session token) with our third-party game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to authenticate and facilitate your gameplay. Game providers do not receive your full identity or financial data.
- Identity Verification Services: Where cr44 uses automated KYC verification services to validate identity documents, your identity data is processed by those services under strict data processing agreements. These services are used solely for verification purposes and do not retain your data beyond the verification transaction.
- Legal and Regulatory Authorities: cr44 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or where we have a good-faith belief that such disclosure is necessary to prevent fraud, money laundering, or other serious criminal activity.
- Business Continuity: In the event that cr44's business is subject to a merger, acquisition, or asset transfer, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via your registered email address prior to your data being transferred.
All third parties with whom cr44 shares personal data are required to maintain appropriate technical and organisational measures to protect that data, and are prohibited from using it for any purpose beyond the specific service they have been engaged to provide.
6. Data Security
cr44 implements a layered security architecture to protect all personal data held on the Platform. Our security measures include, but are not limited to:
- 256-bit SSL/TLS Encryption: All data in transit between your browser and cr44's servers is encrypted using industry-standard TLS 1.2 or higher. This applies to all pages of the Platform, including login, deposit, and account settings pages.
- Encrypted Data Storage: Sensitive data fields — including identity document references and financial account identifiers — are encrypted at rest using AES-256 encryption in our database infrastructure.
- Access Controls: Access to personal data within cr44's internal systems is governed by role-based access controls. Only personnel with a documented operational need are granted access to personal data, and all access is logged for audit purposes.
- Intrusion Detection: cr44 operates continuous network monitoring and intrusion detection systems. Anomalous access patterns trigger automated alerts and human review within defined response windows.
- Two-Factor Authentication: cr44 supports two-factor authentication (2FA) for player accounts. We strongly recommend that all players enable 2FA on their account to provide an additional layer of protection against unauthorised access.
- Penetration Testing: cr44's Platform undergoes periodic third-party security assessments to identify and remediate vulnerabilities before they can be exploited.
Security Incident Notification: In the unlikely event of a data breach that affects your personal data, cr44 will notify affected players via their registered email address within the timeframe required by applicable law, together with information about the nature of the breach and the steps we are taking in response.
7. Data Retention
cr44 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:
- Active Account Data: Personal data associated with an active cr44 account is retained for the full duration of the account's active status and for a minimum of five years following account closure, in compliance with anti-money laundering record-keeping requirements.
- Transaction Records: Full deposit, withdrawal, and wagering transaction records are retained for a minimum of five years following the date of each transaction.
- Identity Verification Documents: Copies of identity documents submitted for KYC purposes are retained for the same five-year minimum period post-account-closure.
- Support Communications: Live chat transcripts and email correspondence with our support team are retained for three years from the date of the communication, or longer where the communication relates to an unresolved dispute.
- Technical and Usage Data: Server logs and session data are retained for 12 months from the date of capture, after which they are anonymised or deleted.
- Marketing Consent Records: Records of marketing consent and withdrawal of consent are retained for the duration of the account and for three years following account closure.
When the applicable retention period expires, cr44 will securely delete or anonymise the relevant personal data so that it can no longer be attributed to any identifiable individual.
8. Your Rights Over Your Personal Data
As a player on the cr44 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team in writing at [email protected]:
- Right of Access: You have the right to request a copy of all personal data cr44 holds about you. We will provide this information within 30 days of receiving a verified request.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Account details such as email address and phone number can be updated directly through the account settings panel.
- Right to Erasure: You may request deletion of your personal data subject to our legal retention obligations. Where data is required to be retained by law (e.g., transaction records under anti-money laundering rules), we will explain why erasure is not immediately possible and provide a timeline for when it will occur.
- Right to Restrict Processing: You may request that cr44 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to a specific processing activity.
- Right to Data Portability: You have the right to request that cr44 provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
- Right to Object: You have the right to object to cr44's processing of your personal data where that processing is based on our legitimate interests. If you object, cr44 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Where processing is based on your consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
How to Submit a Request: Send your request to [email protected] with the subject line "Privacy Rights Request". Include your registered email address and a brief description of the right you wish to exercise. We will acknowledge receipt within 72 hours and complete the request within 30 days. Identity verification will be required before any data is disclosed or deleted.
9. Children and Minors
The cr44 Platform is strictly intended for persons aged 21 years or older. cr44 does not knowingly collect, process, or retain personal data belonging to persons under the age of 21. Our registration process includes mandatory age verification checks designed to prevent underage access.
If cr44 discovers or has reason to believe that a registered account is held by a person under the age of 21, we will immediately suspend the account, void all associated transactions, and securely delete the personal data associated with that account in accordance with our data retention policy and applicable law.
If you are a parent or guardian and believe that a person under your care has registered on the cr44 Platform without your knowledge, please contact us immediately at [email protected]. We will investigate and take appropriate action within 24 hours of receiving your report.
10. Third-Party Links
The cr44 Platform may contain links to third-party websites or services, including the websites of game providers such as Pragmatic Play, Evolution Gaming, and Spribe, and payment service providers such as bKash and Nagad. These links are provided for convenience and informational purposes only.
cr44 has no control over the content, privacy practices, or security measures of third-party websites. This Privacy Policy does not apply to any third-party website you visit via a link from the cr44 Platform. We strongly encourage you to read the privacy policy of any third-party website before providing personal data to it.
The presence of a link to a third-party website on the cr44 Platform does not constitute an endorsement of that website, its operator, or its privacy practices.
11. Changes to This Privacy Policy
cr44 reserves the right to update, amend, or replace this Privacy Policy at any time. We will notify registered players of any material changes via the email address associated with their account at least 7 days before the revised Policy takes effect.
Non-material changes — such as clarifications of existing language, corrections of typographical errors, or updates to contact details — may be made without prior notice. The "Last updated" date at the top of this Policy will always reflect the most recent revision.
Continued use of the cr44 Platform following the effective date of any amendment to this Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not accept the revised Policy, you must cease using the Platform and contact our support team to arrange account closure.
All previous versions of this Privacy Policy are superseded by the current version. If you require a copy of a previous version for legal or compliance purposes, please contact [email protected] with your request.
12. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or cr44's data practices, please contact our team using the following details:
- Email: [email protected] (plain text — not a clickable link)
- Subject Line for Privacy Requests: "Privacy Rights Request" or "Data Protection Enquiry"
- Support Hours: 24 hours a day, 7 days a week, including public holidays in Bangladesh
- Response Time: Privacy requests acknowledged within 72 hours; completed within 30 days
- Time Zone: Bangladesh Standard Time (BST, UTC+6)
cr44 does not provide telephone support. All formal privacy-related correspondence must be submitted in writing via email to ensure a complete and auditable record is maintained. Our support team communicates exclusively in English to ensure clarity and consistency across all privacy-related interactions.
cr44 is committed to resolving all privacy-related concerns promptly and transparently. If you feel your concerns have not been adequately addressed after contacting our support team, you retain the right to escalate the matter through appropriate legal channels available in your jurisdiction.
Your Data Is Safe With cr44
Have questions about how cr44 protects your information? Our 24/7 support team is ready to help. You can also review our full Terms & Conditions or visit our FAQ page for quick answers.