ar44 Privacy Policy —
Your Data, Handled With Care

Who We Are

ar44 operates as an offshore online casino and sports betting platform serving members in Bangladesh and other eligible markets. The ar44 platform is accessible at https://ar44.io and encompasses all associated web pages, account management features, game lobbies, sports betting markets, promotional pages, and customer support channels.

For the purposes of this Privacy Policy, ar44 acts as the data controller in respect of personal data collected from users of the platform. This means ar44 determines the purposes for which your personal data is processed and the manner in which it is processed.

If you have any questions about our identity, our data practices, or this Privacy Policy, please contact the ar44 support and privacy team at [email protected]. Our support team operates 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6).

Data We Collect

ar44 collects the following categories of personal data from its users. The specific data points collected from any individual user depend on how that user interacts with the platform and at what stage of account lifecycle they are at.

ar44 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data. If any such data is inadvertently included in documents you submit for KYC purposes, it will be used only to complete the verification process and will not be processed for any other purpose.

How We Collect Your Data

ar44 collects personal data through the following channels and mechanisms:

• Direct interactions: Data you provide when you fill in the registration form, submit KYC documents, complete your account profile, make a deposit or withdrawal request, contact support, or participate in a promotion.
• Automated technologies: Technical and usage data collected automatically when you visit the ar44 website, including data gathered via cookies, server logs, and similar tracking technologies as described in Section 9.
• Payment processors: Transaction confirmation data returned by bKash, Nagad, Rocket, or Upay when a deposit or withdrawal is processed. ar44 receives transaction reference numbers and status confirmations but does not receive your full mobile wallet PIN or password.
• Identity verification partners: Where ar44 uses a third-party service to verify identity documents, that service may return a verification result and associated metadata (such as a match confidence score) to ar44.
• Fraud and security services: ar44 may receive risk signals from fraud prevention partners to help detect suspicious account activity. These signals are used solely for security purposes.
• Publicly available sources: In limited circumstances and where permitted, ar44 may verify information against publicly available records or sanctions screening databases as part of its compliance obligations.

Why We Use Your Data

ar44 uses the personal data it collects for the following purposes. Each purpose is linked to a lawful basis, which is described in detail in Section 5.

• Account creation and management: To register your account, verify your identity, maintain your account profile, and manage your login credentials.
• Payment processing: To process deposits, credit winnings, and execute withdrawal requests via bKash, Nagad, Rocket, or Upay.
• KYC and regulatory compliance: To fulfil our know-your-customer obligations, verify your age (minimum 21 years), verify your identity and source of funds, and screen against applicable sanctions and watchlists.
• Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Game and betting services: To provide and display your bet history, game session records, account balance, and transaction history within your account dashboard.
• Responsible gaming: To monitor gambling patterns, deliver responsible gaming alerts, enforce deposit and loss limits you have set, and administer self-exclusion requests.
• Customer support: To respond to your enquiries, process complaints, and resolve disputes in a timely manner.
• Promotions and bonuses: To administer bonus programmes, verify eligibility, and fulfil promotional obligations. Where you have opted in to marketing communications, to send you information about relevant promotions.
• Platform improvement: To analyse usage data and improve the performance, design, and features of the ar44 platform.
• Legal obligations: To comply with applicable laws, respond to lawful requests from competent authorities, and enforce our contractual rights under the Terms & Conditions.

Legal Bases for Processing

ar44 processes your personal data on the following legal bases depending on the specific purpose:

• Contractual necessity: Processing required to create and manage your account, process payments, settle bets, and provide the core services of the ar44 platform is necessary for the performance of the contract between you and ar44 as set out in the Terms & Conditions.
• Legal obligation: Processing for KYC verification, age verification, sanctions screening, and fraud reporting is necessary for ar44 to comply with its legal and regulatory obligations as an offshore gaming operator.
• Legitimate interests: Processing for fraud prevention, platform security, and analytical improvement of the platform is based on ar44's legitimate interest in operating a secure and effective platform. ar44 has assessed that these interests are not outweighed by your right to data protection.
• Consent: Where ar44 sends you optional marketing communications, including promotional emails or SMS messages about bonuses and seasonal events, this processing is based on your explicit consent given at registration or subsequently via your account preferences. You may withdraw consent at any time by contacting [email protected] or updating your communication preferences in your account dashboard.

Data Sharing and Disclosure

ar44 does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. Your data is shared only in the circumstances described below, and only to the minimum extent necessary for each purpose:

• Payment service providers: bKash, Nagad, Rocket, and Upay receive the transaction data necessary to process deposits and withdrawals associated with your ar44 account. These providers operate under their own privacy policies and are independently responsible for the data they hold.
• Game content providers: Licensed game studios and RNG providers (such as Pragmatic Play, Evolution Gaming, Spribe, and others) may receive a session token and anonymous player identifier to deliver game content and return game results. These providers do not receive your full name, contact details, or financial data.
• Identity verification services: Third-party KYC and age verification partners receive the identity documents you submit in order to conduct verification checks. These partners are bound by confidentiality obligations and data processing agreements with ar44.
• Fraud prevention and security partners: Risk and fraud detection services may receive technical identifiers (such as IP addresses and device fingerprints) to generate risk scores. Full identity data is not shared for this purpose.
• Legal and regulatory authorities: ar44 may disclose personal data to competent authorities, law enforcement bodies, or courts where required by law, court order, or regulatory obligation. ar44 will notify you of such disclosures where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or substantially all of ar44's business assets, your personal data may be transferred as part of that transaction. You will be notified of any such change and the impact on the processing of your data.

All third parties with whom ar44 shares personal data are required to maintain appropriate technical and organisational security measures and to process your data only for the purposes for which it was shared.

International Data Transfers

ar44 operates as an offshore platform, and as a result your personal data may be stored on servers located outside Bangladesh. When personal data is transferred to a country that does not provide a level of data protection equivalent to applicable standards, ar44 takes appropriate safeguards to ensure your data remains protected. These safeguards may include:

• Standard contractual clauses approved by relevant data protection authorities, incorporated into agreements with data recipients in third countries
• Binding corporate rules where data is transferred within a corporate group
• Adequacy decisions, where the receiving country has been recognised as providing adequate data protection

You may request further information about the specific safeguards in place for any international data transfer by contacting [email protected].

Data Retention

ar44 retains personal data for as long as is necessary for the purposes for which it was collected, and in accordance with any applicable legal retention obligations. The following table summarises ar44's general retention periods by data category:

Upon expiry of the applicable retention period, ar44 will securely delete or anonymise your personal data. Where data is anonymised rather than deleted, the resulting anonymised data set cannot be linked back to you and is no longer treated as personal data.

Cookies and Tracking

ar44 uses cookies and similar technologies (including local storage objects and session tokens) on its platform. These technologies help ar44 keep your session active, remember your preferences, maintain account security, and understand how users interact with the platform.

ar44 uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential to the operation of the ar44 platform. They include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without preventing core platform functionality from working correctly.
• Functional cookies: These cookies remember your preferences, such as your last selected game category or your preferred language setting. They improve your experience but are not essential to use the platform.
• Analytical cookies: ar44 uses analytics tools to collect anonymised data about how users navigate the platform, which pages are most visited, and where users encounter problems. This data is used in aggregate form to improve the platform and is not linked to individual user identities.
• Security cookies: Short-lived cookies used to detect unusual login activity, identify suspicious device changes, and support fraud prevention. These cookies contain no personal data beyond a session identifier.

ar44 does not use third-party advertising cookies or serve targeted advertising based on your browsing behaviour on external websites. The cookies deployed on the ar44 platform are limited to those necessary for platform operation, user experience, and internal analytics.

You may manage or disable non-essential cookies via your browser settings. Please note that disabling certain cookies may affect the functionality of the platform. Strictly necessary cookies cannot be disabled via browser settings without breaking core platform features.

Your Rights

Subject to applicable law, you have the following rights in relation to the personal data ar44 holds about you. To exercise any of these rights, please contact [email protected] with your registered username and a description of your request. ar44 will respond to all rights requests within 10 business days.

• Right of access: You have the right to request a copy of the personal data ar44 holds about you, together with information about how it is being used. ar44 will provide this information in a clear, readable format free of charge.
• Right to rectification: If any personal data ar44 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For profile data (such as address or contact number), you may be able to update this directly in your account settings.
• Right to erasure: You have the right to request that ar44 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent. This right is subject to ar44's legal retention obligations; data that must be retained for regulatory compliance purposes cannot be deleted early.
• Right to restriction of processing: You have the right to request that ar44 restrict the processing of your personal data in certain circumstances, such as while a dispute about the accuracy of your data is being resolved.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to object: You have the right to object to processing of your personal data where that processing is based on legitimate interests. ar44 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Children and Minors

ar44 is strictly an adult platform. Registration, account use, and participation in any game or betting market on ar44 is limited to individuals who are 21 years of age or older. ar44 does not knowingly collect personal data from any person under the age of 21.

If ar44 becomes aware, through the KYC verification process or any other means, that personal data has been provided by a person under the age of 21, ar44 will immediately suspend the relevant account, delete the personal data collected in connection with that account to the extent permitted by law, and return any deposited funds to the payment method from which they originated.

Parents and guardians who believe that a minor may have accessed or registered on the ar44 platform should contact [email protected] immediately. ar44 takes such reports seriously and will act on them without delay.

Security Measures

ar44 has implemented a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. Key measures include:

• Transport layer encryption: All data transmitted between your browser or device and the ar44 platform is encrypted using TLS 1.2 or higher (256-bit SSL). The ar44 website enforces HTTPS across all pages.
• Password security: Account passwords are stored using a one-way cryptographic hashing algorithm with individual salts. ar44 does not store or have access to your password in plaintext form. Support staff will never ask for your password.
• Payment data minimisation: ar44 does not store full mobile wallet numbers or PINs. Transaction data is limited to reference IDs and confirmation statuses returned by payment processors.
• Access controls: Access to personal data within ar44's internal systems is restricted on a need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and periodic security training.
• Security monitoring: ar44 operates continuous monitoring of its technical infrastructure for anomalous activity, intrusion attempts, and data exfiltration indicators.
• Incident response: ar44 maintains a documented incident response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, ar44 will notify affected users without undue delay and will take immediate steps to contain and remediate the breach.

While ar44 takes these measures seriously, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your ar44 account and to enable any additional account security features available in your account settings.

Links to Third-Party Services

The ar44 platform may contain references to or integrations with third-party services, including game providers, payment processors, and identity verification services. When you interact with these services — for example, by initiating a deposit via bKash or loading a game from a third-party provider — you may be subject to that provider's own privacy policy and data practices.

ar44 is not responsible for the privacy practices, content, or data handling of any third-party service. ar44 encourages you to review the privacy policies of any third-party services you use in connection with your ar44 account. The inclusion of a third-party service on the ar44 platform does not constitute an endorsement of that service's privacy practices.

Changes to This Policy

ar44 reserves the right to update or revise this Privacy Policy at any time. When changes are made, the revised policy will be published at https://ar44.io/privacy-policy with an updated effective date displayed at the top of the document. Where changes are material — meaning they affect how ar44 collects, uses, or shares your personal data in a way that is meaningfully different from the current policy — ar44 will notify registered account holders by email or by displaying a prominent notice on the platform prior to the change taking effect.

Your continued use of the ar44 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised policy, you must cease using the platform and may request account closure by contacting [email protected]. ar44 will retain data relating to your closed account in accordance with its legal retention obligations as described in Section 8.

ar44 recommends reviewing this Privacy Policy periodically to stay informed about how your personal data is being handled. The "Last Updated" date at the top of this document indicates when the most recent revision was made.

Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how ar44 has handled your personal data, please contact the ar44 privacy team using the details below. All correspondence must be submitted in English.

• Email: [email protected]
• Subject line: Please include "Privacy Request" or "Data Complaint" in the subject line of your email to ensure it is routed to the correct team.
• Response time: ar44 acknowledges all privacy-related emails within 24 hours and aims to provide a full response within 10 business days. Complex requests may take longer; ar44 will keep you informed of progress.
• Support hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (UTC+6)

If you are not satisfied with ar44's response to your privacy complaint, you have the right to escalate your complaint to an independent dispute resolution body or to a competent data protection supervisory authority in the jurisdiction applicable to your situation. ar44 will cooperate fully with any such authority in the investigation of a complaint.