s444 Privacy Policy

1 Introduction

s444 operates the online betting and casino platform accessible at s444.im, providing sports betting, live casino, slots, fishing games, and related services to players in Bangladesh. As the operator of this platform, s444 acts as the data controller responsible for the collection, processing, and storage of personal data belonging to registered players and platform visitors.

This Privacy Policy sets out in clear, formal terms the categories of personal data that s444 collects, the specific purposes for which that data is processed, the legal bases on which processing is carried out, the third parties with whom data may be shared, the retention periods applied to different categories of data, the security measures in place to protect your information, and the rights you hold as a data subject.

This policy applies to all personal data collected through the s444 website at s444.im, through the s444 mobile platform, through communications between players and the s444 customer support team, and through any promotional or marketing communications issued by s444. It applies to all players located in Bangladesh, including those accessing s444 from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

2 Personal Data We Collect

s444 collects the following categories of personal data in connection with the registration, operation, and closure of player accounts and the provision of betting and gaming services:

s444 does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless explicitly required for a specific legal compliance purpose, in which case your separate, explicit consent will be sought.

3 How We Collect Your Data

s444 collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide voluntarily when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or updating your account profile.
• Automated technical collection: Data collected automatically by our platform systems when you access s444.im, including IP address logging, device fingerprinting for fraud prevention, cookie-based session management, and server-side analytics.
• Payment provider data: Transaction confirmation data received from payment processors including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks, used to verify that a deposit or withdrawal has been completed successfully.
• KYC verification partners: Identity and address verification data returned by third-party KYC service providers engaged by s444 to confirm that a player meets the eligibility requirements set out in the s444 Terms & Conditions.
• Fraud prevention services: Risk scoring and device reputation data received from third-party fraud prevention partners, used to protect the integrity of the s444 platform and its player community.
• Publicly available sources: In limited circumstances, s444 may consult publicly available information (for example, sanction lists or public court records) as part of a compliance review of a specific account.

4 How We Use Your Personal Data

s444 uses the personal data it holds for the following defined purposes:

• Account creation and management: To create and maintain your s444 player account, verify your identity and age eligibility, and manage your account settings and preferences.
• Transaction processing: To process deposits received via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer; to verify payment source ownership; and to process approved withdrawal requests to your verified payment method.
• Platform operation: To operate the s444 sportsbook, casino, fishing games, and crash game products; to record and settle bets; to apply bonus and promotion credits and track wagering requirements; and to maintain accurate account balance records.
• Customer support: To respond to support queries submitted via email, live chat, or WhatsApp; to investigate account disputes; and to maintain a record of communications for quality assurance and training purposes.
• Fraud and security: To detect, prevent, and investigate fraudulent activity, multi-accounting, bonus abuse, money laundering, match-fixing, and other Prohibited Activities as defined in the s444 Terms & Conditions.
• Responsible gaming: To monitor gaming behaviour for indicators of problem gambling; to enforce deposit limits, cooling-off periods, and self-exclusion restrictions; and to contact players where our responsible gaming systems identify potential harm.
• Legal compliance: To fulfil obligations under applicable anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, tax reporting obligations, and any lawful order issued by a competent authority.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the performance, reliability, and user experience of the s444 platform.
• Marketing communications: To send promotional offers, bonus notifications, and platform updates to players who have opted in to marketing communications, subject to the right to opt out at any time as described in Section 12.

5 Legal Basis for Processing

s444 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual necessity: Processing that is required to perform our contract with you — specifically, to operate your s444 account, process your transactions, settle your bets, and provide the gaming services you have registered to use.
• Legal obligation: Processing required to comply with applicable legal requirements, including KYC/AML obligations, age verification requirements, regulatory record-keeping obligations, and responses to lawful requests from competent authorities.
• Legitimate interests: Processing carried out on the basis of s444's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and analytics for platform improvement, provided that these interests are not overridden by your privacy rights.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — in particular, the sending of direct marketing communications. Where we rely on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Data Sharing and Disclosure

s444 may share your personal data with the following categories of third parties, strictly limited to what is necessary for the defined purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banking institutions including Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank, for the purpose of processing your deposit and withdrawal transactions.
• KYC and identity verification providers: Third-party identity verification services engaged by s444 to confirm player identity and age as part of the account verification process. These providers process your identity data solely on s444's behalf under strict data processing agreements.
• Fraud prevention and security partners: Third-party fraud detection and risk assessment platforms that assist s444 in identifying and preventing fraudulent activity, bonus abuse, and multi-accounting. Data shared is limited to technical identifiers and risk-relevant behavioural signals.
• Game content providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session identifiers and game outcome data to operate their games within the s444 platform. These providers do not receive your full identity data unless required for their own regulatory compliance.
• Customer support technology providers: Third-party platforms used to operate s444's live chat and support ticketing systems. These providers process communication data solely for the purpose of enabling s444 to respond to your support queries.
• Legal and regulatory authorities: Competent government bodies, law enforcement agencies, regulatory authorities, or courts where s444 is required by law, court order, or regulatory direction to disclose personal data. s444 will notify affected players of such disclosures where legally permitted to do so.
• Business successors: In the event of a merger, acquisition, or sale of all or part of s444's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to how your data will be processed by the successor entity.

All third parties with whom s444 shares personal data are required to process that data in accordance with applicable data protection standards and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

7 Cookies and Tracking Technologies

The s444 platform uses cookies and similar tracking technologies to operate core platform functions, maintain your session security, and analyse platform usage. The following categories of cookies are used on s444.im:

Strictly necessary cookies cannot be disabled, as they are essential to the operation of the s444 platform. You may control the use of functional and analytics cookies through your browser settings. Note that disabling certain cookies may affect your experience on the s444 platform — for example, your session may not be maintained correctly if session cookies are blocked.

s444 does not use third-party advertising cookies or cross-site tracking pixels on its platform.

8 Data Retention

s444 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods which reflect applicable legal and regulatory obligations:

• Account and identity data: Retained for the duration of your account and for a minimum of five years following permanent account closure, to meet AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of five years from the date of the transaction, in compliance with financial record-keeping obligations.
• KYC documentation: Retained for a minimum of five years from the date of verification, or longer if required by applicable law.
• Gaming activity data: Retained for the duration of your account and for a minimum of two years following account closure, for dispute resolution and responsible gaming monitoring purposes.
• Customer support communications: Retained for a minimum of two years from the date of the last communication in a support thread, for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for the duration of your account and for two years following any withdrawal of marketing consent, as evidence of lawful processing.
• Technical and log data: Retained for up to 12 months, after which it is automatically deleted or anonymised unless it is required as evidence in connection with an ongoing fraud investigation or legal proceeding.

Upon expiry of the applicable retention period, s444 will securely delete or irreversibly anonymise your personal data so that it can no longer be associated with you as an individual.

9 Data Security

The security measures applied by s444 to protect your personal data include the following:

• TLS/SSL encryption: All data transmitted between your browser or app and the s444 platform is encrypted using TLS 1.2 or higher with 256-bit AES encryption, preventing interception in transit.
• Password hashing: Player passwords are stored using a strong, salted one-way cryptographic hash function. Plain-text passwords are never stored or transmitted by s444.
• Access controls: Access to personal data held in s444 systems is restricted to authorised personnel on a strict need-to-know basis. All internal access to production data systems is logged and subject to audit.
• Infrastructure security: The s444 platform is hosted on secure infrastructure with firewall protection, intrusion detection systems, regular vulnerability scanning, and penetration testing.
• Incident response: s444 maintains a documented data breach response procedure. In the event of a security incident that poses a risk to your personal data, s444 will assess the incident and notify affected players and relevant authorities as required by applicable law.

While s444 takes all reasonable technical and organisational measures to protect your personal data, no digital system can guarantee absolute security. You remain responsible for maintaining the confidentiality of your own s444 account credentials. If you suspect that your account has been compromised, please contact [email protected] immediately.

10 Your Data Rights

As a registered s444 player, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, please submit a written request to [email protected] from the email address registered to your s444 account, clearly stating the right you wish to exercise and providing sufficient detail to allow us to identify your account. s444 will respond to all valid rights requests within 30 days.

Please note that some rights are subject to exemptions — for example, s444 cannot delete data that it is legally required to retain under AML or KYC regulations, and s444 cannot provide data portability for data that was not provided directly by you. Where a request cannot be fulfilled in full, s444 will explain the reason in writing.

11 Children's Privacy

s444 applies strict age verification controls at the account registration stage and during KYC verification to prevent underage individuals from accessing the platform. If s444 discovers that personal data has been collected from a person under the age of 21, that data will be immediately and permanently deleted, the associated account will be closed, and any funds deposited will be returned to the payment source.

If you believe that a person under the age of 21 has registered an account on s444 using false information, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action.

12 Marketing Communications

s444 may send you promotional emails, SMS notifications, and in-platform messages about new games, special offers, deposit bonuses, and platform updates, provided that you have given your consent to receive such communications during the account registration process or subsequently through your account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in the notification settings section of your s444 account dashboard.
• Clicking the unsubscribe link included at the bottom of any s444 marketing email.
• Sending a written opt-out request to [email protected] from your registered email address.

Withdrawal of marketing consent will be processed within 5 business days. Note that opting out of marketing communications does not affect transactional communications — s444 will continue to send you account-related notifications such as deposit confirmations, withdrawal updates, responsible gaming alerts, and important changes to platform terms, as these are necessary for the operation of your account.

13 Changes to This Privacy Policy

s444 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform operations, or data processing practices. The date on which this Privacy Policy was last updated is displayed at the top of this document.

When s444 makes a material change to this Privacy Policy — meaning a change that meaningfully affects your rights or the way your personal data is processed — we will notify registered players by posting a prominent notice on the s444 platform for a period of at least 14 days before the change takes effect. Where practicable, we will also send a notification to your registered email address.

Your continued use of the s444 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised policy. If you do not agree with the changes, you should discontinue use of the platform and, if you wish, submit a request to close your account and have your data handled in accordance with Section 10 of this policy.

We encourage you to review this Privacy Policy periodically so that you remain informed about how s444 collects, uses, and protects your personal data.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way s444 processes your personal data, please contact our support team using the details below. All privacy-related enquiries will be handled by our dedicated data team and acknowledged within 2 business days.