Privacy Policy — How aj44 Collects, Uses & Protects Your Data

aj44 is Bangladesh's trusted online betting and casino platform. We operate the website https://aj44.io and all associated services, including cricket betting, live casino, slot games, card games, and related promotional features. In delivering these services, we necessarily collect and process certain personal data about the players who register and engage with our Platform.

We are committed to handling all personal data responsibly, transparently, and securely. This Policy has been written in plain English so that every player — regardless of their background in legal or technical matters — can clearly understand what data we hold about them, why we hold it, and what choices they have regarding its use.

This Privacy Policy applies to all data collected through:

• The aj44 website at https://aj44.io and all sub-pages
• Any mobile-optimised version of the Platform accessed through a browser
• Email, live chat, and other direct communications between you and the aj44 support team
• Identity verification (KYC) processes conducted in connection with your account

This Policy should be read alongside the aj44 Terms & Conditions and the Responsible Gaming Policy, both of which incorporate data processing considerations relevant to account management and player welfare.

We collect personal data through several channels — directly from you during registration and ongoing account use, automatically through your interaction with the Platform, and from trusted third parties as part of our verification and payment processes. The categories of data we collect are set out below.

2.1 Registration Data

When you create an account on aj44, we collect the following information:

• Full legal name (as it appears on official identity documents)
• Date of birth (used to verify that you meet the 21+ age requirement)
• Residential address (street, city, district, and postal code)
• Email address
• Mobile telephone number (including the number registered to your bKash, Nagad, or Rocket account)
• Chosen username and hashed password
• Preferred currency (Bangladeshi Taka / BDT)

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we collect copies of:

• Government-issued photo identification — National Identity Card (NID), passport, or driving licence
• Proof of residential address — utility bill, bank statement, or mobile financial service statement dated within the last 90 days
• Proof of payment method ownership — confirmation screenshot from bKash, Nagad, Rocket, Upay, or your bank

2.3 Financial Transaction Data

• Deposit amounts, dates, and payment method references
• Withdrawal requests, amounts, and destination account references
• Transaction IDs provided by payment providers (bKash, Nagad, Rocket, Upay, bank transfer)
• Account balance history and bonus credit/debit records

2.4 Betting & Gaming Activity Data

• Bets placed — market, stake, odds, and outcome
• Casino game sessions — game title, provider, session duration, and result
• Bonus and promotion usage records
• Wagering history used to calculate responsible gaming indicators

2.5 Technical & Usage Data

When you access the Platform, our servers and analytics systems automatically record:

• IP address at the time of access
• Device type, operating system, and browser version
• Pages visited, time spent on each page, and navigation path
• Referring URL (if you arrived via a link from another site)
• Session timestamps (login time, session duration, logout time)
• Error logs and crash reports

2.6 Communications Data

When you contact our support team via email or live chat, we retain records of those communications, including the content of messages, attachments, and the timestamps of the conversation. This allows us to maintain continuity of service and to resolve disputes accurately.

2.7 Data from Third Parties

We may receive personal data about you from third-party sources in limited circumstances, including:

• Payment providers confirming the ownership and status of a mobile money or bank account
• Identity verification services used to cross-reference KYC documents
• Self-exclusion registers or responsible gaming databases, where you have registered your details voluntarily

aj44 uses the personal data collected for clearly defined, legitimate purposes. We do not use your data in ways that are incompatible with the purposes listed below. The following table summarises the primary uses of each data category:

We do not use automated decision-making processes (including profiling) that produce legal or similarly significant effects on individual players without human review. Responsible gaming risk flags generated by automated monitoring are always reviewed by a trained member of our player welfare team before any account action is taken.

aj44 processes personal data on the following legal grounds:

• Contractual Necessity: The majority of data processing is necessary to perform our contract with you — i.e., to operate your account, process bets, settle winnings, and facilitate deposits and withdrawals.
• Legitimate Interests: We process technical and usage data for the legitimate interests of platform security, fraud prevention, and service improvement. These interests do not override your fundamental privacy rights.
• Legal Obligation: We process KYC and financial transaction data to comply with applicable anti-money laundering (AML) standards and identity verification obligations.
• Consent: Where we send you marketing communications or use non-essential cookies, we do so only on the basis of your explicit, freely given consent. You may withdraw consent at any time without affecting the legality of processing carried out before withdrawal.

aj44 does not sell your personal data. We share personal data only with trusted parties in the following limited circumstances:

5.1 Payment Processing Partners

To process deposits and withdrawals, we share transaction data and relevant account identifiers with our payment partners — bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, and partner banks. These providers receive only the data necessary to authorise and complete the transaction and are contractually bound to keep that data confidential.

5.2 Game Software Providers

When you play games powered by third-party studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, or Microgaming, a session token and anonymised player identifier is exchanged with the relevant provider to launch and maintain the game session. These providers do not receive your full name, contact details, or financial account information.

5.3 Identity Verification Services

We use trusted identity verification service providers to assist with KYC document validation. These providers process document images and biometric data strictly under our instructions and are prohibited from using that data for any purpose other than the verification task for which it was shared.

5.4 Legal and Regulatory Disclosure

We may disclose personal data to law enforcement authorities, regulatory bodies, or legal advisers where we are required to do so by law, court order, or other binding legal instrument. In such cases, we will disclose only the minimum data necessary to satisfy the legal obligation.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of aj44's business assets, personal data held by aj44 may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and of any material change to this Privacy Policy that results from it.

The aj44 Platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure experience. A cookie is a small text file stored on your device by your browser when you visit a website. We use the following types of cookies:

You can manage cookie preferences through your browser settings at any time. Note that disabling essential or security cookies may prevent you from accessing certain features of the Platform, including your account login. aj44 does not use third-party advertising cookies or retargeting pixels.

aj44 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable legal obligations. The general retention periods we apply are as follows:

• Active Account Data: Retained for the lifetime of the account and for a period of 5 years after the account is closed, to meet anti-money laundering record-keeping obligations.
• KYC Documents: Retained for 5 years from the date of submission, or for 5 years from account closure — whichever is later.
• Financial Transaction Records: Retained for 7 years to comply with financial record-keeping requirements.
• Betting and Gaming History: Retained for 5 years from the date of each transaction, used for dispute resolution and responsible gaming review.
• Customer Support Communications: Retained for 3 years from the date of the last communication in a support thread.
• Technical Logs (IP addresses, session data): Retained for 12 months, after which they are anonymised or deleted.
• Marketing Consent Records: Retained for the duration of the consent plus 2 years to demonstrate compliance in the event of a complaint.

Where data is no longer required for any active purpose and the retention period has elapsed, it is securely deleted or irreversibly anonymised. Anonymised data (which cannot be re-linked to any individual) may be retained indefinitely for aggregate statistical analysis.

aj44 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our key security controls include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and our servers is encrypted using current industry-standard protocols.
• Password Hashing: Account passwords are never stored in plain text. We use strong, one-way hashing algorithms with per-user salts, meaning that even internal staff cannot view your password.
• Access Controls: Personal data is accessible only to aj44 staff and contractors who have a clear, role-based need to access it. Access rights are reviewed regularly and revoked when no longer required.
• Encrypted Storage: KYC documents and sensitive financial records are stored in encrypted, access-controlled storage environments with audit logging enabled.
• Intrusion Detection: Our infrastructure is monitored continuously for anomalous activity, attempted breaches, and brute-force login attacks.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their accounts for an additional layer of login security.

Despite these measures, no method of transmission over the internet or electronic storage is completely secure. In the unlikely event of a data breach that poses a risk to your rights and freedoms, aj44 will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

As a player on the aj44 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request".

• Right of Access: You may request a copy of all personal data we hold about you. We will provide this within 30 days of a valid request.
• Right to Rectification: If any data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Account details such as email address and contact number can be updated directly in your Account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (and no other legal basis applies), or where you have objected to processing and we have no overriding legitimate grounds to continue. Note that legal retention obligations (such as AML record-keeping) may prevent complete erasure in some cases.
• Right to Restriction: You may request that we temporarily restrict processing of your data — for example, while a complaint or accuracy query is being investigated.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You may object to the processing of your personal data where we rely on legitimate interests as the legal basis, including profiling for responsible gaming purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal.

We will respond to all valid data rights requests within 30 calendar days. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. We do not charge a fee for exercising your rights in ordinary circumstances.

The aj44 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step in our registration and KYC processes, and accounts found to belong to players under 21 will be permanently closed, with all balances forfeited in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a minor has registered on the aj44 Platform using false information, please contact us immediately at [email protected] with the subject line "Minor Account Report". We will investigate and close the account within 24 hours of a substantiated report, and will permanently delete all personal data associated with that account.

The aj44 Platform does not contain links to external third-party websites for commercial or advertising purposes. All links within the Platform are internal, pointing only to pages within the https://aj44.io domain.

In the event that any game lobby or informational content references a third-party game studio by name (e.g., Pragmatic Play, Evolution Gaming), those references are factual identifiers of the software provider and do not constitute hyperlinks to external sites. aj44 is not responsible for the privacy practices of any third-party company whose products are integrated into the Platform, and players who interact with those game environments should be aware that a session token exchange occurs as described in Section 5.2 of this Policy.

aj44 reserves the right to update or revise this Privacy Policy at any time. When we make material changes — meaning changes that significantly affect how we collect, use, or share your personal data — we will notify registered players by displaying a prominent notice on the homepage and updating the "Effective Date" at the top of this document.

For minor changes (such as grammatical corrections, clarifications that do not alter the substance of the Policy, or updates to contact details), we will update the document without a separate notification. We encourage all players to review this Policy periodically to stay informed about how their data is being protected.

Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree with any change, you must stop using the Platform and may request account closure by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way aj44 handles your personal data, please get in touch with our dedicated support team using the contact details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

• Email: [email protected] — use subject line "Privacy Enquiry" for fastest routing
• Data Rights Requests: [email protected] — use subject line "Data Rights Request"
• Minor Account Reports: [email protected] — use subject line "Minor Account Report"
• Response Time: Within 24 hours on standard business days; data rights requests handled within 30 calendar days
• Operating Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

All privacy-related communications are treated as confidential and handled only by authorised members of the aj44 compliance and support teams. We do not discuss account-specific data over live chat — all data rights and privacy requests must be submitted by email from the address registered to your aj44 account for identity verification purposes.