ba44 Privacy Policy

1. Introduction

ba44 ("we", "us", "our") operates the online betting and casino platform accessible at https://ba44.io (the "Platform"). We understand that your personal data is important to you, and we take our responsibility as custodians of that data seriously. This Privacy Policy sets out in clear, plain English how ba44 collects, uses, stores, shares, and protects personal information relating to all users of the Platform, including registered account holders, casual visitors, and any individual who contacts us through any channel.

This Privacy Policy should be read alongside ba44's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. Together these documents form the complete framework governing your relationship with ba44. By accessing or using the Platform in any way — including by simply browsing the website without registering — you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

For the purposes of this Privacy Policy, ba44 acts as the data controller in respect of all personal data collected through the Platform. As data controller, ba44 determines the purposes and means by which your personal data is processed. Any queries relating to data protection, subject access requests, or the exercise of any other privacy right should be directed to the ba44 data support team using the contact details set out in Section 16 of this Policy.

Where ba44 engages third-party service providers (such as payment processors, identity verification services, or game providers) to process data on our behalf, those parties act as data processors under written agreement with ba44, and are bound by strict confidentiality and security obligations consistent with the standards set out in this Policy.

3. Information We Collect

ba44 collects several categories of personal data from and about our players. The following table summarises the main categories, with examples of the specific data points within each:

ba44 does not deliberately collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, biometric data, or health data, except where health data is voluntarily provided in the context of a responsible gaming interaction (for example, a Player disclosing a gambling-related health concern to our support team). Any such data shared voluntarily is handled with enhanced confidentiality protections and is used solely to assist that Player.

4. How We Collect Your Data

4.1 Directly from You

The majority of personal data ba44 holds is provided directly by you during the course of using the Platform. This includes information you enter during account registration, data you provide during KYC document submission, payment details you enter when making deposits or requesting withdrawals, correspondence you send to our support team, and any responsible gaming preferences you set within your account dashboard.

4.2 Automatically via Technology

When you access the ba44 Platform, our systems automatically collect certain technical data about your device and browsing behaviour. This is collected using server logs, cookies, pixel tags, and similar tracking technologies described in detail in Section 8 of this Policy. Technical data is collected on every visit, including visits by users who have not registered an account.

4.3 From Third-Party Sources

ba44 may receive supplementary data about you from third-party sources in specific circumstances. These sources include:

• Identity Verification Providers: Third-party KYC services that cross-reference the documents you submit with official identity databases to confirm authenticity.
• Payment Processors: bKash, Nagad, Rocket, Upay, and bank partners may share transaction confirmation data with ba44 for the purpose of crediting or debiting your account balance.
• Fraud Detection Services: Industry fraud-sharing databases that flag known fraudulent identities, devices, or payment instruments.
• Responsible Gaming Registries: Self-exclusion registers where applicable, enabling ba44 to honour exclusion requests made on other platforms where data sharing agreements are in place.

5. Legal Basis for Processing

ba44 relies on one or more of the following legal bases when processing your personal data. We identify the applicable basis for each major processing activity in the table below:

6. How We Use Your Information

ba44 uses the personal data we collect for the following specific purposes:

• Account Management: Creating, maintaining, and administering your ba44 player account, including processing login authentication and account recovery requests.
• Age & Identity Verification: Confirming that all players are aged 21 or above and are who they claim to be, in accordance with our KYC obligations and the responsible gaming standards we uphold.
• Payment Processing: Crediting deposits to your account balance and processing withdrawal requests to your verified payment method — bKash, Nagad, Rocket, Upay, or bank transfer.
• Customer Support: Responding to queries, complaints, and requests submitted via live chat, email, or WhatsApp. Support interactions may be recorded for quality assurance and training purposes.
• Responsible Gaming: Monitoring account activity for patterns associated with problem gambling, enforcing voluntary limits and self-exclusion requests, and reaching out proactively where our systems identify a player who may be at risk.
• Fraud & Security: Detecting, investigating, and preventing fraudulent transactions, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in the Terms & Conditions.
• Personalisation: Tailoring the Platform experience, including relevant game recommendations, sports market highlights, and promotional offers, based on your betting history and stated preferences.
• Platform Analytics: Analysing aggregate, anonymised usage data to identify technical issues, improve navigation, enhance game performance, and guide future product development decisions.
• Marketing: Sending you promotional emails, SMS messages, or WhatsApp notifications about bonuses, new games, seasonal offers (such as Eid, Pohela Boishakh, or IPL specials), and platform news — only where you have given explicit consent to receive such communications.
• Legal Compliance: Fulfilling any legal, regulatory, or law-enforcement obligation that applies to ba44 or to transactions conducted through the Platform.

7. Data Sharing & Third Parties

ba44 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. We share personal data only in the specific, limited circumstances described below:

7.1 Service Providers

ba44 engages carefully selected third-party service providers who process data strictly on our behalf and under our instruction. These include KYC and identity verification platforms, payment gateway operators (bKash, Nagad, Rocket, Upay, and banking partners), cloud hosting and server infrastructure providers, customer support software vendors, and fraud detection and cybersecurity specialists. All such providers are bound by data processing agreements that prohibit the use of your data for any purpose other than the specific service they provide to ba44.

7.2 Game Providers

Casino and live dealer games on ba44 are supplied by third-party providers including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe. When you play a game supplied by these studios, certain technical session data (such as session tokens, bet amounts, and game outcomes) may be transmitted to the game provider's systems to facilitate fair play, resolve disputes, and comply with the providers' own certification requirements. Game providers do not receive your full identity or financial data.

7.3 Legal & Regulatory Disclosure

ba44 may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by applicable law, court order, or as part of an active investigation into financial crime, fraud, or money laundering. ba44 will endeavour to notify affected players of any such disclosure unless prohibited from doing so by law.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the ba44 business, personal data held by ba44 may be transferred to the relevant successor entity as part of that transaction. Players will be notified of any such transfer and of any material changes to data processing arrangements that result from it, via email or on-platform notice.

8. Cookies & Tracking Technologies

ba44 uses cookies and similar technologies (such as pixel tags and local storage objects) on the Platform for the following purposes:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during a visit, and security cookies that protect against cross-site request forgery (CSRF). These cookies cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display options, and recently viewed game categories, so that the Platform behaves consistently across sessions on the same device.
• Analytics Cookies: Collect anonymised and aggregated information about how visitors use the Platform — which pages are visited most, how users navigate between sections, and where technical errors occur. This data is used solely for internal platform improvement and is not shared with advertising networks.
• Performance Cookies: Monitor Platform load times, server response performance, and content delivery network (CDN) efficiency to ensure a smooth, fast experience for players across Bangladesh — including in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and Cox's Bazar.

ba44 does not use third-party advertising or retargeting cookies. You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to log in and use the Platform normally.

9. Data Retention

ba44 retains personal data only for as long as is necessary for the purposes for which it was collected, subject to any longer retention period required by applicable law or regulatory obligation. The following retention guidelines apply:

• Active Account Data: All personal data associated with an active player account is retained for the full duration of the account's existence and for a minimum of five (5) years following account closure.
• KYC & Identity Documents: Identity verification documents are retained for a minimum of five (5) years from the date of submission, consistent with standard anti-money laundering record-keeping obligations.
• Financial Transaction Records: Deposit, withdrawal, and bet history records are retained for a minimum of five (5) years from the date of each transaction to support audit, compliance, and dispute resolution requirements.
• Support Communications: Live chat transcripts, email correspondence, and WhatsApp support logs are retained for up to three (3) years from the date of the interaction.
• Marketing Data: Email addresses and marketing consent records are retained until you withdraw consent or request deletion, after which they are removed from active marketing lists within 30 days.
• Technical Logs: Server and access logs containing IP addresses and session data are retained for up to twelve (12) months for security monitoring purposes.

Where ba44 no longer has a legitimate basis to retain your data, we will securely delete or anonymise it. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

10. Data Security

ba44 implements a comprehensive programme of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our key security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and ba44's servers is encrypted using industry-standard 256-bit SSL/TLS protocols. You can verify the presence of this encryption by the padlock symbol and "https://" in your browser's address bar.
• Encrypted Data Storage: Sensitive data fields — including identity document images, financial account details, and authentication credentials — are encrypted at rest using AES-256 encryption on ba44's database infrastructure.
• Access Controls: Access to personal data within ba44's internal systems is strictly limited on a need-to-know basis. All internal access is authenticated, logged, and subject to regular review. Staff with access to sensitive player data undergo background checks and are bound by confidentiality agreements.
• Penetration Testing: ba44's platform and infrastructure are subject to regular independent security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Two-Factor Authentication: All ba44 player accounts support two-factor authentication (2FA). Players are strongly encouraged to enable 2FA via their account security settings to add an additional layer of protection beyond their password.
• Incident Response: ba44 maintains a documented data breach response plan. In the event of a security incident that affects your personal data, ba44 will notify affected players promptly and take all reasonable steps to contain and remediate the incident.

11. Your Rights

As a player on the ba44 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact the ba44 data support team using the details in Section 16. ba44 will respond to all data rights requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of all personal data ba44 holds about you. This is commonly known as a Subject Access Request (SAR). ba44 will provide the requested data in a structured, commonly used, machine-readable format.
• Right to Rectification: If any personal data ba44 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic contact information directly within your account settings without needing to submit a formal request.
• Right to Erasure: You may request that ba44 delete all personal data it holds about you. This right applies where the data is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. Note that ba44 may be legally required to retain certain data (e.g., KYC and financial records) for a minimum period even after an account is closed.
• Right to Restriction: You may request that ba44 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being verified, or where processing is unlawful but you do not wish for the data to be deleted.
• Right to Data Portability: You have the right to receive your personal data in a portable, structured format so that it can be transferred to another service provider. This right applies to data that you have actively provided to ba44 and that is processed on the basis of consent or contract.
• Right to Object: You have the right to object to the processing of your personal data where ba44 relies on legitimate interest as its legal basis. You also have an unconditional right to object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where ba44 processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that took place before the withdrawal.

12. Children & Minors

ba44 enforces mandatory age verification on every account before real-money play is permitted. If ba44 discovers or has reason to believe that personal data has been submitted by a person under the age of 21, the relevant account will be immediately suspended, all associated data will be reviewed, and any deposited funds will be returned to the verified payment source following an investigation. The account will then be permanently closed.

If you are a parent or guardian and believe that a person under your care has created a ba44 account or shared personal data with us, please contact us immediately at [email protected]. We will prioritise the investigation and take all appropriate steps to address the situation.

13. Marketing Communications

ba44 may send you promotional communications about bonuses, new game launches, seasonal promotions (such as Eid specials, BPL cricket season offers, or Pohela Boishakh campaigns), and platform updates via email, SMS, or WhatsApp. We will only send you marketing communications where you have explicitly opted in to receive them during the registration process or subsequently within your account communication preferences.

You can withdraw your consent to marketing communications at any time by:

• Clicking the "unsubscribe" link included in any marketing email sent by ba44.
• Updating your communication preferences within the ba44 account dashboard under "Settings > Notifications".
• Sending a written request to [email protected] with the subject line "Unsubscribe from Marketing".

Following a valid opt-out request, ba44 will remove you from all marketing distribution lists within 7 business days. Please note that withdrawing consent to marketing does not affect your receipt of transactional communications (such as deposit confirmations, withdrawal notifications, and account security alerts), which are sent as a necessary part of delivering our service to you.

14. International Data Transfers

ba44 operates infrastructure that may involve the processing of personal data in locations outside of Bangladesh. Where personal data is transferred internationally — for example, to cloud hosting providers, game server infrastructure, or KYC processing services located in other countries — ba44 ensures that appropriate safeguards are in place to protect that data to a standard at least equivalent to the protections described in this Privacy Policy.

These safeguards include contractual data protection clauses in all agreements with international service providers, strict technical access controls, and data minimisation principles that limit the volume of personal data transferred to the minimum necessary for the specific service being provided.

If you have concerns about the international transfer of your personal data, please contact ba44's data support team at [email protected] for further information about the specific safeguards applicable to your data.

15. Changes to This Policy

ba44 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law or regulatory guidance, or the introduction of new platform features that involve the processing of personal data in new ways.

When a material change is made to this Privacy Policy, ba44 will notify all registered players via an on-platform notification and/or an email to the address associated with their account, at least 7 days before the updated Policy takes effect. The "Last Updated" date at the top of this document will be revised to reflect each new version.

Your continued use of the ba44 Platform after a revised Privacy Policy takes effect constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the Platform and contact support to request account closure and data deletion in accordance with Section 11.

16. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by ba44, please reach out through the following channels. All privacy and data protection enquiries are handled by ba44's dedicated data support team.

• Email: [email protected] — for Subject Access Requests, data deletion requests, opt-out requests, and any formal privacy complaint. Please use the subject line "Privacy Request" so your message is routed correctly. We aim to acknowledge all privacy-related emails within 2 business days and provide a full response within 30 days.
• Live Chat: Available 24 hours a day, 7 days a week inside your ba44 account dashboard. For urgent data security concerns — such as suspected unauthorised account access — live chat is the fastest way to reach our team.
• WhatsApp: +880 1700 000000 — available during business hours (Bangladesh Standard Time, UTC+6) for general privacy queries.

This Privacy Policy was last reviewed and updated on 1 January 2026. ba44 is committed to being transparent about how we handle your data and to responding promptly whenever you exercise any of the rights described in this document. Thank you for trusting ba44 with your information — we take that trust seriously.