Privacy Policy

1. Scope and Application

This Privacy Policy applies to all personal data collected and processed by c4444 in connection with the operation of the c4444 online casino and sports betting platform at c4444.biz, including all sub-pages, mobile-optimised pages, and any associated services such as the PKR cashier, JazzCash and Easypaisa payment processing, live casino, sports betting, and customer support communications.

By registering an Account, depositing funds, or otherwise using c4444, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, you must cease using c4444 immediately.

This Privacy Policy should be read in conjunction with the c4444 Terms & Conditions and Responsible Gaming Policy.

2. Data Controller

For the purposes of applicable data protection legislation, c4444 acts as the data controller in respect of personal data collected through the Platform. c4444 is responsible for determining the purposes and means of processing your personal data and is accountable for ensuring that processing is conducted lawfully, fairly and transparently.

All data protection enquiries, access requests and erasure requests should be addressed to the c4444 Data Protection team via the contact details set out in Section 14 of this Policy.

3. Personal Data We Collect

3.1 Registration and Account Data

When you create a c4444 account, we collect: full legal name, date of birth, email address, mobile telephone number (including Pakistani numbers for JazzCash and Easypaisa verification), username and encrypted password hash, country and city of residence, and account preferences.

3.2 Identity Verification (KYC) Data

As part of our Know Your Customer obligations, c4444 may collect: copies of your CNIC (Computerised National Identity Card) or passport, proof of address documents, selfie photographs for liveness verification, and source-of-funds documentation for high-value transactions. This information is collected and processed in accordance with anti-money-laundering obligations applicable under our licensing framework.

3.3 Financial and Transaction Data

c4444 collects records of all deposits and withdrawals processed through the Platform, including: PKR amounts, JazzCash wallet identifiers (where applicable), Easypaisa wallet identifiers (where applicable), bank account details for HBL, UBL, Meezan Bank or Bank Alfalah transfers, USDT wallet addresses, transaction timestamps, and transaction reference numbers issued by payment service providers.

3.4 Gaming Activity Data

c4444 records all gaming sessions on the Platform, including: game titles accessed, bets placed, game outcomes, session start and end times, net win/loss figures, and cricket and sports bets with associated odds and settlement outcomes. This data is used for regulatory compliance, dispute resolution and responsible gaming monitoring.

3.5 Technical and Device Data

Automatically collected technical data includes: IP address, device type and operating system, browser type and version, screen resolution, geolocation data (country and city level), session duration, pages visited, and referring URLs. This data is collected via server logs and, where consented, via cookies.

3.6 Communications Data

Records of all communications between you and c4444 — including live chat transcripts, email correspondence and any complaint or dispute correspondence — are retained for quality assurance, training and dispute resolution purposes.

4. How We Use Your Personal Data

c4444 uses your personal data for the following purposes:

c4444 does not use personal data for automated decision-making that produces legal or similarly significant effects on individuals, except for fraud prevention systems where automated risk scoring is applied. In such cases, human review is available upon request.

5. Legal Basis for Processing

c4444 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the agreement between you and c4444 under the Terms and Conditions — including Account management, game provision, and payment processing;
• Legal Obligation: Processing required to comply with anti-money-laundering regulations, licensing conditions, KYC obligations, and applicable financial regulations — including identity verification and transaction record retention;
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming enforcement, customer support quality assurance and platform analytics, where such processing does not override your fundamental rights;
• Consent: Processing for marketing communications and non-essential cookies, which requires your explicit opt-in and may be withdrawn at any time.

6. Data Sharing and Third Parties

c4444 does not sell personal data. Personal data is shared only with the following categories of third parties, strictly on a need-to-know basis and under binding data processing agreements:

• Payment Service Providers: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah and USDT processing partners receive transaction data necessary to process deposits and withdrawals;
• KYC and Identity Verification Providers: Third-party identity verification services receive document images and selfie photographs to perform automated and manual identity checks;
• Game Studios and Platform Providers: Licensed game suppliers (such as Evolution Gaming, Pragmatic Play and others) receive session tokens and stake data as necessary to operate games within the c4444 platform;
• Fraud Prevention and Security Services: Technical data including IP addresses and device fingerprints are shared with fraud detection platforms;
• Regulatory and Law Enforcement Authorities: c4444 will disclose personal data to regulators, law enforcement agencies and courts where required by applicable law, court order or regulatory direction;
• Professional Advisers: Legal advisers, auditors and compliance consultants may access data on a strictly confidential basis as necessary to provide their professional services.

All third-party processors are contractually required to process data only for the specified purpose, to implement appropriate technical security measures, and to notify c4444 without undue delay in the event of a personal data breach.

7. Cookies and Tracking Technologies

c4444 uses cookies and similar technologies on the Platform for the following purposes:

• Strictly Necessary Cookies: Required for the Platform to function — including session management, authentication tokens and security cookies. These cannot be disabled without affecting core functionality;
• Functional Cookies: Remember your preferences (such as language, currency display and game lobby settings) between sessions;
• Analytics Cookies (with consent): Aggregate page view and click data used to understand how Pakistani players use the Platform and improve the user experience;
• Marketing Cookies (with consent): Used to present relevant c4444 promotions. These are controlled by the consent preferences you set.

You may manage cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from using c4444 but may affect certain personalisation features.

8. Data Retention

c4444 retains personal data for the periods set out below, after which data is securely deleted or anonymised:

• Active Account Data: Retained for the duration of the Account relationship;
• KYC / Identity Documents: Retained for a minimum of 5 years following Account closure, in compliance with anti-money-laundering legal obligations;
• Transaction Records (deposits, withdrawals, betting history): Retained for a minimum of 5 years following the date of the transaction;
• Communications Records: Retained for 3 years following the communication;
• Technical / Server Log Data: Retained for 12 months;
• Marketing Consent Records: Retained for the duration of the consent plus 3 years for audit purposes.

Retention periods may be extended where data is required in connection with an ongoing legal proceeding, regulatory investigation or dispute.

9. Security Measures

c4444 implements the following technical and organisational measures to protect personal data:

• 256-bit SSL/TLS encryption for all data in transit;
• AES-256 encryption for sensitive data at rest, including KYC documents and financial records;
• One-way bcrypt hashing for all Account passwords;
• Role-based access controls ensuring staff access only the data necessary for their specific function;
• Multi-factor authentication required for all c4444 staff accessing systems containing personal data;
• Regular penetration testing and vulnerability assessments by independent security firms;
• Automated monitoring for anomalous access patterns with incident response procedures in place.

Despite these measures, no security system is impenetrable. c4444 cannot guarantee absolute security of data transmitted over the internet. In the event of a personal data breach that is likely to result in risk to your rights and freedoms, c4444 will notify you without undue delay in accordance with applicable notification requirements.

10. Your Rights

Subject to applicable law and the conditions set out below, you have the following rights in relation to your personal data held by c4444:

• Right of Access: Request a copy of all personal data c4444 holds about you;
• Right to Rectification: Request correction of inaccurate or incomplete personal data;
• Right to Erasure: Request deletion of personal data, subject to legal retention obligations;
• Right to Restriction: Request that c4444 restrict processing of your data in certain circumstances;
• Right to Data Portability: Request your Account and transaction data in a structured, machine-readable format;
• Right to Object: Object to processing based on legitimate interests, including direct marketing;
• Right to Withdraw Consent: Withdraw consent for any processing that is based on consent (marketing communications, non-essential cookies) at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact c4444 Data Protection via the details in Section 14. c4444 will respond to verified requests within 30 calendar days. Identity verification may be required before requests are actioned.

11. Children's Privacy

c4444 is strictly prohibited to persons under 18 years of age. c4444 does not knowingly collect personal data from individuals under 18. If it is discovered that personal data has been collected from a person under 18, that data will be immediately deleted and the Account closed. Parents or guardians who believe their child has created a c4444 Account should contact support immediately.

12. International Data Transfers

c4444's infrastructure and some of its service providers operate across multiple jurisdictions. Personal data may therefore be transferred to and processed in countries outside of Pakistan. Where such transfers occur, c4444 ensures that appropriate safeguards are in place — including standard contractual clauses, binding corporate rules or adequacy decisions — to ensure that your data receives a level of protection equivalent to that applicable under the legal framework governing c4444's operations.

13. Changes to This Policy

c4444 reserves the right to update this Privacy Policy at any time. Material changes will be notified to registered Account holders via the email address on file at least 14 days before taking effect, or via an in-platform notification upon login. The date of the most recent revision is displayed at the top of this Policy. Continued use of c4444 following notification of a material change constitutes your acceptance of the revised Policy.

14. Contact and Complaints

For all privacy-related enquiries, data subject rights requests, or complaints regarding how c4444 handles your personal data, please contact us via:

• Live Chat: Available 24/7 from within the c4444 Platform — select "Privacy / Data Request" from the support category menu;
• Email: [email protected] with the subject line "Privacy Request — [your registered email address]".

c4444 aims to acknowledge all privacy requests within 3 business days and to provide a substantive response within 30 calendar days. If you are not satisfied with c4444's response to a privacy complaint, you may escalate the matter to the relevant data protection authority or the dispute resolution mechanism available under c4444's licensing framework.