md44 Privacy Policy — How We Protect Your Data

1. Introduction

md44 ("we", "us", "the Platform") is committed to protecting the privacy and security of every player who uses the md44 website and services at md44.ws. This Privacy Policy ("Policy") explains how we collect, use, store, share and protect personal information relating to registered players, visitors and any other individuals who interact with the Platform. Please read this Policy carefully. By registering an Account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy applies to all personal data that md44 processes in connection with the operation of the Platform, regardless of the channel through which the data was collected — whether through Account registration, gameplay, payment transactions, customer support interactions, or your general browsing of md44.ws. This Policy should be read alongside the md44 Terms and Conditions, which govern the contractual relationship between you and md44.

2. Information We Collect

md44 collects personal information across six broad categories, as described below. We collect only the information that is necessary for the purposes stated in this Policy:

3. How We Use Your Information

md44 uses the personal information we collect for the following specific purposes:

• Account administration: To create and manage your Account, verify your identity and age, process registration requests, and maintain the integrity and security of your Account throughout its lifetime on the Platform.
• Payment processing: To accept deposits from and process withdrawals to your registered payment methods, including bKash, Nagad, Rocket, Upay and Bangladeshi bank accounts, and to maintain accurate financial records for each transaction.
• Legal and regulatory compliance: To fulfil our obligations under applicable anti-money-laundering regulations, age-verification requirements and any other legal or regulatory obligations that apply to the operation of an online gaming platform serving the Bangladesh market.
• Service delivery and improvement: To provide the games, betting markets and promotional offers available on the Platform, to personalise your experience where permitted, and to analyse aggregated usage data to improve Platform performance, game selection and overall service quality.
• Customer support: To respond to your enquiries, resolve account issues, process responsible gaming requests (such as self-exclusion or deposit limits), investigate complaints and communicate with you about your Account.
• Fraud prevention and security: To detect, investigate and prevent fraudulent activity, money laundering, identity theft, bonus abuse, multi-accounting and any other prohibited conduct that could harm the Platform or other players.

4. Legal Basis for Processing

md44 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity involved:

• Contractual necessity: Processing that is necessary for md44 to perform its obligations under the Terms and Conditions you accepted at registration — including Account management, payment processing and delivery of the gaming services you requested.
• Legal obligation: Processing that md44 is required to carry out under applicable law — including KYC identity and age verification, transaction record-keeping for anti-money-laundering purposes, and reporting to competent authorities where required.
• Legitimate interests: Processing carried out in md44's legitimate interests where those interests are not overridden by your privacy rights — including fraud detection, security monitoring, abuse prevention and internal analytics used to improve the Platform.
• Consent: Where we rely on your consent as the legal basis for processing — for example, for optional marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal of consent does not affect your ability to use the Platform.

5. How We Share Your Information

md44 does not sell or rent personal data to any third party. We share personal information only in the following limited and controlled circumstances:

• Payment service providers: We share the minimum payment information necessary with bKash, Nagad, Rocket, Upay and other approved Bangladesh payment partners to process your deposits and withdrawals. These providers are contractually bound to handle your data securely and to use it only for the transaction-processing purpose for which it was shared.
• Game providers: Technical session data is passed to certified game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi) to deliver the requested game title. This data is limited to what is required to initialise and run the game session and does not include your full personal profile.
• Legal and regulatory authorities: md44 may disclose personal information to law enforcement agencies, financial intelligence units or other competent authorities where required to do so by applicable law or pursuant to a valid legal process such as a court order or official government request.
• Fraud prevention and KYC partners: We may share identity verification data with approved third-party KYC and anti-fraud service providers to assist in the verification of player identity and age. These providers are contractually prohibited from using your data for any purpose other than the verification task for which it was shared.

6. Cookies and Tracking Technologies

md44.ws uses cookies and similar session-tracking technologies to operate the Platform correctly, maintain your login session, remember your language preference and collect the technical data described in Section 2. Cookies are small text files stored in your browser that enable the Platform to recognise your device across pages within the same session.

The cookies used by md44 fall into three categories:

• Strictly necessary cookies: These are essential for the Platform to function. They include session authentication cookies that keep you logged in, security cookies that prevent cross-site request forgery, and cookies that remember your language preference. These cookies cannot be disabled without breaking core Platform functionality.
• Performance and analytics cookies: These collect anonymised, aggregated data about how players use md44.ws — which pages are visited most frequently, how long players spend on each section, and which game categories attract the most interest. This data is used exclusively to improve Platform design and performance.
• Functional cookies: These store your preferences to enhance your experience — such as your preferred language setting or whether the bottom navigation has been previously dismissed. Functional cookies do not track your activity across external websites and are not used for advertising.

7. Data Retention

md44 retains personal data only for as long as it is necessary to fulfil the purposes described in this Policy or as required by applicable law. The following retention periods apply: Account data (identity, contact and KYC documents) is retained for the lifetime of the Account and for a minimum of 5 years after Account closure to satisfy anti-money-laundering record-keeping obligations. Transaction data is retained for a minimum of 5 years from the date of each transaction. Technical and session data is retained for up to 12 months. Support correspondence is retained for 3 years from the date of the last interaction.

When personal data is no longer required for any of the purposes described in this Policy and no legal retention obligation applies, md44 will securely delete or anonymise the data so that it can no longer be attributed to an identifiable individual. Anonymised, aggregated data derived from your usage may be retained indefinitely for Platform analytics and improvement purposes.

8. Data Security

md44 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration or disclosure. These measures include SSL/TLS encryption for all data transmitted between your device and md44.ws, encrypted storage of sensitive personal data at rest, strict access controls that limit employee access to personal data on a need-to-know basis, regular security reviews of systems handling personal data, and secure data disposal procedures when retention periods expire.

9. Your Rights Over Your Personal Data

As a player on md44 you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team at [email protected] with your registered mobile number and a clear description of your request:

• 1 Right of Access —You may request a copy of the personal data md44 holds about you. We will provide this information within a reasonable timeframe, subject to identity verification.
• 2 Right of Rectification —If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You may update certain information directly through your Account profile.
• 3 Right of Erasure —You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and no other legal basis for processing applies, or where the data has been processed unlawfully. This right is subject to our legal retention obligations — we may be required to retain certain data even after Account closure.
• 4 Right to Restrict Processing —You may ask md44 to restrict the processing of your personal data in certain circumstances — for example, while we investigate a rectification request or a complaint about the lawfulness of our processing.
• 5 Right to Object —Where md44 processes your personal data on the basis of legitimate interests, you have the right to object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights, or the processing is necessary for the establishment, exercise or defence of legal claims.

10. Children and Minors

md44 is strictly an adults-only platform and does not knowingly collect personal data from any individual under the age of 21. If md44 becomes aware that personal data has been collected from a person under the age of 21 — whether through Account registration, a support interaction or any other means — that data will be deleted immediately, the associated Account will be closed, and any Funds deposited will be returned to the originating payment method. If you are a parent or guardian and believe that a person under 21 in your care has registered an Account on md44, please contact us immediately at [email protected] so we can take prompt action.

11. Changes to This Privacy Policy

md44 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, updates to applicable law, or improvements to the Platform. When we make material changes — meaning changes that significantly affect how we collect, use or share your personal data — we will notify registered players via the mobile number or email address registered on their Account before the changes take effect.

Non-material changes (such as clarifications to existing clauses, corrections of typographical errors or minor structural reformatting) may take effect upon publication without individual notice. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. Continued use of the Platform following any update to this Policy constitutes your acceptance of the revised Policy.

12. Contact and Data Enquiries

If you have any questions, concerns or requests relating to this Privacy Policy or the way md44 handles your personal data, please contact our support team. We are available 24 hours a day, 7 days a week and will respond to all data-related enquiries promptly.

Email: [email protected]