dm444 Privacy Policy — How We Safeguard Your Personal Data
At dm444, your privacy is treated with the same seriousness as the security of your funds. This Privacy Policy explains exactly what personal information we collect when you use the dm444 platform, the lawful basis on which we process it, how long we retain it, and the rights you hold as a data subject. Transparency is not optional — it is a core commitment of dm444 to every player in Bangladesh and beyond.
Our Core Commitments
Privacy at a Glance
These cards summarise dm444's key privacy principles. They are not a substitute for the full policy — please read the complete document in the sections below.
Minimal Data Collection
dm444 collects only the personal data that is strictly necessary to operate your account, verify your identity, process transactions, and comply with applicable legal obligations. We do not collect data speculatively or sell it to advertisers.
Industry-Grade Security
All data transmitted between your device and dm444 servers is protected by TLS/SSL encryption. Sensitive fields such as passwords and payment details are stored using one-way hashing and tokenisation respectively. Access to your data is restricted to authorised personnel only.
Your Rights as a Data Subject
You have the right to access, correct, port, and request deletion of your personal data held by dm444, subject to legal retention requirements. All data rights requests are handled by our dedicated support team and acknowledged within 5 business days.
No Unauthorised Third-Party Sharing
dm444 does not sell, rent, or trade your personal data to third parties for marketing purposes. Data is shared with third parties only where required to deliver our services (e.g., payment processors, game providers) or as required by law.
Transparent Cookie Use
dm444 uses cookies and similar technologies to keep you logged in, remember your preferences, and improve platform performance. Our Cookie Policy (included within this document) explains every category of cookie in use and how you can manage your preferences.
Marketing You Can Control
dm444 sends promotional communications only to players who have opted in. You can withdraw your marketing consent at any time via your Account settings or by contacting our support team. Withdrawal of marketing consent does not affect transactional communications related to your account.
Introduction
This Privacy Policy ("Policy") describes how dm444 ("dm444", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of individuals ("you", "your", "Player") who register an account with, access, or use the dm444 online betting and casino platform at dm444.io (the "Platform").
dm444 takes the privacy of its players seriously. We are committed to handling your personal data in a lawful, fair, and transparent manner. This Policy has been drafted to give you a clear and complete picture of our data practices so that you can make informed decisions about your engagement with the Platform.
This Policy should be read together with the dm444 Terms & Conditions, which govern your use of the Platform as a whole. By registering an account or continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood its contents.
Data Controller
For the purposes of this Policy, the data controller — that is, the entity that determines the purposes and means of processing your personal data — is dm444, the operator of the dm444.io platform. dm444 is responsible for ensuring that your personal data is processed in compliance with this Policy and applicable data protection law.
If you have any questions about this Policy, wish to exercise any of the rights described in Section 9, or need to report a potential data protection concern, please contact dm444 using the details provided in Section 14 of this Policy.
Personal Data We Collect
dm444 collects personal data in three principal ways: information you provide to us directly, information generated automatically through your use of the Platform, and information received from third parties in connection with identity verification and payment processing. The categories of data we collect are described in detail below.
3.1 Registration Data
When you create a dm444 account, we collect the following information you provide:
- Full legal name
- Date of birth (to verify you are 21 years of age or older)
- Residential address (including city, district, and postcode)
- Email address
- Mobile phone number (used for OTP verification and WhatsApp support)
- Username and hashed password
- Preferred language and currency (BDT by default)
3.2 Identity Verification (KYC) Data
To comply with anti-money-laundering obligations and to verify that players meet the minimum age requirement, dm444 may request the following documents:
- National Identity Card (NID) — front and back
- Passport (biographical page)
- Birth registration certificate
- Proof of address (utility bill, bank statement — dated within 3 months)
- Selfie photograph for liveness verification
- Proof of payment method ownership (e.g., screenshot of bKash or Nagad account registered in your name)
3.3 Transaction Data
Every financial transaction conducted through your dm444 account generates a record, including:
- Deposit amounts, timestamps, payment method used (bKash, Nagad, Rocket, Upay), and transaction reference numbers
- Withdrawal amounts, timestamps, destination payment account, and processing status
- Bonus credits applied, wagering activity against bonus balance, and bonus expiry events
- Account balance history and running ledger entries
3.4 Gaming & Betting Activity Data
dm444 records all wagering activity conducted on the Platform, including:
- Sports betting selections, stake amounts, odds accepted, and settlement outcomes
- Casino game sessions (game title, provider, duration, bet amounts, win/loss outcome)
- Crash game rounds (stake, cashout multiplier, outcome)
- Session start and end times, total session duration, and frequency of play
This data is used primarily for account management, responsible gaming monitoring, fraud detection, and dispute resolution. It is not used to profile you for third-party advertising purposes.
3.5 Technical & Device Data
When you access the Platform, our servers automatically collect certain technical information, including:
- IP address
- Browser type, version, and language settings
- Device type (desktop, mobile, tablet), operating system, and screen resolution
- Pages visited, click paths, and time spent on each page
- Referral source (if you arrived via a search engine or another web page)
- Error logs and crash reports
3.6 Communications Data
If you contact dm444 via live chat, support email, or WhatsApp, we retain records of those communications, including:
- The content of messages exchanged with our support team
- Timestamps of communications
- Any attachments (e.g., screenshot evidence) submitted as part of a support enquiry or dispute
How We Use Your Personal Data
dm444 uses the personal data it collects for the following purposes:
| Purpose | Data Categories Used |
|---|---|
| Account creation and management — registering your account, maintaining your profile, and enabling login | Registration data, technical data |
| Age and identity verification (KYC) — confirming you are 21+ and the account holder is who they claim to be | Registration data, KYC documents |
| Payment processing — facilitating deposits and withdrawals via bKash, Nagad, Rocket, and Upay | Transaction data, registration data |
| Platform provision — delivering sports betting markets, casino games, crash games, and other features | Gaming data, technical data |
| Fraud prevention and security — detecting and preventing unauthorised access, bonus abuse, and financial crime | Technical data, transaction data, gaming data |
| Responsible gaming — monitoring for signs of problem gambling and administering self-exclusion or limit requests | Gaming data, transaction data, registration data |
| Customer support — responding to enquiries, resolving disputes, and processing complaints | Communications data, registration data, transaction data |
| Legal and regulatory compliance — meeting anti-money-laundering, record-keeping, and other legal obligations | All categories as required |
| Marketing communications — sending promotional offers, bonus alerts, and platform updates to players who have opted in | Registration data, gaming data (for personalisation) |
| Platform improvement — analysing usage patterns to improve user experience, fix bugs, and prioritise new features | Technical data, gaming data (aggregated/anonymised) |
Legal Basis for Processing
dm444 processes your personal data only where a valid legal basis exists. The legal bases on which we rely are as follows:
- Performance of a contract: The majority of our processing activities — including account management, payment processing, and platform delivery — are necessary for dm444 to perform its contractual obligations to you under the Terms & Conditions.
- Legal obligation: Certain processing activities, including KYC verification, transaction record-keeping, and anti-money-laundering checks, are required by applicable law. dm444 must carry out this processing regardless of your consent.
- Legitimate interests: dm444 processes certain data on the basis of its legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and aggregate analytics. Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and freedoms.
- Consent: Where dm444 processes your data for purposes that are not strictly necessary for contractual or legal reasons — most notably, direct marketing communications — we rely on your freely given, informed, and specific consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Data Sharing and Disclosure
dm444 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share your data only in the limited circumstances described below.
6.1 Service Providers
dm444 works with carefully selected third-party service providers who process data on our behalf, subject to contractual obligations that require them to protect your data and use it only for the specific purpose for which it was shared. These include:
- Payment processors: bKash, Nagad, Rocket, and Upay receive transaction data necessary to execute your deposit and withdrawal instructions.
- Game providers: Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and other certified studios receive your Player ID and session data to deliver game content and settle game rounds.
- KYC / identity verification providers: Where dm444 uses a third-party KYC platform to process identity documents, that provider receives the document images and biometric data you submit.
- Cloud infrastructure and hosting providers: Our servers and databases are hosted on secure cloud infrastructure. The hosting provider has access to server-level data but is contractually prohibited from accessing or using your personal data for any purpose other than providing infrastructure services.
- Customer support platforms: If dm444 uses a third-party live chat or ticketing system, support conversation data is processed by that provider subject to a data processing agreement.
6.2 Legal and Regulatory Disclosure
dm444 may disclose your personal data to law enforcement agencies, regulatory authorities, courts, or other public bodies where required to do so by applicable law, court order, or in connection with an investigation into suspected financial crime, fraud, or match-fixing. dm444 will notify you of such a disclosure where it is legally permitted to do so.
6.3 Business Transfers
In the event that dm444 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, player personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, we will notify affected players via the email address registered to their account prior to any transfer and will ensure the receiving entity is bound by data protection obligations no less protective than those in this Policy.
6.4 Aggregated & Anonymised Data
dm444 may share aggregated or anonymised statistical data — from which individual players cannot be identified — with business partners, analytics providers, or for publication in promotional materials. Such data does not constitute personal data and is not subject to this Policy.
Cookies and Tracking Technologies
dm444 uses cookies — small text files stored on your device — and similar tracking technologies (including web beacons and local storage) to operate and improve the Platform. The categories of cookies in use on dm444.io are as follows:
| Cookie Category | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Essential for the Platform to function. Includes session management, login state, and security tokens (CSRF protection). Cannot be disabled. | No — essential |
| Functional / Preference | Remembers your preferences such as language settings, game lobby layout, and responsible gaming limit display. Improves your experience across sessions. | Yes |
| Performance / Analytics | Collects anonymised usage data (pages visited, time on site, error events) to help us identify performance issues and improve the Platform. Data is processed in aggregate only. | Yes |
| Marketing / Retargeting | Used only where you have explicitly opted in to marketing communications. May track game interactions to personalise promotional offers delivered via email or in-Platform notifications. | Yes — opt-in only |
You can manage your cookie preferences at any time via your browser settings. Note that disabling strictly necessary cookies will prevent the Platform from functioning correctly and may prevent you from logging into your account.
Data Retention
dm444 retains your personal data only for as long as is necessary for the purposes for which it was collected, subject to any longer retention periods required by law. The following retention schedule applies:
- Account registration data: Retained for the lifetime of your account plus 5 years following account closure, to meet record-keeping and legal obligations.
- KYC documentation: Retained for 5 years from the date of verification or from the date of account closure, whichever is later, in accordance with anti-money-laundering regulations.
- Transaction records: Retained for 5 years from the date of each transaction.
- Gaming and betting activity logs: Retained for 3 years from the date of each session for responsible gaming and fraud review purposes.
- Customer support communications: Retained for 2 years from the date of the last communication in a given support thread, unless the communication forms part of an ongoing dispute or legal matter.
- Marketing consent records: Retained for the duration of your account plus 1 year, to evidence the lawful basis for any marketing communications sent.
- Technical / server logs: Retained for 90 days in rolling logs; aggregated analytics data may be retained for up to 2 years in anonymised form.
At the end of the applicable retention period, personal data is securely deleted or anonymised. Where anonymisation is applied, the resulting dataset no longer constitutes personal data and falls outside the scope of this Policy.
Your Data Rights
As a data subject, you hold a number of rights in relation to your personal data held by dm444. These rights are described below. To exercise any of these rights, please contact our support team using the details in Section 14. dm444 will acknowledge your request within 5 business days and provide a substantive response within 30 days, extendable to 60 days for complex requests where notice is given.
- Right of Access: You have the right to request a copy of the personal data dm444 holds about you, along with information about how it is used. This is sometimes called a Subject Access Request (SAR).
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update many of your account details directly through the Platform's account settings.
- Right to Erasure ("Right to be Forgotten"): You may request that dm444 delete your personal data. This right is not absolute — it does not apply where dm444 is required to retain data by law (e.g., KYC records required under anti-money-laundering regulations) or where retention is necessary for the establishment, exercise, or defence of a legal claim.
- Right to Restriction of Processing: You may request that dm444 restrict the processing of your data in certain circumstances, for example while a rectification request is under review or where you have objected to processing on the basis of legitimate interests.
- Right to Data Portability: Where processing is carried out on the basis of consent or contract and is automated, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit it to another controller where technically feasible.
- Right to Object: You have the right to object to processing carried out on the basis of dm444's legitimate interests at any time. dm444 will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out before the withdrawal.
- Right to Lodge a Complaint: If you are dissatisfied with dm444's handling of your personal data or with our response to a data rights request, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.
Children's Privacy
The dm444 platform is strictly intended for adults aged 21 and over. dm444 does not knowingly collect personal data from any individual under the age of 21. If you are under 21, you must not register an account, deposit funds, or place any wager on the Platform.
If dm444 becomes aware that personal data has been collected from a person under the age of 21 without verified parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe that a minor may have registered an account on our Platform, please contact our support team immediately using the details in Section 14.
Security Measures
dm444 implements a multi-layered security framework to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security measures include:
- TLS/SSL Encryption: All data in transit between your browser or mobile device and dm444's servers is encrypted using industry-standard TLS protocols. Look for the padlock symbol and "https://" prefix in your browser address bar.
- Password Hashing: Passwords are never stored in plain text. dm444 uses a strong one-way cryptographic hashing algorithm with salting to store password data, ensuring that even an internal data breach cannot expose your password.
- Payment Tokenisation: dm444 does not store raw payment account numbers. Mobile banking transaction references are tokenised and stored in a format that cannot be used to initiate transactions without authorisation from the payment provider.
- OTP Authentication: Sensitive account actions — including login from an unrecognised device, password reset, and withdrawal confirmation — require one-time password (OTP) verification via your registered mobile number.
- Access Controls: Access to personal data within dm444's internal systems is restricted to staff members who require it to perform their role. Access is governed by role-based permissions and is subject to audit logging.
- Penetration Testing: dm444's platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.
- Data Minimisation: Systems are designed to collect and store only the minimum personal data necessary for each process, reducing the volume of data at risk in the event of a security incident.
Despite these measures, no online system can guarantee absolute security. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, dm444 will notify you without undue delay in accordance with its incident response procedure.
Third-Party Links
The dm444 Platform may contain links to third-party websites — for example, links to payment provider portals (bKash, Nagad, Rocket, Upay) or to game providers' own informational pages. These third-party sites are not operated by dm444. When you follow a link to an external website, dm444's Privacy Policy ceases to apply, and you are subject to the privacy policy of that third-party website.
dm444 has no control over the content or data practices of third-party websites and accepts no responsibility or liability in connection with them. We recommend that you review the privacy policy of any website you visit before providing personal data.
Changes to This Privacy Policy
dm444 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, updates to applicable law, or improvements to our platform. The date at the top of this Policy will always reflect when it was last updated.
Where changes are material — meaning they significantly affect how your personal data is used or what rights you have — dm444 will notify you via the email address registered to your account and/or via a prominent in-Platform notice prior to the changes taking effect. For non-material changes (such as typographical corrections or minor clarifications), the updated Policy will be published without advance notice and will take effect upon publication.
We encourage you to review this Policy periodically so that you remain informed about how dm444 protects your privacy. Continued use of the Platform following publication of a revised Policy constitutes your acknowledgment of the updated version.
Contact Us
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a privacy concern, please contact the dm444 data team using the details below. All privacy-related communications must be submitted in English and must include your registered account username to allow us to locate your records.
- Support Email: [email protected] (plain text — not a clickable link)
- WhatsApp Support: +880 1700 000 444
- Live Chat: Available 24/7 via the Platform
- Email & WhatsApp Hours: 08:00–02:00 BST (UTC+6) daily
When submitting a Subject Access Request or any other formal data rights request, please include your full name as registered on your account, your registered email address, and a brief description of the request. dm444 will acknowledge your request within 5 business days.
Ready to Play at dm444?
Your data is protected, your identity is secure, and your experience is our priority. Explore everything dm444 has to offer — from live cricket betting to premium casino games.