Your Privacy Matters at so444
so444 is committed to protecting the personal data of every player on our platform. This Privacy Policy explains exactly what information we collect, why we collect it, how we use it, who we share it with, and what rights you hold as a data subject. We believe you deserve complete transparency about how your data is handled — read this document in full before creating your account.
All data transmitted between your device and so444 is protected using industry-standard SSL (TLS 1.2+) encryption. Your account credentials, payment details and personal information are secured in transit at all times.
so444 does not sell, rent or trade your personal data to any third party for marketing purposes. Your information is shared only where strictly necessary to deliver our services or comply with legal obligations.
You have the right to access, correct, and request deletion of your personal data held by so444. Submit a data subject request at any time by emailing [email protected] and we will respond within five business days.
so444 uses cookies to keep your session active, personalise your experience and analyse platform performance. We never use cookies to track your activity on other websites or sell behavioural data to advertisers.
Player records are stored on encrypted servers with access controls restricted to authorised so444 personnel only. Regular security audits and penetration tests are performed to identify and remediate vulnerabilities.
so444 retains personal data only for as long as is necessary for the purposes described in this policy, or as required by applicable anti-money laundering and financial regulations in Bangladesh. Data is securely deleted thereafter.
Information We Collect
so444 collects personal data that is necessary to provide our online casino and sports betting services to players in Bangladesh. We collect information in three principal ways: information you provide directly when registering or transacting, information generated automatically by your use of the platform, and information received from trusted third-party partners such as payment processors and identity verification providers.
Information You Provide Directly:
- Registration data: Full legal name, date of birth, residential address, mobile phone number (used for SMS OTP), and email address.
- Identity verification documents: Bangladeshi National Identity Card (NID) number or image, passport details, or driving licence details — collected when account verification (KYC) is triggered.
- Payment information: bKash account number, Nagad account number, Rocket account number, Upay account number, bank account details, or Visa/Mastercard card number (last four digits only — full card numbers are handled directly by our payment processor and are never stored on so444 servers).
- Communications: Any messages, complaints, support tickets or other correspondence you send to the so444 support team via email or live chat.
- Responsible Gaming preferences: Self-exclusion requests, deposit limit settings, time-out requests and any other responsible gaming controls you activate on your account.
Information Collected Automatically:
- Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
- Usage and activity data: Pages visited, games played, bets placed, session duration, login timestamps, transaction history, bonus claims and redemptions.
- Location data: Approximate geographic location derived from your IP address (city/district level — so444 does not access GPS data from your device without explicit permission).
- Cookie and tracking data: Session identifiers, preference cookies, and analytics data as described in the Cookies section of this policy.
Information From Third Parties:
- Payment processors: Transaction confirmation status, payment reference numbers, and fraud risk signals from bKash, Nagad, Rocket, Upay and banking partners.
- Identity verification partners: Verification status results (pass/fail/refer) from KYC service providers. so444 does not receive raw biometric data.
- Game providers: Game session records and RNG outcomes from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi as required for dispute resolution and fair play auditing.
so444 may request your NID, passport or driving licence to verify your identity. Documents are processed securely and retained only for the period required by applicable AML regulations. We do not share verification documents with third parties beyond our licensed KYC provider.
Full card numbers are never stored on so444 servers. Card transactions are tokenised by our payment processor. bKash, Nagad and Rocket account numbers are stored in encrypted format and used only to process your authorised transactions.
How We Use Your Data
so444 processes your personal data for specific, lawful purposes. We do not use your data for any purpose beyond those listed below without first obtaining your explicit consent or having a separate lawful basis to do so.
| Purpose | Data Used | Lawful Basis |
|---|---|---|
| Account creation and management | Name, email, mobile number, date of birth, address | Contract performance |
| Identity verification (KYC) | NID, passport, driving licence | Legal obligation (AML compliance) |
| Processing deposits and withdrawals | Payment account details, transaction history | Contract performance |
| Fraud prevention and security | IP address, device data, login history, payment data | Legitimate interest |
| Customer support | Communications, account data, transaction records | Contract performance |
| Responsible Gaming enforcement | Account activity, self-exclusion preferences, deposit limits | Legal obligation / legitimate interest |
| Bonus and promotion management | Account activity, wagering history, bonus redemptions | Contract performance |
| Platform analytics and improvement | Usage data, session data, device data (anonymised) | Legitimate interest |
| Marketing communications | Email address, mobile number, preference data | Consent (opt-in required) |
| Legal and regulatory compliance | All data as required by applicable authorities | Legal obligation |
Marketing Communications: so444 will only send you promotional emails or SMS messages if you have explicitly opted in during registration or via your account settings. You may withdraw consent to receive marketing communications at any time by emailing [email protected] or updating your notification preferences in your account settings. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before you withdrew consent.
You can opt out of marketing emails and SMS messages at any time. Email [email protected] or update your account notification settings. We will process your opt-out request within two business days.
Every data processing activity at so444 is tied to a clear lawful basis — contract performance, legal obligation, legitimate interest, or your explicit consent. We do not process data speculatively or without justification.
Data Sharing & Third Parties
so444 does not sell, rent, or otherwise commercially transfer your personal data to third parties. We share data only in the limited circumstances described below, and only with parties who are contractually bound to protect your information to an equivalent standard.
Categories of third parties with whom so444 may share data:
- Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa and Mastercard receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are subject to Bangladesh Bank regulations.
- Identity verification (KYC) providers: so444 uses licensed third-party KYC service providers to verify player identities. These providers receive the document images or identity data you submit and return a verification result to so444. They are contractually prohibited from using your data for any other purpose.
- Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi receive a pseudonymous player session identifier (not your full name or NID) to facilitate game delivery and maintain game logs for RNG audit purposes.
- Cloud infrastructure providers: so444's platform is hosted on secure cloud infrastructure. Our hosting providers process server data subject to strict data processing agreements and do not access player data for their own purposes.
- Legal and regulatory authorities: so444 will disclose personal data to government agencies, financial intelligence units, law enforcement bodies or courts in Bangladesh where required to do so by law, by a valid court order, or where so444 has a good-faith belief that disclosure is necessary to prevent fraud, money laundering or harm to persons.
- Business successors: In the event of a merger, acquisition or sale of all or substantially all of so444's assets, player data may be transferred to the successor entity, which will be bound by the terms of this Privacy Policy or required to notify players of any material changes before processing their data differently.
International Data Transfers: Where so444 uses service providers whose servers are located outside Bangladesh, we ensure that appropriate data transfer safeguards are in place — including contractual clauses that require those providers to protect your data to the same standard as described in this policy.
so444 does not sell your personal data. Data is shared only with service providers who directly support the delivery of our platform — payment partners, KYC providers, game studios and cloud infrastructure. Each is bound by contractual data protection obligations.
so444 may be required to disclose player data to Bangladesh financial intelligence or law enforcement authorities under valid legal process. We will notify affected players where legally permitted to do so prior to any such disclosure.
Data Retention
so444 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, unless a longer retention period is required by applicable law — particularly anti-money laundering (AML) regulations which mandate that financial transaction records and identity verification data be retained for a specified number of years following account closure.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML regulatory requirement |
| KYC / identity documents | 5 years post-account closure | AML / legal obligation |
| Transaction records | 5 years post-transaction | AML / financial audit |
| Game and bet history | 3 years post-account closure | Dispute resolution |
| Support communications | 2 years from last interaction | Dispute resolution / quality assurance |
| Marketing preferences | Until opt-out + 1 year | Proof of consent |
| Analytics data (anonymised) | Up to 24 months, then deleted | Platform improvement |
| Session and login logs | 12 months | Security monitoring |
Upon expiry of the applicable retention period, so444 will securely delete or permanently anonymise the relevant personal data so that it can no longer be associated with an identifiable individual. Secure deletion means overwriting or cryptographic erasure such that data cannot be reconstructed.
When retention periods expire, so444 permanently deletes or anonymises your data using secure deletion methods. If you close your account, we will begin the deletion process for data not subject to mandatory AML retention requirements within 30 days of closure confirmation.
Your Privacy Rights
As a so444 player, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, email [email protected] with the subject line "Data Subject Request" and include your registered username and a description of your request. so444 will acknowledge your request within two business days and provide a full response within five business days.
- Right of access: You may request a copy of all personal data so444 holds about you, including a description of how it is used and with whom it is shared.
- Right to rectification: If any personal data held by so444 is inaccurate or incomplete, you may request that it be corrected. Where the inaccuracy relates to KYC-verified data (e.g., your legal name), updated verification documents will be required.
- Right to erasure: You may request deletion of your personal data. so444 will honour this request except where retention is required by law (e.g., AML-mandated financial records). Erasure requests will result in permanent account closure.
- Right to restrict processing: You may request that so444 restrict the processing of your data in certain circumstances — for example, while a rectification request is being resolved.
- Right to data portability: You may request your personal data in a structured, machine-readable format (CSV or JSON) for transfer to another service provider.
- Right to object to marketing: You may object to processing of your data for direct marketing at any time. Processing for this purpose will cease immediately upon receipt of your objection.
- Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.
Identity Verification for Data Requests: To protect your privacy, so444 will verify your identity before processing any data subject request. You may be asked to confirm your registered mobile number, email address or provide a copy of your NID before we release or delete your data. This is a security measure, not a barrier to exercising your rights.
Email [email protected] with subject "Data Subject Request". Include your username and the specific right you wish to exercise. We respond within 5 business days (Bangladesh Standard Time, UTC+6).
Request a copy of your personal data in CSV or JSON format at any time. Portable data exports include account details, transaction history and responsible gaming preference records held by so444.
Data Security
so444 takes the security of your personal data seriously and employs multiple technical and organisational measures to protect it against unauthorised access, disclosure, alteration or destruction. Our security programme includes the following controls:
- Transport encryption: All data transmitted between your browser or app and so444 servers is encrypted using TLS 1.2 or TLS 1.3. HTTP connections are automatically redirected to HTTPS.
- At-rest encryption: Personal data stored in our databases is encrypted at rest using AES-256 encryption. Encryption keys are managed using a dedicated key management service with role-based access controls.
- Access controls: Access to player data is restricted to so444 personnel whose job role requires it. Access rights are reviewed quarterly and revoked immediately upon staff departure or role change.
- Password security: Player passwords are stored as salted cryptographic hashes. Even so444 technical staff cannot view your plain-text password. We recommend using a unique, complex password and enabling SMS OTP two-factor authentication.
- Security monitoring: so444's platform is monitored continuously for suspicious activity including unusual login patterns, large withdrawal requests from new devices, and account takeover indicators. Anomalies trigger automated alerts for manual review.
- Vulnerability management: so444 conducts regular security assessments including penetration testing. Identified vulnerabilities are triaged by severity and remediated within defined SLA timelines.
- Incident response: so444 maintains a documented incident response plan. In the event of a data breach that poses a risk to player rights, affected players will be notified as soon as is practically possible — typically within 72 hours of so444 becoming aware of the breach.
Your Responsibilities: While so444 implements robust security measures on our end, the security of your account also depends on actions you take. You are responsible for keeping your login credentials confidential, not sharing your account with third parties, logging out of so444 when using shared devices, and notifying [email protected] immediately if you suspect unauthorised access to your account. so444 will never ask you to share your password via email, SMS or live chat.
If a data breach occurs that poses a risk to your rights, so444 will notify affected players within 72 hours of becoming aware. Notifications will be sent to your registered email address and displayed as an in-platform alert when you next log in.
so444 strongly recommends enabling SMS OTP two-factor authentication on your account. This prevents unauthorised logins even if your password is compromised. Enable 2FA in your account security settings after logging in.
Contact & Complaints
If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about how so444 has handled your personal data, please contact our support team in the first instance:
- Email: [email protected] (subject line: "Privacy Enquiry" or "Data Subject Request")
- Response time: Acknowledgement within 2 business days; full response within 5 business days (Bangladesh Standard Time, UTC+6)
- Language: English-speaking support agents are available 24 hours a day, 7 days a week
Complaints Process: If you are not satisfied with so444's response to a privacy enquiry or data subject request, you may escalate your complaint by emailing [email protected] with the subject line "Privacy Complaint Escalation". A senior member of the so444 team will review your case within 10 business days and provide a final written response.
Changes to This Policy: so444 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the services we offer. When material changes are made, we will notify registered players by email to their registered address and post a prominent notice on the platform at least seven days before the updated policy takes effect. The effective date at the top of this page always reflects the version currently in force. We encourage you to review this page periodically. Your continued use of so444 after the effective date of any updated Privacy Policy constitutes acceptance of the revised terms.
18+ Age Requirement: so444 is strictly an adults-only platform. We do not knowingly collect or process personal data from individuals under the age of 18. If so444 discovers that personal data has been submitted by a person under 18, that account will be closed immediately and all associated personal data will be deleted without delay. If you believe a minor has registered on so444, please contact [email protected] immediately.
Our English-speaking support team is available around the clock. For privacy-related enquiries, email [email protected] with the subject "Privacy Enquiry". We aim to provide a full response within 5 business days (Bangladesh Standard Time, UTC+6).
When this Privacy Policy is materially updated, registered players are notified by email at least 7 days before changes take effect. The effective date at the top of this page always shows the version currently in force. Bookmark this page for easy reference.
Our English-speaking support team is available 24/7 to address any privacy or data protection questions. You can also explore our full legal documentation, browse our games, or log in to manage your account privacy settings. 18+ only — please play responsibly.