xk444 Privacy Policy

xk444 operates the online casino and sports betting platform accessible at xk444.io. For the purposes of this Privacy Policy, xk444 acts as the data controller — meaning we determine the purposes and means by which your personal data is processed. All references to "xk444", "we", "us", or "our" in this Policy refer to the xk444 platform and its operating entity.

xk444 is a platform designed specifically for the Bangladesh market, providing BDT-denominated sports betting, live casino, online slots, fishing games, and related entertainment services to eligible adults aged 21 and above. Our primary communication language is English.

If you have any questions about this Policy or wish to exercise any of your rights described herein, please contact us using the details provided in Section 15.

xk444 collects the following categories of personal data, depending on your interaction with the platform:

2.1 Identity & Contact Data

• Full legal name
• Date of birth
• Residential address (including city, division, and postal code)
• Email address
• Mobile phone number
• Government-issued photo identification number (National ID, passport, or driving licence)

2.2 Financial Data

• Mobile banking account identifiers (bKash, Nagad, Rocket, Upay wallet numbers)
• Bank account details (for bank transfer deposits and withdrawals)
• Card details (masked card number, card type — for Visa/Mastercard transactions)
• Deposit and withdrawal history, including amounts in BDT, timestamps, and payment method used
• Account balance and transaction records

2.3 Gaming & Betting Activity Data

• Bet placement records, including market, selection, odds, stake, and outcome
• Game session records, including game type, session duration, bet size, and result
• Bonus and promotion uptake records
• Responsible gaming tool usage (deposit limits set, self-exclusion requests, cooling-off periods)

2.4 Technical & Usage Data

• IP address
• Device type, operating system, and browser type and version
• Pages visited, features used, and time spent on the xk444 platform
• Login timestamps and session duration
• Geolocation data (country and city level, derived from IP address)
• Cookie identifiers and similar tracking data (see Section 7)

2.5 Communications Data

• Records of communications between you and xk444 customer support, including live chat transcripts, email correspondence, and any documents or evidence submitted in connection with a complaint or dispute
• Responses to surveys or feedback forms (if voluntarily completed)

xk444 collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing the identity verification (KYC) process, making a deposit or withdrawal, contacting customer support, completing a survey, or communicating with xk444 by any means.
• Automated collection: Data collected automatically when you access the xk444 platform via cookies, web beacons, server logs, and similar technologies. This includes IP address, device information, and behavioural analytics data.
• Payment processors: Confirmation and reference data provided by bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard when processing your deposit or withdrawal transactions.
• Identity verification providers: Data returned by third-party KYC and anti-fraud service providers when verifying the identity documents you submit during account verification.
• Game studio providers: Session and outcome data returned by certified game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Play'n GO, Spribe) relating to your in-game activity on the xk444 platform.

xk444 processes your personal data on one or more of the following lawful bases, depending on the specific processing activity:

Where xk444 relies on legitimate interests as the lawful basis for processing, we have assessed that those interests are not overridden by your rights and freedoms, taking into account the nature of the data, the context of the processing, and the safeguards we have in place.

xk444 uses the personal data it holds about you for the following purposes:

• Account administration: Creating and maintaining your player account, authenticating your identity when you log in, and managing your account preferences and settings.
• Service delivery: Providing access to the full range of xk444 games, sports betting markets, and platform features; processing your deposits and withdrawals; applying bonuses and promotional credits to your account.
• Identity verification: Conducting KYC checks to verify your identity and age in compliance with our internal compliance procedures and to prevent the use of the platform by persons under the age of 21.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, money laundering, bonus abuse, and other prohibited conduct as described in the xk444 Terms and Conditions.
• Responsible gaming: Monitoring account activity for signs of problematic gambling behaviour; administering deposit limits, cooling-off periods, and self-exclusion requests; complying with responsible gaming obligations.
• Customer support: Responding to your enquiries, complaints, and dispute requests; maintaining records of support interactions for quality assurance and training purposes.
• Platform analytics and improvement: Analysing aggregated usage data to understand how players use the xk444 platform, identify technical issues, and improve the user experience.
• Marketing and personalisation: Sending promotional emails and SMS messages about xk444 offers, new games, and seasonal promotions — only where you have provided explicit consent to receive such communications.
• Legal compliance: Maintaining records and fulfilling obligations required by applicable law, including responding to lawful requests from regulatory bodies or law enforcement agencies.

xk444 does not sell your personal data to any third party. We share personal data only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — shared to the extent necessary to process your requested deposits and withdrawals.
• Identity verification providers: Third-party KYC and anti-fraud service providers engaged to verify identity documents submitted during account registration or prior to withdrawal processing.
• Game studio providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Play'n GO, and Spribe — session data is exchanged with studio providers to deliver their certified game content on the xk444 platform.
• IT infrastructure and hosting providers: Cloud hosting and data centre operators who store platform data on behalf of xk444 under binding data processing agreements that prohibit any secondary use of your data.
• Legal and regulatory authorities: Where xk444 is required to disclose personal data in response to a lawful court order, regulatory direction, or law enforcement request, we will comply to the extent required by applicable law. Where legally permissible, xk444 will notify you of such a request.
• Business restructuring: In the event of a merger, acquisition, or sale of assets involving xk444, personal data held by xk444 may be transferred to the acquiring entity as part of that transaction, subject to an equivalent level of data protection.

xk444 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device by a website. xk444 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the platform to function. These cookies enable core features such as secure login sessions, account authentication, and payment processing. They cannot be disabled without rendering the platform inoperable.
• Functional cookies: Used to remember your preferences and settings, such as your preferred language, display settings, and responsible gaming configurations, so you do not need to re-enter them on every visit.
• Analytics cookies: Used to collect aggregated, anonymised information about how players navigate and use the xk444 platform. This data is used solely to identify areas for improvement and to measure the effectiveness of platform features.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and account takeover attempts by identifying unusual access patterns.

xk444 does not use third-party advertising cookies or tracking pixels that share your browsing behaviour with external advertising networks.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect the functionality of the xk444 platform and may prevent you from accessing certain features, including your account. Disabling analytics and functional cookies will not prevent you from using the platform but may reduce personalisation and affect your experience.

xk444 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or compliance obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account's active status plus a minimum of 5 years following account closure, to comply with anti-money laundering record-keeping obligations and to defend against any legal claims that may arise within the applicable limitation period.
• KYC and identity documents: Retained for a minimum of 5 years following account closure, in accordance with applicable financial compliance requirements.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Customer support communications: Retained for 3 years from the date of the last communication, unless the communication relates to an ongoing dispute or legal proceeding, in which case it is retained until the matter is fully resolved.
• Marketing consent records: Retained until consent is withdrawn plus 1 year, to demonstrate the legal basis for past marketing communications.
• Self-exclusion records: Retained indefinitely to prevent circumvention of self-exclusion by re-registration.
• Technical and analytics data: Aggregated and anonymised within 13 months of collection; individual-level technical logs are retained for no more than 12 months.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

xk444 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, accidental loss, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the xk444 platform is encrypted in transit using industry-standard SSL/TLS protocols. Look for the padlock icon and "https://" prefix in your browser's address bar when using xk444.
• Encryption at rest: Sensitive data stored in xk444's databases, including financial data, identity documents, and authentication credentials, is encrypted at rest using AES-256 or equivalent encryption standards.
• Access controls: Access to personal data held by xk444 is restricted on a strict need-to-know basis. All xk444 staff and contractors with access to personal data are subject to confidentiality obligations and receive data protection training.
• Two-factor authentication (2FA): xk444 supports and strongly recommends SMS-based 2FA for all player accounts. Internal xk444 systems require 2FA for all staff access to production data.
• Penetration testing and security audits: The xk444 platform undergoes regular independent security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident response: xk444 maintains a documented data breach response procedure. In the event of a data security incident that poses a risk to your rights and freedoms, xk444 will notify affected players promptly.

As a data subject, you have the following rights in respect of your personal data held by xk444. To exercise any of these rights, please contact us using the details in Section 15. All requests will be assessed and responded to within a reasonable period, free of charge.

• Right of access: You may request a copy of the personal data xk444 holds about you, along with information about how it is being processed.
• Right to rectification: If any personal data xk444 holds about you is inaccurate or incomplete, you may request that it be corrected. You may also update certain account details directly from your xk444 account dashboard.
• Right to erasure ("right to be forgotten"): You may request that xk444 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other lawful basis exists), or where the data has been unlawfully processed. Please note that this right is subject to overriding legal obligations — for example, xk444 is required to retain certain financial and KYC records for a minimum period of 5 years as described in Section 8.
• Right to restriction of processing: You may request that xk444 restrict the processing of your personal data in certain circumstances, for example while a dispute about the accuracy of your data is being resolved.
• Right to data portability: Where processing is based on your consent or on performance of a contract, and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including for profiling purposes. You may also object to processing for direct marketing purposes at any time, without needing to provide a reason.
• Right to withdraw consent: Where xk444 processes your data on the basis of consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

The xk444 platform is strictly for adults aged 21 and above. xk444 does not knowingly collect personal data from any individual under the age of 21. Registration on the xk444 platform by persons under 21 is prohibited, and xk444 employs age verification procedures to enforce this requirement.

If xk444 discovers that personal data has been collected from a person under the age of 21, the following steps will be taken immediately:

• The underage player's account will be permanently suspended.
• All personal data associated with the account will be deleted from active systems, subject only to the minimum legal record-keeping obligations described in Section 8.
• Any deposits made will be refunded to the original payment source. All associated bets and winnings will be voided.

The xk444 platform may display references to third-party brands such as game studio providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Play'n GO, Spribe) and payment partners (bKash, Nagad, Visa, Mastercard). These references are made for informational purposes in the context of describing available games and payment methods on the xk444 platform.

xk444 does not maintain external links to third-party websites from within its platform. xk444 is not responsible for the privacy practices or the content of any third-party organisations whose brands or services are mentioned on the xk444 platform. If you access any third-party service independently (for example, by logging into your bKash app to initiate a deposit), that interaction is governed by the third party's own privacy policy, not this Policy.

xk444 will only send you promotional communications — including emails about bonuses, new games, seasonal offers such as Eid promotions, Pohela Boishakh specials, or BPL cricket betting offers — if you have explicitly opted in to receive such communications at the time of account registration or through your account communication preferences.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "Unsubscribe" link included at the bottom of every marketing email sent by xk444.
• Updating your communication preferences in your xk444 account dashboard under "Notification Settings".
• Contacting xk444 support at [email protected] with your request to unsubscribe from all marketing communications.

Please note that withdrawing your marketing consent will not affect xk444's ability to send you service-related communications that are necessary for the administration of your account, such as deposit confirmations, withdrawal notifications, security alerts, and updates to this Privacy Policy or the xk444 Terms and Conditions.

xk444 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, xk444 will notify registered players by email to the address associated with their account at least 14 days before the amended Policy takes effect. A revised "Last Updated" date will be displayed at the top of this page whenever the Policy is modified.

We encourage you to review this Privacy Policy periodically to stay informed about how xk444 is protecting your personal data. Your continued use of the xk444 platform following the effective date of any amended Policy constitutes your acceptance of the revised terms.

If you do not agree with any changes made to this Privacy Policy, you may close your xk444 account by contacting support at [email protected] before the amended Policy takes effect. Pending closure, the previous version of the Policy will continue to apply to your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way xk444 processes your personal data, please contact us using the following details. All data-related enquiries are handled by our dedicated compliance and support team.

• Email: [email protected]
• Live Chat: Available 24/7 via the xk444 platform
• WhatsApp: +880 1700-000000
• Response Hours: All hours — Bangladesh Standard Time (BST, UTC+6)