ar44 Privacy Policy — How We Protect Your Personal Data
ar44 is committed to protecting the privacy and personal data of every player in Bangladesh. This policy explains exactly what data we collect, why we collect it, and how we keep it safe.
Last updated: January 2026
ar44 operates as a mobile-first online casino and sports betting platform serving players across Bangladesh, from Dhaka and Chittagong to Sylhet, Rajshahi, Khulna and beyond. As part of operating a regulated payment environment, ar44 is required to collect, process and store certain personal data relating to its players. This Privacy Policy sets out ar44's practices with respect to personal data in clear, plain language.
This policy covers all personal data collected through the ar44 website, mobile browser interface, customer support channels and payment processing systems. It does not cover websites or services operated by third parties that may be linked from ar44. ar44 is the data controller in respect of all personal data collected through the ar44 platform.
1. Information We Collect
ar44 collects personal data through several channels in the ordinary course of operating the platform. The categories of data ar44 collects are set out below.
When you create an ar44 account, we collect your full name, date of birth, residential address, email address, and mobile phone number. This information is required to create your account and to verify your identity as part of the KYC process.
As part of mandatory KYC verification, ar44 may collect copies of government-issued identity documents such as your National ID card, passport or driver's licence. We may also collect proof of address documents such as utility bills or bank statements, and proof of payment method ownership.
ar44 collects records of all deposits, withdrawals, wagers and game play transactions made through your ar44 account. This includes payment method references (such as bKash account numbers or bank account details) used for deposits and withdrawals, as well as transaction timestamps, amounts and outcomes.
ar44 automatically collects certain technical data when you use the platform. This includes your IP address, device type, operating system, browser type, session timestamps, pages visited, features accessed, and general location data derived from your IP address. This data is used for security monitoring, fraud prevention, and platform improvement purposes.
ar44 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data (other than facial matching where required for identity verification), or health data, unless specifically required by applicable law or regulation.
2. How We Use Your Information
ar44 uses the personal data it collects for specific, legitimate purposes directly related to the operation of the ar44 platform. We do not use personal data for any purpose beyond those listed below without first obtaining your consent.
- To create and manage your ar44 account, verify your identity through the KYC process, and ensure you meet the eligibility requirements set out in ar44's Terms and Conditions.
- To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay and other supported payment methods, and to maintain accurate records of all financial transactions on your account.
- To detect, investigate and prevent fraud, money laundering, multi-accounting, bonus abuse and other prohibited conduct as defined in ar44's Terms and Conditions.
- To provide customer support, respond to your queries and complaints, and improve the quality of ar44's customer service based on support interaction data.
- To comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, reporting obligations to relevant authorities, and responding to lawful requests from law enforcement agencies.
- To send you service-related communications, including account notifications, transaction confirmations, security alerts and, where you have consented, promotional communications about ar44 offers and events.
ar44 does not use personal data for automated decision-making that produces legal or similarly significant effects on players, other than automated fraud screening which is subject to human review where a decision affecting your account is made.
3. Legal Basis for Processing
ar44 processes personal data on the following legal bases:
- Contract performance: processing your registration data, KYC data, payment data and transaction data is necessary to perform the contract between you and ar44 (the Terms and Conditions you agreed to when registering your account).
- Legal obligation: processing data for AML compliance, fraud prevention, regulatory reporting and responding to law enforcement requests is required to comply with applicable legal obligations.
- Legitimate interests: processing technical and usage data for platform security, fraud detection and platform improvement is carried out on the basis of ar44's legitimate interests in operating a safe and well-functioning platform.
- Consent: where ar44 sends you promotional communications about offers, bonuses and events, this processing is carried out on the basis of your consent. You may withdraw consent to promotional communications at any time by contacting ar44 support.
4. KYC and Identity Verification
ar44 operates a mandatory Know Your Customer (KYC) verification programme for all players. KYC verification is required before ar44 will process a withdrawal request and may also be required before certain deposit thresholds are reached. The KYC process requires players to submit identity documents, proof of address and, in some cases, proof of payment method ownership.
Documents submitted for KYC are reviewed by ar44's compliance team and, where required, by third-party identity verification service providers engaged by ar44 under confidentiality obligations. Once KYC verification is completed, identity documents are retained securely for the period required by applicable anti-money laundering regulations. ar44 does not retain KYC documents beyond the legally required retention period.
5. Sharing Your Information
ar44 does not sell your personal data. ar44 does not share your personal data with third-party advertisers or marketing networks. ar44 shares personal data with third parties only in the following limited circumstances:
- Service providers: ar44 engages third-party service providers for specific platform functions including payment processing (bKash, Nagad, Rocket, Upay and banking partners), identity verification, fraud detection, customer support software and platform analytics. These providers process data only on ar44's instructions and under confidentiality obligations.
- Game providers: ar44's casino and sports betting content is supplied by licensed game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi. These providers may collect certain technical and gameplay data directly from your browser session as part of delivering their games. Their data practices are governed by their own privacy policies.
- Legal authorities: ar44 may be required by law to disclose personal data to regulatory authorities, law enforcement agencies, financial intelligence units or courts. ar44 will comply with lawful disclosure requirements and will, where legally permissible, notify affected players of such disclosures.
- Business transfers: in the event of a merger, acquisition or asset sale involving the ar44 platform, player personal data may be transferred to the successor entity. ar44 will notify affected players of such transfers where required by applicable law.
ar44 requires all third-party service providers that process player personal data to maintain appropriate technical and organisational security measures and to process data only for the purposes for which it was shared. ar44 does not authorise service providers to use player data for their own commercial purposes.
6. Payment Data and Financial Privacy
ar44 treats payment data with the highest level of confidentiality. Your bKash account number, Nagad number, Rocket number, bank account details or card information are used solely for the purpose of processing your deposits and withdrawals. This information is never shared with third parties outside of the payment processing chain, and is never used for marketing purposes.
ar44 does not store full card numbers. Where card payments are processed, card data is handled by PCI-DSS compliant payment processors and ar44 retains only a masked reference (e.g. last four digits) sufficient to identify the payment method for withdrawal matching purposes.
7. Cookies and Tracking Technologies
ar44 uses cookies and similar tracking technologies on the ar44 platform. Cookies are small data files stored on your device that help ar44 deliver a consistent and secure user experience. ar44 uses the following categories of cookies:
- Essential cookies: these are required for the platform to function correctly. They maintain your login session, remember your language preference and support security features. Essential cookies cannot be disabled without impairing platform functionality.
- Analytics cookies: ar44 uses analytics cookies to understand how players navigate the platform, which features are most used, and where technical issues may arise. Analytics data is aggregated and does not identify individual players. You may opt out of analytics cookies by adjusting your browser settings.
- Security and fraud prevention cookies: ar44 uses cookies and device fingerprinting technologies to identify suspicious behaviour patterns, detect multi-accounting and prevent unauthorised access to player accounts. These cookies are essential to platform security and cannot be disabled.
ar44 does not use advertising cookies or share cookie data with third-party advertising networks. Your browsing activity on ar44 is not used to serve you targeted advertisements on other websites or platforms.
8. Data Retention
ar44 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. In practice, this means: account registration data and KYC documents are retained for the duration of your account plus a minimum of five years following account closure, in order to comply with anti-money laundering record-keeping obligations. Financial transaction records are retained for a minimum of five years from the date of the transaction. Technical and usage logs are retained for up to twelve months for security and fraud investigation purposes.
When data is no longer required, ar44 takes reasonable steps to securely delete or anonymise it. Where anonymisation is used, the anonymised data set may be retained for analytical purposes because it no longer constitutes personal data and cannot be used to identify any individual player.
9. Your Data Rights
As a player on the ar44 platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact ar44 support at [email protected]. ar44 will respond to data rights requests within a reasonable timeframe.
- Right of access: you may request a copy of the personal data ar44 holds about you. ar44 will provide this in a commonly used electronic format.
- Right to rectification: if any personal data ar44 holds about you is inaccurate or incomplete, you may request that it be corrected. Where corrections are required to KYC data, additional verification documents may be required.
- Right to erasure: you may request deletion of your personal data. This right is subject to ar44's legal obligations to retain certain data under applicable anti-money laundering and financial record-keeping regulations. Where legal retention obligations apply, ar44 will delete data that is not subject to those obligations and will inform you of the categories of data it is required to retain.
- Right to restriction: you may request that ar44 restricts the processing of your personal data in certain circumstances, for example where you dispute the accuracy of data ar44 holds about you while ar44 is verifying that data.
- Right to object to direct marketing: if you have consented to receive promotional communications from ar44, you may withdraw that consent at any time by contacting ar44 support. Withdrawal of consent to marketing does not affect the lawfulness of processing carried out before the withdrawal.
ar44 will not discriminate against players who exercise their data rights. Exercising a data right will not affect your ability to use the ar44 platform, subject to any restrictions that may apply where data is required for legal compliance purposes.
10. Data Security
ar44 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. Security measures include SSL encryption for all data in transit, encrypted storage for sensitive data at rest, access controls limiting data access to authorised personnel only, regular security monitoring and intrusion detection, and secure disposal procedures for data that is no longer required.
In the event of a personal data breach that is likely to result in a risk to players' rights, ar44 will take immediate steps to contain and remediate the breach. ar44 will notify affected players of material data breaches in a timely manner and in accordance with applicable legal notification requirements.
11. Minors and Age Restriction
ar44 does not knowingly collect personal data from individuals under the age of 21. The ar44 platform is strictly for adults aged 21 and above. If ar44 discovers that personal data has been collected from a person under the age of 21, that data will be deleted promptly and the associated account will be permanently closed. If you believe that a minor has registered an ar44 account, please contact ar44 support immediately at [email protected] so that the matter can be addressed without delay.
12. Changes to This Privacy Policy
ar44 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services ar44 offers. When this policy is updated, the revised version will be published on the ar44 platform with an updated effective date shown at the top of the policy.
Your continued use of the ar44 platform following any update to this Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with any changes to this policy, you should cease using the ar44 platform and contact ar44 support to close your account.
13. Contact Us
If you have any questions, concerns or complaints about this Privacy Policy or about how ar44 handles your personal data, please contact the ar44 data protection team. ar44 aims to respond to all privacy-related queries within five Bangladesh Standard Time (BST, UTC+6) business days.
Explore cricket betting, live casino games and instant ৳ payments — all secured by our privacy framework.
21+ only. Please gamble responsibly. Terms apply.