aes444 Privacy
Policy

When you register, use, or interact with the aes444 platform, we collect certain categories of personal information. This collection is necessary to provide you with a functional, secure, and compliant online gaming experience. The categories of information we collect are set out below.

Account Registration Data: When you create an aes444 account, we collect your full legal name, date of birth, email address, preferred username, and a securely hashed version of your chosen password. This information is required to establish and maintain your account identity.

Identity Verification Data: To comply with our age verification and anti-money-laundering obligations, we may request copies of government-issued identity documents such as your National Identity Card (NID) or passport, along with proof of address. These documents are reviewed by our compliance team and stored securely in encrypted format.

Payment and Transaction Data: We collect records of all deposits and withdrawals made through your aes444 account, including transaction amounts, timestamps, and the mobile financial service or bank account used. We do not store full bKash, Nagad, Rocket, or card numbers — only the last four digits or a masked identifier for reference purposes.

Technical and Device Data: We automatically collect certain technical information when you access the platform, including your IP address, browser type and version, operating system, device identifiers, and session timestamps. This data helps us detect fraud, enforce geographic restrictions, and maintain platform security.

Usage and Behavioural Data: We record your activity on the aes444 platform, including pages visited, games played, bets placed, wager amounts, session duration, and feature interactions. This data is used to improve the platform, personalise your experience, and comply with responsible gaming obligations.

Communications Data: If you contact aes444 via email or our support channels, we retain records of those communications, including your queries, our responses, and any attachments, for the purposes of resolving disputes and improving our customer service.

aes444 uses your personal data only for legitimate, defined purposes that are directly related to providing and improving the platform. We do not use your data for purposes that would be incompatible with those stated here without first obtaining your explicit consent.

The primary purposes for which aes444 processes your personal data are as follows:

• Account Management: To create, maintain, and administer your aes444 account, including processing your login sessions, managing your balance, and applying account-level settings such as deposit limits or self-exclusion preferences.
• Payment Processing: To facilitate deposits and withdrawals through bKash, Nagad, Rocket, Upay, bank transfers, Visa, and Mastercard. Transaction records are retained to reconcile balances and respond to payment disputes.
• Identity and Age Verification: To confirm that you are at least 18 years of age and that your account details match the identity documents provided, in accordance with our responsible gaming and compliance obligations.
• Fraud Prevention and Security: To detect and investigate potentially fraudulent activity, money laundering, account takeovers, and other security threats. Technical and behavioural data is analysed to identify unusual patterns that may indicate abuse.
• Legal and Regulatory Compliance: To fulfil our obligations under applicable laws, including data retention requirements, anti-money-laundering (AML) procedures, and any requests from law enforcement or regulatory authorities made in accordance with due legal process.
• Platform Improvement: To analyse aggregated usage data in order to improve game selection, site performance, and user experience. This analysis does not result in decisions that materially affect individual players.
• Responsible Gaming: To monitor for signs of problem gambling behaviour — such as rapid increases in bet frequency, self-reported distress, or patterns inconsistent with recreational play — and to apply protective measures including spending alerts and account restrictions.
• Customer Support: To respond to your enquiries, resolve disputes, and maintain a record of interactions for quality assurance purposes.
• Promotional Communications: Where you have opted in to receive marketing messages, to send you information about aes444 promotions, bonuses, and seasonal offers. You may withdraw this consent at any time by contacting [email protected].

aes444 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share your data only in the limited circumstances described in this section, and only to the minimum extent necessary for each stated purpose.

Game Software Providers: To deliver casino games and sports betting markets on the aes444 platform, we work with licensed third-party software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive technical session data (such as a pseudonymous player identifier and game transaction identifiers) to operate game logic and RNG systems. They do not receive your full name, NID, or payment details.

Payment Processors: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a card network, the relevant financial institution receives the transaction details required to process that payment. aes444 does not transmit additional personal data to payment processors beyond what is strictly necessary to complete the transaction.

Identity Verification Services: We may use third-party KYC (Know Your Customer) service providers to assist in verifying your identity documents. These providers operate under strict data processing agreements and are not permitted to use your data for any purpose other than verification on behalf of aes444.

Legal and Regulatory Authorities: Where required by applicable law, court order, or the direction of a competent regulatory or law enforcement authority in Bangladesh or another relevant jurisdiction, aes444 will disclose personal data as legally obligated. We will, where legally permitted, notify you of such a disclosure request.

Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of aes444's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such change and of any material alteration to this Privacy Policy that results from it.

All third parties with whom aes444 shares personal data are required to maintain appropriate technical and organisational security measures and to process your data only in accordance with our instructions and applicable data protection law.

aes444 uses cookies and similar tracking technologies to operate the platform correctly, remember your preferences, and gather aggregate analytics data that helps us improve the user experience. This section explains what cookies we use and how you can manage them.

What Are Cookies? Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to store information about your session or preferences. Cookies cannot execute code, deliver viruses, or access other files on your device.

Types of Cookies We Use:

• Strictly Necessary Cookies: These cookies are essential for the aes444 platform to function. They manage your login session, maintain your authenticated state, and ensure that security features such as CSRF protection operate correctly. You cannot opt out of strictly necessary cookies while continuing to use the platform.
• Functional Cookies: These cookies remember your preferences such as language settings, preferred game categories, and display options. They are not strictly required for the platform to function but significantly improve the user experience.
• Analytics Cookies: We use privacy-configured analytics tools to understand how players navigate the aes444 platform — which pages are most visited, where sessions typically end, and how different features are used. This data is aggregated and does not identify individual users.
• Security Cookies: Certain cookies support our fraud detection and account security systems by storing a hashed session token and device fingerprint. These cookies help us identify suspicious login attempts and protect your account from unauthorised access.

Managing Your Cookie Preferences: Most modern browsers allow you to view, manage, and delete cookies through the browser's settings menu. You may disable non-essential cookies at any time. Please note that disabling functional cookies may affect how certain features of the aes444 platform behave. Instructions for managing cookies in popular browsers are available from the browser's official help documentation.

No Third-Party Advertising Cookies: aes444 does not deploy advertising network cookies, retargeting pixels, or social media tracking scripts on the platform. Your browsing activity on aes444 is not shared with external advertising platforms.

aes444 takes the security of your personal data seriously and employs a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure.

Encryption in Transit: All data transmitted between your device and the aes444 platform is encrypted using TLS (Transport Layer Security) with a minimum key strength of 256 bits. This ensures that data cannot be intercepted or read by third parties during transmission.

Encryption at Rest: Sensitive personal data stored in aes444 databases — including identity documents, hashed passwords, and financial records — is encrypted at rest using AES-256 encryption. Database access is restricted to authorised personnel on a strict need-to-know basis.

Access Controls: Internal access to player personal data is governed by role-based access control (RBAC) policies. Only staff members whose roles require access to specific categories of personal data are granted that access. All internal data access events are logged and reviewed periodically.

Password Security: aes444 never stores your password in plain text. Passwords are processed through a one-way cryptographic hashing algorithm with a unique salt applied per account. Even in the unlikely event of a data breach, your raw password cannot be recovered from the stored hash.

Security Monitoring: Our infrastructure is monitored continuously for anomalous activity, intrusion attempts, and vulnerability exploitation. Security patches are applied to all platform components promptly upon release.

Data Breach Response: In the event of a personal data breach that poses a risk to your rights and freedoms, aes444 will notify affected players without undue delay and will take immediate steps to contain and remediate the breach. We will document all breach incidents in accordance with our internal incident response procedures.

While aes444 takes all reasonable precautions to safeguard your data, no internet-based platform can guarantee absolute security. You are also responsible for protecting your own account by keeping your password confidential and using a strong, unique password that you do not share with any other service.

aes444 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The specific retention periods that apply to different categories of data are described below.

• Active Account Data: Personal data associated with an active aes444 account is retained for the duration of the account relationship and for a minimum of five (5) years following the date of account closure. This retention period supports our legal obligations relating to AML record-keeping, dispute resolution, and regulatory compliance.
• Transaction Records: Financial transaction records — including deposits, withdrawals, and bet histories — are retained for a minimum of seven (7) years from the date of each transaction, in accordance with applicable financial record-keeping obligations.
• Identity Verification Documents: Copies of identity documents submitted for KYC verification are retained for a minimum of five (5) years following the closure of the associated account, or longer where required by law.
• Support Communications: Records of customer support interactions are retained for three (3) years from the date of the interaction, or until the matter to which they relate is fully resolved, whichever is later.
• Session and Technical Logs: Server logs and session data used for security and fraud detection purposes are retained for a maximum of ninety (90) days, after which they are permanently deleted or anonymised.
• Marketing Consent Records: Records of your opt-in or opt-out consent for promotional communications are retained for the duration of your account relationship plus three (3) years, to allow us to demonstrate compliance in the event of a complaint.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be attributed to any individual. Where data is anonymised rather than deleted, the resulting dataset contains no information that could reasonably identify you and is no longer subject to this Privacy Policy.

As a player on the aes444 platform, you have a number of rights with respect to your personal data. We are committed to honouring these rights and to responding to all requests within a reasonable timeframe, and in no case later than thirty (30) days from receipt of a valid request. To exercise any of the rights described below, please contact [email protected] with the subject line "Privacy Rights Request" and a clear description of your request.

aes444 reviews this Privacy Policy on a regular basis to ensure that it accurately reflects our data processing practices and remains compliant with applicable law. We may update this policy from time to time in response to changes in our operations, legal requirements, or the services we offer.

When we make material changes to this Privacy Policy — meaning changes that significantly affect how we collect, use, or share your personal data — we will notify active players by updating the effective date displayed at the top of this page and, where appropriate, by sending a notification to the email address registered to your account.

Minor changes, such as corrections of typographical errors or clarifications that do not alter the substance of our data practices, will be published without individual notification but will still be reflected in an updated effective date.

Your continued use of the aes444 platform after any update to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with any changes, you should cease using the platform and may request account closure by contacting [email protected]. We encourage you to review this page periodically so that you remain informed about how aes444 protects your personal information.

If you have any questions about this Privacy Policy or any aspect of how aes444 handles your personal data, please contact us directly. Our support team is available around the clock and will be happy to address your concerns in clear, plain English.