lt444 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

Introduction

lt444 ("we", "us", "our") operates the online casino and sports betting platform available at lt444.io (the "Platform"). We are committed to protecting the privacy and personal data of all individuals who use the Platform, particularly our players based in Bangladesh.

This Privacy Policy explains how lt444 collects, uses, stores, discloses, and protects personal data in connection with the operation of the Platform. It also explains the rights available to you as a data subject and how to exercise those rights.

This Privacy Policy applies to all users of lt444.io, including registered players, visitors who browse the Platform without creating an Account, and individuals who contact lt444 through support channels. By using the Platform, you acknowledge that you have read and understood this Privacy Policy.

Data Controller

For the purposes of applicable data protection law, lt444 acts as the data controller in respect of all personal data collected and processed through the Platform. As data controller, lt444 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

All data rights requests, privacy-related enquiries, and formal complaints should be directed to the lt444 Data Protection team via the contact details set out in Section 15 of this Policy. lt444 will respond to all data rights requests within 30 calendar days of receipt, unless an extension is required under applicable law, in which case you will be notified accordingly.

Personal Data We Collect

lt444 collects and processes the following categories of personal data in connection with the operation of the Platform:

lt444 does not collect or store full payment card numbers, CVV codes, or mobile banking PINs. All payment authentication is handled directly by the approved third-party payment service provider.

How We Collect Personal Data

lt444 collects personal data through the following means:

• Direct collection: Information you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to surveys or promotions.
• Automated collection: Technical and usage data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access and interact with lt444.io.
• Third-party sources: Identity verification data from KYC service providers; fraud risk signals from anti-fraud and AML screening partners; payment confirmation data from bKash, Nagad, Rocket, Upay, and card processors.

lt444 does not purchase or obtain personal data from data brokers or any other commercial third-party sources for marketing or profiling purposes.

Legal Basis for Processing

lt444 processes personal data only where a lawful basis for doing so exists. The legal bases relied upon by lt444 are as follows:

• Contractual necessity: Processing required to perform the contract with you — i.e., operating your Account, processing transactions, and providing access to games and betting markets on the Platform.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, KYC requirements, financial record-keeping obligations, and requests from law enforcement or regulatory authorities.
• Legitimate interests: Processing necessary for lt444's legitimate business interests, including fraud prevention, security monitoring, responsible gaming safeguards, and platform improvement — provided such interests are not overridden by your fundamental rights.
• Consent: Where processing is based on your consent — for example, for optional marketing communications — you may withdraw that consent at any time by contacting support or updating your Account preferences.

How We Use Your Personal Data

lt444 uses the personal data collected for the following purposes:

• To create and manage your lt444 Account, including registration, login authentication, and Account maintenance.
• To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, and other approved payment methods.
• To conduct KYC identity verification and age verification (players must be 21 years or older) as required for platform compliance.
• To provide customer support, investigate complaints, and resolve disputes in connection with your Account or any game or betting activity.
• To monitor gameplay and transaction patterns for responsible gaming purposes, including identifying players who may be showing signs of problem gambling.
• To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other prohibited conduct as defined in the lt444 Terms & Conditions.
• To send transactional communications relating to your Account, including deposit confirmations, withdrawal status updates, security alerts, and Terms & Conditions amendment notices.
• To send optional promotional communications about lt444 offers, new games, and seasonal promotions — only where you have provided consent to receive such communications.
• To analyse aggregated, anonymised usage data for the purpose of improving the Platform's performance, user experience, and game offering.

Data Sharing & Disclosure

lt444 does not sell, rent, or trade your personal data with unaffiliated third parties for their own marketing purposes. Personal data may be disclosed to the following categories of recipients, strictly as necessary and subject to appropriate data protection safeguards:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard processors, solely for the purpose of processing your deposits and withdrawal requests.
• KYC and identity verification providers: Third-party identity verification services used to confirm your identity and age in compliance with lt444's KYC obligations.
• Game content providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, where game session data must be shared for the delivery of their games on the Platform. Such sharing is governed by strict data processing agreements.
• Fraud prevention and AML screening partners: Services used to screen transactions and Account activity for signs of fraudulent behaviour or money laundering.
• Law enforcement and regulatory authorities: Where lt444 is required to disclose personal data by applicable law, court order, or the lawful request of a competent authority.
• Professional advisers: Legal counsel, auditors, and compliance consultants, under strict obligations of confidentiality.

Where personal data is shared with third-party processors, lt444 ensures that appropriate data processing agreements are in place requiring those parties to handle your data securely and only for the purposes specified by lt444.

Data Retention

lt444 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Active Account data: Retained for the full duration of your Account's active status on the Platform.
• Post-closure Account data: Retained for a minimum of five (5) years following the date of account closure, in accordance with AML and financial record-keeping requirements.
• KYC documentation: Retained for a minimum of five (5) years from the date of submission or last use, as required by applicable AML regulations.
• Transaction records: Retained for a minimum of five (5) years, and potentially longer where required by law or where a dispute or investigation is ongoing.
• Support and communications records: Retained for three (3) years from the date of the last interaction, or longer where relevant to an unresolved dispute.
• Marketing consent records: Retained until you withdraw consent, plus an additional period necessary to demonstrate compliance.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

Your Data Rights

As a data subject, you have the following rights in relation to the personal data lt444 holds about you. To exercise any of these rights, please contact the lt444 Data Protection team using the details in Section 15. lt444 will respond to all verified requests within 30 calendar days:

• Right of Access (Subject Access Request): The right to obtain confirmation of whether lt444 processes personal data about you and, if so, to receive a copy of that data along with information about how it is processed.
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected without undue delay.
• Right to Erasure ("Right to be Forgotten"): The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where there is no other lawful basis for processing. This right is subject to legal retention obligations — lt444 may be required to retain certain data for compliance purposes even after an erasure request.
• Right to Restrict Processing: The right to request that lt444 restrict the processing of your data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing and a determination is pending.
• Right to Data Portability: The right to receive, in a structured, commonly used, and machine-readable format, the personal data you have provided to lt444 where processing is based on consent or contractual necessity.
• Right to Object: The right to object to the processing of your personal data where lt444 relies on legitimate interests as the legal basis, and the right to object to processing for direct marketing purposes at any time.
• Rights in Relation to Automated Decision-Making: The right not to be subject to a decision based solely on automated processing — including profiling — that produces legal or similarly significant effects on you, unless such processing is necessary for a contract, authorised by law, or based on your explicit consent.

Cookies & Tracking Technologies

lt444.io uses cookies and similar tracking technologies to operate the Platform, enhance user experience, maintain session security, and gather anonymised analytics data. Cookies are small text files placed on your device when you access the Platform.

lt444 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session cookies that maintain your logged-in state, security tokens, and load-balancing cookies. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and display preferences, to personalise your experience on lt444.io.
• Analytics cookies: Used to collect anonymised data about how visitors interact with the Platform, including pages visited, session duration, and navigation paths. This data helps lt444 improve the Platform experience for all players.
• Security cookies: Used to detect and prevent fraudulent activity, account takeover attempts, and bot traffic on the Platform.

You may control cookies through your browser settings. Most modern browsers allow you to view, disable, or delete cookies. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of lt444.io, including your Account login.

Security of Your Personal Data

lt444 implements and maintains robust technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and lt444.io servers.
• AES-256 encryption for sensitive personal data stored at rest on lt444 infrastructure.
• Role-based access controls ensuring that only authorised lt444 personnel with a legitimate business need may access personal data.
• Regular security audits, vulnerability assessments, and penetration testing of the Platform's technical infrastructure.
• Multi-factor authentication requirements for administrative access to systems that process personal data.
• Incident response procedures for detecting, investigating, and responding to potential data security breaches.

In the event of a data security incident that is reasonably likely to result in a risk to your rights and freedoms, lt444 will notify affected players without undue delay and will provide information about the nature of the incident, the data affected, and the steps being taken to address it.

You also have a role to play in keeping your Account secure. lt444 strongly advises all players to use a unique, strong password for their lt444 Account, to never share their login credentials with any other person, and to contact support immediately if they suspect their Account has been accessed without authorisation.

Children & Minors

lt444 is an adults-only platform. The Platform is strictly prohibited to persons under the age of 21. lt444 does not knowingly collect, process, or retain personal data from individuals under the age of 21.

lt444 employs age verification procedures at the point of registration and during KYC review to identify and prevent underage access to the Platform. Where lt444 discovers or is notified that a person under 21 has created an Account or provided personal data on the Platform, that Account will be immediately closed, all associated data will be deleted in accordance with applicable law, and any balance will be returned to the originating payment method.

If you believe that a minor has registered on lt444.io, please contact the support team immediately at the contact details provided in Section 15 of this Policy.

Third-Party Links & Services

The lt444 Platform may contain references to third-party service providers, including game studios, payment processors, and support tools. While lt444 takes reasonable steps to ensure that third parties engaged to process personal data on its behalf do so in accordance with appropriate data protection standards, lt444 is not responsible for the privacy practices of any independent third-party websites or services that are not operated by lt444 and to which the Platform does not link directly.

Where game content provided by studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi requires the transmission of session data to those providers' systems, such transmission is governed by a data processing agreement between lt444 and the relevant studio, and is limited to the technical data necessary for game delivery and outcome verification.

Changes to This Privacy Policy

lt444 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or lt444's data processing practices. Where changes are material — meaning they significantly affect how your personal data is collected, used, or shared — lt444 will provide advance notice to registered players via the contact details held on their Account, with a minimum notice period of 14 days before the revised Policy takes effect.

The "Last Updated" date displayed at the top of this document will be revised each time the Privacy Policy is updated. lt444 encourages all players to review this Policy periodically to remain informed about how their personal data is being handled. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

Contact Us — Data Protection Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a privacy-related concern or complaint, please contact the lt444 Data Protection team using the details below. All correspondence should be submitted in writing and should include your registered Account username and a clear description of your enquiry or request.

If you are not satisfied with lt444's response to a privacy complaint, you may have the right to escalate the matter to a relevant supervisory authority in your jurisdiction. lt444 will cooperate fully with any such investigation.