Privacy Policy — 444x Platform

1. Introduction

This Privacy Policy ("Policy") describes how 444x ("the Company", "we", "us", "our") collects, processes, stores, and protects personal data in connection with the 444x platform, accessible at 444x.lat and any associated subdomains or mobile interfaces (collectively, "the Platform").

This Policy applies to all players, registered account holders, and visitors who interact with the 444x Platform, including users based across Pakistan — in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and all other cities and towns. By accessing the Platform or creating a 444x account, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read in conjunction with the 444x Terms and Conditions, which form part of the overall agreement between you and 444x.

2. Data Controller

444x operates as the data controller in respect of personal data collected through the Platform. As data controller, 444x determines the purposes for which, and the means by which, personal data is processed.

For all data-related enquiries, requests, or complaints, you may contact 444x using the details provided in Section 15 of this Policy. We aim to respond to all data-related correspondence within fourteen (14) calendar days of receipt.

3. Data We Collect

444x collects the following categories of personal data in connection with your use of the Platform:

3.1 Identity & Contact Data

• Full legal name
• Date of birth
• Residential address (including city, province, and postcode)
• Email address
• Mobile phone number
• Nationality and country of residence

3.2 Verification & KYC Data

• Copies of government-issued identity documents (e.g., CNIC, passport)
• Proof of address documents
• Proof of payment method ownership
• Source of funds information (where required by AML obligations)

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records
• Payment method details (mobile wallet numbers, bank account references — not full card numbers)
• Account balance history
• Bonus and promotion usage records

3.4 Behavioural & Usage Data

• Betting and gaming activity (sports selections, casino game choices, stake amounts, outcomes)
• Session duration and frequency of play
• Features accessed and navigation patterns within the Platform
• Responsible gaming tool usage (deposit limits set, self-exclusion requests)

3.5 Technical Data

• IP address
• Device type, model, and operating system
• Browser type and version
• Unique device identifiers and fingerprinting data
• Geolocation data (where consented)

3.6 Communications Data

• Records of correspondence with 444x support
• Live chat transcripts
• Email communication history
• Survey or feedback responses

4. How We Collect Data

444x collects personal data through the following means:

• Direct provision: Information you submit when registering an account, completing identity verification, making deposits or withdrawals, contacting support, or responding to surveys
• Automated collection: Technical and behavioural data gathered automatically through your use of the Platform, including cookies, server logs, and device fingerprinting
• Third-party sources: Identity verification providers, fraud prevention databases, payment processors, and where applicable, publicly available sources used to verify or supplement information you have provided
• Responsible gaming tools: Data generated by your use of deposit limits, session timers, loss limits, and self-exclusion features

5. Purpose & Legal Basis for Processing

The table below sets out the purposes for which 444x processes personal data and the corresponding legal basis for each processing activity:

6. Data Sharing

444x does not sell or transfer your personal data to unaffiliated third parties for their own commercial purposes. However, 444x may share your data with the following categories of trusted recipients where necessary and proportionate:

6.1 Payment Processors

To facilitate deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card networks, 444x shares necessary transaction data with our certified payment processing partners. These partners are contractually bound to handle your data securely and in accordance with applicable data protection standards.

6.2 Identity Verification Providers

444x uses third-party KYC and AML service providers to verify the identity of players, check against sanctions lists, and comply with anti-money laundering obligations. These providers process identity documents and verification data on our behalf under strict data processing agreements.

6.3 Fraud Prevention Services

Technical and identity data may be shared with fraud detection and device intelligence platforms to identify and prevent fraudulent activity, account takeover, and bonus abuse on the 444x Platform.

6.4 Regulatory & Law Enforcement Authorities

Where required by applicable law or a valid court order, 444x may disclose personal data to regulatory bodies, law enforcement agencies, or other competent authorities. 444x will comply with all lawful requests and will, where legally permitted, notify affected players.

6.5 Professional Advisors

Legal, financial, and compliance advisors engaged by 444x may have access to personal data on a strictly confidential, need-to-know basis in connection with the services they provide to 444x.

7. International Data Transfers

444x operates within an international business environment. In some cases, personal data may be transferred to, stored in, or processed by service providers located in countries outside Pakistan. Where such transfers occur, 444x ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections afforded under applicable data protection principles.

Safeguards for international transfers may include contractual data processing agreements incorporating standard data protection clauses, transfers to jurisdictions that maintain adequate data protection frameworks, or other legally recognised transfer mechanisms.

8. Data Retention

444x retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention principles apply:

• Active account data: Retained for the duration of the account relationship and a defined period thereafter to meet legal and audit requirements
• KYC and verification documents: Retained for a minimum of five (5) years following account closure in compliance with standard AML record-keeping obligations
• Transaction records: Retained for a minimum of five (5) years to satisfy financial record-keeping requirements
• Support communications: Retained for a period sufficient to resolve any related disputes or claims, typically three (3) years
• Marketing consent records: Retained for the period during which consent remains active, plus a reasonable period to demonstrate consent history

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately practicable for technical reasons, data is isolated and protected pending deletion.

9. Security Measures

444x implements a comprehensive range of technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and the 444x Platform is protected by 256-bit SSL/TLS encryption
• Encryption at rest: Sensitive personal and financial data stored on 444x servers is encrypted using AES-256
• Access controls: Access to personal data is restricted to authorised 444x employees and contractors who require it to perform their job functions, enforced through role-based access controls and multi-factor authentication
• Network security: 444x infrastructure is protected by firewalls, intrusion detection systems, and regular security audits
• Penetration testing: Regular third-party security assessments are conducted to identify and remediate vulnerabilities
• Incident response: 444x maintains a documented data breach response plan and will notify affected players and relevant authorities where required in the event of a confirmed security incident

Notwithstanding these measures, no data transmission over the internet or data storage system is guaranteed to be one hundred percent secure. You use the 444x Platform at your own risk in this regard, and you are responsible for maintaining the security of your account credentials.

10. Cookies & Tracking Technologies

444x uses cookies and similar tracking technologies to operate the Platform, personalise your experience, analyse usage patterns, and support fraud prevention. The following categories of cookies are used:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They include session authentication tokens, security cookies, and load-balancing cookies. These cookies cannot be disabled as they are required for the Platform to operate.

10.2 Functional Cookies

Functional cookies remember your preferences — such as language settings and display preferences — and are used to provide a more personalised experience when you return to the 444x Platform.

10.3 Analytics Cookies

With your consent, 444x uses analytics cookies to understand how players interact with the Platform, which features are most used, and where technical issues arise. This data is used in aggregate form to improve the Platform.

10.4 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling certain cookies may affect the functionality of the Platform, including the ability to log in or access certain features.

11. Your Data Rights

Subject to applicable law and reasonable verification of your identity, you have the following rights in respect of personal data held about you by 444x:

• Right of access: You may request a copy of the personal data 444x holds about you, together with information about how it is processed
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held about you
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligations
• Right to restriction: You may request that processing of your personal data is restricted in certain circumstances, for example while an accuracy dispute is being resolved
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, commonly used, and machine-readable format
• Right to object: You may object at any time to processing of your data based on legitimate interest, including profiling for direct marketing purposes
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal

To exercise any of these rights, please contact 444x at the details in Section 15. We will respond to verified requests within fourteen (14) days. In complex or high-volume cases, we may extend this to thirty (30) days with notice.

12. Children's Privacy

The 444x Platform is strictly for adults aged 21 and over. 444x does not knowingly collect personal data from individuals under the age of 21. If we become aware that a person under 21 has provided personal data to 444x, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe your child has registered with or used the 444x Platform, please contact us immediately at the address in Section 15. We will investigate and take appropriate action.

13. Marketing Preferences

With your consent, 444x may send you promotional communications about new games, sports betting offers, bonuses, PSL season promotions, and other 444x Platform features via email or in-account notification.

You can withdraw your marketing consent at any time by:

• Updating your communication preferences in your 444x account settings
• Contacting our support team at [email protected]

Please allow up to 48 hours for marketing preferences to take effect across all channels. Withdrawal of marketing consent does not affect the delivery of transactional or service communications, such as deposit confirmations, withdrawal notifications, or account security alerts, which are sent regardless of marketing preferences.

14. Changes to This Policy

444x may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made, 444x will provide reasonable prior notice to affected players via in-account notification or email, no less than seven (7) days before the revised Policy takes effect.

The date of the most recent revision is displayed at the top of this Policy. Your continued use of the 444x Platform after the effective date of any revised Policy constitutes acceptance of the updated terms. If you do not agree with a revised Policy, you should close your account before the revision takes effect.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 444x, please contact us using the following details:

• Email: [email protected]
• Platform: 444x.lat
• Response Target: 14 calendar days for data rights requests; 24 hours for general enquiries

All data rights requests must be submitted in English and include your 444x username, a clear description of your request, and any relevant reference information. 444x may request proof of identity before processing requests that involve access to or deletion of personal data.