Privacy Policy
How lr444 Handles Your Data

This Privacy Policy ("Policy") describes how lr444 ("we", "us", or "our") collects, processes, stores, and protects the personal information of individuals ("you", "your", or "player") who access, register on, or interact with the lr444 online betting platform at https://lr444.io (the "Platform").

lr444 is committed to maintaining the trust and confidence of every player we serve across Bangladesh. This Policy is written in plain, accessible English so that you can understand exactly how your personal data is used — without having to wade through impenetrable legal jargon. Where technical or legal terms are unavoidable, we have provided clear explanations alongside them.

By registering an account, making a deposit, placing a wager, or otherwise interacting with the lr444 Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact us to request account closure.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, all of which together govern your relationship with lr444.

For the purposes of this Privacy Policy, lr444 acts as the data controller in respect of all personal data collected through the Platform. As data controller, lr444 determines the purposes and means by which your personal data is processed.

If you have questions or concerns about how lr444 processes your personal information, or if you wish to exercise any of your data rights as described in Section 10 of this Policy, you may contact our Data Protection team at:

• Email: [email protected]
• Response time: We aim to respond to all data-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6).

We are committed to resolving all legitimate privacy concerns promptly and transparently. Where a request requires additional verification of your identity before we can act on it, we will inform you of that requirement and explain the steps involved.

lr444 collects personal data across several categories. The table below summarises the main categories of data we collect, along with examples within each category:

We collect only the minimum data necessary to deliver the services you request and to fulfil our legal and regulatory obligations. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification purposes.

lr444 collects personal data through the following channels:

• Direct interactions: When you create an account, complete identity verification, make a deposit or withdrawal, place a bet, participate in a promotion, or contact our support team, you voluntarily provide us with personal data.
• Automated technologies: When you access the Platform, our servers automatically record technical data such as your IP address, browser user-agent string, device identifiers, and cookies. This data is collected via server logs, analytics tools, and session-management systems embedded in the Platform.
• Payment processors: When you transact via bKash, Nagad, Rocket, Upay, or a bank transfer, our payment processing partners share confirmation data (such as transaction reference numbers and payment account identifiers) with lr444 to reconcile your account balance and detect fraudulent activity.
• Third-party KYC providers: lr444 uses regulated third-party identity verification services to validate the documents you submit during the KYC process. These providers share verification outcomes (pass/fail, risk flags) with lr444 but retain a copy of your documents in accordance with their own privacy policies.
• Game content providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may share aggregated game session data (bet amounts, game outcomes, session length) with lr444 for account reconciliation and responsible gaming monitoring purposes.

We do not purchase personal data from data brokers, advertising networks, or any other third-party data marketplaces. All data collected by lr444 originates either from your direct interactions with the Platform or from service providers engaged to facilitate those interactions.

lr444 processes your personal data for the following purposes, each supported by a recognised legal basis:

• Account creation and management — necessary for the performance of our contract with you. Without this data, we cannot create or maintain your player account.
• Identity verification (KYC) — necessary for compliance with anti-money laundering (AML) obligations and to verify that you meet the minimum age requirement of 21 years.
• Payment processing — necessary for the performance of our contract with you. We process financial data to credit deposits, settle withdrawals, and reconcile your account balance.
• Fraud prevention and platform security — necessary for our legitimate interest in protecting the Platform and its users from fraudulent activity, account takeovers, and financial crime.
• Responsible gaming monitoring — necessary for our legitimate interest and legal obligation to identify players who may be displaying signs of problem gambling, and to take proactive steps to promote safer play.
• Customer support — necessary for the performance of our contract with you. We process communication data to respond to your queries, complaints, and requests.
• Platform improvement and analytics — based on our legitimate interest in understanding how players use the Platform so that we can improve the user experience, fix technical issues, and develop new features.
• Marketing and promotions — based on your explicit consent, where you have opted in to receive promotional communications from lr444. You may withdraw this consent at any time by contacting us at [email protected] or updating your account preferences.

lr444 does not use your personal data for automated decision-making that produces legal or similarly significant effects without a human review step. Where automated systems flag an account for review (e.g., fraud detection, KYC risk scoring), a member of our compliance team will review the case before any consequential action is taken.

lr444 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes under any circumstances. We share personal data only in the following limited situations:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive only the transaction data necessary to process your deposits and withdrawals. These partners operate under their own privacy frameworks and are contractually obligated to protect your data.
• KYC and identity verification providers: Regulated third-party verification services receive your identity documents and personal details solely for the purpose of verifying your identity and age. These providers are bound by confidentiality agreements and relevant data protection standards.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other studio partners receive session and wagering data necessary to deliver their games and calculate outcomes. No additional personal data beyond what is operationally required is shared.
• IT and infrastructure providers: Cloud hosting, database management, and cybersecurity service providers may have access to technical data in the course of delivering their contracted services. All such providers are subject to strict data processing agreements.
• Legal and regulatory disclosures: lr444 may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies when required to do so by applicable law, court order, or in connection with the investigation of suspected financial crime or fraud. In such cases, we will disclose only the minimum data necessary to satisfy the legal obligation.

Whenever lr444 shares personal data with a third party, we take reasonable contractual and technical steps to ensure that the data is handled securely and used only for the stated purpose. We do not permit our service providers to use your data for their own independent marketing or analytics purposes.

lr444 retains personal data only for as long as necessary to fulfil the purposes described in this Policy or to comply with applicable legal obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account relationship with lr444, plus a minimum of five (5) years following account closure. This retention period is required to satisfy anti-money laundering record-keeping obligations.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of each transaction, in compliance with financial record-keeping requirements.
• Communication and support data: Retained for three (3) years from the date of the last interaction, to support ongoing complaint resolution and quality assurance reviews.
• Technical and usage data (logs): Retained for up to twelve (12) months in active systems, after which data may be archived in anonymised or aggregated form for analytical purposes.
• Marketing consent records: Retained for the duration of your consent and for a reasonable period thereafter as evidence of the consent having been given.

When personal data is no longer required, lr444 securely deletes or anonymises it in accordance with our internal data disposal procedures. Anonymised or aggregated data — from which you cannot be identified — may be retained indefinitely for analytical and business intelligence purposes without restriction.

If you request account closure, your personal data will be flagged for deletion at the end of the applicable retention period. We will confirm the expected deletion timeline to you upon processing your closure request.

lr444 employs a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures in place include:

• 256-bit SSL/TLS encryption: All data transmitted between your browser or app and the lr444 servers is encrypted using industry-standard TLS protocols. This protects your login credentials, financial data, and personal details from interception in transit.
• Encrypted data storage: Sensitive data fields — including payment account identifiers, identity document references, and passwords — are encrypted at rest using strong cryptographic standards. Passwords are stored as salted hashes and are never stored in plain text.
• Access controls: Access to personal data within lr444's internal systems is restricted on a strict need-to-know basis. All staff who handle player data are subject to background checks, confidentiality agreements, and mandatory data protection training.
• Intrusion detection and monitoring: lr444 operates continuous network monitoring and intrusion detection systems to identify and respond to anomalous activity in real time. Security events are logged, reviewed, and escalated according to a defined incident response procedure.
• Multi-factor authentication: Critical internal systems that hold or process player data require multi-factor authentication for all access attempts.
• Regular security audits: lr444 conducts periodic security assessments — including penetration testing and vulnerability scans — to identify and remediate weaknesses in the Platform's defences before they can be exploited.

While lr444 takes all reasonable precautions to secure your data, no system connected to the internet can be guaranteed to be completely immune to attack. In the event of a data breach that is likely to result in a risk to your rights and freedoms, lr444 will notify affected players without undue delay and will take immediate steps to contain and remediate the incident.

You are responsible for keeping your own login credentials confidential. If you suspect that your account has been accessed without your authorisation, contact [email protected] immediately.

lr444 uses cookies and similar tracking technologies to operate the Platform efficiently, remember your preferences, detect fraud, and understand how players interact with our services. The following categories of cookies are in use:

• Strictly necessary cookies: These are essential for the Platform to function. They manage your login session, maintain your account state across pages, and support security features such as CSRF protection. These cookies cannot be disabled without breaking core Platform functionality.
• Performance and analytics cookies: These cookies collect anonymised data about how players navigate the Platform — which pages are most visited, where users encounter errors, and how long sessions last. This data helps us improve the Platform experience. These cookies do not identify you personally.
• Functional cookies: These remember your preferences such as language settings, default currency display (BDT), and notification preferences, so that you do not need to reconfigure them each time you visit.
• Fraud prevention cookies: These cookies work in conjunction with our security systems to identify unusual patterns of behaviour that may indicate account takeover attempts or automated bot activity.

lr444 does not use third-party advertising or retargeting cookies that track you across other websites. Our tracking technologies are limited to the Platform and are used solely for the purposes described above.

Most browsers allow you to control cookie behaviour through their settings. However, disabling strictly necessary cookies will impair your ability to use the Platform. For guidance on managing cookies in your browser, consult your browser's official help documentation.

lr444 respects your rights over your personal data. Depending on your circumstances, you may have the following rights in relation to the personal data we hold about you:

• Right of access: You may request a copy of the personal data lr444 holds about you. We will provide this in a structured, commonly used format within a reasonable timeframe.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may update certain details directly through your account settings; for other corrections, contact [email protected].
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where we have no overriding legitimate ground to retain it. Note that certain retention obligations (e.g., AML record-keeping requirements) may preclude full deletion for a defined period.
• Right to restriction of processing: In certain circumstances, you may request that we restrict the processing of your data — for example, while the accuracy of the data is disputed or while a complaint is under investigation.
• Right to data portability: Where processing is based on your consent or on a contract with you, you may request that we provide your personal data in a machine-readable format so that it can be transferred to another service provider.
• Right to withdraw consent: Where lr444 processes your data based on your explicit consent (for example, for direct marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to the processing of your personal data for purposes based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

To exercise any of the above rights, please contact our Data Protection team at [email protected] with a clear description of your request. We may ask you to verify your identity before processing your request to ensure that personal data is not disclosed to an unauthorised party. We will respond to all legitimate requests within 5 business days.

The lr444 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. If we become aware or have reason to believe that a player is under the minimum age threshold, we will immediately:

• Suspend the account and restrict access to all Platform features.
• Withhold any pending withdrawals pending identity and age verification.
• Initiate a formal review of all transactions associated with the account.
• Delete or anonymise any personal data associated with the account to the extent permitted by our legal obligations.

No winnings will be paid out to any player who is found to be under the age of 21, and any deposits made by an underage player will be returned to the originating payment method after deduction of any applicable processing fees and following the completion of our internal review process.

If you are a parent or guardian and believe that a minor in your care has created an account on lr444, please contact us immediately at [email protected] so that we can take appropriate action without delay.

In operating the lr444 Platform for players in Bangladesh, certain personal data may be transferred to and processed in countries outside Bangladesh. This occurs primarily in connection with our use of cloud hosting infrastructure and third-party service providers such as KYC verification platforms and game content studios that may operate internationally.

When such transfers occur, lr444 takes appropriate steps to ensure that your personal data receives an adequate level of protection in the destination country. These steps may include:

• Entering into data processing agreements with service providers that incorporate standard contractual clauses requiring equivalent data protection standards to those observed by lr444.
• Transferring data only to service providers in countries or organisations that have demonstrated an adequate level of data protection through independent audit, certification, or regulatory recognition.
• Applying technical safeguards such as encryption in transit and at rest to protect data irrespective of where it is processed.

lr444 does not transfer personal data to jurisdictions known to lack adequate data protection frameworks without first implementing the contractual and technical safeguards described above. If you have concerns about a specific cross-border transfer of your data, please contact us at [email protected].

lr444 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, technology, legal obligations, or business operations. When we make material changes to this Policy, we will notify registered players via email to the address on file and/or via an in-platform notification displayed upon your next login.

The updated Policy will display a revised effective date at the top of this page. We encourage you to review this Policy periodically so that you remain informed about how we handle your personal data. The most current version of this Policy will always be accessible at /privacy-policy.

Your continued use of the lr444 Platform following notification of any material changes constitutes your acceptance of the revised Policy. If you do not agree with the changes, you should stop using the Platform and request account closure in accordance with the Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way lr444 handles your personal data, please reach out to our Data Protection team using the contact details below:

• Email: [email protected]
• Response time: We aim to acknowledge all privacy-related enquiries within 2 business days and to provide a full response within 5 business days (Bangladesh Standard Time, UTC+6).
• Live Chat: Available 24/7 directly within the lr444 Platform for urgent data concerns.

When contacting us about a data request, please include your registered username and a clear description of the nature of your request. For requests involving account-specific data, we may ask you to complete an identity verification step before we can act on your request, in order to protect the security of your personal information.

We take all privacy concerns seriously. If you are not satisfied with the outcome of your initial enquiry, you may escalate the matter by requesting a formal review by our compliance team. Escalated complaints will be acknowledged within 48 hours and resolved within 14 business days wherever reasonably practicable.