a444 Privacy Policy

This Privacy Policy is issued by the operator of the a444 platform, accessible at a444.cam (hereinafter referred to as "a444", "we", "us", or "our"). a444 operates as an online casino and sports betting platform serving users located in Pakistan under an international gaming license.

For the purposes of this Privacy Policy, a444 acts as the data controller in respect of all personal data collected from users of the a444 platform. As data controller, a444 determines the purposes and means by which your personal data is processed.

This Policy applies to all personal data collected in connection with your use of the a444 website, mobile platform, customer support channels, and any other touchpoint through which a444 interacts with you. It covers Pakistani users accessing the platform from Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and all other locations within Pakistan.

a444 collects personal data across the following categories, depending on how you interact with the platform:

a444 does not intentionally collect sensitive personal data beyond what is required for KYC and responsible gaming compliance. Where the KYC process requires submission of identity documents, those documents are processed solely for verification purposes and are not used for any other purpose.

a444 collects personal data through the following channels:

• Direct submission: Data you provide when creating an account, completing KYC, making a deposit or withdrawal, setting responsible gaming preferences, or contacting customer support.
• Automated collection: Technical data collected automatically when you access the a444 platform, including IP address, device identifiers, session timestamps, and browser fingerprint data. This collection occurs via server logs and, where applicable, cookies and similar tracking technologies (see Section 7).
• Payment providers: When you make a deposit or request a withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, or Mastercard, those payment providers may share transaction confirmation data with a444 to facilitate the processing of your transaction.
• Identity verification services: During KYC, a444 may use a licensed third-party identity verification service to cross-reference the identity documents you submit. Such services return a verification result to a444 but do not retain your documents on a444's behalf.
• Anti-fraud and compliance systems: a444 uses licensed third-party services for anti-money laundering screening and fraud detection. These services may provide risk scoring data to a444 based on transaction patterns.

a444 processes personal data only where a valid legal basis exists. The legal bases a444 relies upon are:

• Performance of a contract: Processing necessary to operate your a444 account, process deposits and withdrawals in PKR, record bets, and deliver the services you have contracted for by registering as an a444 user.
• Legal obligation: Processing required to comply with a444's gaming license conditions, anti-money laundering obligations, Know Your Customer requirements, and any order issued by a competent regulatory or law enforcement authority.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where such interests are not overridden by your rights and interests. a444 conducts a balancing assessment before relying on this basis for any new processing activity.
• Consent: Where a444 sends marketing communications beyond service notifications, we rely on your freely given, specific, and informed consent. You may withdraw marketing consent at any time from your account settings without affecting the lawfulness of prior processing.

a444 uses the personal data collected for the following specific purposes:

• Account management: Creating, maintaining, and managing your a444 account, including authentication, security, and account settings.
• Transaction processing: Processing PKR deposits via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank; processing withdrawal requests; maintaining your PKR wallet balance and transaction history.
• Identity verification and KYC: Verifying that you are who you claim to be, that you meet the 21+ age requirement, and that there are no legal prohibitions on your use of the a444 platform.
• Gaming and betting operations: Recording bets placed, calculating and crediting winnings, managing bonus allocations and wagering requirement tracking, and delivering the live casino and slot gaming services.
• Responsible gaming: Monitoring gaming behaviour patterns to identify potential problem gambling indicators, applying deposit limits and session controls you have set, and fulfilling self-exclusion requests.
• Fraud prevention and security: Detecting and preventing fraudulent transactions, unauthorised account access, multi-accounting, and other prohibited conduct as defined in the a444 Terms & Conditions.
• Anti-money laundering compliance: Fulfilling the AML and CTF obligations required by a444's international gaming license, including transaction monitoring and regulatory reporting where required.
• Customer support: Responding to enquiries, resolving disputes, and providing assistance through live chat and email support channels.
• Platform improvement: Analysing aggregated and anonymised usage data to improve the a444 platform's features, performance, and user experience for Pakistani players.
• Marketing communications: Sending promotional offers, PSL cricket betting updates, and bonus notifications — only where you have provided consent and only to the contact details you have registered.

a444 does not sell, rent, or commercially share your personal data. We share personal data only in the following limited circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard receive the minimum data necessary to process your specific transaction. Each payment provider operates under its own privacy policy and data protection obligations.
• Identity verification providers: Licensed KYC service providers receive identity document data solely for the purpose of verifying your identity and returning a verification result to a444. These providers are contractually prohibited from retaining or using your data for any other purpose.
• AML and fraud screening services: Licensed anti-money laundering and fraud detection partners may receive transaction data for risk scoring purposes under contractual data processing agreements with a444.
• Technology and hosting providers: a444's platform infrastructure and data hosting providers operate under strict data processing agreements and are permitted to process personal data only on a444's documented instructions.
• Regulatory and law enforcement authorities: a444 will disclose personal data to its licensing authority, financial regulators, or law enforcement agencies where required to do so by law, court order, or as part of its gaming license compliance obligations. a444 will, where legally permitted, notify you of such disclosure.
• Professional advisers: a444's legal, audit, and compliance advisers may access personal data on a strictly confidential, need-to-know basis when advising a444 on its legal and regulatory obligations.

All third parties with whom a444 shares personal data are required to maintain appropriate technical and organisational security measures and are prohibited from using your data for any purpose other than that for which it was shared.

a444 uses cookies and similar tracking technologies on the a444 platform. A cookie is a small text file placed on your device when you visit the platform. a444 uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies and security tokens. These cookies cannot be disabled without preventing access to the platform.
• Functional cookies: Remember your preferences such as language settings, game display preferences, and responsible gaming settings between sessions.
• Performance and analytics cookies: Collect aggregated, anonymised data about how users interact with the a444 platform to help us identify areas for improvement. Individual users are not identified from this data.
• Fraud prevention cookies: Assist in detecting and preventing fraudulent activity, including multi-accounting and bot activity, by identifying device fingerprints across sessions.

a444 does not use cookies to serve third-party advertising. You can manage cookie preferences through your browser settings. Note that disabling functional or performance cookies will not prevent you from using the platform but may affect your experience.

a444 retains personal data for the following periods:

• Active account data: Retained for the full duration of your a444 account relationship.
• Closed account data: Following account closure, a444 retains identity, financial, and gaming records for the period required under applicable gaming license and anti-money laundering legislation — typically five (5) to seven (7) years from the date of account closure, depending on the applicable jurisdiction's requirements.
• KYC documents: Retained for the statutory period required under anti-money laundering regulations applicable to a444's gaming license, and securely deleted thereafter.
• Marketing data: Retained until you withdraw marketing consent, at which point marketing preference data is updated immediately. Suppression records (to ensure you do not receive further marketing) are retained indefinitely.
• Support communications: Retained for three (3) years from the date of the interaction, or longer where the interaction is related to a dispute, complaint, or regulatory matter.
• Technical and session data: Log data is retained for up to twelve (12) months for security and fraud investigation purposes, and then deleted or anonymised.

a444 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction:

• Encryption in transit: All data transmitted between your device and a444's servers uses 256-bit SSL/TLS encryption.
• Encryption at rest: Sensitive data fields — including identity documents, payment details, and authentication credentials — are encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted to a444 personnel and authorised third parties who require it for a specific, documented purpose. Access is logged and audited.
• Two-factor authentication: a444 offers 2FA for all user accounts via registered Pakistani mobile numbers. Internal staff access to systems holding personal data requires mandatory 2FA.
• Penetration testing: a444's platform undergoes regular penetration testing by independent security specialists. Identified vulnerabilities are remediated according to severity within defined timescales.
• Incident response: a444 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to users' rights and interests, a444 will notify affected users and, where required, the applicable supervisory authority within the timescales required by law.

As an a444 account holder, you hold the following rights in relation to your personal data. Requests to exercise any of these rights should be submitted via your account dashboard or by contacting support at the details provided in Section 14.