ahc444 Privacy Policy

ahc444 collects personal data from you in three main ways: information you provide directly, information generated automatically when you use the platform, and information we receive from third-party service partners involved in delivering our services. The categories of data we collect are set out below.

Data You Provide Directly

When you register an account, use our services, or contact support, you may provide the following personal data:

Data Collected Automatically

When you access and use the ahc444 platform, certain technical data is collected automatically through your device, browser, and session activity:

• Device & Technical Data: IP address, device type and model, operating system, browser type and version, screen resolution, and connection type.
• Session Data: Login timestamps, session duration, pages visited, features accessed, game titles played, bet history, and platform navigation patterns.
• Location Data: Approximate geographic location derived from your IP address, used solely for fraud detection and compliance screening. We do not use GPS-level precise location tracking.
• Cookie & Tracking Data: Persistent session identifiers, preference cookies, and anonymised analytics data. See Section 04 (Cookies & Tracking) for full details.

Data Received from Third Parties

We may receive limited personal data about you from trusted third-party partners as part of delivering our services. This includes: payment confirmation data from bKash, Nagad, Rocket, and Upay (transaction status and reference numbers); identity verification results from our KYC verification provider; and fraud-risk signals from our fraud detection service partners. In all cases, third parties are contractually prohibited from sharing more data than is strictly necessary for the stated purpose.

ahc444 does not sell or rent your personal data to any third party. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for each stated purpose.

Service Partners and Processors

To deliver the ahc444 platform and its services, we engage a number of third-party data processors who act on our instructions. These include:

• Payment Processors: bKash, Nagad, Rocket (Dutch-Bangla Bank), and Upay receive the transaction data required to process your deposits and withdrawals. They do not receive your full account profile or betting history.
• Game Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a session token and anonymised player identifier to authenticate your game session. They do not receive your name, mobile number, or payment details.
• Identity Verification Provider: When you submit KYC documents, they are processed by our contracted identity verification service, which returns a pass/fail result to ahc444. Document images may be retained by the verification provider in accordance with their own data retention policy.
• Fraud Detection Services: Anonymised device and behavioural signals are shared with our fraud detection partner to assess transaction risk. No personally identifiable information beyond a hashed account identifier is shared.
• Cloud Infrastructure: The ahc444 platform is hosted on internationally recognised cloud infrastructure providers. All data is stored in encrypted form on their servers.

Legal and Regulatory Disclosure

ahc444 may disclose your personal data to law enforcement agencies, regulatory bodies, or other public authorities where we are legally required to do so — for example, in response to a valid court order, a government investigation into financial crime, or a regulatory inquiry. In such cases, we disclose only the minimum data required by the specific legal request and, where permitted by law, will notify you of the disclosure.

Business Transfers

In the event that ahc444's platform or business is acquired by, merged with, or transferred to another entity, your personal data may be transferred to the new operator as part of that transaction. You will be notified of any such transfer via the email address on your account, and the new operator will be required to honour the privacy commitments set out in this policy or provide you with a new policy before any material change to data processing takes effect.

ahc444 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure.

Technical Security Measures

• SSL/TLS Encryption: All data in transit between your device and ahc444's servers is encrypted using industry-standard TLS 1.2 or higher. This applies to all pages, including login, deposit, and account management flows.
• Password Hashing: Your ahc444 account password is never stored in plain text. It is processed through a one-way cryptographic hashing algorithm before being stored, meaning even ahc444 staff cannot read your password.
• Encrypted Data Storage: Personal data stored on ahc444's servers — including identity documents submitted for KYC verification — is encrypted at rest using AES-256 or equivalent encryption standards.
• Access Controls: Access to personal data within ahc444's systems is restricted to staff members who require it to perform their specific job function. Access rights are reviewed regularly and revoked immediately upon a staff member leaving the organisation.
• Intrusion Detection: ahc444's infrastructure is monitored continuously for unusual access patterns, injection attempts, and other indicators of attack. Automated alerts escalate suspected incidents to our security team.

Organisational Measures

Beyond technical controls, ahc444 maintains internal data protection policies that govern how staff handle personal data. These include mandatory data protection training for all staff with data access, a clear process for reporting and responding to suspected data breaches, and a data minimisation principle — meaning we actively avoid collecting data we do not need.

Data Breach Response

In the event of a confirmed personal data breach that poses a risk to affected players, ahc444 will notify affected account holders via their registered email or mobile number as soon as practicable after the breach is confirmed and assessed. The notification will describe the nature of the breach, the categories of data involved, the likely consequences, and the steps ahc444 is taking to address it.

As a registered player on the ahc444 platform, you hold a number of rights in relation to the personal data we hold about you. We are committed to honouring these rights promptly and without unnecessary obstacles.

Right of Access

You have the right to request a copy of the personal data ahc444 holds about you. Upon receiving a verified access request, we will provide a structured summary of your personal data within 5 business days. This includes your account data, identity data, transaction history, and any support correspondence on file.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Most account data (such as email address and contact number) can be updated directly via your account dashboard. For corrections to identity data (name, date of birth), please contact support with supporting documentation.

Right to Erasure

You may request deletion of your personal data where: the data is no longer necessary for the purpose it was collected; you withdraw your consent and there is no other lawful basis for processing; or the data has been processed unlawfully. Please note that erasure requests cannot be fulfilled where retention is required by law (e.g., AML record-keeping obligations) or where the data is needed to resolve an open dispute involving your account.

Right to Restrict Processing

In certain circumstances — for example, where you contest the accuracy of your data or object to how it is being used — you may request that we pause processing of your personal data while the matter is reviewed. Your account may be placed in a restricted state during this period.

Right to Object to Marketing

You have the right to object to receiving marketing communications from ahc444 at any time. To opt out of all marketing messages, contact support via live chat or email [email protected] with the subject line "Marketing Opt-Out". Opting out does not affect transactional or security-related communications, which will continue as normal.

How to Exercise Your Rights

To exercise any of the rights described above, contact the ahc444 privacy support team at [email protected] with the subject line "Privacy Request — [Right Type]" (e.g., "Privacy Request — Access" or "Privacy Request — Erasure"). We will acknowledge your request within 24 hours and provide a full response within 5 business days. We may need to verify your identity before processing certain requests.