cc444 Privacy Policy — How We Handle Your Personal Data

This Privacy Policy ("Policy") describes how cc444 ("cc444", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals who register accounts on, access, or interact with the cc444 online gaming platform available at cc444.cam ("the Platform").

cc444 is the data controller in respect of the personal data collected through the Platform. As data controller, cc444 is responsible for determining the purposes and means of personal data processing, and for ensuring that processing is carried out lawfully, fairly, and transparently in accordance with applicable data protection legislation.

This Policy applies to all registered cc444 account holders, prospective players who have initiated but not completed the registration process, and any individual who visits the cc444 Platform whether or not they hold a registered account.

cc444 collects personal data from a variety of sources in connection with the provision of its gaming platform services. The categories of personal data we collect are set out below:

2.1 — Registration Data

When you create a cc444 account, we collect:

• Full legal name;
• Date of birth (for age verification — 21+ policy);
• Residential address (including city and province in Pakistan);
• Pakistani mobile number (used for account authentication and two-factor verification);
• Email address (for account communications);
• Username chosen at registration.

2.2 — Identity Verification (KYC) Data

To comply with Anti-Money Laundering (AML) obligations and confirm player eligibility, cc444 may collect:

• Government-issued photo identification (e.g., CNIC — Computerised National Identity Card — for Pakistani players);
• Proof of address documentation dated within three months;
• Proof of payment method ownership (e.g., screenshot of JazzCash or EasyPaisa account);
• Selfie or facial verification image (for biometric comparison where required).

2.3 — Financial & Transaction Data

• Deposit and withdrawal transaction history;
• Payment method details (masked card numbers, mobile wallet identifiers — full card numbers are never stored by cc444);
• Wagering history and game session records;
• Bonus and promotional redemption history.

2.4 — Technical & Usage Data

• IP address and approximate geographic location at time of login;
• Device type, operating system, and browser information;
• Session duration, pages visited, and in-platform navigation patterns;
• Login timestamps and session activity logs.

2.5 — Communication Data

• Records of live chat conversations with cc444 support agents;
• Email correspondence sent to or received from cc444;
• Responses to cc444 surveys or feedback requests (where voluntarily provided).

cc444 processes your personal data for the following clearly defined purposes:

cc444 does not use personal data for automated decision-making that produces significant legal or similarly significant effects without human review, except as required for fraud prevention and AML screening — both of which are subject to human oversight protocols.

cc444 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and cc444 — including account management, payment processing, and provision of gaming services;
• Legal Obligation: Processing is required to comply with applicable law — including KYC/AML obligations under international gaming regulatory requirements;
• Legitimate Interests: Processing is necessary for cc444's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and anonymised analytics — where such interests are not overridden by your fundamental rights and freedoms;
• Consent: For processing activities where the law requires explicit consent — including opt-in marketing communications — cc444 will obtain your clear, informed, and freely given consent before processing. You have the right to withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

cc444 uses cookies and similar tracking technologies on the Platform to support platform functionality, user authentication, and service improvement. The following categories of cookies may be placed on your device:

• Strictly Necessary Cookies: Essential for the Platform to function correctly — including session management, login authentication, and security features. These cannot be disabled without impairing core platform functionality;
• Functional Cookies: Remember your preferences and settings — such as language, currency display, and game lobby layout — to personalise your cc444 experience between sessions;
• Analytical Cookies: Collect anonymised information about how players use the cc444 Platform — including pages visited and session durations — to help us identify areas for improvement. No personally identifying information is included in analytical data;
• Marketing Cookies: Used only with your explicit consent to personalise promotional communications. You can opt out of marketing cookies at any time via your account preferences.

You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies will impair your ability to use the cc444 Platform, including the login function. Blocking optional cookies will not affect core platform functionality.

cc444 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Data is shared with third parties only to the extent strictly necessary for platform operations and regulatory compliance, and only with parties who are bound by appropriate data protection obligations. The categories of third parties with whom cc444 may share your data are:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card scheme processors — to facilitate deposit and withdrawal transactions;
• KYC & Identity Verification Providers: Third-party identity verification services used to process and authenticate KYC documentation;
• Game Software Providers: Evolution Gaming, Ezugi, Pragmatic Play, and other licensed software studios — limited to the data necessary for game session management and RNG auditing;
• Regulatory Authorities: Disclosure to the gaming licensing authority, financial intelligence units, or law enforcement agencies where required by applicable law or regulation;
• IT Infrastructure & Security Partners: Cloud hosting providers and cybersecurity service providers engaged to maintain platform infrastructure and security — all subject to strict data processing agreements;
• Fraud Prevention Services: Third-party fraud detection and AML screening services — limited data is shared to validate transactions and identify suspicious patterns.

cc444 operates as an international gaming platform, and some processing of your personal data may involve transfers to countries or territories outside Pakistan. Where such transfers occur, cc444 ensures that appropriate safeguards are in place to maintain an equivalent level of data protection to that which applies within Pakistan.

Safeguards employed for international transfers include:

• Standard contractual clauses or equivalent contractual data protection obligations;
• Transfer to jurisdictions that maintain adequate data protection frameworks recognised under applicable international standards;
• Binding corporate rules where transfers occur between cc444 group entities;
• Explicit player consent where no other transfer mechanism is available and the transfer is in the player's interest.

For questions about international data transfers or to obtain copies of the relevant transfer safeguards, please contact cc444 via the details in Section 15.

cc444 retains personal data for defined periods based on the nature of the data and the purpose for which it was collected. The following retention schedule applies:

Upon expiry of the applicable retention period, cc444 will securely delete or irreversibly anonymise your personal data. Anonymised data that cannot be re-linked to any individual may be retained indefinitely for statistical and platform improvement purposes.

As a cc444 account holder, you hold the following rights in respect of your personal data processed by cc444. These rights are not absolute — they are subject to limitations imposed by applicable regulatory and legal obligations — but cc444 is committed to honouring them to the fullest extent permitted by law:

• Right of Access: You have the right to request a copy of all personal data cc444 holds about you. cc444 will respond to verified access requests within 30 days;
• Right to Rectification: If personal data held by cc444 is inaccurate or incomplete, you have the right to request that it be corrected. Many details can be updated directly within your cc444 account settings;
• Right to Erasure: In certain circumstances, you may request that cc444 delete your personal data. Note that this right is subject to cc444's regulatory data retention obligations — we cannot delete data we are legally required to retain;
• Right to Restriction: You may request that cc444 temporarily restrict the processing of your personal data — for example, while a rectification request is under review;
• Right to Data Portability: Where processing is based on consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format;
• Right to Object: You may object to processing based on cc444's legitimate interests — including direct marketing and some analytical processing — at any time;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

To exercise any of the above rights, contact cc444 via live chat or the support page. cc444 will acknowledge your request within 72 hours and fulfil it within the timeframes required by applicable law.

cc444 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• Transport Encryption: All data transmitted between your device and cc444 servers is encrypted using TLS 1.3 — the current industry-leading standard for transport layer security;
• Data-at-Rest Encryption: Personal data stored in cc444 databases is encrypted using AES-256, ensuring that stored data cannot be read even in the event of unauthorised server access;
• Password Hashing: Account passwords are never stored in readable form. All passwords are processed through a one-way cryptographic hashing function — meaning cc444 staff cannot read your password, and it cannot be recovered even in a data breach scenario;
• Access Controls: Access to personal data within cc444 systems is restricted to authorised personnel on a strict need-to-know basis, with role-based access controls and comprehensive audit logging;
• Two-Factor Authentication: cc444 offers SMS-based 2FA for all player accounts, adding a second layer of security beyond the login password;
• Regular Security Audits: cc444 engages independent third-party cybersecurity experts to conduct penetration testing and security audits on a regular schedule;
• Breach Response Protocol: In the event of a personal data breach that poses a risk to player rights and freedoms, cc444 is committed to notifying the relevant supervisory authority within 72 hours and affected players without undue delay.

Notwithstanding these measures, no online platform can guarantee absolute security. You are responsible for maintaining the security of your cc444 login credentials and must notify cc444 immediately if you suspect unauthorised access to your account.

The cc444 Platform is strictly for adults aged 21 and above. cc444 does not knowingly collect personal data from any individual under the age of 21. Age verification checks are applied at the point of registration and at the first withdrawal request as a mandatory control.

If cc444 becomes aware that personal data has been collected from a person under 21, we will:

• Immediately suspend the account pending investigation;
• Delete all personal data associated with the underage account, subject to any mandatory regulatory retention obligations that may apply;
• Refund any deposits made, minus any winnings which shall be forfeited in accordance with our Terms and Conditions;
• Report the matter to the relevant authority where required by applicable law.

The cc444 Platform may contain references to third-party services — such as game software providers or payment processors — whose own privacy practices govern data collected through those services. cc444 is not responsible for the privacy practices, data collection, or content of any third-party platforms or services.

Where you interact with a third-party service in connection with your use of cc444 — for example, when completing a JazzCash or EasyPaisa transaction — that third party's own privacy policy applies to the data you share with them directly. cc444 encourages you to review the privacy policies of any third-party services you use in connection with your cc444 account.

cc444 may send you promotional and marketing communications about bonuses, new games, sports betting markets, and platform features — but only where you have provided explicit consent to receive such communications at the point of registration or through your account preferences.

The following terms apply to cc444 marketing communications:

• Marketing communications are sent via SMS to your registered Pakistani mobile number and/or via email, depending on your stated preferences;
• You may opt out of marketing communications at any time by updating your preferences in your cc444 account settings, or by following the unsubscribe instructions included in any marketing message;
• Opting out of marketing communications does not affect your receipt of transactional or account-related communications — such as deposit confirmations, withdrawal notifications, or KYC requests — which are sent as necessary account communications regardless of marketing preference;
• cc444 will not use your personal data for third-party marketing purposes without your separate explicit consent.

cc444 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Effective Date" displayed at the top of this Policy indicates the date of the most recent revision.

Where changes are material — meaning they significantly affect how your personal data is processed or your rights as a data subject — cc444 will notify you via your registered email address or via a prominent notice displayed on the Platform before the changes take effect. For minor changes, updating the Effective Date on this page will constitute sufficient notice.

Continued use of the cc444 Platform following notification of changes to this Policy constitutes your acceptance of the revised Privacy Policy. It is your responsibility to review this page periodically to ensure you are aware of the current terms of our data processing.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how cc444 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 on the cc444 Platform in both Urdu and English. For data privacy queries, select "Account & Privacy" from the support menu;
• Support Page: Submit a written request via the cc444 Support page for privacy-specific queries that require detailed written responses;
• Email: [email protected] — please include "Privacy Query" in the subject line and your registered account username for faster processing.

cc444 will acknowledge all privacy-related queries within 72 hours and endeavour to resolve them within 30 days. Complex requests — such as data portability or erasure involving regulatory retention considerations — may require additional time, in which case cc444 will notify you of the expected resolution timeline.