br044 Privacy Policy

01 Overview & Data Controller

This Privacy Policy ("Policy") describes how br044 ("br044", "we", "us", "the Company") collects, uses, stores, and protects the personal data of individuals ("you", "the Player", "the User") who access or use the br044 platform available at br044.net, including all associated betting, casino, payment, account, and support services.

br044 is the data controller responsible for personal data processed in connection with the br044 platform. As data controller, br044 determines the purposes and means by which your personal data is processed and is accountable for ensuring that processing is carried out lawfully, fairly, and transparently.

This Policy applies to all personal data collected through: account registration, KYC verification, deposits and withdrawals, gameplay and betting activity, customer support interactions, email and marketing communications, and your browsing activity on br044.net.

02 Personal Data We Collect

br044 collects personal data across several categories depending on how you interact with the platform. The following table summarises the main categories of data collected and the context in which they are gathered:

br044 does not collect sensitive personal data (such as biometric data beyond KYC photos, health information, religious beliefs, or political opinions) unless specifically required by applicable law or with your explicit consent.

03 How We Use Your Personal Data

br044 uses your personal data for the following purposes:

• Account Creation & Management: To register your br044 account, verify your identity, maintain your account settings, and communicate important account-related notices to you.
• Service Delivery: To process your deposits and withdrawals, settle your bets, award bonuses, operate the casino, and provide all other br044 platform features you access.
• KYC & AML Compliance: To verify that you meet the 21+ age requirement, confirm your identity, and meet anti-money-laundering (AML) obligations under applicable law. This includes screening your data against sanctions lists and politically exposed person (PEP) databases.
• Fraud Detection & Platform Integrity: To detect and prevent multi-accounting, bonus abuse, collusion, match-fixing, and other forms of fraud or prohibited conduct as defined in the br044 Terms and Conditions.
• Responsible Gaming: To monitor gambling behaviour for signs of problem gambling, apply responsible gaming limits you have set, and reach out proactively where our systems identify patterns that may indicate gambling harm.
• Customer Support: To respond to your queries, resolve complaints, and provide technical assistance related to your br044 account or any transaction on the platform.
• Marketing & Promotions: To send you information about br044 promotions, offers, and new features — but only where you have provided consent to receive marketing communications. You can withdraw marketing consent at any time through your account settings or by emailing [email protected].
• Analytics & Platform Improvement: To understand how players use the br044 platform, identify bugs and usability issues, and improve our product offering. Analytics data is aggregated and anonymised where possible.
• Legal Obligations: To comply with applicable laws, respond to lawful requests from regulators or law enforcement, and exercise or defend legal claims.

04 Legal Basis for Processing

br044 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing necessary to perform our contract with you — i.e., to provide the betting and casino services you have signed up for and to manage your account.
• Legal Obligation: Processing necessary to comply with our legal obligations, including AML/KYC requirements, age verification, tax reporting, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing necessary for br044's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

05 Data Sharing & Disclosure

br044 does not sell or rent your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, Visa, and Mastercard receive transaction data necessary to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML compliance providers who assist with identity verification, age checks, and sanctions screening.
• Casino Game Providers: Software suppliers who provide the RNG and live dealer casino games available on br044 may receive your player ID and gameplay data for settlement and regulatory compliance purposes.
• Fraud Prevention Services: Third-party fraud detection platforms that help br044 identify suspicious patterns, multi-accounting, and bonus abuse.
• Analytics Providers: Anonymised and aggregated platform usage data may be shared with analytics service providers to support platform development. These providers do not receive personally identifiable information.
• Regulatory Authorities & Law Enforcement: br044 will disclose personal data to regulators, licensing authorities, or law enforcement agencies where required by law or in response to a lawful request. br044 will notify you of such disclosures where legally permitted to do so.
• Group Companies: br044 may share data with affiliated group entities where necessary for the operation of the platform, subject to intra-group data sharing agreements that provide equivalent protections.

All third-party data processors engaged by br044 are required to process data only in accordance with br044's instructions, maintain appropriate security measures, and comply with applicable data protection law. br044 does not permit its processors to use your data for their own independent purposes.

06 Cookies & Tracking Technologies

br044.net uses cookies and similar tracking technologies to operate the platform, improve user experience, and gather anonymised analytics data. The following categories of cookies are used:

br044 does not use third-party advertising cookies or cross-site tracking cookies. You can manage your cookie preferences at any time through your browser settings. Disabling essential cookies will impair or prevent the operation of the br044 platform. Most modern browsers allow you to view, manage, and delete cookies through the browser's privacy or settings menu.

07 Data Retention

br044 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as a baseline:

• Account Data: Retained for the duration of your active account plus 5 years following permanent account closure, to meet AML and regulatory audit requirements.
• KYC Documents: Retained for a minimum of 5 years following the end of the business relationship, in accordance with anti-money-laundering legislation.
• Transaction Records: Deposits, withdrawals, and betting transaction records are retained for 7 years to meet financial reporting and audit obligations.
• Customer Support Records: Support tickets and communications are retained for 3 years from the date of the last interaction, or longer if the matter relates to an ongoing dispute or legal proceeding.
• Analytics Data: Anonymised aggregated analytics data may be retained indefinitely for historical platform performance analysis. Personally identifiable analytics data is anonymised or deleted within 26 months of collection.
• Marketing Consent Records: Records of marketing consent and withdrawal of consent are retained for 5 years to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data must be retained for legal proceedings, it will be quarantined from operational systems during the hold period.

08 Security Measures

br044 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Key security measures include:

• Transport Encryption: All data in transit between your device and br044 servers is encrypted using TLS 1.3 with strong cipher suites. HTTPS is enforced across br044.net with HTTP Strict Transport Security (HSTS) headers.
• Data Encryption at Rest: Personal data stored in br044 databases is encrypted at rest using AES-256 encryption. Encryption keys are managed through a dedicated key management service.
• Access Controls: Access to personal data within br044's internal systems is restricted on a role-based, need-to-know basis. All internal access is logged and subject to periodic review.
• Password Security: Account passwords are stored using bcrypt hashing with a high work factor. Plain-text passwords are never stored or logged. br044 recommends using a unique, strong password for your br044 account.
• Two-Factor Authentication: Two-factor authentication (2FA) is available to all br044 account holders and is strongly recommended. br044 may require 2FA for high-value withdrawal requests.
• Penetration Testing: br044's platform undergoes regular security audits and penetration tests conducted by qualified third-party security specialists.
• Incident Response: br044 maintains a formal data breach incident response procedure. In the event of a data breach that poses a risk to your rights and freedoms, br044 will notify you and the relevant supervisory authority as required by applicable law.

09 Your Privacy Rights

As a br044 player, you have the following rights with respect to your personal data. These rights are not absolute in all circumstances — some are subject to legal exceptions — but br044 will always respond to your request and explain any limitations that apply:

• Right of Access: You may request a copy of the personal data br044 holds about you, along with information about how it is being used (a "Subject Access Request" or SAR).
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you. For account details, many fields can be updated directly through your br044 account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where you have objected to processing based on legitimate interests. This right is subject to overriding legal retention obligations (e.g., AML record-keeping requirements).
• Right to Restriction of Processing: You may request that br044 restricts processing of your data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing pending verification of legitimate grounds.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request receipt of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests at any time. br044 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests. You have an absolute right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact the br044 Data Protection Officer at [email protected] with the subject line "Privacy Rights Request" and a description of your request. br044 will acknowledge your request within 5 business days and respond substantively within 30 calendar days. In complex or high-volume cases, this period may be extended by a further 30 days with notice.

10 Minors & Age Policy

The br044 platform is strictly for users who are 21 years of age or older. br044 does not knowingly collect personal data from individuals under the age of 21. Age is verified as part of the mandatory KYC process that must be completed before any withdrawal can be processed.

If br044 discovers or is notified that it has collected personal data from a person under the age of 21, the relevant account will be closed immediately, all data will be deleted (except where retention is required by law), and any associated funds will be handled in accordance with the br044 Terms and Conditions and applicable licensing requirements.

br044 encourages parents and guardians in Pakistan to use parental control and internet filtering software to prevent minors from accessing online gambling platforms. If you believe a minor in your household has accessed or registered on the br044 platform, please contact us immediately at [email protected].

11 International Data Transfers

br044 operates internationally and may transfer your personal data to servers and service providers located in countries outside Pakistan. Such transfers are necessary to provide the br044 platform — for example, to cloud infrastructure providers, KYC verification services, and game software suppliers who may be based in other jurisdictions.

Where personal data is transferred to countries that do not provide an equivalent level of data protection to that available in Pakistan, br044 ensures appropriate safeguards are in place, including:

• Standard contractual clauses (SCCs) or equivalent data transfer agreements between br044 and the recipient entity
• Binding corporate rules (BCRs) where data is transferred to affiliated group entities
• Transfer to countries recognised as providing adequate data protection by relevant regulatory bodies

Details of the safeguards in place for specific international transfers are available on request from the br044 Data Protection Officer.

12 Third-Party Links & Services

The br044 platform may contain references to third-party services — such as payment processors or game providers — whose own privacy policies govern the collection and use of your data when you interact with those services directly. br044 is not responsible for the privacy practices of third-party services and recommends that you review their policies independently.

This Privacy Policy applies solely to the br044 platform at br044.net. It does not apply to any third-party website or service that may be linked to from within the platform, whether in documentation, support resources, or game provider interfaces.

13 Changes to This Privacy Policy

br044 reserves the right to update this Privacy Policy at any time to reflect changes in law, regulatory requirements, our data processing practices, or new platform features. When material changes are made, br044 will update the effective date at the top of this Policy and, where practicable, notify registered players by email prior to the changes taking effect.

Your continued use of the br044 platform following any update to this Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not accept the revised Policy, you must cease using the platform and may request account closure in accordance with the br044 Terms and Conditions.

We recommend bookmarking this page and reviewing it periodically. The most current version of this Privacy Policy is always the authoritative version and supersedes all prior versions.

14 Contact & Data Protection Officer

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or want to raise a data protection concern, please contact the br044 Data Protection Officer (DPO):

• Email: [email protected] — subject line: "Privacy / DPO Request"
• Response Time: Acknowledgement within 5 business days; substantive response within 30 days
• Support Hours: 9 AM – 2 AM PKT, daily

If you are not satisfied with br044's response to your privacy concern, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction. br044 will cooperate fully with any supervisory authority investigation.