Privacy Policy – 444 x Online Gaming Platform Pakistan

This Privacy Policy is published by 444 x ("the Platform", "we", "us", "our"), the operator of the online gaming platform accessible at 444x.im. It explains how we collect, use, store, share and protect the personal information of players ("you", "your") who register and use the platform from Pakistan.

We take privacy seriously — not just because it is legally required, but because Pakistani players deserve to know exactly what happens with their data when they trust us with it. This policy is written to be readable. Where we have had to use a technical or legal term, we explain it in the same sentence.

This Privacy Policy should be read alongside our Terms and Conditions and Responsible Gaming policy, both of which are published on 444 x and form part of the overall agreement between you and the platform.

444 x collects personal data in two ways: information you provide directly and information collected automatically when you use the platform.

Information you provide directly:

• Registration data: Full name, date of birth, email address, phone number and preferred payment method at the time of account creation.
• Identity verification (KYC) documents: Copy of CNIC or other valid Pakistani national identity document, and proof of the payment method used (e.g. screenshot of Easypaisa or JazzCash wallet showing your name).
• Payment information: Details necessary to process deposits and withdrawals — for Easypaisa and JazzCash, this includes the mobile number registered to the wallet. For bank transfers, IBAN. For card payments, the card number is handled directly by our payment processor and not stored on 444 x servers.
• Customer support communications: Records of chat conversations, emails and support tickets you submit to the 444 x team.
• Self-reported preferences: Responsible gaming settings including deposit limits, session reminders and self-exclusion elections you configure in your account.

Information collected automatically:

• Device and browser data: Device type, operating system, browser version, screen resolution and device identifiers used to optimise the platform for your setup.
• Session and usage data: Pages visited, games played, bet amounts, session duration, login timestamps and navigation patterns within the platform.
• IP address and approximate location: Your IP address is logged for fraud prevention, geolocation checks and security monitoring. We do not track precise GPS location.
• Cookies and similar technologies: Session tokens, preference cookies and analytics identifiers as described in detail in Section 8.

Every piece of data 444 x collects is used for a specific, documented purpose. We do not collect data speculatively. Here is what each category of data is used for:

Under data protection principles, 444 x must have a valid legal reason for each type of data processing it carries out. We rely on the following bases:

• Contract performance: Most of our data processing is necessary to deliver the gaming service you signed up for — operating your account, processing payments and running the games you play.
• Legal obligation: We are required by our gaming licence and applicable anti-money laundering (AML) regulations to collect and retain certain data — particularly identity verification documents and transaction records.
• Legitimate interests: Fraud prevention, platform security monitoring and improving the gaming experience are legitimate interests that require some data processing. We balance these against player privacy and do not use legitimate interests to justify collection beyond what is proportionate.
• Consent: Where we send you marketing communications, we rely on your specific consent. You can withdraw consent at any time. Withdrawal of marketing consent does not affect your ability to use the platform.

444 x does not sell your personal data. We share data only with the following categories of organisations, and only to the extent necessary for the stated purpose:

• Licensed game providers: When you play a game on 444 x, the game is typically delivered by a third-party game studio (such as Pragmatic Play, Evolution or similar). Your player ID and session data are transmitted to that provider to run the game. Game providers are contractually bound to data protection standards equivalent to our own and may not use this data for any purpose beyond game delivery.
• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners and card processors receive the minimum payment data necessary to process transactions. 444 x does not store full card numbers — card payment processing happens on PCI-DSS compliant processor infrastructure.
• Fraud and security providers: Third-party fraud detection services may receive device fingerprints, IP addresses and session metadata to identify suspicious activity. These providers act as processors under our instruction.
• Regulatory and legal authorities: Where required by applicable law, gaming regulations or court order, 444 x will disclose player information to relevant authorities. We cannot decline legally mandated disclosures.
• Professional advisers: Lawyers, auditors and accountants may access data to the minimum extent necessary for their professional function, under strict confidentiality obligations.

We keep your personal data only for as long as it is needed for the purpose it was collected, or for as long as we are legally required to retain it. Here is our standard retention schedule:

• Account registration data: Retained for the duration of your active account plus 5 years after account closure. This period is required to respond to disputes and comply with gaming regulatory record-keeping requirements.
• KYC identity documents: Retained for 5 years from the date of verification or from account closure, whichever is later. AML regulations mandate this retention period.
• Transaction and payment records: Retained for 7 years from the date of each transaction. Financial record-keeping obligations require this extended period.
• Game history and bet records: Retained for 5 years from the date of each game session. Used for dispute resolution and responsible gaming monitoring.
• Customer support communications: Retained for 3 years from the date of the last interaction in a support thread.
• Marketing consent records: Retained for the duration of your consent being active plus 2 years after withdrawal, to demonstrate compliance.
• Self-exclusion records: If you have permanently self-excluded from 444 x, your exclusion status is retained indefinitely to prevent re-registration.

When the retention period for a data category expires, the data is securely deleted or anonymised so it cannot be linked back to you.

444 x implements technical and organisational measures appropriate to the sensitivity of the data we hold. These include:

• Encryption in transit: All data transmitted between your browser or mobile device and our servers is encrypted using TLS 1.2 / 1.3 (256-bit SSL). The padlock icon in your browser confirms this is active.
• Encryption at rest: Sensitive data fields — including identity document references, payment method identifiers and CNIC numbers — are encrypted in the database using AES-256.
• Access controls: Access to player data within 444 x is restricted on a need-to-know basis. Staff access is logged and reviewed. No bulk export of player data is permitted without multi-person authorisation.
• Two-factor authentication: Available and strongly recommended for all 444 x player accounts. When enabled, a verification code is required at each login in addition to your password.
• Penetration testing: The platform undergoes regular security assessments by qualified independent security professionals.
• Fraud monitoring: Automated systems monitor account activity 24/7 for patterns indicative of account takeover, credential stuffing or fraudulent payment activity.

444 x uses cookies and similar technologies to keep the platform working properly, maintain your login session and gather aggregate analytics about how players use the site. We do not use advertising cookies or cross-site tracking technologies.

The cookies we use fall into the following categories:

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in and using the platform. Disabling functional or analytics cookies will not prevent you from playing but may affect some personalisation features.

As a player on 444 x, you have the following rights regarding your personal data. To exercise any of these rights, contact us using the details in Section 14. We will respond within 30 days and will not charge a fee for reasonable requests.

444 x sends marketing communications — including bonus offers, promotions, new game announcements and event invitations — only to players who have given explicit consent to receive them. Consent is requested during registration and can be changed at any time.

• We send marketing via email and SMS to the contact details registered on your account. We do not send marketing via WhatsApp, social media direct message or telephone call unless you have specifically consented to that channel.
• Every marketing email from 444 x includes an unsubscribe link at the bottom. Clicking it removes you from our marketing list immediately — no need to log in or contact support.
• You can also update your marketing preferences at any time through the notification settings in your 444 x account dashboard.
• Withdrawing marketing consent does not affect your ability to use the platform, access your balance or receive transactional notifications (deposit confirmations, withdrawal updates, security alerts). Transactional communications are not marketing and do not require separate consent.
• If you opt out of all marketing and later wish to receive promotions again, you can re-enable marketing in your account settings. Historic offers that expired during your opt-out period cannot be retroactively claimed.

444 x strictly prohibits the use of its platform by persons under the age of 18. We do not knowingly collect personal data from minors.

During registration, players self-certify that they are 18 or over. We additionally verify age as part of the KYC process by reviewing identity documents before processing the first withdrawal. Any account found to belong to a person under 18 will be closed immediately, all funds forfeited, and the matter may be escalated to the relevant authority.

If you are a parent or guardian and believe your minor has created a 444 x account, please contact us immediately at the email address in Section 14. We will investigate and close the account within 24 hours of a verified complaint, returning any deposits made by the minor to the original payment source after identity confirmation.

The 444 x platform may contain links to third-party services — for example, payment provider websites or responsible gaming resources. This Privacy Policy applies only to 444 x and does not cover the practices of any third-party site or service that we link to.

When you follow a link to a third-party site, you leave the 444 x environment and your activity on that site is governed by that site's own privacy policy. We encourage you to review the privacy policies of any third-party site before providing personal information to it.

444 x reserves the right to update this Privacy Policy to reflect changes in our data practices, changes to applicable law, or changes to the platform's features and services.

• When material changes are made, registered players will be notified by email to their registered address. The notification will clearly describe what has changed and when the changes take effect.
• A notification may also be displayed as a banner on the platform at next login for 14 days following a material update.
• Continued use of the 444 x platform after the effective date of a policy update constitutes acceptance of the revised policy.
• If you do not agree with an update, you may close your account before the effective date by contacting support. Closure requests submitted before the update date will be processed under the previous policy version.
• The "Last Updated" date at the top of this page always reflects the most recent revision. Previous versions of this policy are available on request.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how 444 x has handled your personal information, please use the following official contact channels:

Formal complaints: If you have raised a privacy concern with 444 x and are not satisfied with our response within 30 days, you have the right to escalate your complaint to the supervisory authority or gaming regulator under whose jurisdiction the platform operates. Details of the relevant authority will be provided to you when a complaint is formally acknowledged.