Privacy Policy — How cy2044 Collects, Uses, and Protects Your Data

cy2044 does not sell or rent your personal data to any third party. We share your data only with the following categories of recipient, and only to the minimum extent necessary: (a) Payment providers — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card networks — to process your transactions; (b) Game software providers such as Pragmatic Play, Evolution Gaming, and Spribe, to the extent required to deliver the games you play; (c) Identity verification and fraud prevention service providers engaged to perform KYC and AML checks on our behalf; (d) IT and hosting service providers who store and process data on cy2044's behalf under strict confidentiality obligations; (e) Law enforcement authorities or regulatory bodies where disclosure is required by applicable law or court order. All third-party processors are required to handle your data securely and in accordance with our instructions.

cy2044 operates primarily from servers located in jurisdictions with robust data protection frameworks. Where your personal data is transferred outside Bangladesh to a service provider in another country, cy2044 ensures that appropriate safeguards are in place — such as standard contractual clauses or equivalent data protection agreements — to maintain the same level of protection for your data as is described in this Policy. By using the cy2044 platform, you acknowledge and consent to this potential transfer of data.

cy2044 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. In practice: active account data is retained for the lifetime of your account plus a minimum of five years following account closure, in order to meet AML record-keeping obligations; transaction records are retained for a minimum of five years; customer support communications are retained for three years; marketing preference records are retained until you withdraw consent or for two years of account inactivity, whichever is sooner. When data is no longer needed, it is securely deleted or anonymised.

cy2044 uses cookies and similar tracking technologies on its website. We use: (a) Essential cookies — strictly necessary for the website to function, including session authentication tokens and security cookies; (b) Analytics cookies — used to understand how players navigate the site so that we can improve performance and user experience; (c) Preference cookies — used to remember your language and display settings. We do not use third-party advertising cookies or cross-site tracking cookies. You can control or delete cookies through your browser settings. Disabling essential cookies may impair the functionality of the cy2044 platform.

cy2044 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include: SSL/TLS encryption for all data in transit; encryption of sensitive data at rest; role-based access controls limiting staff access to personal data on a need-to-know basis; regular security assessments and vulnerability testing; and a formal incident response procedure. In the unlikely event of a data breach that is likely to result in risk to your rights and freedoms, cy2044 will notify affected players promptly and take all necessary steps to contain the breach.

As a data subject, you have the following rights in relation to your personal data held by cy2044: (a) Right of access — you may request a copy of the personal data we hold about you; (b) Right to rectification — you may request correction of inaccurate or incomplete data; (c) Right to erasure — you may request deletion of your data where we no longer have a legal basis to retain it; (d) Right to restriction — you may ask us to restrict processing of your data in certain circumstances; (e) Right to data portability — you may request your data in a structured, commonly used, machine-readable format; (f) Right to object — you may object to processing based on legitimate interests. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days of receiving a valid request.

cy2044 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a person under 21 has created an account or provided us with personal data, we will immediately suspend the account, delete the associated data, and return any deposited funds to the source payment method. If you believe a minor has accessed cy2044, please notify us immediately at [email protected].

cy2044 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. When we make a material change to this Policy, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered players via email. Your continued use of the cy2044 platform after an updated Policy has been published constitutes your acceptance of the revised terms. We encourage you to review this page periodically.