group44 Privacy Policy

1. Introduction and Scope

group44 ("we", "us", "our") is committed to protecting the privacy and personal data of all individuals who access or use the group44 platform at https://group44.co, including its live casino, sports betting, slot games, poker, and associated support and promotional services (collectively, the "Platform"). This Privacy Policy ("Policy") describes how group44 collects, uses, stores, shares, and protects personal data in connection with your use of the Platform.

This Policy applies to all registered players, prospective players who interact with the Platform without completing registration, and visitors to the group44 website. By accessing the Platform or completing account registration, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside the group44 Terms & Conditions and Responsible Gaming policy.

group44 may update this Policy from time to time to reflect changes in its data processing practices or applicable law. Material changes will be communicated to registered users via their registered email address or via a prominent notice on the Platform. Continued use of the Platform following such notice constitutes acceptance of the updated Policy.

2. Personal Data We Collect

group44 collects personal data in several ways — directly from you when you register or interact with the Platform, automatically through your use of the Platform, and in limited circumstances from third-party verification or fraud-prevention services. The categories of personal data we collect include:

• Identity Data: Full legal name, date of birth, national identification number or passport number (collected for age and identity verification purposes), and a photograph of your identification document where required.
• Contact Data: Email address, mobile phone number, and residential address. For players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, or elsewhere in Malaysia, this includes your Malaysian postcode and state of residence.
• Account Data: Username, account password (stored in hashed form only), account preferences, responsible gaming settings, self-exclusion records, and communication preferences.
• Financial Data: Payment method details (such as bank account information used for FPX transfers, or e-wallet identifiers for Touch 'n Go eWallet, Boost, GrabPay, or DuitNow), transaction history including deposit and withdrawal records, and balance information. Full payment card numbers are never stored by group44.
• Gaming Activity Data: Game session records, wagering history, bonus usage, win and loss records, and live casino session data.
• Technical Data: IP address, device type and identifier, browser type and version, operating system, time zone, and referring URLs. This data is collected automatically when you access the Platform.
• Communications Data: Records of your communications with the group44 support team, including live chat transcripts and email correspondence.

3. Purposes and Legal Basis for Processing

group44 processes your personal data only where a lawful basis for doing so exists. The primary purposes for which we process personal data, and the corresponding legal bases, are as follows:

• Account Registration and Service Provision: Processing is necessary for the performance of the contract between you and group44. This includes verifying your identity, creating and maintaining your account, processing deposits and withdrawals, and providing access to all Platform features.
• Age and Identity Verification: Processing is necessary for compliance with group44's legal obligations under its operating licence and applicable anti-money laundering and know-your-customer requirements. group44 is required to verify that all players are aged 21 or above before permitting real-money gambling activity.
• Fraud Prevention and Security: Processing is necessary for the purposes of group44's legitimate interests in preventing fraud, money laundering, collusion, and other prohibited activities, as well as in maintaining the security and integrity of the Platform.
• Regulatory Compliance and Reporting: Processing is necessary for compliance with group44's legal obligations, including transaction reporting, record retention, and cooperation with regulatory or law enforcement authorities where required.
• Responsible Gaming Monitoring: Processing is necessary for group44's legitimate interests in identifying and supporting players who may be exhibiting signs of problem gambling behaviour, in accordance with our responsible gaming obligations.
• Marketing Communications: Where you have provided consent, group44 may use your contact data to send you information about promotions, new games, and other offers. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Platform Analytics and Improvement: Processing is necessary for group44's legitimate interests in understanding how players use the Platform, identifying technical issues, and making improvements to the user experience.

4. Cookies and Tracking Technologies

group44 uses cookies and similar technologies (including local storage and session tokens) to enable core Platform functionality, manage authenticated sessions, and collect aggregate analytics data. The categories of cookies used are:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your group44 account during a session. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings and responsible gaming reminder intervals.
• Analytics Cookies: Used to collect aggregate, anonymised data about how visitors use the Platform. This data is used to improve Platform performance and user experience. Individual user behaviour is not shared with third parties in identifiable form.

group44 does not place third-party advertising cookies or use cross-site tracking for retargeting purposes. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies will affect your ability to use the Platform.

5. Sharing and Disclosure of Personal Data

group44 does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly for the purposes described in Section 3:

• Payment Processing Partners: Financial data is shared with payment processors and banking partners (including those facilitating Touch 'n Go eWallet, DuitNow, FPX, Maybank2u, CIMB Clicks, and other supported payment methods) to the extent necessary to process your transactions.
• Identity Verification Providers: Identity and contact data may be shared with third-party KYC and age-verification service providers for the purpose of verifying your identity and age in accordance with group44's regulatory obligations.
• Game Content Providers: Gaming activity data may be shared with certified game studios and live casino operators whose games are available on the group44 Platform, to the extent required for game operation, RNG certification, and dispute resolution.
• Regulatory and Law Enforcement Authorities: group44 may disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, court order, or in connection with the investigation of suspected fraud or criminal activity.
• Professional Advisers: In limited circumstances, personal data may be shared with legal advisers, auditors, or other professional service providers where necessary for group44 to obtain professional advice or conduct proceedings.

All third-party service providers who process personal data on group44's behalf are required to do so under data processing agreements that obligate them to process such data only for specified purposes and to maintain appropriate security measures.

6. Data Retention

group44 retains personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable law or group44's operating licence. Specific retention periods include:

• Account and identity data: retained for the duration of the account and for a minimum of 5 years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Financial transaction records: retained for a minimum of 5 years from the date of each transaction.
• Gaming activity data: retained for 2 years from the date of each session, subject to any ongoing regulatory review or dispute.
• Support communications: retained for 2 years from the date of the communication.
• Marketing consent records: retained for the duration of the consent and for 1 year following withdrawal, to demonstrate that marketing was sent on the basis of valid consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with group44's data deletion procedures.

7. Data Security

group44 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the group44 Platform;
• Encryption of sensitive data fields at rest within group44's databases;
• Password hashing using industry-standard algorithms with per-account salting;
• Role-based access controls limiting access to personal data to authorised personnel only;
• Regular security assessments and penetration testing of the Platform;
• Monitoring for unusual access patterns that may indicate unauthorised access or account compromise.

Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed as absolutely secure. Players are encouraged to use strong, unique passwords for their group44 accounts and to enable two-factor authentication where available.

8. Your Data Rights

Subject to applicable law and group44's legitimate interests and legal obligations, you have the following rights in relation to your personal data held by group44:

• Right of Access: You may request a copy of the personal data group44 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to group44's legal retention obligations.
• Right to Restrict Processing: You may request that group44 restrict processing of your personal data in certain circumstances, such as where you contest its accuracy.
• Right to Object: You may object to processing based on group44's legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the group44 support team via live chat or email at [email protected]. group44 will respond to data rights requests within 30 days of receipt, or notify you if an extension of that period is required.

9. Children and Minors

The group44 Platform is strictly intended for adults aged 21 and above. group44 does not knowingly collect personal data from any person under the age of 21. If group44 becomes aware that personal data has been collected from a person under the required age, that data will be deleted and the associated account closed immediately. If you believe that a minor may have accessed the Platform using your account or devices, please contact group44 support immediately.

10. Contact for Privacy Matters

For questions, concerns, or requests relating to this Privacy Policy or group44's data processing practices, please contact:

• Live chat: available 24/7 via the group44 Platform (fastest response)
• Email: [email protected] (plain text; not a clickable link)

group44 aims to acknowledge all privacy-related queries within 2 business days and to resolve them within 30 days of receipt.