m444 Privacy Policy — How We Protect Your Data

m444 is an online gaming platform operating under an international online gaming licence and accessible to players at m444.lat. In the context of this Privacy Policy, "m444", "we", "us", and "our" refer to the entity responsible for operating the m444 platform and for determining how and why your personal data is processed.

m444 is the data controller in respect of all personal data collected from players and visitors to the m444 platform. If you have any questions about how m444 handles your personal data, please contact us at the address set out in Section 13 of this Policy.

m444 collects the following categories of personal data from players and platform visitors. The specific data points collected depend on how you interact with m444:

We do not collect special category data (such as health, racial, or political data) unless specifically required for responsible gaming compliance purposes — for example, if a player self-discloses a gambling-related issue when requesting self-exclusion support.

m444 collects personal data through the following means:

• Direct provision by you: When you register an m444 Account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a promotional offer, you provide data directly to m444.
• Automated technical collection: When you visit m444.lat or use the m444 app, we automatically collect technical data including your IP address, device identifiers, session duration, and navigation behaviour via cookies and similar tracking technologies. See Section 7 for more detail.
• Third-party payment processors: When you transact via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20, our payment processing partners may share transaction confirmation data with m444 necessary to credit or debit your account.
• Identity verification providers: During KYC verification, m444 may use third-party identity verification services to authenticate your CNIC or other identity documents. These providers share verification outcomes (pass/fail) and relevant data with m444.
• Fraud and AML screening services: m444 may receive data from third-party fraud detection and anti-money laundering screening providers in the course of regulatory compliance checks.

m444 uses the personal data it collects for the following specific purposes:

• Account creation and management: To create and maintain your m444 player account, authenticate your identity at login, and provide you with access to all m444 services.
• Age and identity verification (KYC): To verify that you are 21 or older and to confirm your identity as required under our international gaming licence.
• Transaction processing: To process deposits and withdrawals in PKR via your chosen payment method and to maintain an accurate record of your financial activity on the platform.
• Responsible gaming compliance: To administer deposit limits, self-exclusion periods, cooling-off periods, and session time reminders that you have set, and to monitor for signs of problem gambling behaviour as required by our licensing obligations.
• Anti-money laundering (AML) and fraud prevention: To comply with AML requirements under our gaming licence, including source of funds checks on significant transactions and monitoring of unusual account activity.
• Customer support: To respond to your queries, resolve disputes, and manage complaints efficiently.
• Platform improvement: To analyse technical and gaming activity data in aggregate (where possible, in anonymised form) to improve platform performance, fix bugs, and develop new features.
• Marketing communications: To send you promotional offers, bonuses, and updates about m444 — but only where you have consented to receive such communications. You may opt out at any time.
• Legal compliance: To comply with applicable laws, court orders, and regulatory obligations imposed by m444's gaming licence authority.

m444 processes your personal data on one or more of the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing required to perform the contract between you and m444 — i.e., to operate your account, process transactions, and deliver gaming services.
• Legal obligation: Processing required to comply with m444's obligations under its gaming licence, including KYC, AML, responsible gaming, and tax reporting requirements.
• Legitimate interests: Processing for purposes such as fraud prevention, platform security, and aggregated analytics, where m444's interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and certain cookie usage, where you have given clear, informed, and freely withdrawable consent.

m444 does not sell your personal data. We share your data only in the limited circumstances described below:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 processing partners receive the minimum necessary financial data to process your transactions.
• KYC and identity verification providers: Third-party identity verification services receive your identity documents and personal details solely for the purpose of completing your KYC verification on behalf of m444.
• Gaming software providers: Licensed game providers (such as live casino and slot software vendors) may receive limited technical and gaming session data necessary to deliver their games on the m444 platform.
• AML and fraud screening services: Specialist compliance services that help m444 meet its anti-money laundering and fraud prevention obligations under its gaming licence.
• Regulatory authorities: m444's gaming licence authority and law enforcement agencies where required by law, regulation, or court order.
• Professional advisers: Legal counsel, auditors, and insurers under strict confidentiality obligations where necessary for m444's legitimate business operations.

All third parties with whom m444 shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

m444 uses cookies and similar tracking technologies on its website and application. Cookies are small text files stored on your device that help us operate the platform effectively and understand how it is used.

m444 uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in to your m444 account. These cookies cannot be disabled without preventing the platform from operating.
• Performance cookies: Used to collect anonymised data about how players navigate m444, which pages are visited most frequently, and where technical errors occur. This data helps us improve the platform for all Pakistani players.
• Functional cookies: Used to remember your platform preferences, such as language settings and preferred deposit method, to provide a more personalised experience.
• Marketing cookies: Used, with your consent, to deliver relevant promotional content about m444 bonuses and offers. You may opt out of marketing cookies at any time via your browser settings or the m444 cookie preference centre.

m444 retains personal data only for as long as is necessary for the purposes set out in this Privacy Policy or as required by law and our gaming licence obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your active m444 Account relationship.
• Closed account data: Following account closure, m444 retains KYC identity records, transaction histories, and gaming activity records for a minimum of 5 years to comply with AML regulations and gaming licence audit requirements.
• Customer support communications: Retained for 3 years from the date of the last interaction, unless the data is required as part of an ongoing dispute or regulatory investigation.
• Marketing preference data: Retained until you withdraw consent or request deletion, at which point marketing data is removed promptly.
• Technical and cookies data: Session-level technical data is retained for up to 12 months for performance analysis purposes, after which it is anonymised or deleted.

When personal data is no longer required and no legal obligation requires its retention, m444 securely deletes or anonymises it in accordance with our internal data destruction procedures.

m444 implements robust technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the m444 platform.
• Encryption of sensitive personal data fields (including financial data) at rest in m444's database systems.
• Strict internal access controls limiting access to personal data to authorised m444 personnel on a need-to-know basis, with full access audit trails.
• Regular security audits and penetration testing of m444 systems by qualified third-party security professionals.
• Two-factor authentication (2FA) availability for all m444 player accounts to protect against unauthorised access.
• Incident response procedures to detect, investigate, and notify affected parties of data security incidents in a timely manner.

While m444 takes all reasonable precautions, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your m444 Account credentials and for ensuring no unauthorised person accesses your device when you are logged in to m444.

As an m444 player, you have the following rights in respect of your personal data. To exercise any of these rights, please contact m444 at the details provided in Section 13:

m444 will respond to all valid data rights requests within 30 days. In complex cases we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. m444 will not charge a fee for handling data rights requests in normal circumstances.

If m444 becomes aware that personal data has been collected from a person under the age of 21 without verified parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on m444, please contact us immediately at [email protected] so we can investigate and take appropriate action.

m444 actively employs age verification mechanisms during the registration and KYC process to prevent underage registration. Parents and guardians are encouraged to use parental control software to prevent underage persons from accessing online gaming platforms.

m444 may update this Privacy Policy from time to time to reflect changes in our data practices, changes to the m444 platform, or to comply with updated regulatory requirements. When material changes are made, we will notify registered players via email and/or an in-platform notification at least 7 days before the updated Policy takes effect.

The version date displayed at the top of this Policy indicates when it was last reviewed and updated. We encourage you to review this Policy periodically so that you remain informed about how m444 protects your personal data.

Your continued use of m444 following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not accept the updated Policy, you may close your account and request withdrawal of your PKR balance prior to the effective date.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy concern, please contact the m444 Data Privacy team:

You may also raise data privacy concerns with the relevant supervisory authority under m444's gaming licence jurisdiction. m444 will always cooperate fully with any regulatory investigation relating to data privacy compliance.