ca999 Privacy
Policy

1 Information We Collect

ca999 collects personal data from Bangladesh players through several means — directly when you register or transact, automatically when you interact with our platform, and occasionally from trusted third-party partners. We collect only the data that is necessary to provide you with a safe, fair, and fully functional gambling experience.

1.1 Information You Provide Directly

When you register a ca999 account, verify your identity, make a deposit, or contact our support team, you voluntarily provide us with personal information including:

• Full legal name as it appears on your government-issued identification.
• Date of birth (used to verify that you are aged 18 or above).
• Bangladesh mobile number associated with your bKash, Nagad, or Rocket account.
• Email address used for account notifications and correspondence.
• Residential address (required for KYC verification at withdrawal stage).
• National ID Card (NID) number or passport number submitted during identity verification.
• Payment method details — including bKash wallet number, Nagad number, bank account details, Visa/Mastercard card details, and any cryptocurrency wallet address used for transactions on ca999.
• Any additional information submitted voluntarily through support tickets, live chat, or feedback forms.

1.2 Information Collected Automatically

When you access ca999 — whether through a desktop browser, mobile browser, or the ca999 app — we automatically collect certain technical and behavioural data including:

• IP address and approximate geographic location (country and city level).
• Device type, operating system, and browser version.
• Session start and end times, page views, and in-session navigation paths.
• Game activity logs — games played, bet amounts, wager frequency, win/loss records, and session duration.
• Deposit and withdrawal transaction records, including timestamps, amounts, and payment method used.
• Bonus claim and wagering activity associated with your account.
• Cookie identifiers and similar tracking technologies (see Section 3 for full details).

1.3 Information from Third Parties

ca999 may receive supplementary data about you from trusted third-party sources to fulfil our legal and operational obligations:

• Identity verification partners who cross-check your NID or passport against official records.
• Payment processors such as bKash and Nagad who confirm transaction status and account ownership.
• Fraud prevention and anti-money laundering (AML) screening services that flag high-risk account patterns.
• Responsible gaming databases (such as self-exclusion registries) that ca999 consults to prevent excluded individuals from opening new accounts.

2 How We Use Your Data

ca999 processes your personal data for clearly defined purposes. We do not use your data for purposes that are incompatible with those stated at the time of collection. The table below summarises the primary purposes for which ca999 processes personal data and the lawful basis for each:

2.1 Marketing Communications

ca999 will only send you promotional emails, SMS messages, or push notifications if you have explicitly opted in to receive marketing communications at the time of registration or through your account settings. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account settings or by contacting support at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

2.2 Automated Decision-Making

ca999 uses automated systems to monitor account activity for fraud detection, responsible gaming triggers, and AML compliance. In some cases, these automated systems may result in an account being temporarily flagged or restricted without prior human review. If your account is affected by an automated decision, you have the right to request human review of that decision by contacting ca999 support. ca999 will respond to such requests within 5 business days.

3 Cookies & Tracking Technologies

ca999 uses cookies and similar tracking technologies on its website and mobile platform. Cookies are small text files stored on your device that help ca999 recognise you across sessions, maintain your login state, personalise your experience, and analyse platform usage patterns.

3.1 Types of Cookies Used

• Strictly Necessary Cookies: These cookies are essential for the ca999 platform to function. They maintain your login session, remember your language and currency preferences, and ensure that security tokens remain valid during your session. These cookies cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised data about how Bangladesh players use the ca999 platform — which pages are visited most frequently, where players navigate after landing, and which games generate the most sessions. This data helps ca999 improve the platform experience.
• Functional Cookies: These cookies remember choices you make on ca999 — such as your preferred deposit method (bKash, Nagad, Rocket), your game category filters, and your notification preferences — so you don't need to re-enter them every session.
• Targeting & Preference Cookies: Where you have opted in to personalised promotions, ca999 may use cookies to deliver relevant bonus offers and game recommendations based on your playing history. You may opt out of these cookies at any time via your account settings.

3.2 Managing Cookies

You can control and delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging in to your ca999 account and using core platform features. Disabling analytics or targeting cookies will not affect your ability to play games or process transactions on ca999.

4 Data Sharing & Disclosure

ca999 does not sell, rent, or trade your personal data to third-party marketing companies or data brokers under any circumstances. Your personal data is shared only in the specific, limited circumstances described below.

4.1 Service Providers and Data Processors

ca999 engages trusted third-party service providers who process personal data on ca999's behalf and under ca999's instruction. These include:

• Payment processing partners — bKash, Nagad, Rocket, Upay, Visa, Mastercard, and cryptocurrency payment gateways — who require transaction data to process deposits and withdrawals.
• KYC and identity verification providers who validate NID, passport, and address documents against official records.
• Fraud detection and AML screening services that analyse transaction patterns and device fingerprints.
• Cloud hosting and infrastructure providers who store ca999 platform data on secured, encrypted servers.
• Customer support platform providers who power the ca999 live chat and ticketing system.
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) who may receive anonymised session identifiers to deliver and log game rounds.

All ca999 data processors are contractually bound to process personal data only as instructed by ca999, to maintain appropriate security standards, and to delete or return data upon termination of their engagement with ca999.

4.2 Legal Disclosures

ca999 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, a valid court order, or in connection with the prevention or investigation of financial crime, fraud, or money laundering. ca999 will notify affected players of such disclosures where legally permitted to do so.

4.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ca999's business, personal data held by ca999 may be transferred to the acquiring or successor entity as part of that transaction. ca999 will notify registered players of any such transfer and the privacy implications via the registered contact details on file, with a minimum of 30 days' notice where practicable.

5 Data Security

ca999 implements a multi-layered data security framework to protect the personal and financial information of all Bangladesh players on the platform. Security measures are reviewed and updated regularly to address evolving threats.

5.1 Technical Security Measures

• 256-bit SSL Encryption: All data transmitted between your device and the ca999 platform is encrypted using industry-standard 256-bit SSL/TLS encryption, the same standard used by international financial institutions.
• Data Encryption at Rest: Sensitive personal data stored on ca999 servers — including KYC documents, payment details, and account credentials — is encrypted at rest using AES-256 encryption.
• Two-Factor Authentication (2FA): ca999 supports 2FA on all player accounts. Players are strongly encouraged to enable 2FA to add an additional layer of protection beyond their username and password.
• Firewall and Intrusion Detection: ca999's infrastructure is protected by enterprise-grade firewalls and continuous intrusion detection and prevention systems (IDS/IPS) that monitor for suspicious activity 24/7.
• Penetration Testing: ca999 conducts regular third-party penetration testing of its platform to identify and remediate security vulnerabilities before they can be exploited.

5.2 Organisational Security Measures

• Access to personal data is restricted on a strict need-to-know basis — only ca999 staff members whose role requires access to specific categories of personal data are granted that access.
• All ca999 staff with access to personal data undergo mandatory data protection training as part of their onboarding and annually thereafter.
• ca999 maintains an incident response plan. In the event of a personal data breach, ca999 will notify affected players and relevant authorities within the timeframes required by applicable data protection law.

6 Data Retention

ca999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The table below summarises ca999's standard data retention periods for the main categories of personal data held:

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player. Where anonymisation is applied, the resulting aggregated data may be retained indefinitely for statistical and platform improvement purposes.

7 Your Privacy Rights

As a ca999 player based in Bangladesh, you have a number of rights with respect to your personal data. ca999 is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact the ca999 support team at [email protected] with the subject line "Privacy Rights Request" and a description of the specific right you wish to exercise.

7.1 Right of Access

You have the right to request a copy of all personal data that ca999 holds about you. ca999 will provide this in a structured, commonly used, machine-readable format within 30 days of receiving a valid access request. There is no charge for a first access request within any 12-month period.

7.2 Right to Rectification

If you believe that any personal data ca999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating your registered email address or mobile number) can be made directly through your ca999 account settings. For corrections to KYC-verified data (such as your legal name or date of birth), you will need to provide supporting documentation.

7.3 Right to Erasure

You may request that ca999 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other lawful basis applies), or where the data has been unlawfully processed. Note that ca999 is unable to fulfil erasure requests where retention is required by law — for example, KYC and transaction records that must be retained for AML compliance purposes cannot be deleted before the end of the applicable retention period.

7.4 Right to Data Portability

Where ca999 processes your personal data on the basis of your consent or performance of a contract, and where the processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider of your choice.

7.5 Right to Restrict Processing

You have the right to request that ca999 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of your data is being verified, or where you have objected to processing based on legitimate interests and ca999 is assessing whether its interests override yours.

7.6 Right to Object

You have the right to object to ca999's processing of your personal data where that processing is based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, ca999 will cease that processing immediately. Where you object to processing based on legitimate interests, ca999 will assess whether its legitimate interests are overridden by your rights and interests and inform you of the outcome within 30 days.

8 Changes to This Policy

ca999 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made to this Privacy Policy, ca999 will publish the updated policy on this page with a revised effective date. Where the changes are significant, ca999 will also notify registered Bangladesh players via their registered email address or through an in-platform notification banner.

Your continued use of the ca999 platform after the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised Privacy Policy, you may request account closure in accordance with Section 7.1 of the ca999 Terms & Conditions. ca999 recommends bookmarking this page and reviewing it each time you log in to stay informed of your current privacy rights and ca999's data obligations.

All historical versions of the ca999 Privacy Policy are available on request from the support team at [email protected]. This is the current and operative version of the ca999 Privacy Policy, effective from 1 January 2026.