ca999 | Privacy Policy and How We Protect Your Data

Section 01

Introduction and Purpose of This Policy

Ca999 (referred to hereinafter as "we", "us", or "the ca999 platform") provides a trusted online gaming service for users in Bangladesh and internationally. We believe every user's personal data is a valuable asset, and protecting it is both our ethical and legal responsibility.

This Privacy Policy ("Policy") describes in detail what information we collect when you use the ca999 website and mobile application, why we collect it, how we use it, and how we keep it secure. By using the ca999 platform, you agree to this Privacy Policy.

Our Privacy Policy is built in line with international data protection standards, particularly the GDPR (General Data Protection Regulation). We regularly review and update this policy as needed, and you will be notified in advance of any significant changes.

Important: This Privacy Policy applies solely to ca999's own platform. Third-party websites or services are governed by their own respective privacy policies.

Section 02

What Information We Collect

Ca999 collects three types of information — what you provide directly, what is generated automatically through platform use, and what is received from trusted third parties.

Information Provided Directly:

Full name, date of birth, and gender
Email address and mobile number
Password (stored in hashed form)
National ID, passport, or driving license details (for KYC verification)
Payment account details (bKash, Nagad, Rocket numbers)
Bank account or card details (where applicable)

Automatically Collected Information:

IP address and device information
Browser type and operating system
Visit time, duration, and pages viewed on the site
Gaming history, bet amounts, and outcomes
Transaction history and payment records
Cookies and Local Storage Data

Data Type	Purpose of Collection	Retention Period
Identity Information	Account Verification and KYC	5 years after account closure
Transaction Information	Payment Processing & Fraud Prevention	7 years (as required by law)
Gaming Information	Service Improvement & Dispute Resolution	3 years
Technical Information	Security & System Performance	1 year
Contact Information	Customer Support & Promotions	For as long as your account remains active

Section 03

Purpose of Data Use

Ca999 uses your information only for specific, legitimate purposes. We never use your data in unnecessary or unethical ways.

Key Use Cases:

Account Management: For registration, login, and account verification.
Payment Processing: To process deposits and withdrawals quickly and securely.
Fraud Prevention: To detect suspicious activity and keep your account secure.
Customer Support: To resolve your questions and complaints quickly.
Personalized Experience: To provide game suggestions and offers tailored to your preferences.
Responsible Gaming: To monitor gaming behavior and provide support where needed.
Legal Obligation: To meet regulatory requirements and prevent money laundering.
Platform Improvement: To analyze user behavior and improve service quality.

Our Commitment: ca999 does not sell your data to any advertising network, nor share it with third parties for marketing purposes without your consent.

Section 04

Data Sharing & Third Parties

Ca999 never sells your personal data to third parties. However, in certain specific circumstances, limited data sharing may be necessary.

When Information Is Shared:

Payment Processors: Necessary information is shared with payment partners such as bKash, Nagad, and Rocket to process transactions.
Game Provider: Limited data may be shared with licensed game software providers for Live Casino or other games.
Legal Authorities: Data may be disclosed in response to a court order or a lawful request from a law enforcement agency.
Fraud Prevention Agencies: To take action against money laundering or fraud.
Business Continuity: In the event of a business restructuring by ca999, you will be notified in advance.

Contractual Safeguards: All third parties with whom ca999 shares data are bound by strict data protection agreements and are required to maintain the same standard of security.

Section 05

Data Protection Methods

Ca999 protects your data using industry-leading technology and processes. Our security framework operates across multiple layers.

Technical Safeguards:

All data transmissions are secured with 256-bit SSL/TLS encryption.
Passwords are hashed using the bcrypt algorithm — your actual password is never visible to anyone.
Firewall and DDoS protection are active at all times.
Data stored on our servers is also kept in encrypted form.
Regular security audits and penetration testing are conducted.

Procedural Safeguards:

Only authorized personnel can access the minimum necessary data (Principle of Least Privilege).
All staff receive regular data protection training.
In the event of a data breach, affected users will be notified within 72 hours.

Stay Protected Too: Use a strong password, enable two-factor authentication, and never share your password with anyone.

Section 06

Cookie Policy

The ca999 website and app use cookies and similar technologies (such as local storage and session storage) to enhance your browsing experience.

Cookie Types:

Essential Cookies: Essential for maintaining login sessions and security. These cannot be disabled.
Functional Cookies: Used to remember your preferred language, theme, and settings.
Analytics Cookies: Anonymous usage statistics are collected to better understand how the platform is used.
Marketing Cookies: Used solely to show personalized offers with your consent.

You can manage cookies at any time through your browser settings. Please note that disabling essential cookies may affect the functionality of certain services.

Section 07

Your Rights

Ca999 respects your right to control your personal data. You may exercise the following rights.

Access

You may request a copy of the data ca999 holds about you.

Right to Rectification

You may request corrections to any inaccurate or incomplete information.

Right to Erasure

You may request deletion of your data unless a legal obligation requires it to be retained.

Processing Restriction

You may request that we restrict processing of your data for specific purposes.

Data Portability

You have the right to receive your data in a machine-readable format.

Right to Object

You may object to the use of your data for marketing or profiling purposes.

Exercising Your Rights: To exercise any of your rights, email us at [email protected]. We are obligated to respond within 30 days.

Section 08

International Data Transfers

Ca999 is an international platform. In some cases, your data may be processed on servers located in different countries. Regardless of where your data is transferred, the same standard of protection is always maintained.

When transferring data, ca999 applies the following protective measures:

Contracts executed in accordance with the EU's Standard Contractual Clauses (SCCs).
Signing data protection agreements with third parties.
Data is only transferred to countries with adequate protection standards in place.
Data in transit is also transported in encrypted form.

Your Guarantee: Wherever your data is processed, ca999's Privacy Policy protections always apply.

Section 09

Account Closure and Data Deletion

You may request to close your ca999 account at any time. However, certain data may need to be retained for a specified period due to legal obligations.

After Account Closure:

Data no longer required for active services will be deleted promptly.
Financial transaction records may be retained for up to 7 years for legal compliance purposes.
Data required as evidence in cases of fraud or legal disputes will be retained.
All other data will be deleted within 30 days of account closure.

Please Note: Please withdraw all your balance before closing your account. Withdrawals will not be possible after the account has been closed.

Section 10

Policy Changes & Contact

Ca999 may update this Privacy Policy from time to time. You will be notified of any significant changes via email or an in-platform notification.

Updated policies take effect from the date of publication. Continued use of ca999 after a new policy is published will be considered your acceptance of the updated terms.