Privacy Policy — ca333 Casino Bangladesh

1. Introduction

1.1 This Privacy Policy describes how ca333 (referred to in this document as "ca333", "we", "us", or "our") collects, uses, stores, shares, and protects personal data relating to individuals who access or use the ca333 platform at https://ca333.io (the "Platform").

1.2 This Privacy Policy applies to all users of the Platform, including registered players, visitors who browse without registering, and individuals who interact with us through our customer support channels. It applies regardless of the device or method used to access the Platform.

1.3 By accessing the Platform, registering an account, or otherwise using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you should stop using the Platform immediately.

1.4 This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together govern your use of the ca333 Platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a data-related matter, this Privacy Policy shall take precedence.

1.5 ca333 is committed to operating in a manner consistent with recognised data protection principles, including purpose limitation, data minimisation, storage limitation, accuracy, integrity, and confidentiality. We review and update our data practices regularly to ensure they remain appropriate and proportionate.

2. Definitions

In this Privacy Policy, the following terms have the meanings set out below:

3. Data We Collect

3.1 ca333 collects Personal Data from you in the following categories and circumstances:

3.1 Registration Data

When you create a ca333 account, we collect: full legal name, date of birth, email address, mobile phone number, and residential address including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postcode. This information is required to establish your account and is used throughout our relationship with you.

3.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to verify that you are aged 21 or above, we may collect copies of government-issued identification documents such as your National Identity Card (NID), passport, or other accepted photo ID, as well as proof of address documents and, where required, evidence of source of funds or source of wealth.

3.3 Financial Data

When you make deposits or request withdrawals, we collect transaction data including the payment method used (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard), transaction amounts in BDT, transaction timestamps, and relevant account reference numbers. We do not store complete payment card numbers on our servers; card data is processed directly by PCI-DSS compliant payment processors.

3.4 Usage and Activity Data

We automatically collect data about how you use the Platform, including: games played, bets placed and their outcomes, session durations, deposit and withdrawal history, bonus usage, login timestamps, and in-platform navigation behaviour. This data is used to operate the Platform, detect fraud, and improve the player experience.

3.5 Technical Data

When you access the Platform, we automatically collect certain technical information including: IP address, browser type and version, operating system, device type and screen resolution, referring URL, and session identifiers. This data is used for security monitoring, fraud detection, and platform performance optimisation.

3.6 Communications Data

When you contact our customer support team via email or live chat, we retain records of those communications, including your messages, our responses, and the subject matter of any complaint or query. This data is used to resolve issues, improve our support quality, and maintain a record of interactions for compliance purposes.

3.7 Responsible Gaming Data

If you use our responsible gaming tools — such as setting deposit limits, requesting a cooling-off period, or initiating self-exclusion — we record those requests and the relevant parameters (limit amounts, exclusion durations, etc.). This data is used exclusively to honour your responsible gaming preferences and to protect your welfare as a player.

The following table summarises the main data categories and their primary purposes:

4. How We Use Your Data

4.1 ca333 uses the Personal Data we collect for the following purposes:

• Account Management: To create, maintain, and administer your player account, process your transactions, and communicate with you about your account.
• Identity Verification: To verify your identity, age (21+), and place of residence as required by our KYC obligations, to prevent underage gambling and protect against fraud.
• Payment Processing: To process deposits and withdrawal requests via bKash, Nagad, Rocket, Upay, bank transfer, and card payment methods in BDT.
• Platform Operation: To provide and improve our casino games, sports betting markets, live dealer games, and associated services.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, collusion, bot use, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: To monitor gaming behaviour for signs of problem gambling, enforce self-imposed limits and exclusions, and provide welfare interventions where appropriate.
• Customer Support: To respond to your queries, complaints, and requests for assistance in a timely and effective manner.
• Legal and Regulatory Compliance: To meet our obligations under applicable laws, including anti-money laundering (AML) requirements, and to respond to lawful requests from regulatory or law enforcement authorities.
• Platform Analytics: To analyse how players use the Platform in aggregate, identify technical issues, and improve performance, usability, and game selection.
• Communications: To send you account-related notifications such as deposit confirmations, withdrawal updates, security alerts, and, where you have opted in, promotional offers relevant to the Bangladesh market.

4.2 ca333 does not use automated decision-making or profiling that produces legal or similarly significant effects on players, except where strictly necessary for fraud detection and responsible gaming intervention. In such cases, you have the right to request human review of any automated decision that affects you.

5. Legal Basis for Processing

5.1 ca333 processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and ca333 — specifically, to provide the gaming and betting services you have registered to use, and to manage your account and transactions.
• Legal Obligation: Processing is necessary to comply with applicable legal obligations, including KYC and AML requirements, the need to retain financial transaction records, and the obligation to respond to lawful authority requests.
• Legitimate Interests: Processing is necessary for the legitimate interests of ca333, including fraud prevention, platform security, responsible gaming monitoring, and business analytics. We have assessed that these interests are not overridden by your privacy interests in these specific contexts.
• Consent: Where we rely on your consent — for example, to send you marketing communications or to place non-essential cookies on your device — we will obtain that consent clearly and separately, and you may withdraw it at any time without detriment to your account.

6. Sharing Your Data

6.1 ca333 does not sell, rent, or otherwise transfer your Personal Data to third parties for their own commercial or marketing purposes. We share your data only with the following categories of third parties, and only to the extent necessary for the stated purpose:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card payment processors (Visa, Mastercard) to execute deposit and withdrawal transactions.
• Identity Verification Providers: Third-party KYC and document verification services used to confirm your identity and age in compliance with our obligations.
• Fraud Prevention and AML Services: Specialist providers that help us detect fraudulent activity, money laundering, and other prohibited conduct on the Platform.
• Game Technology Providers: Game studios and platform providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PG Soft, Spribe, and Ezugi, to the extent necessary to deliver their games on the Platform and resolve game-related disputes.
• IT Infrastructure and Cloud Services: Hosting, security, and database service providers who process data on our behalf and are contractually bound to maintain appropriate data protection standards.
• Regulatory and Law Enforcement Authorities: Where we are required by law, court order, or legitimate regulatory request to disclose information about a specific player or transaction.

6.2 All third-party service providers with whom we share data are required by contract to use your Personal Data solely for the purposes for which it was shared, to maintain appropriate technical and organisational security measures, and to comply with applicable data protection requirements.

7. Cookies & Tracking Technologies

7.1 ca333 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device when you visit our website. Cookies serve a number of important functions on the Platform:

• Essential Cookies: These are strictly necessary for the Platform to function. They maintain your login session, remember your language and currency preferences, and ensure the security of your session. These cookies cannot be disabled without breaking core platform functionality.
• Analytical Cookies: We use first-party analytics cookies to understand how players navigate the Platform in aggregate — for example, which pages are most visited, where players encounter errors, and how long sessions last on average. This data is used exclusively to improve platform performance and user experience.
• Functional Cookies: These cookies remember choices you make on the Platform (such as your preferred game category or display settings) to provide a more personalised experience on return visits.

7.2 ca333 does not use third-party advertising cookies or cross-site tracking technologies that would allow external advertisers to profile your browsing behaviour across unrelated websites.

7.3 You can control cookie settings through your browser's privacy or settings menu. Blocking essential cookies will impair or prevent your use of the Platform. Blocking analytical or functional cookies will not prevent you from using core Platform features but may reduce the quality of your experience.

8. Data Retention

8.1 ca333 retains your Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and Registration Data: Retained for the duration of your account and for a minimum of five years following account closure, to meet KYC and AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five years from the date of the transaction, consistent with standard financial record-keeping obligations.
• KYC Documents: Retained for the duration of your account and for five years following account closure. Documents may be retained longer where required by a specific legal obligation or ongoing regulatory investigation.
• Customer Support Communications: Retained for three years from the date of the communication, unless the subject matter relates to a dispute or complaint, in which case the record is retained until the matter is fully resolved and the applicable limitation period has expired.
• Responsible Gaming Records: Retained for five years from the expiry of any self-exclusion or limit period, to ensure re-registration restrictions are properly enforced.
• Technical and Usage Data: Aggregated and anonymised analytics data may be retained indefinitely. Identifiable technical data (e.g., IP address logs) is retained for up to 12 months unless needed for active fraud or security investigations.

8.2 When Personal Data reaches the end of its retention period, it is securely deleted or permanently anonymised in a manner that prevents re-identification.

9. Data Security

9.1 ca333 takes the security of your Personal Data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. These measures include:

• End-to-end 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data fields (including password hashes and payment references) at rest in our databases.
• Role-based access controls ensuring that Platform staff can only access Personal Data to the extent required for their specific job function.
• Regular security assessments, penetration testing, and vulnerability scanning of Platform infrastructure.
• Intrusion detection and prevention systems to monitor for and respond to suspicious access patterns.
• Mandatory security training for all staff who handle Personal Data.
• Incident response procedures to contain, assess, and report data security incidents in a timely manner.

9.2 While ca333 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are also responsible for the security of your own device and account credentials. Use a strong, unique password for your ca333 account and do not share it with anyone.

10. Your Privacy Rights

10.1 As a Data Subject, you have the following rights in relation to the Personal Data ca333 holds about you:

• Right of Access: You have the right to request a copy of the Personal Data ca333 holds about you, together with information about how it is being used. We will respond to access requests within 30 days.
• Right to Rectification: You have the right to request correction of any Personal Data that is inaccurate or incomplete. You may be able to correct certain registration data directly through your account profile page.
• Right to Erasure: You have the right to request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that we are required to retain certain data (particularly KYC and financial records) for defined periods even after account closure.
• Right to Restriction: You have the right to request that we restrict processing of your Personal Data in certain circumstances — for example, while you are contesting the accuracy of data we hold.
• Right to Object: You have the right to object to processing of your Personal Data where that processing is based on legitimate interests, including profiling for fraud detection purposes. We will assess your objection and respond within 30 days.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

10.2 To exercise any of the above rights, please contact our support team at [email protected] with the subject line "Privacy Rights Request". Please include your full name and registered email address so we can locate your account and verify your identity before processing the request. We will acknowledge your request within five working days and aim to fulfil it within 30 days.

11. Children and Minors

11.1 The ca333 Platform is strictly for adults aged 21 years and above. We do not knowingly collect or process Personal Data relating to any individual under the age of 21. If you are under 21, you must not register an account, deposit funds, or use any service on the Platform.

11.2 If ca333 discovers or has reasonable grounds to believe that a registered account is held by a person under the age of 21, we will immediately suspend the account, conduct an identity and age verification review, and if the suspicion is confirmed, close the account and return any real-money balance (less any amounts won during the period of underage access, which will be forfeited).

11.3 If you believe that a minor has registered on the ca333 Platform using false details, please contact us immediately at [email protected] so that we can take appropriate action. We take underage gambling extremely seriously and will act on all credible reports without delay.

12. Third-Party Links

12.1 The ca333 Platform may contain references to third-party payment providers (bKash, Nagad, Rocket, Upay) and game studios (Pragmatic Play, Evolution Gaming, etc.) in the context of describing our services and partnership arrangements. The ca333 Privacy Policy does not extend to any third-party websites, apps, or services. We are not responsible for the privacy practices of third parties and encourage you to review the privacy policies of any external services you use.

12.2 ca333 does not include external hyperlinks to third-party websites within the Platform's content pages. Any reference to a third-party brand or service on the Platform is for informational purposes only and does not constitute an endorsement or a direction to visit that third party's platform.

13. Changes to This Privacy Policy

13.1 ca333 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. The most current version will always be accessible at https://ca333.io/privacy-policy, and the "Last Updated" date at the top of the document will be revised accordingly.

13.2 Where a change to this Privacy Policy is material — meaning it significantly alters how we collect, use, or share your Personal Data — we will make reasonable efforts to notify registered players via the email address associated with their account, or via a prominent notice on the Platform, at least 14 days before the change takes effect.

13.3 Your continued use of the Platform after a revised Privacy Policy has been published constitutes your acceptance of the updated terms. If you do not agree with any change, you should stop using the Platform and request account closure before the change takes effect.

14. Contact Us

14.1 If you have questions, concerns, or complaints about this Privacy Policy or how ca333 handles your Personal Data, please contact us using the details below. We take all privacy enquiries seriously and will respond promptly.

14.2 For formal complaints regarding data processing, please include in your message: your full name, registered email address, a clear description of your concern, the specific data or processing activity in question, and your preferred outcome. We will acknowledge formal complaints within 48 hours and aim to resolve them within 28 days.

14.3 If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to an appropriate supervisory authority or seek independent legal advice.