ca99 Privacy Policy
Your Data, Your Rights

1. Data We Collect

1.1 Registration Data

When you create a ca99 account, we ask you to provide the following personal information:

• Full legal name — as it appears on your national ID card or passport;
• Date of birth — to verify that you meet the 18+ age requirement;
• Residential address — including division, district, and postal area within Bangladesh;
• Mobile number — the number associated with your bKash, Nagad, or Rocket mobile financial service account;
• Email address — used for account communications, security alerts, and promotional messages where you have opted in.

This registration data is required to open and maintain your ca99 account. Without it, we cannot provide you with access to the platform.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, ca99 may request copies of identity documents including your Bangladesh National Identity Card (NID), passport, or driving licence. We may also request a selfie photograph to match against your ID document. This data is processed for the sole purpose of verifying your identity and complying with our anti-money laundering obligations. KYC documents are handled by our verified third-party identity verification provider and are not stored on ca99's primary servers beyond the period required for verification.

1.3 Financial Transaction Data

When you make a deposit or request a withdrawal through bKash, Nagad, Rocket, Upay, or bank transfer, ca99 records the following transaction details:

• The transaction reference number issued by your MFS or bank provider;
• The amount in Bangladeshi Taka (৳);
• The date, time (Bangladesh Standard Time, UTC+6), and direction of the transaction;
• The last four digits of the mobile number used for MFS transfers.

ca99 does not store your full bKash PIN, Nagad PIN, or bank card number. Payment authentication is handled directly by the respective MFS or bank platform.

1.4 Gameplay and Betting Data

ca99 records a complete log of your gameplay and betting activity on the platform. This includes bet amounts, game sessions, cricket match selections, slot titles played, round outcomes, bonus use, and session timestamps. This data is used to resolve disputes, detect fraud, manage bonus wagering requirements, and improve the overall platform experience.

1.5 Technical and Device Data

Each time you access ca99.bet, our servers automatically collect certain technical information:

• IP address and approximate geographic location (country and city level);
• Device type (mobile, tablet, desktop), operating system, and browser version;
• Pages visited on ca99.bet, time spent on each page, and navigation path through the site;
• Referral source (the website or link that directed you to ca99.bet, if applicable).

This technical data is collected automatically and is used to maintain platform security, detect suspicious access patterns, and improve site performance for Bangladesh users.

1.6 Communications Data

When you contact ca99 customer support by email or live chat, we retain a record of the conversation including the content of your messages, the date and time of communication, and the resolution provided. This allows our support team to provide consistent service and serves as an audit record in the event of a dispute.

2. How We Use Your Data

ca99 uses the personal data described above for the following specific purposes:

Purpose	Data Used	Legal Basis
Account creation and management	Registration data, KYC data	Contractual necessity
Identity and age verification	KYC data, date of birth	Legal obligation / contractual necessity
Processing deposits and withdrawals	Financial transaction data, mobile number	Contractual necessity
Fraud detection and prevention	Technical data, transaction data, gameplay data	Legitimate interest
Responsible gaming compliance	Gameplay data, session data	Legal obligation / legitimate interest
Customer support	Communications data, account data	Contractual necessity
Platform analytics and improvement	Technical data, gameplay data (anonymised)	Legitimate interest
Promotional communications (opt-in only)	Email address, gameplay preferences	Consent

2.1 Marketing Communications

ca99 will only send you promotional emails or SMS messages regarding bonuses, seasonal promotions (such as BPL season offers or Eid specials), and new game launches if you have explicitly opted in to marketing communications during registration or via your account settings. You may withdraw your consent at any time by updating your notification preferences in your ca99 account or by contacting support. Withdrawal of marketing consent does not affect your ability to use the ca99 platform.

2.2 Automated Decision-Making

ca99 uses automated systems to flag accounts for fraud review, bonus abuse detection, and responsible gaming intervention. These automated processes do not make final decisions on their own — a member of the ca99 compliance or customer support team reviews any flagged account before action is taken. If your account is placed under review, you will be notified by email and given the opportunity to provide additional information.

3. Sharing Your Data

3.1 Trusted Service Providers

ca99 shares personal data only with third-party service providers who are necessary to operate the platform. These include:

• Payment processors: bKash, Nagad, Rocket, and Upay receive the minimum transaction data required to process your deposit or withdrawal;
• KYC and identity verification providers: Our contracted identity verification partner receives your KYC documents solely for the purpose of confirming your identity. This partner is bound by a data processing agreement with ca99;
• Game studios: When you launch a live casino or slot title, the game studio (such as Evolution Gaming, Pragmatic Play, or Spribe) receives your ca99 player session token. Game studios do not receive your full name, address, or payment details;
• Cloud and hosting infrastructure: ca99's platform is hosted on secure cloud infrastructure. The infrastructure provider processes server data under strict data processing agreements and does not have access to your personal data at the application level.

3.2 Legal Disclosures

ca99 may disclose personal data to law enforcement authorities, courts, or other government bodies in Bangladesh where we are legally required to do so. This includes disclosures required under anti-money laundering regulations, court orders, or fraud investigations. ca99 will not disclose data beyond what is legally required and will, where permitted by law, notify the affected player of any such disclosure request.

3.3 No Data Selling

ca99 does not sell, rent, lease, or otherwise commercially transfer your personal data to any third-party advertiser, data broker, or marketing company. Your data is used exclusively to operate the ca99 platform and meet our legal obligations.

4. Cookies & Tracking

4.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. ca99.bet uses cookies and similar tracking technologies (including local storage and session tokens) to keep the platform functioning correctly and to understand how players use the site.

4.2 Types of Cookies Used by ca99

Cookie Type	Purpose	Can Be Disabled?
Essential cookies	Maintain your login session, remember your language preference, protect against CSRF attacks	No — required for the site to function
Functional cookies	Remember your game lobby layout preferences and responsible gaming settings	Yes — disabling may affect experience
Analytics cookies	Measure page load times, navigation flows, and feature usage to improve the platform	Yes — via browser settings
Affiliate tracking cookies	Record the referral source that directed you to ca99 to credit our affiliate partners	Yes — via browser settings

4.3 Managing Cookies

You can manage or delete cookies through your browser's privacy settings. Instructions for the most common browsers (Chrome, Firefox, Samsung Internet, Opera Mini) are available through each browser's help documentation. Please note that disabling essential cookies will prevent you from logging into your ca99 account and using the platform. Disabling functional or analytics cookies will not prevent you from using the platform but may result in a less personalised experience.

5. Data Security

5.1 Technical Safeguards

ca99 implements the following technical security measures to protect your personal data:

• TLS/SSL encryption on all data transmitted between your browser or device and ca99.bet;
• AES-256 encryption for personal data stored in our databases;
• Hashed and salted passwords — ca99 never stores your account password in plaintext;
• Role-based access controls ensuring that only authorised ca99 staff can access personal data, and only to the extent required for their role;
• Regular penetration testing and vulnerability scanning of the ca99 platform and infrastructure;
• Two-factor authentication (2FA) available on all ca99 accounts for additional login security.

5.2 Organisational Safeguards

In addition to technical controls, ca99 maintains organisational data security practices including: staff data protection training, a documented data breach response procedure, and contractual data processing agreements with all third-party service providers who handle personal data on ca99's behalf.

5.3 Security Incidents

In the event that ca99 becomes aware of a data security incident that affects your personal data, we will notify affected players by email within a reasonable timeframe, describe the nature of the incident, and explain the steps ca99 has taken to contain it and prevent recurrence. We encourage all players to use strong, unique passwords for their ca99 account and to enable 2FA to minimise personal exposure in the event of any security incident.

6. Data Retention

6.1 Active Accounts

While your ca99 account is active, we retain all personal data associated with your account, including registration data, transaction history, gameplay records, and communications logs. This data is necessary to provide you with the ca99 service, to manage your bonus and wagering history, and to resolve any disputes that may arise.

6.2 Closed and Dormant Accounts

When your ca99 account is closed — whether voluntarily, through self-exclusion, or by ca99 — we retain your personal data for a period of five (5) years from the date of closure. This retention period reflects the standard period during which financial disputes, fraud investigations, or regulatory audits may arise. After five years, your personal data will be securely deleted or irreversibly anonymised, except where a longer retention period is required by applicable Bangladesh law.

6.3 Marketing Data

If you withdraw your consent to marketing communications, your email address and communication preferences will be updated within 48 hours and you will not receive further promotional messages from ca99. However, your email address and account details will continue to be retained as part of your account record for the duration of the account lifecycle and post-closure retention period described above. Opting out of marketing does not trigger deletion of your account data.

6.4 KYC Documents

Identity verification documents submitted during KYC are retained for a minimum of five (5) years from the date of submission or from account closure, whichever is later, in accordance with anti-money laundering record-keeping obligations. After this period, KYC documents are securely deleted from all systems.

7. Your Rights

As a ca99 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact ca99 customer support at [email protected] with the subject line "Data Rights Request" and your registered account email address.

7.1 Right of Access

You have the right to request a copy of all personal data that ca99 holds about you. Upon receiving a verified access request, ca99 will provide a summary of your personal data within 30 days. The summary will include the categories of data held, the purposes for which it is processed, and any third parties with whom it has been shared.

7.2 Right to Correction

If any personal data ca99 holds about you is inaccurate or incomplete, you have the right to request that we correct it. For example, if your registered name or address has changed, you may submit a correction request along with supporting documentation. ca99 will process correction requests within 14 days of receiving satisfactory supporting evidence.

7.3 Right to Deletion

You may request deletion of your personal data in circumstances where: the data is no longer necessary for the purpose it was collected; you withdraw consent and no other legal basis applies; or the data has been unlawfully processed. Please note that ca99 may be unable to delete data during the mandatory post-closure retention period required under anti-money laundering regulations. In such cases, ca99 will inform you of the reason deletion cannot be completed immediately.

7.4 Right to Restrict Processing

You may request that ca99 restricts the processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold, or while a deletion request is being assessed. During a period of restricted processing, ca99 will store your data but will not use it for any purpose beyond storage and the handling of your rights request.

7.5 Right to Withdraw Marketing Consent

Where ca99 processes your personal data for marketing purposes on the basis of your consent, you may withdraw that consent at any time by updating your account notification settings or by contacting support. Withdrawal of marketing consent takes effect within 48 hours and does not affect the lawfulness of any marketing communications sent prior to withdrawal.

8. Policy Updates & Contact

8.1 Changes to This Privacy Policy

ca99 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable regulations. When we make material changes, we will display a notice on the ca99.bet homepage and update the "Last Updated" date at the top of this page. We encourage you to review this Privacy Policy periodically. Continued use of the ca99 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

8.2 Minor Updates

Non-material updates — such as corrections to typographical errors, clarifications that do not change the substance of our data practices, or updates to contact information — may be made without a formal notice. The "Last Updated" date will reflect any such change.

8.3 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data ca99 holds about you, please contact our customer support team:

• Email: [email protected] (plain text — not a clickable link)
• Support hours: 24 hours a day, 7 days a week, 365 days a year
• Response time: We aim to respond to all privacy-related enquiries within 2 business days

For data rights requests (access, correction, deletion), include "Data Rights Request" in your email subject line and provide your registered account email address so we can verify your identity before processing the request.