ca666 Privacy Policy
Your privacy matters at ca666. This Privacy Policy explains in plain, formal English exactly what personal data we collect from players in Bangladesh, how we use and protect it, who we may share it with, and what rights you hold over your own information. We are committed to handling your data with the highest standards of care and transparency.
How ca666 Protects Your Data
These six principles underpin every data-handling decision we make at ca666. They are drawn from the full Privacy Policy below and reflect our core commitment to every Bangladeshi player on the platform.
All data transmitted between your device and ca666's servers is protected with 256-bit SSL/TLS encryption. Whether you are logging in, making a bKash deposit, or reviewing your transaction history, your information travels over a fully encrypted channel at all times.
ca666 will never sell, rent, or trade your personal information to third parties for external marketing purposes. Any data sharing with partners is strictly limited to what is required to operate and improve the ca666 platform or to comply with legal obligations.
Registered players have the right to access, correct, export, or request deletion of their personal data at any time. Submit a data request to our support team and we will respond within the timeframes set out in Section 10 of this Privacy Policy. Your data belongs to you.
ca666 collects only the personal data that is strictly necessary to operate your account, process payments, verify your identity, and comply with anti-money-laundering obligations. We do not collect data speculatively or without a clear, documented purpose.
Personal data is stored on access-controlled, firewalled servers. Internal access to player data is restricted on a strict need-to-know basis and is subject to regular internal security audits. Retention periods are documented and enforced — data is not kept longer than necessary.
In the unlikely event of a data breach that poses a risk to your personal data, ca666 will notify affected players promptly via their registered email address. We will also take immediate technical steps to contain the breach and prevent further exposure of player data.
1. Introduction
ca666 ("the Platform", "we", "us", "our") is an international online casino and sports betting platform serving players in Bangladesh. We are committed to protecting the privacy and personal data of every individual who interacts with our platform, whether as a registered player, a visitor browsing the site, or a prospective user considering registration.
This Privacy Policy ("Policy") describes the categories of personal data we collect, the purposes for which we use it, the conditions under which we may share it with third parties, the security measures we have in place to protect it, and the rights available to you as a data subject. This Policy is intended to be read alongside our Terms & Conditions and our Responsible Gaming Policy.
By accessing the ca666 platform, registering an account, or otherwise providing us with your personal data, you consent to the practices described in this Policy. If you do not agree with any part of this Policy, you should not use the Platform and should contact us to request account closure and data deletion.
2. Personal Data We Collect
ca666 collects personal data in order to provide you with a safe, personalised, and compliant gaming experience. The categories of personal data we may collect include the following:
2.1 Identity and Contact Data
- Full legal name as it appears on your government-issued identity document.
- Date of birth (required to verify the 21+ age restriction).
- Residential address, including district (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh).
- Email address (primary communication channel).
- Mobile phone number (used for account verification and transaction alerts).
- National Identity Card (NID) number or passport number, where submitted for KYC verification.
2.2 Account Data
- Username and encrypted password hash.
- Account registration date, time, and IP address.
- Account preferences, language settings, and communication opt-ins.
- Responsible gaming settings, including any deposit limits, session limits, or self-exclusion periods you have applied.
2.3 Financial and Transaction Data
- Payment method type (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank).
- Mobile wallet number or bank account reference associated with each transaction (stored in tokenised form).
- Transaction amounts in BDT, timestamps, and transaction reference numbers.
- Deposit and withdrawal history, including any declined or reversed transactions.
2.4 Gaming Activity Data
- Bet placement records, including game title, wager amount, outcome, and timestamp.
- Session durations and login/logout times (Bangladesh Standard Time, UTC+6).
- Bonus claims, wagering progress, and promotional engagement history.
- Sports betting selections, including match, market type, odds, and stake.
2.5 Technical and Device Data
- IP address and approximate geographic location derived from it.
- Device type, operating system, browser type and version.
- Cookie identifiers and session tokens (see Section 7).
- Referral source — the URL or channel through which you arrived at ca666.io.
2.6 Communications Data
- Records of your communications with our customer support team, including live chat transcripts and email correspondence.
- Feedback, complaints, and dispute records.
3. How We Collect Your Data
We collect personal data through the following channels and mechanisms:
3.1 Direct Collection
The majority of personal data we hold is provided directly by you during registration, account verification (KYC), deposit or withdrawal transactions, communications with our support team, or when you update your account profile. You are under no legal obligation to provide this data; however, failure to provide mandatory data will prevent us from operating your account or processing your transactions.
3.2 Automated Collection
When you access the ca666 platform, certain technical and behavioural data is collected automatically through cookies, web beacons, server logs, and similar technologies. This includes your IP address, device identifiers, browsing behaviour on our platform, and session activity. This data collection is described in further detail in Section 7.
3.3 Third-Party Sources
We may receive limited personal data about you from third-party sources in specific circumstances, including:
- Payment processors (e.g., bKash, Nagad) confirming the status and reference details of a deposit or withdrawal transaction.
- Identity verification service providers used to fulfil our KYC obligations.
- Fraud prevention and anti-money-laundering screening databases, where we are required to check whether your details appear on relevant watchlists.
- Analytics partners who provide aggregate, anonymised data about platform traffic and usage patterns.
4. How We Use Your Personal Data
ca666 uses personal data only for the purposes listed below. We do not use your data for any purpose that is incompatible with the original reason it was collected without first seeking your explicit consent.
| Purpose | Data Categories Used |
|---|---|
| Creating and managing your ca666 account | Identity, contact, account data |
| Verifying your age (21+ requirement) and identity (KYC) | Identity data, KYC documents |
| Processing deposits and withdrawals via bKash, Nagad, Rocket, etc. | Financial and transaction data |
| Delivering and personalising gaming services | Gaming activity, account preferences |
| Preventing fraud, money laundering, and prohibited activities | All categories as required |
| Responding to customer support queries and complaints | Communications data, account data |
| Sending service-related notifications (account alerts, security notices) | Contact data, account data |
| Sending promotional communications (where you have opted in) | Contact data, gaming activity |
| Analysing platform usage to improve services | Technical, device, and gaming activity data |
| Complying with legal and regulatory obligations | All categories as required by law |
| Responsible gaming monitoring and player protection | Gaming activity, account, responsible gaming settings |
You may opt out of receiving promotional communications at any time by contacting support at [email protected] or by updating your communication preferences within your account settings. Opting out of promotional communications does not affect the delivery of service-essential communications such as security alerts or transaction confirmations.
5. Legal Basis for Processing
ca666 processes your personal data on one or more of the following legal bases, depending on the specific activity:
- Contractual necessity: Processing required to fulfil our obligations under the account agreement, including operating your account, processing transactions, and providing gaming services.
- Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering checks, age verification, and record-keeping obligations.
- Legitimate interests: Processing necessary for ca666's legitimate business interests, including fraud prevention, platform security, and improving our services — provided those interests are not overridden by your own privacy rights.
- Consent: Processing for which you have given us your explicit, freely given, and informed consent, such as receiving promotional communications or participating in personalised offers. You may withdraw consent at any time without affecting the lawfulness of prior processing.
6. Sharing Your Personal Data
ca666 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We may share your personal data with the following categories of recipients, strictly for the purposes described:
6.1 Payment Service Providers
We share transaction-relevant data with payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank in order to initiate, confirm, and reconcile your deposits and withdrawals. These providers act as independent data controllers under their own privacy policies and are subject to their own regulatory obligations.
6.2 Identity Verification Providers
To fulfil our KYC obligations, we may share identity documents and personal data with trusted third-party identity verification service providers. These providers process data solely for the purpose of confirming the authenticity of your identity and are contractually prohibited from using your data for any other purpose.
6.3 Game Software Providers
ca666 integrates games supplied by third-party providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and Red Tiger. These providers may receive a player identifier and session token to deliver the game environment. They do not receive your full identity data as part of routine game delivery.
6.4 Fraud Prevention and Compliance
We may share data with fraud prevention agencies, anti-money-laundering databases, and law enforcement authorities where we are legally required to do so or where we reasonably suspect illegal activity. Such disclosures are made only to the extent required by applicable law or to protect the legitimate interests of ca666 and its players.
6.5 IT and Infrastructure Providers
We engage third-party technology vendors to support platform hosting, database management, security monitoring, and customer support tooling. These vendors process data strictly on our instructions under data processing agreements and are not permitted to use your data for their own purposes.
7. Cookies & Tracking Technologies
7.1 What Are Cookies?
Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device, remember your preferences, and gather analytical data about your usage patterns. ca666 uses cookies and similar tracking technologies including web beacons and session tokens.
7.2 Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Required for the platform to function — session management, login state, security tokens | Session |
| Functional | Remembers your preferences such as language, display settings, and responsible gaming limits | Up to 12 months |
| Analytical | Collects anonymised data about how players use the platform to improve performance and UX | Up to 24 months |
| Marketing | Tracks referral source and campaign performance to measure the effectiveness of promotions (only where you have consented) | Up to 30 days |
7.3 Managing Cookies
You can control cookie usage through your browser settings. Most modern browsers allow you to refuse cookies, delete existing cookies, or alert you when cookies are being set. Note that disabling strictly necessary cookies will impair the functionality of the ca666 platform and may prevent you from logging in or completing transactions. Disabling analytical or marketing cookies will not affect your ability to use the platform.
8. Data Retention
ca666 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:
- Active account data: Retained for the duration of your account's active status plus a minimum period of five (5) years following account closure, to satisfy anti-money-laundering record-keeping requirements.
- Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
- KYC and identity documents: Retained for a minimum of five (5) years following account closure or the date of the relevant verification check, whichever is later.
- Customer support communications: Retained for two (2) years from the date of the interaction, unless the communication relates to an ongoing dispute or legal matter.
- Marketing consent records: Retained for the duration of the consent plus three (3) years, in order to demonstrate compliance in the event of a complaint.
- Cookie and analytics data: Retained as per the durations described in Section 7.2.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Where deletion is not technically feasible for specific technical reasons, data is isolated from further processing until deletion becomes possible.
9. Data Security
ca666 has implemented a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key measures include:
- 256-bit SSL/TLS encryption applied to all data in transit between your device and our servers.
- Encryption at rest for stored sensitive data including financial records and identity documents.
- Role-based access controls ensuring that internal staff can access player data only to the extent required by their specific job function.
- Multi-factor authentication required for all staff accessing systems that process personal data.
- Regular penetration testing and vulnerability assessments conducted by independent security specialists.
- Firewalled, monitored server environments with intrusion detection and real-time alerting.
- Tokenisation of payment method identifiers so that full wallet numbers or bank account details are never stored in plain text.
10. Your Data Rights
As a data subject, you are entitled to exercise the following rights in relation to your personal data held by ca666. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a valid, verified request.
Your Rights Over Your Data
ca666 recognises the following data subject rights for all registered players. Submit a request to [email protected] and we will respond within 30 days.
You may request a copy of all personal data ca666 holds about you, along with information on how it is used, where it came from, and who it has been shared with.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
Also known as the "right to be forgotten". You may request the deletion of your personal data where it is no longer required for the purpose it was collected, subject to our legal retention obligations.
In certain circumstances, you may request that we limit how we use your data — for example, while a dispute about its accuracy is being resolved — without deleting it entirely.
You may request your personal data in a structured, machine-readable format so that it can be transferred to another service provider of your choice, where technically feasible.
You may object to the processing of your personal data for direct marketing purposes at any time, and to processing based on legitimate interests where your rights override those interests.
11. Children's Privacy
The ca666 platform is strictly intended for individuals aged 21 years and above. ca666 does not knowingly collect, process, or store personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has created a ca666 account, please contact us immediately at [email protected].
Parents and guardians are encouraged to use device-level parental control software and to supervise their children's internet activity. ca666 supports responsible gaming across all age groups and maintains a zero-tolerance policy towards underage gambling.
12. Third-Party Links
The ca666 platform may contain references to third-party payment providers (such as bKash and Nagad) and game software providers (such as Pragmatic Play and Evolution Gaming). While ca666 takes care in selecting reputable partners, we are not responsible for the privacy practices or content of any third-party services. Each third-party provider operates under its own privacy policy, and we encourage you to review those policies before submitting personal data to any third party.
ca666 does not control, endorse, or assume responsibility for any third-party website or service. The presence of a third-party brand name on the ca666 platform does not constitute an endorsement of that third party's data practices.
13. Changes to This Policy
ca666 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will notify you via the email address registered to your account at least 14 days before the changes take effect. For minor or administrative changes, we will update the "Last Updated" date at the top of this Policy and post the revised version on the ca666 platform.
Your continued use of the ca666 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should contact us to close your account and request deletion of your personal data prior to the effective date.
14. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data ca666 holds about you, please contact our Data Protection team using the details below. We aim to acknowledge all privacy-related enquiries within 3 business days and to provide a substantive response within 30 days.
| Contact Method | Details |
|---|---|
| [email protected] (plain text — not a clickable link) | |
| Subject Line | Privacy Policy Enquiry / Data Rights Request |
| Response Time | Acknowledgement within 3 business days; full response within 30 days |
| Business Hours | 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6) |
For general account queries unrelated to privacy, please visit our FAQ page or contact customer support through your account dashboard.
Ready to Play at ca666?
You now know exactly how ca666 protects your personal data. Join thousands of Bangladeshi players enjoying safe, reliable online casino games and live cricket betting — with instant bKash and Nagad deposits.