Privacy Policy — How ca777 Handles Your Personal Data
At ca777, the privacy and security of every player's personal information is a foundational commitment. This Privacy Policy explains precisely what data we collect, why we collect it, how we use it, and the rights you hold as a ca777 account holder in Bangladesh.
Secure Data Storage
All personal data collected by ca777 is stored on encrypted, access-controlled servers. We apply 256-bit SSL encryption across every data transfer between your device and our platform to keep your information safe at all times.
Your Data, Your Rights
As a ca777 player based in Bangladesh, you hold clear rights over your personal data — including the right to access, correct, restrict processing, and in certain circumstances request deletion of the data we hold about you.
No Third-Party Selling
ca777 does not sell, rent, or trade your personal data to unaffiliated third parties for marketing purposes. Data is shared only where strictly necessary for platform operations or required by applicable law.
Local Payment Privacy
Deposits and withdrawals via bKash, Nagad, Rocket, and Upay are processed securely. ca777 retains only the minimum transaction reference data necessary for account reconciliation and fraud prevention purposes.
Transparent Cookie Use
ca777 uses cookies and similar tracking technologies solely to deliver a functional, personalised gaming experience. We do not deploy third-party advertising trackers or share browsing data with ad networks.
Dedicated Privacy Support
Our support team is available 24/7 to handle any data-related query or access request. Reach us via live chat or at — we aim to respond to all privacy requests within 5 business days.
01 Introduction
This Privacy Policy ("Policy") sets out the basis on which ca777 ("ca777", "we", "us", or "our") collects, processes, stores, and shares personal data relating to individuals ("you", "the Player") who access, register on, or otherwise interact with the ca777 platform at ca777.io and any associated sub-domains or mobile applications (collectively, the "Platform").
ca777 is committed to handling all personal data responsibly, transparently, and in compliance with applicable data protection principles. We collect only the data that is necessary for the purposes described in this Policy, and we maintain appropriate technical and organisational security measures to protect that data at all times.
This Policy applies to all registered players, prospective players who browse the Platform without registering, and any individual who contacts the ca777 support team. It covers all personal data collected through the Platform, including data provided directly by you and data collected automatically through your use of the Platform.
Please read this Policy carefully before registering a ca777 account. By creating an account on ca777, accessing the Platform, or placing any real-money wager, you confirm that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not register an account or use the Platform.
This Policy should be read alongside the ca777 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference.
02 Data We Collect
ca777 collects personal data in the following categories, depending on the nature of your interaction with the Platform:
2.1 Registration & Identity Data
When you create a ca777 account, we collect the information you provide during the registration process, including:
- Full legal name
- Date of birth (to verify you are aged 21 or above)
- Residential address (including city — e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh)
- Email address
- Mobile phone number
- Username and encrypted password
2.2 Verification (KYC) Data
To comply with our Know Your Customer (KYC) obligations and to prevent fraud and underage gambling, we may collect the following verification documents:
- National Identity Card (NID) scan or photograph
- Passport or birth certificate (where NID is unavailable)
- Proof of payment method ownership (e.g., screenshot of bKash or Nagad account in your name)
- Selfie photograph or short video for liveness verification
2.3 Financial & Transaction Data
When you make deposits or request withdrawals, we collect transaction-level data including:
- Mobile financial service provider used (bKash, Nagad, Rocket, or Upay)
- Transaction reference numbers
- Deposit and withdrawal amounts in Bangladeshi Taka (BDT)
- Transaction timestamps and status records
ca777 does not store full payment account credentials. Mobile wallet numbers are retained only in tokenised or partially masked form for reconciliation and fraud prevention purposes.
2.4 Usage & Behavioural Data
We automatically collect data about how you interact with the Platform, including:
- Pages visited, games played, betting markets accessed, and session duration
- Wager amounts, game results, and betting history
- Device type, operating system, browser type and version
- IP address and approximate geolocation (country and city-level)
- Referral source and navigation path within the Platform
2.5 Communications Data
When you contact the ca777 support team via live chat, email, or WhatsApp, we collect and retain records of those communications — including the content of your messages, the date and time of contact, and any resolution actions taken — for quality assurance, compliance, and audit purposes.
2.6 Responsible Gaming Data
If you use ca777's responsible gaming tools — such as deposit limits, session time reminders, or self-exclusion — we record your preferences and any requests made, to ensure those restrictions are applied correctly and consistently across your account.
ca777 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than liveness selfies for KYC), or health data, except where explicitly required for responsible gaming assessments and with your informed consent.
03 How We Use Your Data
ca777 uses the personal data we collect for the following purposes:
| Purpose | Data Categories Used |
|---|---|
| Account Registration & Management — Creating and maintaining your player account, verifying your identity and age, and providing access to Platform features. | Registration data, KYC data |
| Payment Processing — Processing BDT deposits and withdrawals via bKash, Nagad, Rocket, and Upay; detecting and preventing payment fraud. | Financial & transaction data, KYC data |
| Platform Operation & Personalisation — Delivering games, sports betting markets, and promotional content; personalising your Platform experience based on game and betting preferences. | Usage & behavioural data, registration data |
| Responsible Gaming — Applying deposit limits, session reminders, self-exclusion requests, and monitoring for indicators of problem gambling behaviour. | Responsible gaming data, usage data, financial data |
| Fraud Prevention & Security — Detecting and investigating suspicious activity, multiple account creation, bonus abuse, money laundering, and other prohibited conduct. | All categories as required |
| Customer Support — Responding to queries, resolving disputes, and maintaining records of communications for quality assurance and audit purposes. | Communications data, registration data |
| Legal & Regulatory Compliance — Meeting our legal obligations including anti-money laundering (AML) checks, age verification requirements, and responding to lawful authority requests. | KYC data, financial data, usage data |
| Analytics & Platform Improvement — Analysing aggregated usage patterns to improve Platform performance, game selection, and user experience. Analytics are conducted on anonymised or pseudonymised data wherever possible. | Usage & behavioural data (anonymised) |
ca777 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you, except where such processing is necessary for fraud detection or legal compliance purposes — in which case you have the right to request human review of any decision.
04 Legal Basis for Processing
ca777 processes your personal data only where we have a valid legal basis for doing so. The applicable legal bases for the processing activities described in this Policy are as follows:
- Contractual Necessity: Processing required to perform the contract between you and ca777 — including account registration, payment processing, and provision of gaming services — is carried out on the basis of contractual necessity.
- Legitimate Interests: Processing for fraud prevention, platform security, analytics, and responsible gaming monitoring is carried out on the basis of ca777's legitimate interests in operating a secure and compliant gaming platform, provided those interests are not overridden by your fundamental rights and freedoms.
- Legal Obligation: Processing required to comply with applicable laws — including KYC verification, anti-money laundering checks, and responses to lawful authority requests — is carried out on the basis of legal obligation.
- Consent: Where we rely on your consent as the legal basis for processing — including for certain marketing communications and for the collection of sensitive data during responsible gaming assessments — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent, contact the support team at .
05 Data Sharing & Disclosure
5.1 Service Providers
ca777 may share your personal data with carefully selected third-party service providers who process data on our behalf for purposes consistent with this Policy. These providers include: payment processing partners (bKash, Nagad, Rocket, Upay), identity verification and KYC service providers, game software providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), cloud infrastructure and hosting providers, customer support platform providers, and fraud detection and analytics technology providers.
All third-party service providers engaged by ca777 are subject to data processing agreements that require them to process personal data only for specified, limited purposes and in accordance with appropriate security standards. ca777 does not permit service providers to use your data for their own commercial purposes.
5.2 Legal & Regulatory Disclosure
ca777 may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where we are legally required to do so — for example, in response to a court order, a lawful authority request, or in connection with an anti-money laundering investigation. In such cases, ca777 will disclose only the minimum data necessary to satisfy the legal requirement.
5.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of ca777's business assets, personal data held by ca777 may be transferred to the acquiring or successor entity as part of that transaction. Affected players will be notified of any such transfer and of any material changes to data processing practices that result from it.
5.4 No Sale of Personal Data
ca777 does not sell, rent, lease, or otherwise commercially exploit your personal data to any unaffiliated third party. We do not share your data with advertising networks, data brokers, or any third party for their own independent marketing purposes.
06 Cookies & Tracking Technologies
ca777 uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) on the Platform to deliver a functional, secure, and personalised gaming experience. The following categories of cookies are used:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Essential for Platform functionality — including session authentication, login state management, security tokens, and fraud prevention signals. | No — required for Platform to function |
| Functional | Remember your preferences such as language settings, game display options, and responsible gaming tool configurations. | Yes — may reduce personalisation |
| Analytics | Collect anonymised data on Platform usage patterns to improve performance, identify technical issues, and enhance user experience. | Yes — via account privacy settings |
ca777 does not use advertising or third-party marketing cookies. We do not deploy tracking pixels for external ad networks or share cookie data with unaffiliated third parties for marketing purposes.
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log into and use the ca777 Platform. For details on managing cookies in your specific browser, refer to your browser's official documentation.
07 Data Retention
ca777 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:
- Active Account Data: Retained for the full duration of your account relationship with ca777, plus a minimum of 5 years following account closure, to meet anti-money laundering record-keeping requirements.
- KYC & Identity Verification Documents: Retained for a minimum of 5 years from the date of collection or the date of account closure, whichever is later.
- Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping obligations.
- Customer Support Communications: Retained for 3 years from the date of each interaction, for quality assurance and dispute resolution purposes.
- Usage & Behavioural Analytics Data: Anonymised or pseudonymised within 12 months of collection; raw usage logs retained for up to 24 months from collection.
- Self-Exclusion Records: Retained for the full duration of the self-exclusion period plus 5 years after its conclusion, to prevent inadvertent re-registration.
Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised in accordance with ca777's data deletion procedures. Deletion requests submitted by players are subject to applicable legal retention obligations — we will notify you if any data cannot be deleted due to such obligations.
08 Data Security
ca777 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures include:
- 256-bit SSL/TLS Encryption: All data in transit between your device and the ca777 Platform is encrypted using industry-standard TLS protocols.
- Encrypted Data Storage: Sensitive personal data — including identity documents and payment references — is stored in encrypted form on access-controlled servers.
- Access Controls: Access to personal data within ca777 is restricted on a strict need-to-know basis, with role-based access controls and multi-factor authentication applied to all internal systems.
- Intrusion Detection & Monitoring: ca777's infrastructure is subject to continuous security monitoring, automated intrusion detection systems, and regular independent security assessments.
- Incident Response: ca777 maintains a documented data breach response procedure. In the event of a confirmed personal data breach that is likely to result in a risk to affected individuals, ca777 will take immediate containment action and notify affected players without undue delay.
While ca777 takes all reasonable steps to protect your personal data, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. You also have a responsibility to protect your ca777 account by keeping your login credentials confidential and notifying our support team immediately if you suspect unauthorised access to your account.
09 Your Privacy Rights
As a ca777 player, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact the ca777 support team at or via 24/7 live chat. We aim to respond to all data rights requests within 5 business days.
Right of Access
You have the right to request a copy of all personal data that ca777 holds about you, together with information about how it is processed. We will provide this in a structured, readable format.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information directly through your ca777 account settings.
Right to Erasure
In certain circumstances, you have the right to request the deletion of your personal data — for example, where the data is no longer necessary for the purposes it was collected. Note that legal retention obligations may prevent full erasure in some cases.
Right to Restrict Processing
You have the right to request that ca777 restricts the processing of your personal data in certain circumstances — for example, while you contest the accuracy of the data, or where you have objected to processing based on legitimate interests.
Right to Data Portability
Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that we transmit it to another service provider where technically feasible.
Right to Object
You have the right to object to the processing of your personal data where that processing is based on ca777's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
Identity verification may be required before ca777 processes a data rights request, to ensure we do not disclose personal data to an unauthorised party. Requests made on behalf of another person require written authorisation from that person.
10 Children & Minors
The ca777 Platform is strictly intended for adults aged 21 years and above. ca777 does not knowingly collect, process, or store personal data belonging to any individual under the age of 21. Age verification is a mandatory component of the ca777 KYC process, and any account found to have been registered by a person under the age of 21 will be immediately and permanently closed, with all associated balances forfeited.
If you are a parent or guardian and believe that a person under the age of 21 in your household has registered a ca777 account or submitted personal data to the Platform, please contact the support team immediately at . Upon receipt of a verified report, ca777 will promptly close the account, delete all associated personal data (subject to applicable legal retention requirements), and take appropriate steps to prevent re-registration.
ca777 strongly recommends that parents and guardians install reputable parental control software on all shared devices to prevent access to online gaming platforms by minors.
11 Third-Party Links
The ca777 Platform may contain hyperlinks to third-party websites or services — including game provider portals, payment partner information pages, or sports data providers. These links are provided for informational purposes only. ca777 does not operate, control, or take responsibility for the content, privacy practices, or data handling of any third-party website or service.
When you leave the ca777 Platform by following a third-party link, your interaction with that third-party site is governed by that site's own privacy policy. ca777 strongly encourages you to review the privacy policy of any third-party site you visit before providing any personal data. ca777 accepts no liability for any data collected or processed by third-party sites accessed via links on the Platform.
12 Policy Amendments
ca777 reserves the right to amend, update, or revise this Privacy Policy at any time. Changes may be made to reflect updates to applicable law, changes in our data processing practices, the introduction of new Platform features, or improvements to how we describe our existing practices.
Where we make material changes to this Policy — that is, changes that affect your rights or the way in which ca777 processes your personal data in a significant way — we will notify registered players by email to the address associated with their ca777 account, or by displaying a prominent notice on the Platform, at least 14 days before the updated Policy takes effect. Continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the revised terms.
Where changes are non-material (for example, corrections to typographical errors, clarifications that do not affect the substance of the Policy, or minor structural reorganisation), the updated Policy will take effect immediately upon publication on the Platform without advance notice. The "Effective Date" shown at the top of this Policy and in the Document Details panel on this page reflects the date of the most recent substantive revision.
We recommend that you review this Privacy Policy periodically to stay informed about how ca777 is protecting your personal data. The current version of the Policy is always available at ca777.io/privacy-policy.
13 Contact & Complaints
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which ca777 processes your personal data, please contact our support team using any of the following methods:
- Email: (plain text — not a clickable link)
- Live Chat: Available 24 hours a day, 7 days a week via the Platform
- WhatsApp Support: Available 08:00–00:00 Bangladesh Standard Time (BST, UTC+6)
ca777 aims to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 5 business days. Complex requests involving large volumes of data or requiring legal review may take up to 30 days to resolve; we will notify you promptly if additional time is required.
If you are not satisfied with the response you receive from ca777, or if you believe that ca777 is processing your personal data in a manner that is inconsistent with this Policy or applicable law, you have the right to escalate your complaint to the relevant data protection authority or regulatory body in your jurisdiction. ca777 commits to cooperating fully with any such regulatory enquiry.
ca777 takes all privacy complaints seriously. Every complaint received is logged, reviewed by a qualified team member, and responded to in writing. We view complaints as an important feedback mechanism that helps us continuously improve our data protection practices.
Ready to Play at ca777?
Now that you understand how ca777 protects your personal data, explore our full range of casino games, cricket betting markets, and exclusive VIP rewards — all in a secure, SSL-encrypted environment.