ca555 Privacy Policy — How We Collect, Use & Protect Your Data

1. Information We Collect

When you register, access, or use the ca555 platform, we collect certain categories of personal information in order to provide our services effectively, comply with legal obligations, and maintain the security and integrity of the platform. The categories of information we collect are set out below.

1.1 Information You Provide Directly

When you register a ca555 account, we collect the following information that you submit to us:

• Full legal name as it appears on your government-issued identification document
• Date of birth (used to verify that you meet the 18+ age requirement)
• Residential address, including division, district, city, and postcode (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh)
• Email address and mobile phone number
• Username and password (password is stored in hashed, non-reversible form)
• Identity documents submitted during KYC verification (National ID Card, passport, driving licence)
• Payment method details: mobile banking account numbers for bKash, Nagad, Rocket, and Upay; bank account details for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank transactions

1.2 Information Collected Automatically

When you interact with the ca555 platform — whether through a web browser or a mobile device — we automatically collect certain technical and usage information:

• IP address and approximate geolocation derived from IP data
• Device type, operating system, browser type and version
• Pages visited, features used, betting and gaming activity logs, session duration, and click-path data
• Referral URL (the page from which you arrived at ca555, if applicable)
• Cookie identifiers and similar tracking technologies (see Section 4 for full details)

1.3 Information From Third Parties

In limited circumstances, ca555 may receive information about you from third-party sources to supplement the information already held on your account. This may include:

• Identity verification results from third-party KYC service providers
• Transaction confirmation data from payment processors (bKash, Nagad, Rocket, bank partners)
• Fraud prevention signals from third-party risk assessment services

In all such cases, ca555 ensures that the third-party source is contractually bound to handle your data responsibly and that the information received is used only for the purpose for which it was obtained.

2. How We Use Your Information

ca555 processes your personal data only where a lawful basis exists for doing so. The table below summarises the primary purposes for which your data is used and the corresponding lawful basis for each processing activity.

ca555 does not use your personal data to make fully automated decisions that produce significant legal effects concerning you without appropriate human review. Where automated tools are used as part of our fraud or risk assessment processes, a member of the ca555 compliance team will review any decision that materially affects your account.

3. Data Sharing & Third Parties

ca555 does not sell, rent, or otherwise disclose your personal data to third parties for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the minimum extent necessary.

3.1 Service Providers

ca555 engages carefully selected third-party service providers to support the operation of the platform. These providers act as data processors on our behalf and are contractually required to process your data only in accordance with our instructions and to maintain appropriate security standards. Categories of service providers include:

• Payment processing partners: bKash, Nagad, Dutch-Bangla Bank Rocket, Upay, and banking partners
• Identity verification and KYC service providers
• Cloud hosting and data centre infrastructure providers
• Customer support platform providers (live chat software)
• Game content providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi (game session data only; no financial data is shared)
• Fraud detection and cybersecurity service providers

3.2 Legal Disclosures

ca555 may disclose your personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or other public authorities where we are legally required to do so — for example, in response to a lawful court order, warrant, or statutory reporting obligation. ca555 will disclose only the information specifically requested and will not voluntarily share data beyond what is required.

3.3 Business Transfers

In the event that ca555 undergoes a merger, acquisition, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, ca555 will notify affected players and the acquiring entity will be bound by the same data protection obligations as set out in this Privacy Policy.

4. Cookies & Tracking Technologies

ca555 uses cookies and similar technologies — including web beacons, pixel tags, and local storage objects — to operate and improve the platform, personalise your experience, and analyse usage patterns. This section explains what these technologies are, how we use them, and how you can manage your preferences.

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your preferred language, login session status, and pages previously viewed — so that the site can function correctly and provide a more personalised experience on subsequent visits.

4.2 Categories of Cookies We Use

4.3 Managing Your Cookie Preferences

Strictly necessary cookies cannot be disabled as they are essential for the platform to function. For all other cookie categories, you may adjust your preferences by modifying the settings in your web browser. Most modern browsers allow you to block, delete, or receive a warning before cookies are stored. Please note that disabling functional or analytics cookies may affect certain features of the ca555 platform.

5. Data Security Measures

ca555 applies a layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to, the following:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and ca555 servers is encrypted using 256-bit SSL/TLS encryption, preventing interception by third parties.
• Password Hashing: Account passwords are never stored in plain text. ca555 uses a modern cryptographic hashing algorithm with individual salting for each password, making stored credentials unrecoverable even in the event of a data breach.
• Access Controls: Access to systems holding personal data is governed by role-based access controls. Only authorised personnel with a legitimate operational need may access player records. All access events are logged and audited.
• Two-Factor Authentication (2FA): ca555 offers optional two-factor authentication for player accounts. We strongly encourage all players to enable 2FA as an additional layer of protection against unauthorised account access.
• Regular Security Audits: ca555 conducts periodic internal and third-party security assessments of its infrastructure, applications, and data handling processes to identify and remediate vulnerabilities proactively.
• Incident Response: In the unlikely event of a data security incident that poses a risk to your rights and freedoms, ca555 will notify affected players without undue delay and take all reasonable steps to contain and remediate the incident.

6. Data Retention Policy

ca555 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your account's active status plus a minimum of five years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction records: Deposit, withdrawal, and betting history records are retained for a minimum of five years from the date of each transaction.
• KYC documentation: Identity verification documents are retained for a minimum of five years following the conclusion of the business relationship, or longer if required by applicable law.
• Support communications: Records of customer support interactions are retained for two years from the date of the last interaction.
• Marketing consent records: Records of your consent to receive marketing communications are retained for the duration of your account and for one year following withdrawal of consent or account closure.
• Cookie and analytics data: Aggregated, anonymised analytics data may be retained indefinitely. Individual session data linked to your account is subject to the active account retention period above.

When personal data is no longer required and no legal obligation mandates its continued retention, ca555 will securely delete or anonymise it in accordance with our internal data disposal procedures.

7. Your Privacy Rights

As a player on the ca555 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the ca555 support team using the details provided in Section 8. ca555 will respond to all verified requests within a reasonable period and at no cost to you.

7.1 Right of Access

You have the right to request confirmation of whether ca555 holds personal data about you and, if so, to receive a copy of that data together with information about how it is being used. This is commonly referred to as a Subject Access Request.

7.2 Right to Rectification

You have the right to request that ca555 correct any inaccurate personal data held about you. Where the data is incomplete, you may also request that it be completed. Corrections to core account details (name, address, date of birth) may require supporting documentation for verification purposes.

7.3 Right to Erasure

In certain circumstances you have the right to request that ca555 delete your personal data — for example, where the data is no longer necessary for the purposes it was collected, or where you withdraw the consent on which processing was based. Please note that this right is subject to overriding legal obligations: ca555 is required to retain certain financial and identity records under anti-money laundering legislation, and such data cannot be erased on request during the mandatory retention period.

7.4 Right to Restrict Processing

You have the right to request that ca555 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or where you have objected to processing and ca555 is considering whether its legitimate grounds override your interests.

7.5 Right to Withdraw Consent

Where ca555 relies on your consent as the legal basis for a processing activity (such as sending promotional emails or SMS messages), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. To opt out of marketing communications, update your notification preferences in your account settings or contact support.

7.6 Right to Lodge a Complaint

If you believe that ca555 has not handled your personal data in accordance with this Privacy Policy, you have the right to raise a complaint. We encourage you to contact us first so that we have the opportunity to address your concern directly. Contact details are provided in Section 8 below.

8. Contact & Data Controller

ca555 is the data controller responsible for the personal data collected and processed through the ca555 platform. If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to raise a concern about how your data has been handled, please contact us using the details below.

Our support team is available 24 hours a day, seven days a week, via live chat on the platform. For written enquiries, including Subject Access Requests and erasure requests, please use the email address below. To help us handle your request efficiently, please include your registered username and a description of your request in your message.

• Email: [email protected]
• Live Chat: Available on-site, 24/7 (Bangladesh Standard Time, UTC+6)
• WhatsApp: +880 1XXX-XXXXXX

ca555 reserves the right to update this Privacy Policy at any time. When material changes are made, the updated Policy will be published at ca555.app/privacy-policy with a revised effective date. Your continued use of the platform following publication of an updated Policy constitutes your acknowledgement of the changes. We encourage you to review this page periodically to stay informed about how ca555 protects your personal data.