Privacy Policy — cae365

This Privacy Policy ("Policy") is issued by cae365 ("cae365", "we", "us", "our") and applies to all personal data collected, processed, and stored by cae365 in connection with the operation of the online casino and sports betting platform available at cae365.pro (the "Platform").

By registering an account on the Platform or by continuing to use the Platform after this Policy has been published, you ("the Player", "you", "your") acknowledge that you have read, understood, and agreed to the data practices described in this Policy.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy. In the event of any conflict between this Policy and any other document, this Policy governs with respect to personal data matters.

This Policy applies to all players accessing the Platform from Bangladesh, including users in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. Players located outside Bangladesh access the Platform at their own risk and are responsible for determining whether such access is lawful in their jurisdiction.

We may update this Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. Where changes are material, we will notify registered players via the Platform or, where reasonably practicable, by notification to the mobile number or email address associated with their account. The effective date shown at the top of this page reflects when the current version came into force.

cae365 collects personal data from you in the following categories. We collect only what is necessary for the stated purpose.

2.1 Registration Data

When you create a cae365 account, we collect the information you provide during registration, which typically includes:

• Full legal name
• Date of birth (for age verification — you must be 21 or older)
• Registered mobile number (used as your primary contact and for bKash / Nagad / Rocket / Upay transaction matching)
• Preferred username and password (password is stored in hashed, non-reversible form)
• City or region within Bangladesh (e.g., Dhaka, Chittagong, Sylhet)

2.2 Identity Verification Data

In accordance with standard anti-money laundering (AML) and know-your-customer (KYC) procedures, cae365 may request identity verification documents from registered players. These may include:

• National ID card (NID) number and/or a scanned copy of the NID
• Passport or driving licence (where applicable)
• Utility bill or bank statement as proof of address
• A selfie or live photograph for facial verification purposes

Identity documents are handled with the highest level of security and are accessed only by authorised compliance staff on a strictly need-to-know basis.

2.3 Financial and Transaction Data

When you make a deposit or request a withdrawal, cae365 records:

• Transaction amount in BDT (Bangladeshi Taka)
• Payment method used (e.g., bKash wallet number, Nagad account, Rocket number, Upay ID, bank account reference)
• Date, time, and transaction status
• Associated game or betting activity linked to the transaction

cae365 does not store full bKash PIN codes, Nagad PINs, or full bank account passwords. Payment authentication is handled by the respective payment provider's secure gateway.

2.4 Gaming and Betting Activity Data

We record your activity on the Platform to provide the gaming service and to fulfil our responsible gaming obligations, including:

• Games played, bets placed, bet amounts, bet outcomes, and winnings
• Session start and end times (in Bangladesh Standard Time, UTC+6)
• Sports markets and cricket fixtures you have wagered on (e.g., BPL matches, IPL, ICC tournaments)
• Bonus and promotion eligibility and usage history
• Responsible gaming tool settings (deposit limits, self-exclusion status)

2.5 Technical and Device Data

When you access the Platform, our servers automatically log certain technical information:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser type and version
• Referring URL and pages visited within the Platform
• Session duration and interaction logs

2.6 Communications Data

If you contact our support team, we retain records of those communications, including the content of live chat sessions, email exchanges, and any documentation you provide, for quality assurance, dispute resolution, and regulatory purposes.

cae365 uses your personal data only for the following defined purposes:

• Account creation and management: To register your account, maintain your profile, and administer your use of the Platform.
• Identity and age verification: To confirm you are at least 21 years of age and to verify your identity in compliance with our KYC and AML obligations.
• Payment processing: To process your bKash, Nagad, Rocket, Upay, or bank transfer deposits and withdrawals accurately and securely in BDT.
• Delivering the gaming and betting service: To provide you with access to casino games, live dealer tables, crash games, slots, and cricket and sports betting markets.
• Responsible gaming: To monitor gaming patterns for signs of problematic gambling behaviour, to apply the responsible gaming limits you have set, and to action self-exclusion requests promptly.
• Fraud detection and prevention: To identify and investigate suspicious account activity, potential money laundering, duplicate accounts, and bonus abuse.
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Legal compliance: To comply with applicable laws and to respond to lawful requests from regulatory authorities.
• Platform improvement: To analyse aggregated, anonymised usage data to improve Platform performance, game selection, and user experience. This analysis uses anonymised data and does not identify individual players.
• Promotional communications (opt-in only): If you have opted in to receive marketing communications, we may send you information about promotions, seasonal bonuses (e.g., Eid promotions, BPL season offers, Pohela Boishakh specials), and new game launches. You may opt out at any time by contacting our support team.

cae365 uses cookies and similar tracking technologies (such as local storage tokens and session identifiers) to operate the Platform. The table below describes the types of cookies we use.

cae365 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You will not be tracked across other websites as a result of using the cae365 Platform.

Most web browsers allow you to control cookies through their settings. Disabling strictly necessary cookies will prevent the Platform from functioning correctly and may mean you are unable to log in to your account.

cae365 does not sell your personal data. We share personal data only in the following strictly defined circumstances:

• Payment Processors: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, or Mastercard, we share the transaction data necessary to process the payment with the relevant payment provider. Each payment provider operates under its own privacy policy and terms of service.
• Identity Verification Providers: We may engage third-party KYC and identity verification services to confirm your identity and age. These providers process your identity documents under strict data processing agreements and may not use your data for any purpose other than verification.
• Game Providers: Third-party game studios (including Evolution Gaming, Ezugi, Pragmatic Play, Spribe, NetEnt, and Microgaming) receive a session token and anonymised player identifier to deliver their game content. They do not receive your full name, NID, or payment details.
• Regulatory and Law Enforcement Authorities: Where required by applicable law or a lawful regulatory request, cae365 will disclose personal data to the relevant authority. We will notify you of any such disclosure where legally permitted to do so.
• Fraud Prevention Partners: cae365 may share data with fraud prevention agencies and industry bodies for the purposes of detecting and preventing money laundering, fraud, and bonus abuse. Such sharing is governed by strict data sharing agreements.
• Business Successors: In the event of a merger, acquisition, or sale of all or part of cae365's business, your personal data may be transferred to the acquiring entity, provided that the acquiring entity agrees to be bound by the terms of this Policy or a policy offering equivalent protection.

cae365 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable legal, regulatory, and accounting obligations.

• Active accounts: Personal data is retained for the full duration of your account's active status, plus a minimum of five years following account closure, to comply with anti-money laundering record-keeping requirements.
• Transaction records: Financial transaction records (deposit and withdrawal history in BDT) are retained for a minimum of five years in accordance with financial record-keeping obligations.
• Identity verification documents: KYC documents (NID copies, selfies, proof of address) are retained for a minimum of five years from the date of verification or from the date of account closure, whichever is later.
• Communication records: Records of customer support interactions are retained for up to three years from the date of the last interaction.
• Session and technical logs: Server logs and session data are retained for up to 12 months and then deleted or anonymised.
• Responsible gaming records: Self-exclusion and deposit limit records are retained for a minimum of five years to ensure the integrity of responsible gaming commitments.

When personal data is no longer required for any legitimate purpose, it is securely deleted or irreversibly anonymised. Deletion requests submitted by players are processed subject to our legal retention obligations — data that we are legally required to retain will not be deleted until the applicable retention period has expired.

As a registered player on the cae365 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all verified requests within 30 days.

• Right of Access: You may request a copy of the personal data cae365 holds about you, including your registration details, transaction history, and KYC records.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. You may also update certain details (such as your registered mobile number) directly within your account settings.
• Right to Erasure: You may request the deletion of your personal data. This right is subject to our legal retention obligations — we will delete what we can and inform you of any data that must be retained by law.
• Right to Restrict Processing: You may request that we temporarily restrict the processing of your personal data while a dispute or correction request is being resolved.
• Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) to transfer to another service.
• Right to Object: You may object to the processing of your personal data for marketing purposes or for purposes based on our legitimate interests. To opt out of marketing communications, contact [email protected].
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

cae365 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the cae365 Platform is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar when using the Platform.
• Password Hashing: Account passwords are never stored in plain text. We use a strong, one-way cryptographic hashing algorithm so that even our own staff cannot read your password.
• Access Controls: Access to personal data within cae365's systems is restricted to authorised staff on a strict need-to-know basis. Staff with access to sensitive data undergo data protection training.
• Infrastructure Security: Our servers are hosted in secured data centres with physical access controls, firewalls, intrusion detection systems, and regular security audits.
• Fraud Monitoring: Automated systems continuously monitor the Platform for suspicious login attempts, unusual transaction patterns, and potential account compromise.
• Incident Response: In the event of a data security incident that is likely to result in a risk to your rights and freedoms, cae365 will notify affected players as promptly as practicable after becoming aware of the incident.

While cae365 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You also play an important role in keeping your account secure — use a strong, unique password and never share your login credentials with anyone. If you suspect your account has been compromised, contact [email protected] immediately.

The cae365 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from any individual under the age of 21.

Age verification checks are performed as part of the registration and KYC process. Where cae365 has reasonable grounds to believe that a registered player is under 21 years of age, the account will be suspended immediately pending a full identity and age verification review. If the player is confirmed to be under 21, the account will be permanently closed and all personal data will be securely deleted, except where retention is required by law.

If you believe that a minor has registered on the cae365 Platform, please contact us immediately at [email protected] so that we may take appropriate action without delay.

The cae365 Platform may contain references to or integrations with third-party services, such as payment gateways (bKash, Nagad, Rocket, Upay) and game provider interfaces (Evolution Gaming, Pragmatic Play, Spribe, etc.). When you interact with these third-party services, you are subject to their own privacy policies and terms of service, which are separate from this Policy.

cae365 has no control over the data practices of third-party services and is not responsible for their privacy policies or data handling practices. We recommend that you review the privacy policy of any third-party service you interact with before providing personal data to that service.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cae365 handles your personal data, please contact our support team. We are available 24 hours a day, 7 days a week.

Support email: [email protected]

All privacy-related communications are handled in Bangladesh Standard Time (BST, UTC+6). We will acknowledge receipt of your request within 48 hours and provide a substantive response within 30 days. For complex requests, we may require additional time and will inform you accordingly.