cajee Privacy
Policy

cajee collects personal data from players in Bangladesh through several channels: directly when you register an account or contact our support team, automatically when you use the cajee platform, and from third-party service providers involved in delivering our services. The types of personal data cajee collects include, but are not limited to, the following categories:

Identity and Contact Information: When you register a cajee account, we collect your full legal name, date of birth, residential address in Bangladesh, active mobile phone number, and email address. This information is required to create and verify your account, to satisfy our know-your-customer (KYC) obligations, and to communicate with you about your account activity and any promotions you have opted into.

Identity Verification Documents: To comply with applicable KYC and AML requirements, cajee may request copies of government-issued identity documents, such as your National Identity Card (NID), passport, or driving licence, as well as proof of your residential address (e.g., a recent utility bill or bank statement). These documents are processed securely and retained only for the duration required by applicable law.

Financial and Payment Data: cajee collects information about the payment methods you use to deposit and withdraw funds, including your bKash or Nagad account number, bank account details (where applicable), and transaction records. cajee does not store full card numbers or payment credentials directly — payment processing is handled by our certified payment service providers.

Gaming and Betting Activity: cajee automatically records all gaming and betting activity conducted through your account, including game sessions, bet amounts, win/loss records, bonus claims, and account balance history. This data is used for account management, dispute resolution, and responsible gaming monitoring.

Technical and Usage Data: When you access cajee via a browser or mobile device, we automatically collect certain technical data including your IP address, device type and operating system, browser type and version, referring URL, pages visited within cajee, session duration, and approximate geographic location derived from your IP address. This data is used to improve platform performance and detect suspicious or fraudulent activity.

Communications Data: If you contact cajee's support team via email or any messaging channel, we retain records of those communications, including the content of your messages and our responses. This data is used to resolve your query and to improve the quality of our customer support.

cajee uses the personal data it collects exclusively for lawful purposes directly related to the delivery, improvement, and protection of our online gaming and sports betting services in Bangladesh. We do not use your data for any purpose that would be incompatible with the purposes described in this Privacy Policy. The principal purposes for which cajee processes player data are as follows:

• Account Creation and Management: To register your cajee account, verify your identity and age, maintain your account balance, process deposits and withdrawals, and communicate account-related information to you.
• Service Delivery: To provide access to cajee's full suite of gaming and sports betting products, including cricket betting, live dealer casino games, slots, and fishing games.
• Payment Processing: To process deposits via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to facilitate withdrawal requests to your verified payment method.
• Legal and Regulatory Compliance: To fulfil cajee's obligations under applicable KYC, AML, and data retention requirements, including verifying player identities, monitoring for suspicious financial activity, and retaining records as required by law.
• Responsible Gaming: To monitor gaming patterns and identify players who may be exhibiting signs of problem gambling, and to administer deposit limits, time-out periods, and self-exclusion requests where applicable.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, account takeover attempts, bonus abuse, and other prohibited conduct as described in cajee's Terms & Conditions.
• Customer Support: To respond to your queries, resolve disputes, and provide technical assistance related to your cajee account and gaming activity.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the performance, reliability, and user experience of the cajee platform.
• Promotional Communications: To send you information about cajee bonuses, promotions, and new game launches — but only if you have opted in to marketing communications during registration or through your account settings. You may opt out at any time.

cajee will never use your personal data to make automated decisions that produce legal or similarly significant effects without providing you with a meaningful opportunity to contest the outcome. Where cajee uses automated systems to flag accounts for review (e.g., for suspected fraud or AML purposes), a human agent will review the flagged case before any final account action is taken.

cajee uses cookies and similar tracking technologies (collectively, "cookies") on its platform. Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device on subsequent visits, remember your preferences, and gather usage statistics. cajee's use of cookies is limited to the categories described below and does not extend to third-party advertising networks.

Strictly Necessary Cookies: These cookies are essential for the cajee platform to function correctly. They enable core features such as user authentication (keeping you logged in during a session), security token verification, and load balancing across cajee's servers. These cookies cannot be disabled without breaking core platform functionality.

Performance and Analytics Cookies: cajee uses first-party analytics cookies to collect anonymised, aggregated data about how players use the platform — for example, which game categories are most popular, which pages generate the most support queries, and where users tend to drop off during the registration process. This data is used exclusively to improve the cajee platform and is never linked to individual player identities.

Functionality Cookies: These cookies remember your platform preferences, such as your preferred game category, notification settings, and display settings. They allow cajee to deliver a more personalised experience without requiring you to reconfigure your preferences on each visit.

Session Cookies vs. Persistent Cookies: Some cajee cookies are session cookies, which are automatically deleted when you close your browser. Others are persistent cookies, which remain on your device for a defined period (up to 12 months) or until you delete them manually. The lifespan of each cookie category is managed in accordance with its purpose.

You can control and manage cookies through your browser settings. Most modern browsers allow you to block, delete, or restrict cookies for specific websites. Please note that disabling certain cookie categories may affect your experience on the cajee platform — in particular, disabling strictly necessary cookies will prevent you from logging in or maintaining an active session. Instructions for managing cookies in popular browsers are available in your browser's help documentation.

cajee does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. No data collected via cajee's cookies is shared with advertising networks, data brokers, or social media platforms.

cajee does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Data is shared with third parties only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

• Payment Service Providers: cajee shares transactional data with certified payment processors — including bKash, Nagad, Rocket, Upay, and banking partners such as Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank — solely for the purpose of processing your deposits and withdrawals. These providers are contractually obligated to handle your data securely and are prohibited from using it for any other purpose.
• Game Providers: cajee's game library is powered by regulated third-party providers including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe. When you play a game supplied by one of these providers, the provider's software processes your game session data in real time. cajee's agreements with game providers include data protection obligations consistent with this Privacy Policy.
• Identity Verification Partners: cajee uses regulated third-party KYC service providers to assist with identity and age verification. These providers process your identity documents on cajee's behalf and are contractually bound to strict data handling standards.
• Legal and Regulatory Authorities: cajee may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by law, court order, or other binding legal process. cajee will notify affected players of such disclosures where permitted by law.
• AML and Fraud Prevention: In cases where cajee's monitoring systems identify activity that may indicate money laundering, terrorist financing, or serious fraud, cajee is legally obligated to file reports with the appropriate financial intelligence authorities. Player notification is not provided in such cases, as disclosure may compromise the integrity of an ongoing investigation.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of cajee's business assets, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and will have the opportunity to close their account if they do not wish their data to be transferred.

All third parties with whom cajee shares personal data are required to maintain appropriate technical and organisational security measures and are prohibited from using player data for any purpose beyond that for which it was shared. cajee does not knowingly transfer player data to jurisdictions that do not provide an adequate level of data protection.

cajee takes the security of your personal data seriously and implements a layered set of technical, physical, and organisational safeguards to protect player information from unauthorised access, accidental loss, disclosure, alteration, or destruction. The security measures in place at cajee include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and cajee's servers is encrypted using TLS 1.2 or higher. The cajee platform operates exclusively over HTTPS.
• Data Encryption at Rest: Sensitive data stored on cajee's servers — including identity documents and payment records — is encrypted using AES-256 encryption, which is the same standard used by major financial institutions worldwide.
• Access Control: Access to personally identifiable player data within cajee's organisation is governed by a strict role-based access control (RBAC) policy. Staff members can access player data only to the extent required by their specific job function. All access is logged and regularly audited.
• Two-Factor Authentication for Staff: cajee employees who access internal systems containing player data are required to use multi-factor authentication (MFA). This reduces the risk of data breaches resulting from compromised staff credentials.
• Penetration Testing and Security Audits: cajee's platform undergoes regular security assessments including penetration testing and vulnerability scanning by qualified security professionals. Identified vulnerabilities are remediated on a priority basis.
• Incident Response: cajee maintains a documented data breach response procedure. In the event of a confirmed data breach that poses a risk to player rights and freedoms, affected players will be notified within a reasonable timeframe consistent with applicable legal obligations.

Data Retention: cajee retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: retained for the duration of the account relationship plus a minimum of five years following account closure, to satisfy AML and legal record-keeping obligations.
• Transaction records: retained for a minimum of five years from the date of each transaction.
• Gaming activity logs: retained for a minimum of three years from the date of activity.
• Support communications: retained for a minimum of two years from the date of the last communication in a thread.
• Marketing preferences: retained until you withdraw consent or close your account, whichever is earlier.

Upon expiry of the applicable retention period, cajee will securely delete or anonymise personal data in accordance with its internal data disposal procedures. Anonymised, aggregated data (which cannot be used to identify any individual) may be retained indefinitely for statistical and analytical purposes.

cajee recognises and upholds the privacy rights of all players registered on its platform. The following rights are available to you in connection with your personal data held by cajee. To exercise any of these rights, please submit a written request to [email protected] from the email address registered to your cajee account. cajee will respond to all verified requests within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data cajee holds about you. cajee will provide a structured summary of your data upon receipt of a verified access request. Note that certain data may be withheld where disclosure would prejudice an ongoing legal or fraud investigation.
• Right to Rectification: If any personal data cajee holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information (such as your email address or phone number) directly through your account settings. For corrections to identity documents or date of birth, please contact [email protected] with supporting documentation.
• Right to Erasure: You may request that cajee delete your personal data in certain circumstances — for example, if you close your account and the data is no longer required for the purpose for which it was collected. Please note that cajee is legally required to retain certain categories of data (particularly AML and transaction records) for a minimum period, regardless of a deletion request. cajee will inform you which data can and cannot be deleted and the reasons why.
• Right to Restrict Processing: You may request that cajee restrict the processing of your personal data in certain circumstances — for example, while the accuracy of your data is being contested, or while a complaint you have raised is being investigated.
• Right to Object to Marketing: You have the absolute right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of a valid marketing opt-out request, cajee will cease all marketing communications to you within five business days.
• Right to Data Portability: Where cajee processes your personal data on the basis of your consent or for the performance of a contract, you have the right to receive that data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider of your choosing.
• Right to Withdraw Consent: Where cajee relies on your consent as the legal basis for processing your personal data (e.g., for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

cajee will not discriminate against any player for exercising their privacy rights. Exercising a data rights request will not affect your ability to continue using the cajee platform, except in cases where the exercise of a right (e.g., account closure combined with a full erasure request) necessarily terminates the service relationship.

The cajee platform integrates with a number of regulated third-party service providers in order to deliver its full range of gaming, payment, and support features to players in Bangladesh. While cajee selects its third-party partners carefully and requires them to adhere to data protection standards consistent with this Privacy Policy, cajee is not responsible for the independent privacy practices of those third parties.

Game Software Providers: cajee's game content is supplied by internationally recognised gaming software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game, a connection is established directly between your device and the game provider's servers. The game provider may collect session data (such as bet amounts and game outcomes) independently of cajee for their own operational and regulatory compliance purposes. cajee recommends reviewing the privacy policies of individual game providers if you require further information about their data practices.

Payment Processing Partners: Transactions on cajee are processed via certified payment gateways and mobile financial service (MFS) providers operating in Bangladesh, including bKash, Nagad, Rocket, and Upay, as well as partnered banks. Each of these providers is subject to its own privacy policy and data security obligations. cajee shares only the transactional data strictly necessary for payment processing and does not grant payment partners access to broader player account data.

KYC and Verification Services: cajee uses third-party identity verification service providers to assist in confirming player identities and validating submitted documents. These providers process identity data on cajee's behalf under a data processing agreement and are prohibited from retaining or using that data independently.

Platform Infrastructure: cajee's platform is hosted on secure cloud infrastructure. Infrastructure providers process technical data (such as server logs and performance metrics) as part of the hosting service. cajee's agreements with infrastructure providers include data protection clauses consistent with industry standards.

cajee's platform does not embed third-party social media plugins, advertising scripts, or retargeting pixels. Links to third-party services are not present on cajee pages. If you navigate away from cajee to an external website, cajee has no control over and accepts no responsibility for the privacy practices of that external site.

cajee reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made to this Privacy Policy, cajee will notify registered players via their registered email address at least seven days before the changes take effect. The updated Privacy Policy will also be published at cajee.app/privacy-policy with a revised effective date clearly displayed at the top of the document.

For minor updates that do not materially affect your rights or cajee's data processing practices (such as corrections to typographical errors or clarifications to existing language), cajee may publish the updated policy without advance notice. We encourage players to review this Privacy Policy periodically to stay informed about how cajee handles personal data.

Your continued use of the cajee platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated policy, you have the right to close your account by contacting [email protected] prior to the effective date. cajee will process your account closure request and return any eligible balance to your verified payment method in accordance with its standard account closure procedure.

Contact cajee's Privacy Team: If you have any questions, concerns, or complaints regarding this Privacy Policy or cajee's handling of your personal data, please contact us at:

• Email: [email protected]
• Platform: cajee.app

cajee is committed to resolving all privacy-related complaints promptly and fairly. If you are not satisfied with cajee's response to your complaint, you may have the right to escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction.

This Privacy Policy was last reviewed and updated in January 2026. It applies to all players registered on the cajee platform in Bangladesh and governs all personal data collected by cajee from the effective date onwards.