This Privacy Policy applies to all personal data collected and processed by caji in connection with your use of the caji platform at caji.pro. By registering an account or using any part of the caji platform, you acknowledge that you have read and understood this policy. This document should be read alongside the caji Terms & Conditions.
How caji Approaches Privacy
Six core privacy principles that guide every data decision we make at caji.
caji collects only the personal data that is strictly necessary for account operation, identity verification, and payment processing. We do not gather data out of habit — every field we request serves a defined purpose.
All data transmitted between your device and the caji platform is protected by industry-standard SSL (Secure Sockets Layer) encryption. Your login credentials, payment details, and personal information are never transmitted in plain text.
caji does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Your information is used solely to operate and improve the caji platform and to comply with legal obligations.
Identity documents submitted during the KYC verification process are stored securely, accessed only by authorised caji staff, and are never shared with third parties except where required by law or by our licensed verification partners.
You have the right to access, correct, and request deletion of your personal data held by caji at any time, subject to legal retention requirements. All data rights requests are handled within a reasonable timeframe via our support team.
caji retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Data that is no longer needed is securely deleted or anonymised.
The table below summarises the categories of personal data caji collects, the lawful basis for processing, and the primary purpose of each category.
| Data Category | Examples | Purpose | Lawful Basis |
|---|---|---|---|
| Identity Data | Full name, date of birth, NID number, passport number | Account registration, KYC verification, age verification | Contractual necessity; Legal obligation |
| Contact Data | Email address, mobile number | Account communication, security alerts, support responses | Contractual necessity; Legitimate interest |
| Financial Data | bKash/Nagad/Rocket account numbers, transaction history, deposit and withdrawal records | Payment processing, fraud prevention, AML compliance | Contractual necessity; Legal obligation |
| Identity Documents | National ID card scan, passport scan, utility bill, selfie with ID | KYC compliance, withdrawal authorisation | Legal obligation; Contractual necessity |
| Usage Data | Login times, pages visited, games played, betting history, session durations | Platform improvement, responsible gaming monitoring, fraud detection | Legitimate interest |
| Technical Data | IP address, device type, browser type, operating system, cookie identifiers | Security, geographic restriction enforcement, platform optimisation | Legitimate interest |
| Communications Data | Support emails, chat transcripts, complaint records | Customer support, dispute resolution, quality assurance | Contractual necessity; Legitimate interest |
caji is an online casino and sports betting platform available at caji.pro, operated for the benefit of Bangladeshi players. For the purposes of this Privacy Policy, caji acts as the data controller in respect of the personal data you provide when registering and using the platform.
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our support team:
- Email: [email protected] (plain text — not a clickable link)
- Response Time: Average 4–8 hours (BST, UTC+6)
- Support Hours: 24 hours a day, 7 days a week, including all Bangladeshi public holidays
All privacy-related inquiries will be handled by our designated data protection contact and will be responded to within a reasonable timeframe, typically no longer than 30 calendar days from the date of receipt.
2.1 Data You Provide Directly
When you register an account with caji, complete our KYC verification process, make a deposit or withdrawal, or contact our support team, you directly provide us with personal data. This includes your full legal name, date of birth, contact details, and identity documents.
2.2 Data Collected Automatically
When you access or use the caji platform, certain technical and usage data is collected automatically. This includes your IP address, browser type, device identifiers, the pages you visit, the games you play, the bets you place, and the duration of your sessions. This data is collected through server logs, cookies, and similar technologies.
2.3 Data from Third Parties
caji may receive personal data about you from third-party service providers in certain circumstances, including:
- Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) who confirm transaction details when you make a deposit or withdrawal.
- KYC and identity verification partners who assist us in confirming the authenticity of the documents you submit.
- Fraud prevention and anti-money laundering (AML) screening services that check your details against relevant databases as part of our legal compliance obligations.
2.4 Cookies and Tracking Technologies
caji uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, and analyse how the platform is used. Essential cookies are required for the platform to function and cannot be disabled. Analytics and preference cookies may be managed through your browser settings. By continuing to use the caji platform, you consent to the use of essential cookies as described in this policy.
caji uses the personal data we collect for the following specific purposes:
- Account Creation and Management: To register your account, maintain your player profile, process your login, and manage your account settings and preferences.
- Identity and Age Verification (KYC): To verify that you are at least 21 years of age and that your identity matches the details you provided at registration. This is a legal obligation that caji is required to fulfil before processing withdrawal requests.
- Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard. Financial data is shared with the relevant payment provider only to the extent necessary to complete the transaction.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the platform. This includes automated screening of transactions and behavioural analysis of account activity.
- Responsible Gaming Monitoring: To identify players who may be showing signs of problem gambling behaviour, and to facilitate the responsible gaming tools available on the platform, including deposit limits and self-exclusion requests.
- Customer Support: To respond to your inquiries, handle complaints, and resolve disputes. Support communications are retained as a record of the interaction.
- Platform Improvement: To analyse how the caji platform is used, identify technical issues, and improve the overall user experience for Bangladeshi players.
- Legal and Regulatory Compliance: To comply with applicable laws and regulations, including anti-money laundering (AML) requirements, and to respond to lawful requests from regulatory authorities.
- Marketing Communications (with consent): Where you have opted in to receive promotional communications, to send you information about caji offers, bonuses, and new games. You may withdraw your consent to marketing communications at any time by contacting support.
caji does not sell or rent your personal data. We share your data only in the following limited circumstances, and only to the extent strictly necessary for each purpose:
4.1 Payment Providers
When you make a deposit or request a withdrawal, your payment account details and transaction information are shared with the relevant payment provider (bKash, Nagad, Rocket, Upay, Visa, or Mastercard) to process the transaction. These providers operate under their own privacy policies and are bound by applicable financial regulations.
4.2 KYC and Identity Verification Partners
To fulfil our KYC obligations, caji works with licensed third-party identity verification service providers. These providers may process your identity documents and cross-reference your details against relevant identity databases. All such partners are subject to strict data processing agreements with caji.
4.3 Fraud and AML Screening Services
caji uses third-party fraud prevention and anti-money laundering screening tools that may process certain personal data (such as your name, date of birth, and payment details) against watchlists and risk databases. This processing is carried out as a legal obligation and in our legitimate interest to prevent financial crime.
4.4 Legal and Regulatory Authorities
caji may be required to disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required by applicable law or a valid legal order. In such cases, we will disclose only the minimum data required to satisfy the legal obligation, and will notify the affected player where we are legally permitted to do so.
4.5 IT and Platform Infrastructure Providers
caji uses third-party cloud hosting and technology infrastructure providers to operate the platform. These providers may process personal data as data processors on our behalf, strictly under data processing agreements that prohibit them from using your data for their own purposes.
caji retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable legal and regulatory obligations. The following general retention periods apply:
- Account Data: Retained for the duration of your active account and for a period of at least five (5) years following account closure, in line with standard AML record-keeping requirements.
- KYC Documents: Retained for a minimum of five (5) years from the date of submission, or for longer periods where required by applicable law.
- Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by anti-money laundering regulations.
- Support Communications: Retained for a minimum of two (2) years from the date of the last communication in a support thread, to facilitate dispute resolution and quality assurance.
- Usage and Technical Data: Generally retained for up to twelve (12) months for platform analytics and security monitoring purposes, after which it is aggregated or anonymised.
- Marketing Consent Records: Retained for as long as your marketing consent remains active, and for a reasonable period after withdrawal of consent as proof of the consent record.
At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately possible due to technical or legal constraints, the data will be isolated and protected from further processing until deletion can be carried out.
caji takes the security of your personal data seriously and employs a range of technical and organisational measures to protect it from unauthorised access, disclosure, alteration, or destruction. These measures include:
- SSL/TLS Encryption: All data transmitted between your browser or device and the caji platform is encrypted using industry-standard SSL/TLS protocols.
- Secure Data Storage: Personal data is stored on secure, access-controlled servers. Access to personal data is restricted to authorised caji personnel on a need-to-know basis.
- Access Controls: Internal systems that store personal data are protected by multi-factor authentication, role-based access controls, and audit logging of all data access events.
- Regular Security Reviews: caji conducts periodic internal reviews of its data security practices and infrastructure to identify and address vulnerabilities.
- Incident Response: caji maintains a data breach response procedure. In the event of a data breach that poses a risk to your rights and freedoms, caji will notify affected players as promptly as possible.
Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be one hundred percent secure. caji cannot provide an absolute guarantee of the security of data transmitted to or from the platform. Players are advised to use strong, unique passwords for their caji accounts and to never share their login credentials with third parties.
As a player on the caji platform, you have the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at [email protected] (plain text — not a clickable link):
- Right of Access: You have the right to request a copy of the personal data caji holds about you. We will provide this within a reasonable timeframe and at no charge for the first request in any twelve-month period.
- Right to Rectification: If any personal data caji holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed.
- Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other lawful basis applies), or where the data has been processed unlawfully. Note that caji may be required to retain certain data for legal and regulatory purposes, even after an erasure request.
- Right to Restriction of Processing: In certain circumstances, you may request that caji restrict the processing of your personal data — for example, where you contest the accuracy of the data, while that accuracy is being verified.
- Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request that caji provide your personal data in a structured, commonly used, and machine-readable format.
- Right to Object: You have the right to object to the processing of your personal data where that processing is based on caji's legitimate interests. You also have the right to object to direct marketing at any time, with immediate effect.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.
caji will respond to all data rights requests within 30 calendar days. In complex cases, this period may be extended by a further two months, in which case you will be notified of the extension and the reason for it.
The caji platform is strictly intended for adults aged 21 years and above. caji does not knowingly collect personal data from any person under the age of 21. Age verification is conducted as part of our KYC process, and any account found to belong to a person under the minimum age requirement will be closed immediately.
If you believe that a minor has provided personal data to caji — whether through your account or independently — please contact us immediately at [email protected] (plain text — not a clickable link). We will take prompt action to delete any such data and close the associated account.
It is the responsibility of parents and guardians to monitor and control the online activities of minors in their care and to prevent access to age-restricted platforms such as caji.
caji reserves the right to update or amend this Privacy Policy at any time. When material changes are made — such as changes to the categories of data collected, the purposes of processing, or the third parties with whom data is shared — caji will notify active players via email or a prominent on-platform notice prior to the changes taking effect.
For non-material changes (such as clarifications of existing language or administrative updates), the revised policy will be published at caji.pro/privacy-policy with an updated effective date. Continued use of the caji platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.
We encourage you to review this page periodically to stay informed of how caji manages and protects your personal data.
This Privacy Policy was last updated and is effective as of 1 January 2026.