Privacy Policy — casion Online Casino Bangladesh

📂 1. Information We Collect

casion collects personal data from you in several ways: directly when you register an account or make a deposit, automatically when you use the platform, and occasionally from third-party sources such as payment providers and fraud-prevention services. The categories of personal data we collect include the following:

Identity & Contact Data

When you register a casion account, we collect your full legal name, date of birth, residential address in Bangladesh (city, district), mobile phone number, and email address. This information is used primarily to verify your identity, confirm that you meet the minimum age requirement of 18 years, and ensure that deposits and withdrawals are directed to the correct payment method holder.

Financial & Transaction Data

We record details of every transaction processed on your casion account, including deposit amounts, withdrawal requests, bonus credits, wager amounts, and game outcomes. We do not store your full bKash PIN, Nagad mPIN, Rocket PIN, or card CVV number — these remain within the secure infrastructure of your respective payment provider. We do, however, store the last four digits of any registered card, your registered mobile wallet number (masked), and transaction reference IDs for reconciliation and dispute purposes.

Identity Verification (KYC) Documents

As part of our Know Your Customer (KYC) obligations, we may request and retain copies of your national identity card (NID), passport, or other government-issued identity document. These documents are stored in an encrypted document management system with access restricted to authorised casion compliance personnel only.

Technical & Device Data

When you access casion via a browser or mobile device, we automatically collect technical data including your IP address, device type, operating system, browser version, screen resolution, time zone, and referring URL. This data is used for fraud detection, platform optimisation, and to ensure the casion experience renders correctly across the range of devices used by players in Bangladesh — from Dhaka to Chittagong to Sylhet.

Behavioural & Usage Data

We collect data about how you interact with the casion platform: pages visited, games launched, bet sizes, session durations, bonus offers viewed, and support tickets raised. This data helps us personalise your experience, improve responsible gaming features such as session time alerts and deposit limits, and inform decisions about which new games and sports betting markets to introduce.

Communications Data

If you contact casion support via live chat or email, we retain a record of that communication, including your message content, the support agent's responses, and any attached files. These records are used to resolve disputes, improve service quality, and for staff training purposes.

⚙️ 2. How We Use Your Data

casion processes your personal data only for specific, legitimate purposes that are necessary for operating a safe, compliant, and enjoyable online casino and sports betting platform for players in Bangladesh. We do not process your data in ways that are incompatible with the purposes for which it was originally collected.

• Account management: Creating, verifying, maintaining, and closing your casion player account, including processing identity verification documents.
• Transaction processing: Executing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and maintaining accurate financial records for each account.
• Fraud prevention and AML compliance: Monitoring account activity for signs of fraudulent behaviour, money laundering, multi-accounting, or bonus abuse. Suspicious activity may be reported to relevant authorities as required by law.
• Responsible gaming: Monitoring player behaviour to identify signs of problem gambling, enforcing self-exclusion periods, and sending responsible gaming communications to players who have activated deposit limit or time-out tools.
• Customer support: Responding to queries, resolving complaints, and maintaining records of support interactions for quality assurance purposes.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the casion game library, sports betting markets (including BPL, IPL, and T20 World Cup), and the overall player experience.
• Personalisation: Presenting game recommendations, promotional offers, and seasonal content (such as Eid or Pohela Boishakh specials) that are relevant to your play history and preferences, where you have not opted out of such communications.
• Legal compliance: Retaining records as required by applicable law, responding to court orders, and cooperating with regulatory or law enforcement requests.

⚖️ 3. Legal Basis for Processing

casion processes your personal data on the following legal grounds, depending on the purpose for which the data is used:

Contractual Necessity

The majority of data processing at casion is necessary for the performance of the contract between you and casion — namely, providing you with access to online casino games, sports betting markets, and payment services. Without processing your identity, contact, and financial data, casion cannot operate your account or fulfil its contractual obligations to you.

Legal Obligation

casion is required to collect and retain certain categories of personal data — particularly KYC identity documents and transaction records — in order to comply with applicable anti-money-laundering (AML) requirements and responsible gaming regulations. This processing is mandatory regardless of your consent.

Legitimate Interests

casion processes technical data (IP address, device fingerprint, session logs) and behavioural data on the basis of its legitimate interest in detecting and preventing fraud, ensuring platform security, and improving the quality of its services. We have assessed that this legitimate interest does not override your fundamental privacy rights, given the security-focused purpose of the processing and the appropriate safeguards in place.

Consent

Where casion sends you optional marketing communications — such as promotional emails about new game launches, bonus offers, or seasonal events like Eid or Durga Puja specials — we do so on the basis of your consent, which you provide during registration or at any time through your account settings. You may withdraw this consent at any time by updating your marketing preferences or contacting support at [email protected], and we will stop sending marketing communications within 5 business days of receiving your request.

🤝 4. Data Sharing & Third Parties

casion does not sell your personal data. We share your data only with carefully selected third parties where it is necessary to operate the platform, meet legal obligations, or protect the security of our players and business. The categories of third parties with whom casion may share your data are set out below.

Payment Service Providers

To process deposits and withdrawals, casion shares your registered mobile wallet number and transaction details with your chosen payment provider — bKash, Nagad, Rocket, Upay, Visa, or Mastercard. Each of these providers operates under their own privacy policy and security standards. casion does not have access to your full payment credentials at any point.

Game Content Providers

The games available on casion are provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game, your player ID and session token are shared with the relevant provider to initialise the game session. Game providers do not receive your full name, payment details, or NID information.

Identity Verification Partners

For KYC purposes, casion may use a third-party identity verification service to authenticate documents submitted during the account verification process. These partners process identity data solely for verification purposes and are contractually prohibited from using it for any other purpose.

Fraud Prevention & Security Services

casion works with fraud detection and cybersecurity partners who process technical and behavioural data (IP addresses, device fingerprints, session patterns) to identify and prevent fraudulent activity, multi-accounting, and prohibited software usage.

Legal & Regulatory Authorities

casion will disclose your personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so — for example, in response to a valid court order, a statutory request relating to AML investigation, or a lawful request from a competent Bangladeshi authority. We will, where legally permitted, notify you of such a disclosure.

🍪 5. Cookies & Tracking Technologies

The casion platform uses cookies and similar tracking technologies (including local storage and session storage) to operate core site functionality, remember your preferences, and gather aggregated analytics data. A cookie is a small text file placed on your device by a web server; it does not give casion access to your device or any data beyond what casion itself has placed in that file.

Types of Cookies Used

You may control non-essential cookies through your browser settings, which allow you to block or delete cookies at any time. Please note that disabling functional cookies may affect your casion experience — for example, your game display preferences may not be saved between sessions. Disabling analytics cookies will not affect your ability to deposit, play, or withdraw.

🗂️ 6. Data Retention

casion retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active account data (identity, contact, financial records): Retained for the full duration of your account and for a minimum of 5 years following account closure, in line with standard AML record-keeping requirements.
• KYC documents (NID copies, passport scans): Retained for a minimum of 5 years from the date of the last transaction or account closure, whichever is later.
• Transaction records: Retained for a minimum of 5 years for financial reconciliation and regulatory compliance purposes.
• Support correspondence: Retained for 3 years from the date of the last interaction, unless the communication relates to an open dispute or legal matter, in which case it is retained until final resolution.
• Technical and device logs: Retained for 12 months in live systems, then archived for up to 3 years for fraud investigation purposes.
• Marketing consent records: Retained for the duration of your registration and for 2 years following account closure or consent withdrawal, as evidence of your consent decisions.
• Anonymised analytics data: Retained indefinitely in aggregated, non-identifiable form to support platform improvement decisions.

When your personal data is no longer required for any of the above purposes, casion will securely delete or irreversibly anonymise it in accordance with its data disposal procedures. Physical document copies (if any) are destroyed via secure shredding.

✋ 7. Your Privacy Rights

As a casion player, you have the following rights in relation to your personal data. To exercise any of these rights, contact casion support at [email protected] with a clear description of your request. We will respond within 30 days of receiving a valid, verifiable request.

Right of Access

You have the right to request a copy of the personal data that casion holds about you, including the categories of data held, the purposes for which it is processed, and any third parties with whom it has been shared. Requests for data access are processed at no charge for the first request in any 12-month period.

Right to Rectification

If any personal data casion holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update basic contact information directly through your account settings. For changes to identity-critical data (e.g., legal name, date of birth), contact support and provide supporting documentation.

Right to Erasure

You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and no other legal basis applies. Please note that casion is obligated by AML law to retain certain financial and identity records for a minimum of 5 years regardless of erasure requests; in such cases, we will inform you of the specific legal ground preventing deletion.

Right to Restrict Processing

You have the right to request that casion restrict the processing of your personal data in specific circumstances — for example, while the accuracy of data you have disputed is being verified. During a restriction period, casion will continue to store your data but will not actively process it for any purpose other than storage and legal compliance.

Right to Object

You have the right to object to processing of your personal data that is based on casion's legitimate interests, including profiling for platform improvement purposes. You also have the unconditional right to object to your data being used for direct marketing purposes at any time. casion will honour objections to marketing immediately upon receipt.

Right to Data Portability

Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, machine-readable format (e.g., CSV or JSON), and to transmit that data to another service provider of your choice.

🔒 8. Data Security

casion implements a range of technical and organisational security measures designed to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and casion servers.
• Encrypted data storage for sensitive fields including identity documents, payment references, and account credentials — data at rest is encrypted using AES-256.
• Role-based access control (RBAC) ensuring that casion personnel can only access the specific categories of personal data necessary for their job function. KYC documents, for example, are accessible only to compliance team members.
• Multi-factor authentication (MFA) required for all internal casion staff accessing systems that hold player data.
• Regular security testing including vulnerability assessments and penetration testing to identify and remediate weaknesses in casion's technical infrastructure.
• Incident response procedures — in the event of a data breach affecting your personal data, casion will assess the risk, take immediate containment steps, notify affected players without undue delay, and report to relevant authorities where required by law.

Your Role in Security

While casion takes extensive measures to protect your data on its end, the security of your casion account also depends on your own practices. We strongly recommend using a unique, complex password for your casion account, enabling any available two-factor authentication, and never sharing your login credentials with another person. casion will never ask you for your password via email, live chat, or any other channel.

Changes to This Privacy Policy

casion may update this Privacy Policy from time to time to reflect changes in legal requirements, platform features, or data processing practices. The most current version will always be published at casion.im/privacy-policy with the effective date displayed at the top of the page. Where changes are material, casion will notify registered players by email or via an in-platform notification prior to the changes taking effect. Your continued use of the casion platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

For any questions, concerns, or complaints regarding this Privacy Policy or casion's data processing practices, please contact our support team at [email protected]. We are available 24/7 and aim to acknowledge all privacy-related enquiries within two hours Bangladesh Standard Time (BST, UTC+6).