cesino Privacy Policy

Who We Are and How to Contact Us

cesino is an online casino and sports betting platform operating at cesino.bio and serving players across Bangladesh. For all privacy-related enquiries, data subject requests, and complaints, please contact us at:

• Privacy Contact Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week
• Response Time: Privacy requests are acknowledged within 48 hours and resolved within 14 calendar days

What Personal Data We Collect

cesino collects personal data in two primary ways: data you provide directly, and data we collect automatically when you use the platform.

Data you provide directly:

• Full legal name, date of birth, and gender (collected at registration for identity and age verification)
• Mobile phone number and email address (used for account communications and two-factor authentication)
• Payment method details — mobile wallet numbers (bKash, Nagad, Rocket, Upay) and bank account references — sufficient to process deposits and withdrawals
• Identity verification documents such as a National ID (NID), passport, or driving licence, where requested for KYC (Know Your Customer) compliance
• Communications and support messages you send to the cesino team
• Any voluntary information you provide in surveys, feedback forms, or promotions

Data collected automatically:

• IP address, device type, operating system, browser version, and unique device identifiers
• Session duration, pages visited, games played, betting history, and click-path data
• Geolocation data at the city or region level (not precise GPS coordinates) to confirm Bangladesh-based access
• Cookie and tracking technology data as described in Section 8 of this policy

Legal Basis and Purposes for Processing

cesino processes your personal data only where a lawful basis exists. The following table summarises the primary processing purposes and their legal basis:

How We Share Your Personal Data

cesino does not sell, rent, or trade your personal data. We share data only with the following categories of third parties, and only to the extent strictly necessary for the purpose stated:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive transaction-relevant data to authorise and settle payments.
• Identity verification providers: Third-party KYC services receive document images and identity data solely for age and identity verification purposes.
• Game studios and content providers: Providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier to load game content. They do not receive your name, payment details, or contact information.
• Platform analytics providers: Anonymised or pseudonymised usage data may be shared with analytics tools to help us understand platform performance. No personally identifiable information is included.
• Law enforcement and regulatory authorities: cesino will disclose personal data to competent authorities where required by law, court order, or to protect the rights and safety of other players and the platform.

All third-party partners who process personal data on behalf of cesino are required to sign a data processing agreement confirming that they will handle your data in accordance with applicable privacy standards and use it only for the purpose for which it was shared.

Data Retention

cesino retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data: Retained for the full duration of the account relationship and for a minimum of 5 years following account closure, to satisfy anti-money laundering and fraud prevention obligations.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Identity verification documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Support communications: Retained for 2 years from the date of the last interaction.
• Marketing preferences and opt-in records: Retained until consent is withdrawn plus 1 year for audit purposes.
• Anonymised analytics data: May be retained indefinitely as it cannot be linked back to any individual.

When personal data is no longer required, it is securely deleted or anonymised in accordance with our internal data destruction procedures.

Your Data Rights

As a cesino player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request":

• Right of Access: You may request a copy of all personal data cesino holds about you, along with information about how it is processed.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected or updated.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to Restriction: You may request that processing of your data be restricted in certain circumstances, for example while a correction request is being assessed.
• Right to Data Portability: You may request that your personal data be provided to you in a structured, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Object: You may object to processing based on legitimate interest. cesino will assess whether its legitimate interests override your objection on a case-by-case basis.

All data rights requests are acknowledged within 48 hours and fully resolved within 14 calendar days. In complex cases, this period may be extended by a further 14 days, and you will be notified accordingly.

Data Security Measures

cesino employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• All data in transit is protected using TLS 1.2 or higher encryption protocols.
• Sensitive data at rest — including payment information and identity documents — is encrypted using AES-256.
• Access to personal data within the cesino organisation is restricted on a strict need-to-know basis. Staff with data access undergo regular privacy and security training.
• cesino conducts regular security audits, penetration testing, and vulnerability assessments on all platform components.
• Multi-factor authentication is available to all players and is required for administrative accounts.
• In the event of a data breach that poses a risk to player rights or freedoms, cesino will notify affected players as quickly as practicable and take immediate remediation steps.

Cookies and Tracking Technologies

cesino uses cookies and similar tracking technologies (local storage, session tokens, pixel tags) to provide, secure, and improve the platform. We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the platform to function. These manage your login session, remember your language preference, and protect against cross-site request forgery (CSRF). They cannot be disabled without breaking core functionality.
• Performance and Analytics Cookies: Used to measure how players navigate the platform, which pages are most visited, and where technical errors occur. Data collected is aggregated and anonymised.
• Fraud Prevention Cookies: Used to identify suspicious patterns associated with bot activity, multi-account abuse, and fraudulent transactions.

cesino does not use third-party advertising or behavioural retargeting cookies. You may manage cookie preferences through your mobile browser or device settings. Disabling strictly necessary cookies may impair your ability to log in or use certain platform features.

Marketing Communications

cesino may send you promotional communications about bonuses, new games, seasonal offers (such as Eid, Pohela Boishakh, or BPL-related promotions), and platform updates via SMS or the mobile number registered to your account. These communications are sent only where you have provided explicit consent during registration or subsequently opted in via your account settings.

You may withdraw consent for marketing communications at any time by contacting [email protected] or adjusting your notification preferences in your account settings panel. Withdrawal of consent does not affect the lawfulness of marketing messages sent prior to your opt-out.

Children and Minors

The cesino platform is strictly intended for individuals aged 21 years and above. cesino does not knowingly collect, use, or store personal data from any person under the age of 21. If we become aware that personal data has been collected from a minor, we will delete that data immediately and close the associated account. If you believe a minor has registered on cesino, please notify us immediately at [email protected].

International Data Transfers

cesino's primary operations serve the Bangladesh market. In certain circumstances, personal data may be processed by third-party service providers — such as game studios and technology infrastructure partners — whose servers are located outside Bangladesh. Where such transfers occur, cesino ensures that appropriate contractual safeguards are in place to protect your personal data to a standard equivalent to this policy.

Changes to This Privacy Policy

cesino reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify registered players via the mobile number or email address associated with their account. The updated policy will be published on this page with a revised "Last Updated" date at the top. Continued use of the cesino platform following publication of any updated policy constitutes acceptance of the revised terms. We encourage you to review this page periodically.