gbg33 Privacy Policy — How We Protect Your Data

1 Data Controller & Scope

This Privacy Policy applies to all personal data collected and processed by gbg33 ("gbg33", "we", "us", "our") in connection with your use of the gbg33 website at gbg33.com and all related services, including the sportsbook, casino, live dealer games, player account management portal, promotional communications, and customer support channels. gbg33 acts as the data controller in respect of all personal data described in this policy.

By registering a gbg33 account, using any gbg33 service, or continuing to browse the gbg33 website after this policy has been made available to you, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms set out in this policy, you must discontinue your use of the gbg33 platform immediately and contact support to request account closure.

This Privacy Policy should be read alongside the gbg33 Terms & Conditions and Responsible Gaming Policy. In the event of a conflict between this policy and the Terms & Conditions on matters relating to data processing, this Privacy Policy shall take precedence.

2 Personal Data We Collect

gbg33 collects personal data through several channels: information you provide directly during registration and account management, information generated automatically through your use of the platform, and information received from trusted third-party partners such as payment processors and identity verification providers. The categories of personal data we collect are as follows:

2.1 Registration & Identity Data

When you create a gbg33 account, we collect the information necessary to establish and verify your identity and ensure you meet our eligibility criteria. This includes:

• Full legal name (as it appears on your National Identity Card or passport)
• Date of birth (used to verify you are aged 18 or above)
• Email address (used for account communications and password recovery)
• Mobile phone number (used for OTP verification and two-factor authentication)
• Preferred username
• Residential address (required at KYC verification stage)

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we may collect and retain copies of government-issued identity documents, including:

• National Identity Card (NID) — front and back
• Passport (biographical data page)
• Driving licence (where accepted as a valid identity document)
• Proof of address documents (utility bill, bank statement dated within 90 days)

2.3 Financial & Transaction Data

To process deposits, withdrawals, and bonus transactions, gbg33 collects and retains limited financial data, including:

• Payment method identifier (e.g., bKash mobile number, Nagad number, last four digits of card)
• Transaction amounts, dates, and reference numbers
• Deposit and withdrawal history within your account
• Bonus claim and wagering records

gbg33 does not store full card numbers, CVV codes, or complete mobile banking PINs. Payment credentials are handled directly by PCI-DSS compliant third-party payment processors.

2.4 Technical & Usage Data

When you browse or interact with the gbg33 platform, certain technical and behavioural data is collected automatically:

3 Lawful Basis for Processing

gbg33 processes personal data only where a valid lawful basis exists for doing so. The primary lawful bases we rely upon are as follows:

• Contractual necessity: Processing your registration data, transaction data, and account activity data is necessary to perform the contract between you and gbg33 — namely, providing you with access to our betting and casino platform, processing your deposits and withdrawals, and managing your account.
• Legal obligation: Certain data processing activities — particularly KYC verification, AML transaction monitoring, and age verification — are required by applicable law and cannot be opted out of. If you do not provide the data required to fulfil these legal obligations, gbg33 may be unable to open or maintain your account.
• Legitimate interests: gbg33 processes technical, usage, and behavioural data on the basis of its legitimate interest in operating a secure, fraud-free, and commercially viable platform. This includes fraud detection, responsible gaming monitoring, platform analytics, and service improvement. Where we rely on legitimate interests, we have assessed that our interests are not overridden by your fundamental rights and freedoms.
• Consent: Where you have opted in to receive marketing communications from gbg33 — such as promotional emails, SMS offers, or push notifications — we process your contact details on the basis of your freely given consent. You may withdraw this consent at any time by contacting support or using the unsubscribe link in any marketing email.

4 How We Use Your Data

The personal data collected by gbg33 is used exclusively for the following purposes, consistent with the lawful bases described in Section 3:

4.1 Account Operations

Your registration and identity data is used to create and maintain your gbg33 player account, verify your eligibility to use the platform, enable login and two-factor authentication, process account changes, and communicate with you about your account status.

4.2 Payment Processing

Financial and transaction data is used to process your deposits via bKash, Nagad, Rocket, Upay, DBBL, Visa, and Mastercard; to verify the source and ownership of deposited funds; to process your withdrawal requests to your nominated payment method; and to maintain accurate financial records as required by applicable regulations.

4.3 Regulatory Compliance

gbg33 uses KYC and transaction data to comply with its anti-money laundering (AML) obligations, including monitoring for suspicious transaction patterns, conducting source-of-funds checks where required, and filing reports with relevant authorities in accordance with applicable law. Age verification data is used to confirm compliance with the 18+ age requirement. 18+

4.4 Responsible Gaming

Session, behavioural, and betting pattern data is used to monitor for signs of problem gambling behaviour, to enforce self-exclusion and deposit limit settings, to trigger responsible gaming interventions where warranted, and to support players who request help managing their gambling activity. This use of data is fundamental to gbg33's commitment to player welfare.

4.5 Fraud Prevention & Security

Technical and network data — including IP addresses, device fingerprints, and login behaviour — is used to detect and prevent fraud, identify multiple accounts operated by the same individual, investigate suspicious betting activity, and protect the integrity of the gbg33 platform.

4.6 Customer Support

Communication data (chat transcripts, email correspondence, support ticket records) is used to resolve player queries and complaints, to investigate and settle disputes, and to improve the quality of gbg33's support service. Support records are retained for a defined period as detailed in Section 7.

4.7 Marketing Communications (Consent-Based Only)

Where you have given your explicit consent, gbg33 may use your email address and/or mobile number to send you promotional offers, seasonal bonus notifications (such as Eid or Pohela Boishakh promotions), and relevant product updates. You may opt out of marketing communications at any time. Opting out does not affect your ability to continue using the gbg33 platform.

5 Cookies & Tracking Technologies

The gbg33 website uses cookies and similar tracking technologies (including local storage and session storage) to ensure the platform functions correctly, to remember your preferences, and to understand how players interact with the site. The following categories of cookies are in use on gbg33.com:

gbg33 does not use third-party advertising cookies or cross-site tracking pixels for the purpose of serving targeted advertisements on external websites.

5.1 Managing Your Cookie Preferences

You can manage non-essential cookies through your browser's settings. Most modern browsers (Chrome, Firefox, Edge, Safari) allow you to view, block, or delete individual cookies. Please note that disabling strictly necessary cookies will prevent core gbg33 functionality — including account login — from working correctly. Instructions for managing cookies in your specific browser can be found in the browser's official help documentation.

6 Data Sharing & Third Parties

gbg33 does not sell, rent, or share your personal data with third parties for their own marketing or commercial purposes. We share personal data with third parties only in the following limited and controlled circumstances:

6.1 Payment Service Providers

To process deposits and withdrawals, gbg33 shares the minimum necessary financial data (such as transaction amount and payment method identifier) with our payment processing partners, including bKash, Nagad, Rocket, Upay, DBBL, and card-processing networks. These partners process data under their own published privacy policies and applicable payment industry standards (PCI-DSS).

6.2 Identity Verification Partners

To fulfil our KYC and AML obligations, gbg33 may share identity documents and biographical data with specialist identity verification service providers. These providers are contractually bound to process your data solely for verification purposes and to maintain appropriate technical and organisational security measures.

6.3 Game Studio Providers

When you play games provided by third-party studios — including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming — limited session and account data (such as a pseudonymous player token) is transmitted to the game studio's servers to deliver the game experience. Game studios do not receive your full personal identity details; they receive only the session identifiers necessary to run the game. Each studio operates under its own data processing agreement with gbg33.

6.4 Legal and Regulatory Authorities

gbg33 may disclose personal data to government bodies, law enforcement agencies, or regulatory authorities where required to do so by applicable law, court order, or lawful regulatory request. Such disclosures are made only to the extent strictly required by the applicable legal obligation.

6.5 Fraud Prevention Networks

In cases of suspected fraud, money laundering, or multi-accounting, gbg33 may share limited data with industry-level fraud prevention networks and databases to which reputable gaming operators contribute, in order to protect the platform and other players from harm.

7 Data Retention Periods

gbg33 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any applicable legal minimum retention requirements. The following retention periods apply:

When the applicable retention period expires, gbg33 securely deletes or irreversibly anonymises the relevant personal data. Anonymised aggregate data (from which no individual can be identified) may be retained indefinitely for statistical and platform improvement purposes.

8 Your Privacy Rights

As a gbg33 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our data enquiries team using the details in Section 10. We will respond to all verified requests within a reasonable period, and in any event within 30 days.

8.1 Right of Access

You have the right to request a copy of all personal data that gbg33 holds about you. This is sometimes referred to as a "Subject Access Request" (SAR). We will provide the information in a clear, structured format. We may ask you to verify your identity before processing a SAR to protect against unauthorised disclosure.

8.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may update certain account details (such as your email address or phone number) directly within your gbg33 account settings. For changes to core identity data, please contact support and we may require documentary evidence of the correct information.

8.3 Right to Erasure

You have the right to request deletion of your personal data where: (a) the data is no longer necessary for the purposes for which it was collected; (b) you have withdrawn consent and there is no other lawful basis for processing; or (c) the data has been unlawfully processed. Please note that gbg33 may be unable to fulfil deletion requests in respect of data we are legally required to retain — for example, transaction records subject to AML retention obligations. In such cases, we will explain the specific legal basis for retention.

8.4 Right to Data Portability

Where gbg33 processes your personal data on the basis of your consent or on the basis of contractual necessity, and where processing is carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format (e.g., CSV or JSON), and to transmit that data to another service provider.

8.5 Right to Restrict Processing

You have the right to request that gbg33 restricts the processing of your personal data in certain circumstances — for example, if you contest the accuracy of the data or if you have objected to processing and we are considering the merits of that objection. Where processing is restricted, we will store the data but not process it for any other purpose until the restriction is lifted.

8.6 Right to Object

You have the right to object to gbg33's processing of your personal data where that processing is based on our legitimate interests. You also have an absolute right to object at any time to the processing of your data for direct marketing purposes. If you object to marketing, we will cease processing your data for that purpose immediately.

8.7 Withdrawal of Consent

Where gbg33 processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time by contacting support or clicking the unsubscribe link in any marketing email. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

9 Data Security Measures

gbg33 takes the security of your personal data seriously and implements a layered set of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, alteration, or disclosure. Our core security measures include:

• Transport Layer Security: All data transmitted between your browser or device and the gbg33 servers is encrypted using TLS 1.2 or TLS 1.3 with 256-bit encryption keys. The gbg33 website enforces HTTPS on all pages.
• Data-at-rest encryption: Sensitive personal data stored in gbg33's databases — including identity document data and KYC records — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within gbg33's internal systems is restricted on a strict need-to-know basis. Staff members who handle player data undergo regular training on data protection obligations and are bound by confidentiality agreements.
• Two-factor authentication: gbg33 player accounts support OTP-based two-factor authentication via the registered mobile number. Players are strongly encouraged to enable 2FA to protect their accounts.
• Fraud detection systems: Automated systems continuously monitor login activity, transaction patterns, and device behaviour to identify and respond to suspicious activity in real time.
• Penetration testing and security audits: gbg33 conducts periodic security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data security incident that poses a risk to your rights and freedoms, gbg33 will notify affected players without undue delay and take all reasonable steps to contain and mitigate the incident.

While gbg33 employs comprehensive security measures, no online platform can guarantee absolute security. Players are responsible for maintaining the confidentiality of their own account credentials and for notifying gbg33 immediately if they suspect their account has been compromised.

10 Contact & Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which gbg33 processes your personal data, please contact us using the details below. All contact information is provided as plain text only and is not formatted as a clickable link:

• Email: [email protected]
• WhatsApp: +880 1700-000000
• Live Chat: Available 24/7 inside your gbg33 account dashboard
• Response Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)

When contacting us about a privacy matter, please include your account username and a clear description of your query or request. If you are submitting a Subject Access Request or a request to exercise any other data right, please mark your correspondence clearly as a "Privacy Rights Request" to ensure it is routed to the appropriate team.

gbg33 aims to acknowledge all privacy enquiries within 2 business days and to provide a substantive response within 30 days of receiving a verified request. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.