gd33 Privacy Policy

1 Introduction & Scope

gd33 ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who uses the gd33 Platform. This Privacy Policy ("Policy") describes how we collect, use, store, share, and protect personal information in connection with your use of the Platform. It also describes the rights you have in respect of your personal data and how you can exercise those rights.

By registering an account with gd33 or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. This Policy forms part of, and should be read alongside, the gd33 Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions on a data privacy matter, this Policy shall prevail.

2 Personal Data We Collect

The categories of personal data gd33 collects depend on your level of interaction with the Platform. The following table summarises the main categories of data collected and the source of that data:

3 How We Use Your Personal Data

gd33 uses your personal data only for lawful purposes directly connected to the operation of the Platform and the provision of services to you. The specific purposes for which your data is used are set out below:

• Account creation and management: to register your account, verify your identity, maintain your account settings, and process your deposits and withdrawals.
• Regulatory compliance: to fulfil our obligations under applicable anti-money laundering (AML) rules, know-your-customer (KYC) requirements, and other applicable laws and regulations. This includes verifying your age (minimum 21 years), identity, and source of funds.
• Service delivery and improvement: to operate the gaming and betting services on the Platform, personalise your experience, and improve the performance and features of the Platform over time.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent transactions, account misuse, money laundering, and other unlawful or prohibited activities on the Platform.
• Customer support: to respond to your enquiries, resolve disputes, and communicate with you about your account, transactions, and any issues you raise with our support team.
• Promotions and communications: to send you information about bonuses, promotions, and seasonal offers relevant to your account. You may opt out of promotional communications at any time by contacting [email protected].

4 Legal Basis for Processing

gd33 processes personal data under the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: processing required to perform our contract with you — i.e., to provide the gaming and betting services you have registered to use, and to manage your account and transactions.
• Legal obligation: processing necessary to comply with applicable laws and regulations, including AML, KYC, and age verification obligations.
• Legitimate interests: processing for fraud prevention, platform security, and service improvement — where such processing is proportionate and does not override your fundamental privacy rights.
• Consent: for promotional and marketing communications, and for any processing that is not covered by the above bases. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Responsible gaming obligations: processing for the purposes of operating deposit limits, loss limits, self-exclusion, and other player protection tools — which is also a legal and contractual obligation under our Terms & Conditions.

5 How We Share Your Data

gd33 does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment processors and mobile wallet providers (bKash, Nagad, Rocket, Upay, and banking partners): to process deposits, withdrawals, and refunds. These providers receive only the transaction data necessary to complete the payment.
• Game and platform technology providers: game studios and technology partners whose software powers the Platform may receive anonymised or pseudonymised session data for technical integration and fair-play monitoring purposes.
• Identity verification and KYC service providers: third-party KYC vendors who assist in verifying player identity and age. These providers operate under strict data processing agreements and are not permitted to use your data for any purpose other than verification.
• Law enforcement and regulatory authorities: where required by applicable law, court order, or regulatory request, gd33 may disclose personal data to government bodies, law enforcement agencies, or regulators. gd33 will only disclose the minimum data necessary to comply with the relevant legal obligation.

6 Data Retention

gd33 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account data (identity, contact, and financial data): retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML and KYC regulatory requirements.
• Transaction data: retained for a minimum of five (5) years following the date of the transaction, in line with financial record-keeping requirements.
• Technical and usage data: retained for up to twelve (12) months from the date of collection, unless a longer retention period is required for fraud investigation or legal proceedings.
• Responsible gaming data (self-exclusion records, deposit limit history): retained for the duration of any active restriction and for a minimum of five (5) years thereafter, to prevent circumvention of player protection measures.
• Support correspondence: retained for up to three (3) years from the date of the final communication, to allow for dispute resolution reference.

7 Cookies & Tracking Technologies

gd33 uses cookies and similar tracking technologies to operate the Platform, maintain your session, remember your preferences, and analyse Platform usage. A cookie is a small text file placed on your device when you access the Platform. Cookies do not contain executable code and cannot access other data stored on your device.

gd33 uses the following types of cookies: (a) Strictly necessary cookies — required for the Platform to function; these cannot be disabled. (b) Functional cookies — used to remember your preferences and settings, such as your language selection. (c) Analytical cookies — used to collect anonymised information about how the Platform is used, to help us improve its performance and features. gd33 does not use advertising or cross-site tracking cookies.

8 Your Data Rights

Subject to applicable law and the operational requirements of gd33 (including our AML and KYC obligations), you have the following rights in respect of your personal data held by gd33:

• Right of access: you may request a copy of the personal data gd33 holds about you. We will provide this within a reasonable timeframe following receipt of a verified request.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it.
• Right to erasure: in certain circumstances, you may request that we delete your personal data. This right is subject to exceptions — for example, we cannot delete data that we are legally required to retain for AML or KYC compliance purposes.
• Right to restriction of processing: you may request that we restrict our use of your personal data in certain circumstances — for example, while we investigate a dispute about its accuracy.
• Right to data portability: where processing is based on your consent or on a contract with you, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: where our processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

9 Data Security

gd33 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• 256-bit SSL (Secure Socket Layer) encryption on all data transmissions between your device and the Platform.
• Encrypted storage of sensitive personal data, including identity documents and financial records, using AES-256 encryption at rest.
• Access controls: personal data is accessible only to gd33 staff and authorised third-party service providers who have a legitimate operational need for it, and who are bound by confidentiality obligations.

While gd33 takes all reasonable steps to protect your data, no internet-based transmission or electronic storage system is 100% secure. In the unlikely event of a data security incident that affects your personal data, gd33 will notify you in accordance with applicable legal requirements.

10 Children & Minors

The gd33 Platform is strictly for adults aged 21 and above. gd33 does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from a person under 21 without verified parental or guardian consent, we will take immediate steps to delete that data and suspend the relevant account.

If you are a parent or guardian and believe that a person under the age of 21 has registered an account with gd33 or provided personal data to gd33 without your knowledge, please contact us immediately at [email protected]. We will investigate and take appropriate action promptly.

11 Your Rights & How to Exercise Them

To exercise any of the data rights described in Section 8, or to raise a concern about how gd33 handles your personal data, please contact our support team. To protect your privacy and security, gd33 will take steps to verify your identity before processing a data rights request. The following steps apply:

• Submit your request in writing to [email protected] with the subject line "Data Rights Request". Include your full name, registered mobile number, and a description of the right you wish to exercise.
• gd33 will verify your identity before processing the request. Verification may include requesting a copy of your national identity card (NID) or passport.
• gd33 will respond to verified data rights requests within 30 days of receipt. In complex cases, this period may be extended by up to a further 60 days, in which case we will notify you of the extension.
• gd33 will not charge a fee for processing a data rights request unless the request is manifestly unfounded or excessive. In such cases, gd33 may charge a reasonable administrative fee or decline to process the request.

12 Changes to This Privacy Policy

gd33 reserves the right to update or amend this Privacy Policy at any time. Where material changes are made, we will endeavour to notify registered players via the contact details associated with their account, or by posting a notice on the Platform, prior to the changes taking effect. The updated Policy will be published on this page with a revised "Last updated" date. Your continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the changes. If you do not accept the revised Policy, you must stop using the Platform and may request account closure by contacting [email protected].

13 Governing Law

This Privacy Policy is governed by generally applicable principles of international data protection law. gd33 is committed to handling personal data responsibly and in accordance with recognised data protection standards. Any dispute arising in connection with this Policy or the processing of your personal data should first be raised with gd33 by contacting [email protected]. gd33 will endeavour to resolve all privacy-related concerns promptly and fairly.

14 Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or the way gd33 handles your personal data, please contact our support team. We are available 24 hours a day, 7 days a week via live chat from within your account, or by email at the address below. We aim to acknowledge all privacy enquiries within four business hours (Bangladesh Standard Time, UTC+6).