gbd22 Privacy Policy

1. Information We Collect

gbd22 collects personal data in three principal ways: information you provide directly, information generated automatically through your use of the platform, and information received from trusted third-party sources. The categories of personal data we collect are described in detail below.

1.1 Information You Provide Directly

When you register an account, complete identity verification, make deposits or withdrawals, contact support, or participate in promotions, you may provide the following categories of personal data:

• Identity data: Full legal name, date of birth, nationality, and government-issued identification number (National ID, passport number, or driving licence number).
• Contact data: Email address, mobile phone number, and residential address (including city, district, and postal code).
• Financial data: Payment method details including bKash wallet number, Nagad account number, Rocket mobile banking number, Upay account, bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, etc.), and Visa/Mastercard card details (stored in tokenised form only — raw card numbers are never retained on gbd22 servers).
• Verification documents: Copies of government-issued photo ID, proof of address documents, and proof of payment method ownership submitted during KYC verification.
• Communications data: The content of messages, emails, live chat transcripts, and support tickets you send to gbd22, including any attachments.
• Promotional data: Your participation in promotions, bonus preferences, and any information you voluntarily provide when entering competitions or responding to surveys.

1.2 Information Collected Automatically

When you access and use the gbd22 platform, certain data is generated and collected automatically through technical means. This includes:

• Device and technical data: IP address, device type, operating system and version, browser type and version, screen resolution, device identifiers, and network provider.
• Usage data: Pages visited, games played, bets placed, bet amounts, wagering history, session duration, login timestamps, and navigation paths through the platform.
• Location data: General geographic location inferred from your IP address. gbd22 does not access GPS or precise device location data.
• Cookie and tracking data: Data collected via cookies, web beacons, pixel tags, and similar tracking technologies as described in Section 3 of this Privacy Policy.

1.3 Information from Third Parties

In limited circumstances, gbd22 may receive personal data about you from third-party sources, including:

• Identity verification providers: Third-party KYC and AML compliance service providers who assist in verifying the authenticity of documents and confirming identity.
• Payment processors: Payment partners such as bKash, Nagad, Rocket, and card processing networks may share transaction confirmation data and fraud risk signals with gbd22.
• Fraud prevention services: Industry fraud prevention databases and shared risk intelligence services used to identify accounts presenting elevated fraud or money-laundering risk.
• Affiliate partners: Where you register on gbd22 via a tracked affiliate link, the affiliate partner may share your registration source data with us for commission attribution purposes. The affiliate does not share any financial or sensitive personal data.

2. How We Use Your Data

gbd22 processes your personal data only for the specific purposes described below. For each purpose, we identify the legal basis on which we rely to process your data lawfully.

Purpose	Categories of Data Used	Legal Basis
Creating and managing your player account	Identity, contact, verification documents	Contract performance
Processing deposits and withdrawals	Financial data, identity data	Contract performance
KYC / AML compliance checks	Identity, financial, verification documents	Legal obligation
Fraud prevention and platform security	Technical, usage, financial data	Legitimate interests
Delivering customer support	Identity, contact, communications data	Contract performance
Sending transactional notifications	Contact, usage data	Contract performance
Sending promotional communications	Contact, promotional data	Consent
Personalising platform content and offers	Usage data, promotional data	Legitimate interests / Consent
Responsible gaming monitoring	Usage, financial, identity data	Legal obligation / Legitimate interests
Analytics and platform improvement	Technical, usage data (aggregated)	Legitimate interests

2.1 Marketing Communications

gbd22 will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, and seasonal offers if you have consented to receive such communications at registration or subsequently via your account preferences. You may withdraw your consent and unsubscribe from marketing communications at any time by updating your preferences in account settings or by contacting support at [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.

2.2 Automated Decision-Making

gbd22 uses automated processes in certain contexts — including fraud risk scoring, responsible gaming intervention triggers, and bonus eligibility checks. Where an automated decision has a significant effect on you (for example, account suspension based on fraud signals), you have the right to request human review of that decision by contacting our support team. gbd22 does not use fully automated decision-making for any decision that would produce legal effects concerning you without the option for human review.

3. Cookies & Tracking Technologies

The gbd22 website uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to gather aggregate analytics data that helps us improve your experience.

3.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to remember information about your session and preferences. Cookies do not contain executable code and cannot access files stored elsewhere on your device.

3.2 Categories of Cookies We Use

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, preferred currency (BDT or INR), and display settings so you do not need to re-enter them on each visit.
• Analytics cookies: Collect aggregated, anonymised data about how players use the platform — which pages are visited most, how long sessions last, and where users encounter difficulties. This data helps gbd22 improve the platform experience. No personally identifiable information is shared with analytics providers.
• Security cookies: Used to detect and prevent fraudulent activity, including bot traffic and credential-stuffing attempts, by analysing behaviour patterns during the session.

3.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and set preferences for specific websites. Please note that disabling strictly necessary cookies will prevent you from logging in and using core platform features. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

4. Data Sharing & Third Parties

gbd22 does not sell your personal data. We share your personal data only in the limited circumstances described below, and only with parties who are contractually required to handle it in accordance with standards consistent with this Privacy Policy.

4.1 Service Providers

gbd22 engages carefully selected third-party service providers who process personal data on our behalf to support platform operations. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard payment networks process transaction data necessary to execute your deposits and withdrawals. Each payment partner operates under its own privacy policy and applicable financial regulations.
• KYC and identity verification services: Third-party verification providers receive identity documents and personal data solely for the purpose of confirming your identity and conducting AML checks.
• Cloud infrastructure providers: gbd22's platform is hosted on enterprise-grade cloud infrastructure. Our hosting provider has access to server-level data but is contractually prohibited from accessing or processing application-layer personal data for any purpose other than infrastructure operation.
• Customer support platforms: Our support ticket and live chat system is operated on a third-party platform. Support agents access your account data as necessary to resolve your enquiries.
• Game content providers: Casino game software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may process certain session data (such as game outcomes and bet amounts) as part of delivering their game software. This data is used for game integrity and audit purposes only.

4.2 Legal and Regulatory Disclosure

gbd22 may disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, regulation, court order, or other legal process. We will notify you of such disclosures where we are legally permitted to do so.

4.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of gbd22's business, personal data held by gbd22 may be transferred to the acquiring entity as part of that transaction. In such circumstances, gbd22 will take reasonable steps to ensure that the acquiring party provides equivalent privacy protections and will notify registered players via the registered email address prior to any such transfer taking effect.

5. Data Retention

gbd22 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to maintain the contractual relationship with you, or as required or permitted by applicable law. The following retention periods apply to the principal categories of data we hold:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	AML / legal compliance
KYC verification documents	Duration of account + 5 years after closure	Regulatory obligation
Transaction records (deposits & withdrawals)	7 years from transaction date	Financial record-keeping requirements
Betting and wagering history	5 years from activity date	Dispute resolution, responsible gaming
Support communications	3 years from last interaction	Quality assurance, dispute resolution
Marketing preferences and consent records	Duration of account + 3 years	Consent audit trail
Technical / access logs	12 months	Security monitoring

When a retention period expires, personal data is either securely deleted from gbd22 systems or irreversibly anonymised so that it can no longer be linked to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

6. Data Security

gbd22 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, disclosure, alteration, or destruction.

6.1 Technical Safeguards

• Transport encryption: All data transmitted between your browser or app and gbd22's servers is encrypted using TLS 1.2 or higher (256-bit SSL). Our servers are configured to reject connections that do not meet this standard.
• Data at rest encryption: Sensitive personal data, including identity documents and financial data, is encrypted at rest using AES-256 encryption.
• Payment data tokenisation: Raw card numbers and full payment credentials are never stored on gbd22 servers. Payment data is tokenised at the point of entry by our PCI-DSS-compliant payment processor.
• Access controls: Access to personal data within gbd22's internal systems is governed by role-based access controls (RBAC). Staff members can only access the data categories necessary for their specific role.
• Intrusion detection: gbd22 operates continuous intrusion detection and prevention systems (IDS/IPS) that monitor network traffic for anomalous patterns indicative of an attempted breach.

6.2 Organisational Safeguards

• All staff members with access to personal data undergo mandatory data protection training before being granted system access.
• Third-party service providers are vetted for data security compliance before being engaged and are subject to contractual data processing agreements that impose equivalent security standards.
• gbd22 conducts regular internal security reviews and vulnerability assessments.

6.3 Data Breach Response

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, gbd22 will notify affected players without undue delay via the registered email address on file. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures gbd22 has taken or proposes to take to address the breach.

7. Your Privacy Rights

As a gbd22 player, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, contact our support team at [email protected]. gbd22 will respond to all valid rights requests within 30 days of receipt.

• Right of access: You have the right to request a copy of the personal data gbd22 holds about you, together with information about how it is being used. This is sometimes called a Subject Access Request (SAR).
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You can update basic account information (such as your email address or phone number) directly through your account settings.
• Right to erasure: In certain circumstances, you have the right to request that gbd22 delete the personal data we hold about you. Note that this right is not absolute — we may be required to retain certain data to comply with legal obligations (such as AML record-keeping requirements) even after your account is closed.
• Right to restriction of processing: You have the right to request that gbd22 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being verified following a rectification request.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive the personal data you have provided to gbd22 in a structured, commonly used, machine-readable format, and to transmit that data to another service provider.
• Right to object: You have the right to object to gbd22 processing your personal data where that processing is based on legitimate interests. gbd22 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

8. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or wish to raise a concern about how gbd22 handles your personal data, please contact our support team using the details below. All privacy-related enquiries are handled by English-speaking staff available 24 hours a day, 7 days a week.

Email: [email protected]

Support hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)

Response time: We aim to acknowledge all privacy enquiries within 24 hours and to provide a substantive response within 30 days.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. gbd22 is committed to working constructively with regulatory authorities to resolve any complaints about our data handling practices.