Privacy Policy
of gb33

This Privacy Policy ("Policy") sets out the basis on which gb33 ("we", "us", "our", or "gb33") collects, processes, stores, and discloses personal data relating to individuals ("you", "your", or "the player") who access or use the gb33 online casino and sports betting platform, including the website at gb33.ws and any associated mobile applications or services (collectively, the "Platform").

gb33 is committed to handling your personal information with integrity, transparency, and in strict accordance with our obligations under applicable data protection laws. We process personal data only for the purposes described in this Policy and only to the extent necessary for those purposes.

By registering an account on the gb33 Platform, making a deposit, placing a bet, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy. Where your consent is required as the legal basis for processing, we will request it separately and explicitly before proceeding with that processing activity.

For the purposes of this Privacy Policy, gb33 acts as the data controller in respect of personal data collected from players and visitors through the Platform. As data controller, gb33 determines the purposes for which, and the means by which, your personal data is processed.

If you have any questions regarding this Policy or wish to exercise any of your data rights described in Section 11, please contact our Data Protection team using the details provided in Section 15 of this Policy.

gb33 collects the following categories of personal data from players and visitors, depending on the nature of their interaction with the Platform:

3.1 Identity Data

Full legal name, date of birth, nationality, gender, and copies of government-issued identity documents (such as National ID Card, passport, or driving licence) submitted as part of the Know Your Customer (KYC) verification process.

3.2 Contact Data

Residential address (including city, district, and postal code), email address, and mobile phone number. For players in Bangladesh, this may include addresses in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and other regions.

3.3 Financial Data

Payment method details sufficient to process deposits and withdrawals, including mobile wallet account numbers for bKash, Nagad, Rocket, and Upay; bank account information for Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and other banking institutions; and card details (card type, last four digits, and expiry date — full card numbers are not stored by gb33) for Visa and Mastercard transactions.

3.4 Transactional Data

A complete record of all deposits, withdrawals, bonuses credited and wagered, bets placed, games played, bet amounts, outcomes, and account balance changes associated with your gb33 account.

3.5 Technical Data

IP address, device type and model, operating system, browser type and version, screen resolution, time zone setting (Bangladesh Standard Time, UTC+6), session duration, and referring URL.

3.6 Usage Data

Information about how you navigate and interact with the Platform, including pages visited, games launched, features used, search queries, click behaviour, and session timestamps.

3.7 Communications Data

Records of correspondence between you and gb33, including live chat transcripts, email exchanges, support ticket content, and voluntary survey or feedback responses.

3.8 Responsible Gaming Data

Records of any responsible gaming tools you have activated on your account, including deposit limits, session time limits, cool-off periods, self-exclusion requests, and any third-party problem gambling support referrals made on your behalf.

Category	Examples	Required for Account?
Identity Data	Name, date of birth, NID copy	Yes — KYC mandatory
Contact Data	Email, phone, address	Yes — registration
Financial Data	bKash number, bank details	Yes — deposits/withdrawals
Transactional Data	Bet history, deposit records	Auto-generated
Technical Data	IP address, device info	Auto-collected
Usage Data	Pages visited, games launched	Auto-collected
Communications Data	Live chat logs, emails	When you contact us
Responsible Gaming Data	Limit settings, exclusions	When tools are activated

gb33 collects personal data through the following channels and mechanisms:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or completing any form on the Platform.
• Automated Collection: Technical and usage data collected automatically when you access and interact with the Platform via cookies, session trackers, server logs, and similar technologies (see Section 10 for details on cookies).
• Payment Providers: Confirmation and reference data received from payment processors including bKash, Nagad, Rocket, Upay, Visa, and Mastercard when processing your financial transactions.
• Identity Verification Partners: Data returned by third-party KYC and identity verification service providers to whom you submit your documents, confirming your identity and age.
• Fraud Prevention Services: Risk signals and fraud indicators shared by our fraud detection service providers based on your device fingerprint, IP address, and behavioural patterns.
• Publicly Available Sources: In limited circumstances, and where permitted by law, gb33 may cross-reference personal data against publicly available sources to verify identity, detect fraud, or comply with anti-money-laundering obligations.

gb33 processes your personal data for the following specific and legitimate purposes:

• Account Registration and Management: To create, maintain, and administer your gb33 player account, including verifying your identity and managing your account preferences.
• KYC and Age Verification: To verify that you are at least 21 years of age and to confirm your identity in accordance with responsible gaming and anti-fraud requirements. This is a mandatory process for all accounts.
• Payment Processing: To process deposits and withdrawals in Bangladeshi Taka (৳ BDT) via your chosen payment methods, reconcile transactions, and maintain accurate financial records.
• Delivery of Platform Services: To provide you with access to casino games, sports betting markets, live dealer tables, promotions, bonuses, and all other features of the gb33 Platform.
• Customer Support: To respond to your enquiries, resolve complaints, and provide technical assistance through live chat, email, and other support channels.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, identity theft, account compromise, and other forms of abuse on the Platform.
• Responsible Gaming Compliance: To enforce self-exclusion decisions, apply account limits, monitor betting patterns for signs of problem gambling, and provide appropriate interventions and support resources.
• Legal and Regulatory Compliance: To comply with applicable laws and regulations, including anti-money-laundering (AML) obligations, and to respond to lawful requests from competent authorities.
• Marketing Communications (opt-in only): To send you promotional offers, bonus notifications, seasonal promotions, and platform news where you have provided explicit consent to receive such communications.
• Platform Improvement: To analyse aggregated usage data, improve the quality and performance of the Platform, personalise your gaming experience, and develop new features and services.

gb33 processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and gb33, including account registration, KYC verification, payment processing, and delivery of gaming services.
• Legal Obligation: Processing required to comply with a legal obligation applicable to gb33, including anti-money-laundering checks, age verification requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing necessary for gb33's legitimate business interests where those interests are not overridden by your data protection rights. This includes fraud prevention, platform security, service improvement, and internal analytics.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent. This applies primarily to marketing communications and, where applicable, to certain non-essential cookies and tracking technologies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

gb33 does not sell your personal data. We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

7.1 Payment Service Providers

We share necessary financial data with payment processors including bKash, Nagad, Rocket, Upay, Visa, and Mastercard to execute your deposit and withdrawal transactions. These providers process your data under their own privacy policies and applicable financial regulations.

7.2 Identity Verification and KYC Providers

We share identity documents and personal details with specialist third-party KYC verification partners to conduct age and identity checks on our behalf. These providers are contractually bound to process your data only for verification purposes.

7.3 Game Content Providers

Certain technical data (such as session tokens and player ID references) may be shared with game software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi in order to deliver their games through the gb33 Platform. These providers do not receive your full personal profile.

7.4 Fraud Prevention and Security Partners

We may share technical and behavioural data with fraud detection service providers to identify and prevent fraudulent activity, money laundering, and account abuse on the Platform.

7.5 Legal and Regulatory Authorities

gb33 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by law, court order, or other binding legal obligation. We will notify you of such disclosures where we are legally permitted to do so.

7.6 Corporate Transactions

In the event of a merger, acquisition, sale of assets, or restructuring involving gb33, your personal data may be transferred to the relevant successor entity as part of that transaction, subject to equivalent data protection obligations being maintained.

gb33 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal retention obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active account relationship with gb33, and for a minimum of five (5) years following account closure to comply with anti-money-laundering and fraud prevention obligations.
• Financial and Transactional Data: Retained for a minimum of five (5) years following each transaction to comply with financial record-keeping requirements.
• KYC Verification Documents: Retained for the duration of the account and for five (5) years post-closure. Extended retention may apply where an ongoing investigation or legal proceeding requires it.
• Customer Support Records: Retained for three (3) years from the date of each interaction to facilitate future support and resolve potential disputes.
• Marketing Consent Records: Retained for as long as you maintain an active marketing consent, plus three (3) years following withdrawal of consent, as evidence of the consent history.
• Technical and Usage Data: Generally retained for up to thirteen (13) months from the date of collection in line with standard analytics data retention practices.

When personal data is no longer required for any of the above purposes, gb33 will securely delete or anonymise it. Anonymised or aggregated data (from which you cannot be identified) may be retained indefinitely for analytical and statistical purposes.

gb33 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in Transit: All communications between your browser or device and the gb33 Platform are encrypted using 256-bit SSL/TLS protocols. This applies to account login, payment submissions, and all data exchanged through the Platform interface.
• Encryption at Rest: Sensitive personal data, including KYC documents and financial information, is stored in encrypted form on secure servers with restricted access controls.
• Access Controls: Access to personal data within gb33's systems is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access control policies.
• Intrusion Detection: gb33 employs network monitoring, intrusion detection systems, and anomaly detection tools to identify and respond to potential security threats in real time.
• Penetration Testing: Our systems are subject to regular security assessments and penetration tests conducted by qualified security professionals to identify and remediate vulnerabilities.
• Incident Response: gb33 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law.
• Staff Training: All gb33 staff with access to personal data receive regular training on data protection obligations, security best practices, and the handling of sensitive player information.

gb33 uses cookies and similar tracking technologies to operate the Platform effectively, improve the user experience, and gather analytics data. The following categories of cookies are used on the gb33 Platform:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They enable core features such as session management, secure login, account authentication, and fraud prevention checks. These cookies cannot be disabled without disabling core Platform functionality, and no consent is required for their use.

10.2 Functional Cookies

These cookies allow the Platform to remember your preferences, such as language settings, preferred game display options, and account dashboard layout. They enhance your experience but are not strictly necessary for the Platform to operate.

10.3 Analytics Cookies

gb33 uses analytics cookies to collect aggregated and anonymised data about how visitors interact with the Platform — including which pages are visited most frequently, how long sessions last, and where users encounter difficulties. This data is used solely to improve Platform performance and user experience.

10.4 Marketing Cookies

Where you have provided consent, marketing cookies may be used to track your engagement with gb33 promotional content and to measure the effectiveness of our marketing campaigns. You may withdraw consent for marketing cookies at any time via your account preferences or by contacting our support team.

10.5 Managing Your Cookie Preferences

Most modern web browsers allow you to view, manage, and delete cookies stored on your device via the browser's settings panel. Please note that disabling certain cookies may affect the functionality of the gb33 Platform. For detailed instructions on managing cookies in your specific browser, please refer to your browser's help documentation.

As a data subject, you have the following rights in relation to the personal data gb33 holds about you. gb33 is committed to honouring these rights promptly and without undue burden:

To exercise any of the rights listed above, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will respond to all verified requests within thirty (30) calendar days. In complex cases, we may extend this period by a further sixty (60) days, in which case we will notify you of the extension and the reasons for it.

Please note that certain rights are subject to limitations. For example, gb33 may be unable to delete data that is required to be retained for legal or regulatory compliance purposes. In such cases, we will explain the applicable limitation clearly.

The gb33 Platform is strictly intended for adults aged 21 years and above. gb33 does not knowingly collect, process, or retain personal data from individuals under the age of 21. Registration on the Platform requires confirmation that you meet the minimum age requirement, and this is verified during the mandatory KYC process.

If gb33 discovers or has reasonable cause to believe that an account has been registered by or on behalf of a person under 21 years of age, we will immediately suspend the account, conduct an investigation, void any bets placed, reverse any deposits where possible, and permanently close the account. Any winnings accrued during a period of underage use will be forfeited.

If you are a parent or guardian and believe that a minor in your care has accessed or registered on the gb33 Platform, please contact us immediately at [email protected] so that we can take appropriate action without delay.

In order to deliver the gb33 Platform and the services described in this Policy, your personal data may be transferred to, and processed in, countries outside Bangladesh. This may occur when our game content providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), payment processors, KYC verification partners, or cloud infrastructure providers operate servers or processing facilities in other jurisdictions.

Where such international transfers take place, gb33 takes appropriate steps to ensure that your personal data is subject to equivalent levels of protection as it would receive within Bangladesh. These steps may include implementing contractual data protection clauses with the relevant third-party recipients, conducting transfer impact assessments, and applying additional technical safeguards where required.

By using the gb33 Platform and agreeing to this Privacy Policy, you acknowledge that your personal data may be transferred internationally in the manner described above.

gb33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or Platform functionality. When we make material changes to this Policy, we will notify you by one or more of the following means:

• Posting a prominent notice on the gb33 Platform homepage and login page;
• Sending a notification to the email address registered on your account;
• Displaying an in-Platform alert when you next log in after the changes take effect.

The revised Policy will display an updated effective date at the top of the document. We encourage you to review this Privacy Policy periodically to remain informed about how gb33 protects your data. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the revised Policy.

Where an amendment materially alters the basis on which we process data that was previously collected under your consent, we will seek fresh consent before applying the new processing basis to your existing data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way gb33 processes your personal data, please contact our Data Protection team using the following details:

• Email: [email protected] (Subject line: "Privacy Policy Enquiry" or "Data Rights Request")
• Live Chat: Available 24/7 directly on the gb33 Platform
• WhatsApp: +880 1700 000000
• Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours and provide a full response within 30 calendar days.

We are committed to resolving all data protection concerns in a fair and transparent manner. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.