gb222 Privacy Policy

1. Introduction

gb222 ("gb222", "we", "us", "our") operates the online casino and sports betting platform accessible at gb222.bio (the "Platform"). This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read this Privacy Policy carefully to understand our practices regarding your personal data and how we will treat it.

By accessing or using the Platform, registering a player account, or otherwise engaging with gb222's services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described in this Policy, you should not use the Platform.

This Privacy Policy should be read alongside the gb222 Terms and Conditions and the Responsible Gaming Policy. Together, these three documents form the complete framework governing your relationship with gb222.

2. Data Controller

gb222 is the data controller responsible for the personal data processed in connection with the Platform. For all data protection-related queries, requests, or concerns, you may contact us at the email address provided in Section 14 of this Policy. We will respond to all data-related inquiries within 30 calendar days of receipt.

gb222 operates with the Bangladesh market as its primary audience. Players are responsible for ensuring that their use of the Platform complies with the laws applicable in their jurisdiction. gb222 does not represent or warrant that the Platform is legally available in every jurisdiction from which it may technically be accessed.

3. Data We Collect

gb222 collects the following categories of personal data from players and prospective players:

• Identity data: Full name, date of birth, nationality, national identity card number or passport number, and any other government-issued identification details provided during account registration or KYC verification.
• Contact data: Email address, mobile telephone number, and residential address including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar) and postal code.
• Account data: Username, encrypted password, account preferences, communication preferences, and account activity history.
• Financial data: Payment method identifiers (e.g., bKash wallet number, Nagad account reference, Rocket number, Upay account, masked Visa or Mastercard number), transaction history, deposit amounts, withdrawal amounts, and balance records. gb222 does not store full card numbers or CVV codes; these are handled exclusively by our certified payment processors.
• Gaming data: Bet history, game session logs, wagering patterns, bonus usage records, win and loss records, and responsible gaming tool settings such as deposit limits and self-exclusion status.
• Technical data: IP address, browser type and version, device type and model, operating system, screen resolution, time zone, and referring URL.
• Usage data: Pages visited, navigation paths through the Platform, session duration, click patterns, and search queries made within the Platform.
• Communication data: Records of correspondence between you and gb222's support team, including email exchanges, support ticket content, and live chat transcripts.
• Verification documents: Copies or scans of identity documents, proof of address documents, and payment method verification materials submitted during KYC review.

4. How We Collect Your Data

gb222 collects personal data through the following channels and mechanisms:

• Direct provision by you: When you register an account, complete identity verification, make a deposit or withdrawal request, contact our support team, respond to a survey, or participate in a promotion, you provide us with personal data directly.
• Automated technical collection: As you navigate and interact with the Platform, we automatically collect technical and usage data via server logs, cookies, web beacons, pixel tags, and similar tracking technologies. See Section 10 for full details on our use of cookies.
• Third-party sources: We may receive data about you from identity verification partners, fraud detection services, credit reference or risk-scoring agencies, payment processors, and publicly available databases where we are required by law or have a legitimate business reason to verify information you have provided.
• Responsible gaming partners: Where you have registered with a third-party self-exclusion scheme and that scheme shares data with gambling operators for the purpose of enforcing exclusions, gb222 may receive notification data from such a scheme.

5. Purposes of Processing

gb222 processes your personal data for the following specific purposes. We process only the data that is necessary for each stated purpose in accordance with the principle of data minimisation.

Purpose	Data Categories Used
Account registration and management	Identity, contact, account data
Identity verification (KYC) and age verification	Identity, verification documents
Processing deposits, withdrawals, and refunds	Financial, identity data
Providing casino and sports betting services	Account, gaming, technical data
Fraud prevention and anti-money laundering compliance	Identity, financial, technical, gaming data
Responsible gaming monitoring and tool provision	Gaming, account, identity data
Customer support and dispute resolution	Identity, contact, communication data
Marketing communications (where consented)	Contact, account, gaming data
Platform analytics and service improvement	Technical, usage data
Legal and regulatory compliance	All categories as required

6. Legal Basis for Processing

gb222 processes your personal data on the following legal bases:

• Performance of a contract: Processing is necessary to perform the contract between you and gb222 — specifically, to provide your player account, process transactions, and deliver casino and sports betting services.
• Legal obligation: gb222 is required to process certain data to comply with applicable laws and regulations, including anti-money laundering obligations, counter-terrorism financing requirements, age verification duties, and financial record-keeping requirements.
• Legitimate interests: gb222 processes certain technical and usage data on the basis of its legitimate business interests, including fraud prevention, platform security, service quality improvement, and responsible gaming monitoring. We ensure that our legitimate interests do not override your fundamental rights and freedoms.
• Consent: Where we process data for direct marketing purposes or use non-essential cookies, we do so on the basis of your freely given, specific, informed consent. You may withdraw your consent at any time by contacting gb222 support or adjusting your account communication preferences.

7. Data Sharing and Disclosure

gb222 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the following limited circumstances and only to the extent necessary for each stated purpose:

• Payment processors: We share the minimum necessary financial and identity data with our certified payment partners — including the processors behind bKash, Nagad, Rocket, Upay, Visa, and Mastercard — to facilitate deposits and withdrawals.
• Identity verification providers: We share identity and document data with regulated KYC and age-verification service providers for the purpose of verifying your identity and age before withdrawal processing.
• Fraud and risk prevention services: We may share technical and financial data with fraud detection and anti-money laundering compliance platforms to identify and prevent suspicious activity on the Platform.
• Game providers: Certain technical data (session tokens, bet references) may be shared with licensed game providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe in order to render games correctly and log game outcomes.
• Legal and regulatory authorities: We will disclose personal data to law enforcement agencies, financial intelligence units, courts, or other competent authorities where we are required to do so by applicable law, regulation, or lawful court order.
• Professional advisers: We may share data with lawyers, auditors, and other professional advisers under obligations of confidentiality for the purposes of obtaining professional advice or managing legal proceedings.
• Business transfers: In the event of a merger, acquisition, asset sale, or restructuring of gb222's business, personal data held by gb222 may be transferred to the acquiring entity, subject to the acquiring entity's commitment to honour this Privacy Policy or to provide players with advance notice of any material change to data handling practices.

8. Data Retention

gb222 retains your personal data for only as long as is necessary for the purposes for which it was collected, in accordance with applicable legal requirements and our legitimate business needs. The following indicative retention periods apply:

• Active account data: Retained for the full duration of your player account's active life, plus a minimum of 5 years after account closure.
• Financial transaction records: Retained for a minimum of 7 years after the date of each transaction, in accordance with financial record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of 5 years after account closure or the conclusion of any related investigation, whichever is later.
• Support and communication records: Retained for a minimum of 3 years from the date of the last communication in each support thread.
• Technical and usage logs: Typically retained for 12–24 months for security monitoring and service improvement purposes, after which they are anonymised or deleted.
• Marketing consent records: Retained for the duration of your consent and for 2 years thereafter as evidence of that consent.

Following the expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised so that it can no longer be attributed to an identifiable individual.

9. Security Measures

gb222 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data fields at rest within our databases, including identity document references and payment method identifiers.
• Role-based access controls limiting staff access to personal data to those with a documented business need.
• Multi-factor authentication requirements for all internal systems handling personal data.
• Regular third-party penetration testing and vulnerability assessments of the Platform and supporting infrastructure.
• Comprehensive audit logging of all access to and modifications of personal data records.
• Formal data breach detection, response, and notification procedures including timely notification to affected players where a breach is likely to result in a high risk to their rights and freedoms.

Despite these measures, no method of electronic transmission or storage is completely secure. In the unlikely event of a data breach that poses a significant risk to your personal data, gb222 will notify affected players promptly at their registered email address and take all reasonable steps to contain and mitigate the breach.

10. Cookies and Tracking Technologies

gb222 uses cookies and similar technologies on the Platform. Cookies are small text files placed on your device that help us operate the Platform correctly, remember your preferences, and understand how players interact with our services. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, display preferences, and recently played games. These improve your experience but are not essential to Platform operation.
• Analytics cookies: Used to collect aggregated, anonymised information about how players navigate and use the Platform, enabling us to identify areas for improvement. Analytics data is not linked to individually identifiable player records.
• Marketing cookies: Used only where you have given explicit consent, to help us understand the effectiveness of any marketing campaigns and to personalise promotional communications where permitted.

You may manage your cookie preferences through your browser settings. Blocking all cookies will affect your ability to use certain features of the Platform. Consent to non-essential cookies may be withdrawn at any time by clearing your browser cookies or adjusting browser cookie settings.

11. Your Data Rights

Subject to applicable law, you have the following rights in relation to the personal data gb222 holds about you. To exercise any of these rights, please contact gb222 support at the email address provided in Section 14. gb222 will respond to all valid rights requests within 30 calendar days.

• Right of access: You have the right to request a copy of the personal data gb222 holds about you, together with information about how it is processed.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by gb222 be corrected or completed without undue delay.
• Right to erasure: You have the right to request that gb222 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where it has been unlawfully processed. This right is subject to gb222's legal obligations to retain certain data for specified periods.
• Right to restriction: You have the right to request that gb222 restrict the processing of your personal data in certain circumstances, for example while the accuracy of your data is being contested.
• Right to object: You have the right to object to the processing of your personal data on the basis of gb222's legitimate interests. gb222 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to data portability: Where processing is based on your consent or the performance of a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

12. Minors

The gb222 Platform is strictly for adults aged 21 years and above. gb222 does not knowingly collect or process personal data from individuals under the age of 21. If you are under 21, you must not register an account or use any part of the Platform.

If gb222 becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately closed, the data will be deleted as promptly as the applicable legal retention requirements permit, and any deposits will be returned in accordance with gb222's Responsible Gaming Policy.

If you believe that a minor has registered on the Platform or that gb222 has inadvertently collected data from someone under 21, please notify us immediately at the contact address in Section 14 so that we can take appropriate action.

13. Changes to This Privacy Policy

gb222 reserves the right to update or revise this Privacy Policy at any time. The most current version of this Policy will always be accessible at gb222.bio/privacy-policy. The "Last updated" date at the top of this document reflects when the current version became effective.

Where changes are material — for example, a change to the categories of data collected, a new purpose of processing, or a new category of third-party recipient — gb222 will notify registered players via their registered email address or via a prominent notice on the Platform at least 14 days before the changes take effect. Your continued use of the Platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you should cease using the Platform and contact gb222 support to arrange account closure.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data gb222 holds about you — including data access requests, rectification requests, or erasure requests — please contact the gb222 Data team using the following details:

Email: [email protected]  (plain text — not a clickable link)

Response time: gb222 aims to acknowledge all privacy-related queries within 5 business days and to resolve them fully within 30 calendar days of receipt.

Support hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6).

All communications regarding data privacy should be submitted in English. gb222 will respond in English.