gd33 Privacy Policy

1 Introduction

Welcome to gd33. gd33 ("we", "us", "our") is an online casino and sports betting platform accessible at https://gd33.io, operating under an international offshore gaming licence and serving players across Bangladesh and other eligible jurisdictions.

We are committed to handling your personal data with transparency, care, and respect. This Privacy Policy describes the types of personal data we collect from players and visitors to the gd33 platform, the purposes for which that data is processed, the conditions under which it may be shared, the security measures we have in place to protect it, and the rights you hold as a data subject.

This policy applies to all personal data collected through the gd33 website at https://gd33.io, our mobile-optimised interface, our customer support channels, and any other touchpoint through which you interact with the gd33 brand. It should be read in conjunction with our Terms & Conditions and our Responsible Gaming Policy.

By registering an Account or continuing to use the gd33 platform, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this policy, you should cease using the gd33 platform and may request Account closure by contacting us at [email protected].

2 Data We Collect

gd33 collects the following categories of personal data from players and visitors, to the extent necessary for the purposes described in this policy:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification number (as provided during verification).
• Contact Data: Email address, mobile phone number, and residential address including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and country.
• Account Data: Username, encrypted password, Account registration date, Account status, and preferences stored within your Account profile.
• Transaction Data: Records of all deposits, withdrawals, wagers, wins, losses, bonus credits, and payment method details including mobile wallet numbers (bKash, Nagad, Rocket, Upay) and bank account references (Dutch-Bangla Bank, BRAC Bank, etc.). Full card numbers are never stored by gd33 — card payments are handled by PCI-DSS compliant third-party processors.
• Verification Data: Copies of identity documents (national ID, passport, or driving licence), proof-of-address documents, and selfie/liveness images submitted during the Know Your Customer (KYC) process.
• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and session identifiers collected automatically when you access the platform.
• Usage Data: Pages visited, games played, bet history, session duration, click-through paths, search queries made within the platform, and feature interactions.
• Communications Data: The content of messages you send to our support team via email or live chat, including your Account username and any attachments you provide.
• Marketing Preferences Data: Your opt-in or opt-out choices for promotional communications, including email newsletters, SMS alerts, and in-platform bonus notifications.

We do not intentionally collect sensitive personal data such as health information, racial or ethnic origin, political opinions, or religious beliefs. If you voluntarily disclose such information in a support message or other communication, we will handle it with additional care and will not use it for any processing purpose beyond resolving your enquiry.

3 How We Collect Your Data

gd33 collects personal data through the following means:

• Direct Submission: Data you actively provide during Account registration, the KYC verification process, deposit and withdrawal requests, support interactions, and promotional opt-ins.
• Automated Collection: Technical and usage data collected automatically via server logs, cookies, and similar tracking technologies as you browse and use the gd33 platform. See Section 7 for details on cookies.
• Third-Party Sources: Identity verification data may be supplemented by information from third-party identity verification service providers and fraud screening databases to confirm the accuracy of the information you provide. Payment processors may share transaction confirmation data with gd33 to reconcile Account balances. Game software providers (such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe) share game session data with gd33 for account crediting, dispute resolution, and responsible gaming monitoring purposes.

4 Purposes of Processing

gd33 processes your personal data for the following specific purposes:

• Account Management: Creating, maintaining, and administering your gd33 Account, including authentication, Account recovery, and Account closure.
• Identity Verification (KYC): Verifying your identity, age (21+ requirement), and payment method ownership to comply with anti-money laundering (AML) and responsible gaming obligations.
• Transaction Processing: Processing deposits via bKash, Nagad, Rocket, Upay, and other approved methods, and processing withdrawal requests to your verified payment account.
• Platform Operation: Delivering game content, sportsbook markets (including BPL cricket, T20, IPL, and football), and other platform features to your device.
• Customer Support: Responding to your enquiries, resolving disputes, and addressing complaints submitted through our support channels.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, multiple-account abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: Monitoring play patterns to identify potential problem gambling behaviour, enforcing self-exclusion requests, applying deposit limits and session controls, and complying with responsible gaming obligations.
• Legal Compliance: Complying with applicable legal obligations including AML regulations, data retention requirements, and responses to lawful requests from regulatory or law enforcement authorities.
• Marketing Communications (with consent): Sending promotional emails, SMS messages, and in-platform notifications about bonuses, seasonal promotions (Eid, Pohela Boishakh, BPL, IPL), and platform updates, where you have given explicit consent to receive such communications.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve platform performance, game selection, user experience, and the overall quality of the gd33 service.

5 Legal Basis for Processing

gd33 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to at registration — including Account management, transaction processing, and customer support.
• Legal Obligation: Processing required to comply with applicable legal obligations, including KYC/AML identity verification and data retention requirements mandated by law.
• Legitimate Interests: Processing carried out for gd33's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and aggregate usage analytics — where those interests are not overridden by your rights and freedoms.
• Consent: Processing for direct marketing communications, where you have given explicit, freely given, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Sharing Your Personal Data

gd33 does not sell, rent, or trade your personal data to any third party. We share your data only in the circumstances described below, and only to the minimum extent necessary for each purpose:

• Payment Processors: We share necessary transaction data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard payment processing partners to execute deposits and withdrawals on your behalf.
• Identity Verification Providers: We share identity and document data with KYC/AML verification service providers who are contractually bound to process it solely for verification purposes on our behalf.
• Game Software Providers: Game session data is shared with third-party game providers (Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and others) as necessary to deliver game content, record outcomes, and resolve disputes.
• IT Infrastructure and Security Providers: We share technical data with cloud hosting, content delivery, and cybersecurity service providers who process it solely to support the operation and security of the gd33 platform.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by applicable law, or where disclosure is necessary to protect the rights, property, or safety of gd33, our players, or third parties.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of gd33's business, personal data held by gd33 may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

All third parties with whom gd33 shares personal data are required to maintain appropriate technical and organisational security measures and to process the data solely for the purposes for which it was disclosed.

7 Cookies & Tracking Technologies

gd33 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored on your device by your browser when you visit a website. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for core platform functionality including session management, Account authentication, and security. These cookies cannot be disabled without impacting your ability to use gd33.
• Functional Cookies: Remember your preferences such as language settings and display options to personalise your experience on return visits.
• Analytics Cookies: Collect aggregated and anonymised data about how players use the platform — including pages visited, session duration, and game preferences — to help us improve the gd33 service. No personally identifiable information is included in analytics reports.
• Marketing Cookies: Used only where you have provided consent to receive personalised promotional communications. These cookies help us understand which promotions are most relevant to your activity on the platform.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the gd33 platform. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.

8 Data Security

gd33 implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• TLS 1.3 / SSL encryption for all data transmitted between your device and gd33's servers.
• AES-256 encryption for sensitive data stored at rest, including identity documents and payment details.
• Role-based access controls ensuring that gd33 personnel can access personal data only on a strict need-to-know basis.
• Multi-factor authentication required for all internal administrative access to systems holding personal data.
• Regular third-party penetration testing and security audits of the gd33 platform and infrastructure.
• Automated fraud detection and anomaly monitoring systems operating 24/7 on Bangladesh Standard Time (BST, UTC+6).
• Secure data destruction procedures applied to personal data that has reached the end of its retention period.

While gd33 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, gd33 will notify affected players without undue delay in accordance with its legal obligations.

You are responsible for maintaining the confidentiality of your Account login credentials. gd33 will never ask you for your password via email or live chat. If you suspect that your Account has been accessed without your authorisation, contact us immediately at [email protected].

9 Data Retention

gd33 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Active Account Data: Retained for the full duration of your Account's active status plus five years following the date of Account closure, to comply with legal record-keeping obligations and to facilitate resolution of any post-closure disputes.
• Transaction Records: Financial transaction records including deposits, withdrawals, and wager history are retained for a minimum of five years following each transaction, in accordance with AML regulatory requirements.
• KYC Verification Documents: Identity and address verification documents are retained for five years following Account closure or the date of the last verification, whichever is later.
• Support Communications: Customer support correspondence is retained for three years from the date of the last interaction, to allow for resolution of any follow-up enquiries or escalations.
• Marketing Consent Records: Records of your marketing opt-in or opt-out decisions are retained for the duration of your Account plus three years, to demonstrate compliance with consent requirements.
• Technical and Usage Data: Anonymised aggregate usage analytics data may be retained indefinitely for platform improvement purposes. Identifiable technical data (e.g., IP address logs) is retained for up to 12 months from collection.

At the end of the applicable retention period, personal data is either securely and permanently deleted or irreversibly anonymised so that it can no longer be attributed to any individual player.

10 Your Data Protection Rights

Subject to applicable law, you hold the following rights with respect to the personal data gd33 holds about you. To exercise any of these rights, please contact us at [email protected] with a clear description of your request. We will respond within 10 business days.

• Right of Access: You may request a copy of all personal data gd33 holds about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your Account profile. Some changes (e.g., legal name corrections) may require supporting documentation.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and there is no other legal basis for processing. Note that erasure requests may be limited where gd33 has a legal obligation to retain the data.
• Right to Data Portability: You may request a copy of the personal data you have provided to gd33 in a structured, commonly used, machine-readable format (e.g., JSON or CSV), for transfer to another service provider of your choosing.
• Right to Object: You may object to processing of your personal data where gd33 relies on legitimate interests as its legal basis, or for direct marketing purposes. Marketing objections take effect immediately upon receipt.
• Right to Restriction of Processing: You may request that gd33 temporarily suspend processing of your personal data while a correction, erasure, or objection request is being assessed.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.

gd33 will not charge a fee for exercising any of these rights in ordinary circumstances. We reserve the right to charge a reasonable administrative fee where requests are manifestly unfounded or excessive, or to decline to act on such requests.

11 Children's Privacy

The gd33 platform is strictly intended for adults aged 21 years and above. gd33 does not knowingly collect personal data from any individual under the age of 21. If gd33 becomes aware that personal data has been collected from a person under 21 — whether through misrepresentation during registration or otherwise — we will take immediate steps to delete that data and permanently close the associated Account.

If you are a parent or guardian and you believe that a minor in your care has registered on the gd33 platform or provided personal data to us without your consent, please contact us immediately at [email protected] so that we can investigate and take appropriate action. We take underage gambling extremely seriously and will co-operate fully with any enquiry in this regard.

12 Third-Party Links

The gd33 platform may, from time to time, contain references to game providers, payment partners, or other services whose own websites or privacy policies are independent of this document. gd33 is not responsible for the privacy practices, content, or data handling policies of any third-party service, and we encourage you to review the privacy policy of any external service you choose to use.

This Privacy Policy applies solely to personal data collected and processed by gd33 through the gd33 platform at https://gd33.io. It does not apply to data you may provide directly to third-party game providers, payment processors, or any other external service that you access independently of gd33.

13 International Data Transfers

gd33 operates as an international platform and your personal data may be processed by our service providers in countries outside Bangladesh. Where such international data transfers occur, gd33 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this policy. These safeguards may include contractual data processing agreements with standard data protection clauses, and selection of processors that operate within jurisdictions recognised as providing an adequate level of data protection.

By using the gd33 platform, you consent to the transfer of your personal data to service providers located outside Bangladesh, subject to the protections described in this section.

14 Changes to This Privacy Policy

gd33 reserves the right to update, amend, or replace this Privacy Policy at any time. Any changes will be published on this page with a revised effective date at the top of the document. Where changes are material — meaning they significantly affect the way we collect, use, or share your personal data — we will make reasonable efforts to notify registered players via email or an in-platform notification prior to the changes taking effect.

Your continued use of the gd33 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you disagree with the changes, you should cease using the platform and may request Account closure by contacting [email protected].

We recommend that you review this Privacy Policy periodically to stay informed about how gd33 handles your personal data. The most current version is always available at https://gd33.io/privacy-policy.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way gd33 processes your personal data, please contact our support team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

• Email: [email protected]
• Subject Line for Data Requests: Please use one of the following: "Data Access Request", "Data Erasure Request", "Data Portability Request", "Rectification Request", or "Restrict Processing" — this helps us route your enquiry to the correct team.
• Response Time: We aim to respond to all privacy-related enquiries within 10 business days of receipt, operating on Bangladesh Standard Time (BST, UTC+6).
• Live Chat: Available in-platform after login for general support enquiries. For formal data rights requests, email is the recommended channel to ensure a full written record.

gd33 takes every privacy enquiry seriously. Whether you are a registered player or simply a visitor to https://gd33.io, your right to understand how your data is handled is something we respect and uphold without reservation.