gk333 Privacy Policy — How We Protect Your Personal Data

Introduction

gk333 is Bangladesh's leading online betting and casino platform, providing sports betting, live casino games, and slot entertainment to eligible adult players. The protection of your personal data is fundamental to how we operate. This Policy has been prepared in plain, accessible English so that every player can clearly understand what data gk333 holds, why it is held, and how it is used.

This Policy applies to all personal data collected through the gk333 website at gk333.lat, through any mobile-optimised version of the platform, and through any communication channel used to interact with gk333 customer support. It does not apply to third-party websites, payment processors, or game software studios whose own privacy practices are governed by their respective policies.

This Policy was last updated in January 2026. We encourage you to review it periodically. The most current version will always be available at gk333.lat/privacy-policy, with the effective date clearly displayed at the top of the document.

Data Controller

For the purposes of this Privacy Policy, gk333 acts as the data controller in respect of the personal data of its registered players. As data controller, gk333 is responsible for determining the purposes for which and the manner in which your personal data is processed. If you have any questions or concerns about how your data is handled, you may contact our designated data protection contact at the email address provided in Section 14 of this Policy.

Data We Collect

gk333 collects the following categories of personal data from players. The specific data collected from any individual player depends on the nature and extent of their interaction with the platform.

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, national ID number, passport number, photograph	At registration and during KYC verification
Contact Data	Email address, mobile phone number, residential address (including Dhaka, Chittagong, Sylhet, Khulna, or other Bangladesh cities)	At registration or when updated by the player
Financial Data	Mobile financial service account identifiers (bKash, Nagad, Rocket, Upay), bank account details, transaction amounts in BDT, deposit and withdrawal history	When conducting deposits or withdrawals
Technical Data	IP address, device type, browser type and version, operating system, screen resolution, session duration, time-zone (Bangladesh Standard Time, UTC+6)	Automatically when accessing the platform
Behavioural Data	Games played, bet amounts, win/loss history, session frequency, feature usage patterns, bonus activity	Continuously during platform use
Communications Data	Support chat transcripts, email correspondence, complaint records	When contacting customer support
Marketing Preferences	Opted-in communication channels, promotional preferences, opted-out status	At registration or via account settings

gk333 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information unless specifically required for responsible gaming purposes (for example, where a player discloses a gambling-related health concern to our support team in the context of requesting self-exclusion assistance).

How We Collect Your Data

gk333 collects personal data through the following means:

• Direct interactions: Data you provide voluntarily when registering an account, submitting identity verification documents, making deposits or withdrawal requests, contacting customer support, or responding to surveys and promotional campaigns.
• Automated technical collection: Data collected automatically by our servers and analytics systems when you access and use the gk333 platform, including IP addresses, device fingerprints, session logs, and clickstream data. See Section 7 for details on cookies.
• Third-party sources: Data received from payment service providers (such as bKash, Nagad, and Rocket) to confirm the status of financial transactions; identity verification services used to authenticate documents provided during KYC; and fraud prevention partners who assist gk333 in identifying suspicious account behaviour.

Purpose & Legal Basis for Processing

gk333 processes your personal data for the following purposes. Each purpose is supported by a documented lawful basis for processing:

• Account registration and service delivery: To create and maintain your gk333 player account, authenticate your identity, process deposits and withdrawals, and provide access to the betting and casino services you have requested. Lawful basis: performance of a contract.
• Age and identity verification (KYC): To confirm that you meet the mandatory 21+ age requirement and to verify the accuracy of the personal information you provided at registration. Lawful basis: legal obligation and legitimate interests.
• Financial transaction processing: To facilitate deposits via bKash, Nagad, Rocket, Upay, SureCash, and Bank Transfer, and to process withdrawal requests to your verified payment method. Lawful basis: performance of a contract.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other activities prohibited under our Terms & Conditions. Lawful basis: legal obligation and legitimate interests.
• Responsible gaming monitoring: To monitor player activity for indicators of problem gambling behaviour and to administer responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion. Lawful basis: legal obligation and legitimate interests.
• Customer support: To respond to and resolve queries, complaints, and requests submitted through our support channels. Lawful basis: performance of a contract and legitimate interests.
• Marketing communications: To send you promotional offers, bonus notifications, and event announcements (such as BPL cricket promotions or Eid bonus offers) where you have opted in to receive such communications. Lawful basis: consent. You may withdraw consent at any time.
• Platform improvement and analytics: To analyse aggregated and anonymised usage data to improve platform performance, game offerings, user experience, and responsible gaming tools. Lawful basis: legitimate interests.

Sharing Your Personal Data

gk333 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients strictly where necessary and subject to appropriate data protection safeguards:

• Payment service providers: bKash, Nagad, Rocket, Upay, SureCash, and banking partners receive the minimum transaction data required to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently regulated.
• Identity verification services: Third-party KYC and document authentication providers receive identity data solely for the purpose of verifying your age and identity as required by our platform rules.
• Game software providers: Studios such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe may receive session-level technical data necessary to deliver their games within the gk333 environment. These studios do not receive your full personal profile.
• Fraud prevention and security partners: Specialist fraud detection and cybersecurity providers who assist gk333 in identifying and preventing account abuse, bonus misuse, and financial crime.
• Legal and regulatory authorities: Where gk333 is required by law, court order, or other legal process to disclose personal data, we will comply with that obligation. gk333 will, where legally permissible, endeavour to notify the affected player of such disclosure.
• Professional advisers: Lawyers, accountants, auditors, and insurers who provide professional services to gk333, subject to obligations of confidentiality.

All third-party processors engaged by gk333 are required to process personal data only for the specific purpose for which it was shared, and to implement technical and organisational security measures consistent with industry standards.

Cookies & Tracking Technologies

The gk333 platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. Cookies are small text files stored on your device by your browser when you visit a website. The following categories of cookies are used on gk333.lat:

• Strictly necessary cookies: These cookies are essential for the platform to function correctly. They enable core features such as user authentication, session management, and security token validation. These cookies cannot be disabled without significantly impairing platform functionality.
• Functional cookies: These cookies remember your preferences and settings (such as language selection and responsible gaming limit configurations) so that you do not need to re-enter them on each visit.
• Analytical cookies: These cookies collect aggregated, anonymised data about how players navigate and interact with the gk333 platform, allowing us to identify areas for improvement. The data collected by analytical cookies does not identify individual users.
• Security cookies: These cookies assist in detecting and preventing fraudulent activity, including unusual login patterns and suspicious transaction behaviour.

You may control and manage cookies through your browser settings. Disabling strictly necessary cookies will affect platform functionality and may prevent you from logging in or completing transactions. gk333 does not use advertising or retargeting cookies that track your activity across third-party websites.

Data Security

gk333 employs a layered approach to data security, combining technical controls, organisational procedures, and staff training to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. The specific security measures in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and gk333 servers.
• Cryptographic password hashing using industry-standard algorithms. Plain-text passwords are never stored in our systems.
• Two-factor authentication (2FA) via one-time passwords (OTP) for player logins from new devices or locations.
• Role-based access controls that restrict internal staff access to personal data on a strict need-to-know basis. All internal data access is logged and subject to periodic audit.
• Regular penetration testing and vulnerability assessments conducted by qualified security professionals.
• Encrypted storage of identity verification documents submitted during the KYC process.
• Automated session timeout mechanisms that log out inactive sessions to reduce the risk of unauthorised access on shared devices.

While gk333 takes all reasonable and industry-standard precautions to protect your personal data, no system connected to the internet can be guaranteed to be completely immune from security incidents. In the event of a data breach that is likely to result in a risk to your rights and freedoms, gk333 will notify affected players without undue delay in accordance with applicable notification obligations.

Data Retention Periods

gk333 retains personal data for no longer than is necessary for the purpose for which it was collected, or as required by applicable legal, regulatory, or anti-fraud obligations. The following general retention guidelines apply:

• Active account data: Retained for the duration of your active account relationship with gk333, plus a defined period following account closure as described below.
• Transaction records and financial data: Retained for a minimum of five years following the date of the transaction, in accordance with standard financial record-keeping requirements.
• Identity verification documents: Retained for a minimum of five years from the date of account closure. Extended retention may apply where required by fraud investigation or legal proceedings.
• Customer support communications: Retained for three years from the date of the last interaction, unless the communication forms part of an ongoing dispute or legal matter.
• Marketing consent records: Retained for the duration of your consent, plus three years following withdrawal of consent, as evidence of the consent lifecycle.
• Technical and analytical logs: Retained for up to 13 months in identifiable form, after which they are anonymised or deleted.

When personal data reaches the end of its retention period, it is securely and irreversibly deleted or anonymised in a manner that prevents reconstruction of the original data.

Your Data Rights

As a gk333 player, you have the following rights in respect of your personal data. To exercise any of these rights, please submit a written request to [email protected] from the email address registered to your gk333 account. gk333 will respond to all valid rights requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of all personal data gk333 holds about you, along with information about how it is used, where it came from, and with whom it has been shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. For most account details, you can update this information directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the original purpose of collection, where you have withdrawn consent, or where you object to processing based on legitimate interests. This right is subject to overriding legal retention obligations — for example, gk333 is required to retain transaction records for a defined minimum period regardless of a deletion request.
• Right to Restriction: You have the right to request that gk333 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is under investigation.
• Right to Data Portability: You have the right to request that gk333 provide your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Object: You have the right to object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing carried out on the basis of legitimate interests, subject to gk333 demonstrating compelling grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Children & Minors

The gk333 platform is strictly restricted to individuals aged 21 and above. gk333 does not knowingly collect, process, or store personal data from anyone under the age of 21. If gk333 becomes aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account, including forfeiture of any balances held.

If you are a parent or guardian and you believe that a minor under your care has registered an account on gk333, please contact us immediately at [email protected]. We take reports of underage access extremely seriously and will investigate and act on all such reports without delay.

Third-Party Links & Services

The gk333 platform may contain references to third-party service providers, including payment processors such as bKash, Nagad, and Rocket. When you interact with these third-party services — for example, when completing a deposit through a mobile financial service provider — you are subject to that provider's own privacy policy and data practices, which are entirely independent of this gk333 Privacy Policy.

gk333 has no control over, and accepts no responsibility for, the privacy practices of third-party service providers or game studios. We encourage you to read the privacy policies of any third-party services you interact with in connection with your use of the gk333 platform.

Updates to This Policy

gk333 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. Where amendments are material — meaning they significantly affect how your personal data is used or your rights in relation to that data — gk333 will provide advance notice via a notification displayed within the platform or an email to your registered address. Minor amendments may take effect immediately upon publication.

The effective date displayed at the top of this Policy reflects when the current version was last reviewed and updated. Your continued use of the gk333 platform following the effective date of any updated Policy constitutes your acknowledgment of the revised terms. If you disagree with a material change to this Policy, you should discontinue use of the platform and may request account closure by contacting our support team.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data gk333 holds about you, please contact our data protection team. All privacy-related enquiries should be submitted in writing to ensure they are routed to the appropriate team and handled within the required response timeframe.

Email: [email protected]

Please include your full registered username and a clear description of your enquiry or request. gk333 aims to acknowledge all privacy-related requests within 24 hours of receipt and to provide a substantive response within 30 days. Where a request is complex or involves a large volume of data, gk333 may extend the response period by a further 30 days, with notice of the extension provided to the requesting player within the initial 30-day window.