gb333 Privacy Policy — How We Protect Your Data

Introduction

This Privacy Policy ("Policy") describes how gb333 ("we", "us", "our") collects, uses, stores, discloses, and protects personal information provided by or collected from individuals ("you", "your", "Player") who access or use the gb333 online gaming and sports betting platform at https://gb333.bio (the "Platform"). It applies to all services offered through the Platform, including but not limited to sports betting markets, casino games, promotional programmes, customer support interactions, and payment processing.

By registering an account with gb333 or by continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal information as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately.

This Policy should be read alongside gb333's Terms & Conditions and Responsible Gaming policy, both of which form part of the overall agreement between gb333 and each registered Player. Capitalised terms used but not defined in this Policy carry the meanings assigned to them in the Terms & Conditions.

Data Controller

For the purposes of this Policy, gb333 acts as the data controller in respect of all personal data collected through or in connection with the Platform. As data controller, gb333 is responsible for determining the purposes for which personal data is processed and the means by which such processing is carried out.

gb333 operates exclusively in the English language with a primary focus on the Bangladesh market. All account operations, payment processing, and customer support activities are conducted in accordance with the practices described in this Policy. The contact details for all data-related enquiries are set out in Section 15 of this document.

Data We Collect

gb333 collects personal data in the following categories. The table below summarises the types of data collected, the specific data points within each category, and the primary purpose for which each category is processed:

gb333 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data for identification purposes beyond what is strictly required for KYC age verification, or data concerning health or sexual orientation.

How We Collect Your Data

gb333 collects personal data through the following mechanisms:

• Account Registration: When you complete the gb333 registration form, you voluntarily provide identity, contact, and account preference data.
• KYC Verification: When you submit identity documents in response to a verification request, we collect the identity data contained within those documents.
• Payment Transactions: Each deposit and withdrawal you initiate generates financial data that is captured and stored by gb333 and the relevant payment provider.
• Platform Interaction: As you navigate the Platform, place bets, play games, and interact with features, technical and usage data is automatically logged by our systems.
• Customer Support: When you contact gb333 via live chat or email, the content of those communications is retained for support and quality assurance purposes.
• Cookies and Tracking Technologies: gb333 uses cookies and similar technologies to collect technical data about your device and browsing behaviour. See Section 10 for full details.
• Third-Party Sources: In certain cases, gb333 may receive data about you from third-party identity verification services or payment processors for the purpose of confirming the accuracy of registration information.

How We Use Your Data

gb333 processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and securing your gb333 account, including enforcing login credentials and managing account settings.
• Age and Identity Verification: Confirming that all Players meet the minimum age requirement of 21 years and that identity information is accurate.
• Payment Processing: Executing deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, and supported bank partners in BDT.
• Game and Betting Services: Enabling access to sports betting markets, casino games, crash games, fishing games, and all other Platform content.
• Fraud Prevention and Security: Detecting and preventing fraudulent activity, multiple account creation, money laundering, and other prohibited conduct as defined in the Terms & Conditions.
• Responsible Gaming: Monitoring betting patterns to identify signs of problem gambling behaviour and applying player-requested tools such as deposit limits, cooling-off periods, and self-exclusion.
• Customer Support: Responding to enquiries, resolving complaints, and providing technical assistance.
• Promotional Communications: Sending bonus offers, seasonal promotions (such as Eid, Pohela Boishakh, and BPL season campaigns), and platform updates to Players who have opted in to receive such communications.
• Legal Compliance: Fulfilling obligations imposed by applicable laws and regulations, including responding to lawful requests from competent authorities.
• Platform Improvement: Analysing usage data to improve Platform performance, game offerings, and user experience across Dhaka, Chittagong, Sylhet, and other regions of Bangladesh.

Legal Basis for Processing

gb333 processes your personal data on the following legal bases:

• Contractual Necessity: The majority of data processing described in this Policy is necessary for gb333 to perform its contractual obligations to you under the Terms & Conditions — specifically to operate your account, process payments, and provide gaming and betting services.
• Legitimate Interests: gb333 processes certain categories of data on the basis of its legitimate interests, including fraud prevention, platform security, and the improvement of services, where those interests are not overridden by your rights and interests.
• Legal Obligation: gb333 may process personal data where necessary to comply with a legal obligation, including responding to lawful information requests from regulatory or law enforcement authorities.
• Consent: Where gb333 processes personal data for marketing and promotional purposes, it does so on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Disclosure

gb333 does not sell your personal data to third parties. We share personal data only in the limited circumstances described below:

• Payment Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive the payment data necessary to execute deposit and withdrawal transactions. These providers process data under their own privacy policies and applicable financial regulations.
• Identity Verification Partners: Third-party KYC and age verification service providers receive identity documents and associated data for the sole purpose of confirming a Player's identity and age. These partners are bound by contractual data processing obligations.
• Game Studios and Technology Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive the technical session data necessary to serve game content and maintain game integrity. They do not receive Player identity or payment data beyond what is technically required for game operation.
• Fraud and Security Services: Anti-fraud and cybersecurity service providers may receive technical and usage data to assist in the detection and prevention of fraudulent activity on the Platform.
• Legal and Regulatory Authorities: gb333 will disclose personal data to competent authorities where required to do so by law, court order, or other legally binding obligation. gb333 will endeavour to notify affected Players of such disclosures where legally permissible.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of gb333's business, Player data may be transferred to the acquiring entity, provided that the receiving entity agrees to process such data in accordance with this Policy.

Data Retention

gb333 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any legal or regulatory obligations that require longer retention periods. The following retention guidelines apply:

• Active Account Data: All personal data associated with an active gb333 account is retained for the lifetime of the account and for a period of five years following permanent account closure.
• Financial Transaction Records: Deposit and withdrawal records, including associated payment account details, are retained for a minimum of seven years from the date of each transaction in accordance with standard financial record-keeping practice.
• KYC and Identity Documents: Copies of identity documents submitted for KYC verification are retained for the duration of the account relationship and for five years after account closure, unless a longer period is required by applicable law.
• Communications Data: Live chat transcripts and support email records are retained for a period of three years from the date of the interaction.
• Marketing Preference Data: Opt-in and opt-out records are retained for the duration of the account relationship to ensure compliance with marketing consent obligations.
• Inactive Account Data: Where an account is classified as inactive (no login for 12 consecutive months), gb333 will take steps to minimise the personal data held while retaining records necessary to satisfy legal obligations and respond to future reactivation requests.

Upon expiry of the applicable retention period, gb333 will securely delete or anonymise personal data in a manner that prevents reconstruction or re-identification.

Security Measures

gb333 implements a comprehensive set of technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL Encryption: All data transmitted between your browser or device and the gb333 Platform is encrypted using Transport Layer Security (TLS). This prevents interception of your data during transmission over public networks.
• Encrypted Data Storage: Personal data stored on gb333 servers — including identity documents, financial records, and account credentials — is stored in encrypted format with access restricted to authorised personnel only.
• Access Controls: Access to personal data within gb333's internal systems is granted on a strict need-to-know basis. Employees and contractors who handle personal data are subject to confidentiality obligations.
• Session Security: Player sessions are protected by token-based authentication. Suspicious login activity — including logins from unrecognised devices or IP addresses — may trigger additional verification steps.
• Penetration Testing: gb333 conducts periodic security assessments and vulnerability reviews of its Platform infrastructure to identify and remediate potential security weaknesses.
• Incident Response: gb333 maintains a data breach response procedure. In the event of a security incident that poses a risk to Player data, affected Players will be notified without undue delay in accordance with applicable obligations.

Cookies & Tracking Technologies

gb333 uses cookies and similar tracking technologies to enhance the Platform experience, maintain session state, and collect analytical data. The following categories of cookies are used:

• Essential Cookies: These cookies are strictly necessary for the Platform to function. They manage your login session, remember your language preference, and enable core Platform features. Essential cookies cannot be disabled without impairing your ability to use the Platform.
• Analytical Cookies: These cookies collect aggregated, anonymised data about how Players interact with the Platform — including which pages are visited most frequently and how long sessions typically last. This data is used to improve Platform performance and usability.
• Security Cookies: These cookies support fraud detection and session security functions. They help gb333 identify suspicious activity and protect Players from account takeover attempts.
• Preference Cookies: These cookies remember your Platform preferences such as display settings and notification choices, so you do not need to reconfigure them on each visit.

gb333 does not use third-party advertising cookies or allow external advertising networks to place cookies on the Platform. You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will affect your ability to log in and use Platform features normally.

Your Data Rights

As a gb333 Player, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact the gb333 support team using the details in Section 15:

• Right of Access: You may request a copy of the personal data gb333 holds about you, along with information about the purposes for which it is processed and the categories of recipients to whom it has been disclosed.
• Right to Rectification: If any personal data gb333 holds about you is inaccurate or incomplete, you may request that it be corrected. Requests to amend identity information may require re-submission of KYC documents.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to gb333's legal obligations to retain certain records (see Section 8).
• Right to Restriction of Processing: You may request that gb333 restricts the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: You may request that gb333 provides you with a copy of the personal data you have supplied to us in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data on the basis of legitimate interests (see Section 6) or for direct marketing purposes at any time. Upon receipt of a valid objection to marketing, gb333 will cease processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

gb333 will respond to all verifiable data rights requests within a reasonable period. Before processing a request, gb333 may need to verify your identity to ensure that personal data is not disclosed or altered in response to an unauthorised request.

Protection of Minors

gb333 enforces a strict minimum age policy of 21 years for all Platform services. gb333 does not knowingly collect personal data from individuals under the age of 21. The Platform is designed and operated exclusively for adults, and registration is not permitted for individuals who cannot confirm they are at least 21 years of age.

Where gb333 identifies that personal data has been collected from a Player who does not meet the minimum age requirement, that data will be deleted immediately and the associated Account will be permanently closed. Any funds held in an underage Account will be handled in accordance with the Terms & Conditions.

gb333 encourages adult Players who share devices with individuals under the age of 21 to use device-level parental control software to restrict access to the Platform. If you believe that a minor has registered an Account on gb333 using false information, please notify the support team immediately so that the Account can be investigated and closed without delay.

International Data Transfers

The gb333 Platform primarily serves Players located in Bangladesh. In the course of delivering Platform services, personal data may be processed by third-party service providers — including game studios such as Pragmatic Play, Evolution Gaming, and Spribe, and payment technology partners — whose infrastructure may be located outside Bangladesh.

Where personal data is transferred to a third party located outside Bangladesh, gb333 takes steps to ensure that an appropriate level of data protection is maintained. This may include relying on standard contractual data processing agreements with the receiving party that impose data protection obligations equivalent to those set out in this Policy.

By using the gb333 Platform and accepting this Policy, you acknowledge and consent to the transfer of your personal data to third-party service providers in connection with the delivery of Platform services, subject to the safeguards described above.

Changes to This Privacy Policy

gb333 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data collection or a new purpose for processing — we will notify affected Players by email and/or by displaying a prominent notice on the Platform at least seven days before the changes take effect.

Where changes are non-material (such as minor formatting corrections or clarifications that do not alter the substance of our data practices), they may be published without advance notice. The "Last Updated" date at the top of this Policy reflects the date on which the most recent version took effect.

Continued use of the gb333 Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should close your Account before the effective date of the change.

Contact Information

If you have any questions, concerns, or requests relating to this Privacy Policy or the way gb333 handles your personal data, please contact the gb333 data support team through the following channels:

• Live Chat: Available 24/7 via the gb333 Platform — select "Privacy / Data Request" from the support topic menu.
• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in the subject line.
• Support Hours: 24 hours a day, 7 days a week, including all public holidays in Bangladesh. All times are Bangladesh Standard Time (BST, UTC+6).
• Response Time: gb333 targets a response to all privacy-related enquiries within 5 business days of receipt of a verifiable request.
• Languages: Privacy requests may be submitted in English or Bengali. Responses will be issued in English.