Privacy Policy – gdb333

1 Personal Data We Collect

gdb333 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and occasionally from third-party verification and payment partners. The categories of personal data we collect include the following:

2 How We Use Your Personal Data

gdb333 uses the personal data we collect for the following clearly defined purposes. We process data only where we have an appropriate lawful basis, which is identified alongside each purpose below:

• Account creation and management — to register your account, verify your identity, and allow you to access gdb333 services. (Lawful basis: contractual necessity.)
• Payment processing — to process deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer, or card). (Lawful basis: contractual necessity.)
• Identity verification (KYC) — to verify that you are who you claim to be, confirm that you meet the 21+ age requirement, and satisfy our anti-money laundering obligations. (Lawful basis: legal obligation.)
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, money laundering, account takeover, and other security threats. (Lawful basis: legitimate interest / legal obligation.)
• Platform improvement — to analyse usage patterns, monitor platform performance, fix bugs, and improve the overall user experience. (Lawful basis: legitimate interest.)
• Customer support — to respond to your queries, resolve disputes, and manage your account on your behalf. (Lawful basis: contractual necessity.)
• Responsible gaming — to monitor gaming activity for signs of problem gambling and to enforce deposit limits, cool-off periods, or self-exclusion requests. (Lawful basis: legal obligation / legitimate interest.)
• Marketing communications — to send you promotional emails and offers about gdb333 products, including seasonal promotions tied to events such as BPL, IPL, Eid, or Pohela Boishakh, where you have opted in to receive such communications. (Lawful basis: consent.)
• Legal compliance — to comply with applicable laws and respond to lawful requests from regulatory or law enforcement authorities. (Lawful basis: legal obligation.)

3 Cookies & Tracking Technologies

gdb333 uses cookies and similar tracking technologies (including local storage and session storage) to operate and improve the platform. Cookies are small text files placed on your device when you visit gdb333.bet. We use the following categories of cookies:

• Essential cookies — strictly necessary for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled without impairing platform functionality.
• Performance cookies — collect anonymous data about how players use the platform (e.g., pages visited, time spent, error messages encountered). Used to improve site performance and usability.
• Functional cookies — remember your preferences such as language settings, preferred payment method, and display options to provide a more personalised experience.
• Analytics cookies — used to track aggregate user behaviour across the platform for statistical analysis and product development purposes. Data collected is anonymised or pseudonymised.

You can manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies may prevent certain parts of the gdb333 platform from functioning correctly. By continuing to use gdb333.bet with cookies enabled in your browser, you consent to our use of cookies as described in this Policy.

4 Data Sharing & Third Parties

gdb333 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share personal data with third parties only in the following limited circumstances:

• Payment service providers — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard, for the sole purpose of processing your deposits and withdrawals.
• Identity verification partners — third-party KYC and AML compliance service providers who assist us in verifying the identity and eligibility of players.
• Game providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios may receive limited technical data (such as session identifiers) necessary to deliver game content to you.
• Fraud prevention services — specialised security and fraud detection platforms that help us identify and prevent account abuse, money laundering, and other illegal activity.
• Legal and regulatory authorities — law enforcement agencies, regulatory bodies, or courts where we are required to disclose personal data pursuant to a lawful order or legal obligation.
• Professional advisors — lawyers, auditors, and accountants who are bound by confidentiality obligations and require access to data to provide professional services to gdb333.

All third parties with whom gdb333 shares personal data are required to handle it in accordance with applicable data protection obligations and are prohibited from using it for any purpose beyond what is strictly necessary to fulfil their designated function.

5 Data Retention

gdb333 retains personal data for no longer than is necessary to fulfil the purposes outlined in this Policy, or as required by applicable law. Our general retention guidelines are as follows:

• Active account data — retained for the full duration of your registered account and for a minimum of five (5) years following account closure, to satisfy anti-money laundering and audit trail requirements.
• Transaction records — deposit, withdrawal, and betting history is retained for a minimum of five (5) years from the date of each transaction.
• KYC and identity documents — retained for five (5) years following account closure or the date of the last relevant transaction, whichever is later.
• Support communications — customer support records and chat transcripts are retained for three (3) years from the date of the interaction.
• Marketing consent records — retained until you withdraw consent, plus an additional period as required for regulatory audit purposes.
• Technical logs — server access logs and security event logs are retained for up to twelve (12) months and then securely deleted.

Upon expiry of the applicable retention period, personal data is securely deleted, anonymised, or aggregated so that it can no longer be associated with any identifiable individual.

6 Your Data Rights

Subject to applicable law and certain legal exemptions, you have the following rights in relation to the personal data that gdb333 holds about you:

• Right of access — you may request a copy of the personal data we hold about you at any time.
• Right to rectification — you may request that we correct any personal data that is inaccurate or incomplete.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction — you may request that we restrict the processing of your personal data in certain circumstances (for example, while a dispute is being resolved).
• Right to data portability — where processing is based on your consent or a contract, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to withdraw consent — where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Right to object — you may object to processing carried out on the basis of our legitimate interests, including direct marketing.

To exercise any of the rights listed above, please submit a written request to [email protected]. We will acknowledge your request promptly and respond in full within thirty (30) days. We may ask you to verify your identity before processing your request to ensure the security of your data.

7 Data Security Measures

gdb333 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Bcrypt or equivalent one-way hashing for all stored passwords — your password in its original form is never retained on our systems.
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access personal data.
• Regular security audits, vulnerability assessments, and penetration testing of our platform infrastructure.
• Two-factor authentication (2FA) options for player accounts and mandatory 2FA for all staff accessing internal systems.
• Segregation of sensitive data (KYC documents, payment details) in isolated, access-controlled storage environments.
• Data breach detection and response procedures, with mandatory notification protocols in the event of a significant data breach.

While we take every reasonable precaution to protect your data, no method of transmission over the internet or electronic storage is completely infallible. You also bear responsibility for protecting your own account by maintaining the confidentiality of your login credentials and using a secure device and network connection when accessing gdb333.

8 Children & Minors

gdb333 is strictly an adult platform. Our services are not directed at, and are not intended for use by, any individual under the age of 21. We do not knowingly collect personal data from persons under 21 years of age.

If gdb333 becomes aware that personal data has been collected from an individual under 21, we will take immediate steps to delete that data from our systems and close the associated account. Any winnings accumulated through an underage account will be forfeited in full.

If you are a parent or guardian and believe that your child may have registered an account on gdb333 without your consent, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

9 Updates to This Privacy Policy

gdb333 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes to this Policy, we will update the "Last Updated" date at the top of the page and, where appropriate, notify registered players by email or via an in-platform notice.

Your continued use of the gdb333 platform following the publication of any revised Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed about how we handle your personal data.