gt33 Privacy Policy

1About This Policy

This Privacy Policy applies to all personal data processed by gt33 in connection with the operation of its online betting and casino platform, accessible at gt33.io. It covers data collected through the website, mobile browser sessions, customer support interactions, and any other touchpoint through which a player communicates with gt33.

This policy should be read alongside the gt33 Terms & Conditions and the Responsible Gaming Policy, both of which form part of the overall agreement between gt33 and its registered players. In the event of any conflict between this policy and a more specific privacy notice provided at the point of data collection, the more specific notice will take precedence.

We review and update this Privacy Policy periodically to reflect changes in applicable law, business practice, or platform features. The "Last updated" date at the top of this document indicates when the most recent revision was made.

2Data Controller

For the purposes of this Privacy Policy, gt33 acts as the data controller in respect of all personal data collected from players accessing the platform at gt33.io. As data controller, gt33 determines the purposes and means by which your personal data is processed.

If you have any questions about this policy or wish to exercise any of your data rights described in Section 11, you may contact the gt33 data team directly:

• Email: [email protected]
• Subject line: "Privacy / Data Request"
• Response time: gt33 aims to acknowledge all data-related correspondence within 48 hours during Bangladesh Standard Time (BST, UTC+6) business hours.

3Data We Collect

gt33 collects and processes the following categories of personal data about registered players and site visitors:

Data Category	Examples	When Collected
Identity Data	Full name, date of birth, national ID or passport number, photograph	Registration & KYC verification
Contact Data	Mobile number, email address, district or city of residence (e.g., Dhaka, Chittagong, Sylhet)	Registration
Financial Data	bKash / Nagad / Rocket account number, transaction amounts in BDT (৳), deposit and withdrawal history	Payment processing
Account Data	Username, encrypted password hash, account preferences, bonus balances, wagering history	Ongoing platform use
Technical Data	IP address, device type, browser type and version, operating system, session timestamps	Each platform visit
Usage Data	Pages viewed, games played, betting markets accessed, session duration, clickstream data	Ongoing platform use
Communications Data	Support chat transcripts, email correspondence, feedback submissions	Support interactions

gt33 does not intentionally collect or process sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where a player voluntarily discloses such information in a support interaction. Any such information received incidentally will not be stored in structured form or used for any purpose.

4How We Collect Your Data

gt33 collects personal data through the following methods:

• Direct collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a survey or promotion.
• Automated collection: Technical and usage data collected automatically when you access the gt33 platform, including through cookies, web beacons, and server log files. See Section 8 for full details on cookies.
• Third-party sources: Identity verification data from KYC service providers; fraud-prevention data from industry risk-sharing databases; payment confirmation data from mobile banking providers including bKash, Nagad, and Rocket.
• Publicly available sources: In limited circumstances, gt33 may cross-reference publicly available information to verify account details or investigate suspicious activity.

5Purpose & Legal Basis for Processing

gt33 processes your personal data only where a lawful basis exists for doing so. The following table sets out the primary purposes for which gt33 uses your data and the corresponding legal basis:

Purpose	Legal Basis
Creating and managing your player account	Performance of a contract
Processing deposits and withdrawals in BDT	Performance of a contract
Verifying your identity and age (KYC)	Legal obligation & legitimate interest
Preventing fraud, money laundering, and underage access	Legal obligation & legitimate interest
Delivering customer support	Performance of a contract
Sending service notifications (e.g., account changes, transaction confirmations)	Performance of a contract
Sending promotional and marketing communications	Consent (opt-in)
Improving platform performance and user experience	Legitimate interest
Responsible gaming monitoring and intervention	Legal obligation & legitimate interest
Retaining records for legal and audit purposes	Legal obligation

6Sharing Your Data

gt33 does not sell, rent, or trade personal data. We share your data with third parties only to the minimum extent necessary for the following purposes:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank receive the data necessary to process your deposit or withdrawal transaction. Each provider operates under its own privacy policy and applicable financial regulations.
• Identity verification providers: KYC and anti-money laundering (AML) service providers receive identity documents and personal details solely for the purpose of verifying your account in compliance with applicable obligations.
• Game software providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier to deliver their games. These providers do not receive your full identity profile.
• Technical infrastructure providers: Hosting, cloud, and cybersecurity providers who process data on gt33's behalf under contractual data processing agreements that prohibit independent use of your data.
• Legal and regulatory bodies: gt33 will disclose personal data to competent authorities where required to do so by applicable law, court order, or regulatory instruction.

All third parties with whom gt33 shares personal data are required to handle that data securely and in a manner consistent with this policy. gt33 does not permit third-party service providers to use your personal data for their own marketing or commercial purposes.

7Payment Data

All payment transactions on the gt33 platform are processed in Bangladeshi Taka (BDT / ৳). gt33 applies the following specific protections to financial data:

• gt33 does not store full mobile banking PINs or card CVV numbers on its servers at any point. Payment authentication is handled directly by the relevant payment provider (bKash, Nagad, Rocket, Upay, Visa, or Mastercard).
• Transaction records — including deposit amounts, withdrawal requests, and bonus credit events — are retained in encrypted form and are accessible only to authorised gt33 compliance and finance personnel.
• gt33 applies transaction monitoring to detect unusual patterns that may indicate fraud, money laundering, or account compromise. Where such patterns are detected, gt33 may temporarily suspend withdrawal processing while an investigation is conducted.
• In the event that a player's account is compromised by a third party and an unauthorised withdrawal is processed, gt33 will investigate the matter promptly and work with the relevant payment provider to seek recovery of funds where possible.

8Cookies & Tracking Technologies

gt33 uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during a betting session. These cookies cannot be disabled without breaking core functionality.
• Functional cookies: Remember your preferences such as language settings, preferred payment method, and display options, so you do not need to re-enter them on each visit.
• Performance and analytics cookies: Collect anonymised data about how players navigate the platform — which pages are visited most, where sessions end, and how features are used. This data is used solely to improve platform design and performance.
• Marketing cookies: Used only where you have given explicit consent to receive personalised promotions. These cookies help gt33 ensure that the offers you see are relevant to your playing preferences. You may withdraw consent at any time through your account settings.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the gt33 platform, including logging in and conducting transactions.

9Data Security

gt33 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and gt33 servers.
• Encryption of sensitive data fields (including identity document data and financial identifiers) in the gt33 database.
• Role-based access controls that restrict access to personal data to authorised personnel who require it for their specific job function.
• Regular security audits and penetration testing conducted by independent third-party security specialists.
• Multi-factor authentication options available for player accounts to reduce the risk of unauthorised access.
• Automated fraud detection systems that monitor login attempts, payment patterns, and gameplay anomalies in real time.

While gt33 takes all reasonable steps to protect your data, no online platform can guarantee absolute security against all possible threats. Players are strongly encouraged to use a strong, unique password for their gt33 account and to enable any additional account security features available in the account dashboard.

10Data Retention

gt33 retains personal data for as long as is necessary for the purpose for which it was collected, or as required by applicable law, whichever is longer. The following general retention periods apply:

• Active account data: Retained for the full duration of the account's active life and for a minimum of five (5) years following permanent account closure, to comply with anti-money laundering and record-keeping obligations.
• Transaction records: Financial transaction logs are retained for a minimum of seven (7) years to satisfy applicable financial record-keeping requirements.
• KYC and identity documents: Copies of identity documents submitted for verification are retained for a minimum of five (5) years from the date of submission or account closure, whichever is later.
• Customer support records: Support chat transcripts and email correspondence are retained for three (3) years from the date of the interaction, unless a longer period is required by an ongoing investigation or legal proceedings.
• Marketing preferences: Records of marketing consent and opt-out requests are retained indefinitely to demonstrate compliance with consent obligations.
• Technical and usage data: Anonymised analytics data may be retained indefinitely in aggregated form after the individual-level data has been deleted at the end of its retention period.

When personal data is no longer required and its retention period has expired, gt33 will securely delete or anonymise it in accordance with our internal data destruction procedures.

11Your Data Rights

As a player whose data is processed by gt33, you have the following rights with respect to your personal information:

• Right of access: You may request a copy of all personal data that gt33 holds about you. We will provide this in a commonly used electronic format within a reasonable period of your request.
• Right to rectification: If any personal data gt33 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly through your account dashboard.
• Right to erasure: You may request that gt33 delete your personal data. This right is subject to overriding legal obligations — for example, gt33 is required to retain certain records for anti-money laundering compliance and cannot delete these ahead of their mandatory retention periods.
• Right to restrict processing: In certain circumstances, you may request that gt33 restrict the processing of your data while a dispute or investigation is resolved.
• Right to data portability: You may request that gt33 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications, marketing cookies), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to processing carried out on the basis of legitimate interests where you believe that your interests, rights, or freedoms override gt33's legitimate interests.

To exercise any of these rights, please contact gt33 at [email protected] with the subject line "Data Rights Request". gt33 will respond within a reasonable timeframe and will not charge a fee for handling standard requests.

12Children's Privacy

The gt33 platform is strictly intended for adults aged 21 years and over. gt33 does not knowingly collect, store, or process personal data belonging to individuals under the age of 21. If gt33 becomes aware that an account has been registered by or on behalf of a person under this minimum age, the account will be immediately suspended, any balance will be returned to the payment source used for deposit, and all associated personal data will be deleted in accordance with applicable law.

If you believe that a minor has registered an account on the gt33 platform, please notify us immediately at [email protected]. We take underage access extremely seriously and will investigate all such reports promptly.

13International Data Transfers

gt33 operates primarily to serve players in Bangladesh and processes the majority of player data within data centre infrastructure located in Asia. However, certain third-party service providers — including game software studios, KYC verification services, and cybersecurity providers — may be located in or operate infrastructure in other countries.

Where personal data is transferred to a country that does not provide an equivalent level of data protection, gt33 ensures that appropriate safeguards are in place, including contractual data processing agreements that bind the recipient to data protection standards consistent with this policy.

By using the gt33 platform, you acknowledge that your personal data may be transferred to and processed in countries outside Bangladesh where applicable data protection laws may differ from those in your home country.

14Marketing Communications

gt33 may send you promotional communications about new games, bonuses, seasonal offers (including around Eid, Pohela Boishakh, and major cricket tournaments such as the BPL, IPL, and T20 World Cup), and platform updates. The following rules govern how we handle marketing consent:

• Marketing communications are sent only to players who have given explicit opt-in consent at registration or through their account preferences at a later date.
• You may opt out of marketing communications at any time by updating your communication preferences in your account dashboard or by contacting [email protected] with the subject line "Unsubscribe".
• Opting out of marketing communications will not affect the delivery of service notifications, which are required for the operation of your account (e.g., transaction confirmations, security alerts, responsible gaming notifications).
• gt33 does not send unsolicited SMS or messaging app communications. Any message claiming to be from gt33 that you did not consent to receive should be reported to our support team immediately, as it may be a phishing attempt.

15Changes to This Privacy Policy

gt33 reserves the right to update this Privacy Policy at any time. When material changes are made, gt33 will notify registered players by email and by displaying a prominent notice on the platform for a period of at least 14 days before the changes take effect. The updated policy will be accessible at gt33.io/privacy-policy at all times.

Your continued use of the gt33 platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not accept the revised policy, you must discontinue use of the platform and request account closure.

We encourage you to review this Privacy Policy periodically. The "Last updated" date at the top of the document reflects the date of the most recent revision.

16Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which gt33 handles your personal data, please contact our team using the details below. We will do our best to address your concern promptly and transparently.

• Email: [email protected]
• Subject line: "Privacy Policy Enquiry" or "Data Rights Request"
• Support hours: 24 hours a day, 7 days a week, including all Bangladesh public holidays
• Response time: gt33 aims to acknowledge all privacy-related correspondence within 48 hours (BST, UTC+6) and to resolve standard requests within 30 calendar days.

If you feel that your data rights have not been adequately addressed by gt33, you may also wish to seek guidance from a relevant consumer protection or data protection authority in your jurisdiction.