gb33 Privacy Policy

When you register an account, deposit funds, request a withdrawal, or contact support, you may provide us with the following categories of personal information:

• Identity information: full legal name, date of birth, National Identity Card (NID) or passport number
• Contact information: Bangladeshi mobile number, email address, and city of residence (e.g. Dhaka, Chittagong, Sylhet)
• Financial information: bKash, Nagad, Rocket, or Upay mobile wallet numbers; bank account details where applicable for withdrawal processing
• KYC verification documents: government-issued photo identification and proof of address as required during the verification process
• Communication records: any messages, enquiries, complaints, or feedback you send to gb33 support

When you access or use the gb33 platform, we automatically collect certain technical and behavioural data, including:

• Device and connection data: IP address, device type, operating system, browser type, and internet service provider
• Usage data: pages visited, games played, time spent on the platform, session duration, betting and wagering history
• Cookie and tracking data: session cookies, persistent cookies, and similar technologies as further described in Section 5 of this Policy
• Geolocation data: approximate location derived from IP address for compliance and fraud prevention purposes

In addition to the above, gb33 may use your personal data for the following purposes:

• Sending transactional notifications (deposit confirmations, withdrawal approvals, security alerts) to your registered mobile number or email
• Sending promotional offers, bonuses, and VIP programme updates where you have opted in to marketing communications
• Enforcing our Terms & Conditions, detecting prohibited activities such as bot use or multi-accounting, and investigating suspected fraud
• Conducting responsible gaming assessments and applying player protection measures including deposit limits and self-exclusion tools
• Complying with court orders, law enforcement requests, or other legal obligations that require disclosure of personal data

Your personal data may be disclosed to the following categories of third parties, strictly for the purposes described:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, Visa, and Mastercard — to process deposits and withdrawals on your account
• Game providers: third-party certified studios such as Evolution Gaming, Pragmatic Play, Spribe, and Ezugi — limited to session and game-specific data necessary for game delivery and RNG certification
• Identity and KYC verification partners: third-party providers who assist with document verification and fraud detection in connection with our responsible gaming and compliance obligations
• Law enforcement and regulatory authorities: where gb33 is legally required to disclose information in response to a valid court order, subpoena, or regulatory inquiry

gb33 does not store full card numbers, CVV codes, or mobile banking PINs on its own servers. All card and mobile wallet payment transactions are processed directly by our certified payment partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard) using their own secure, PCI-compliant infrastructure. gb33 retains only a tokenised reference to your payment method sufficient to process withdrawals to the same instrument used for your deposit, as required by our anti-money laundering controls.

gb33 maintains a record of all deposit and withdrawal transactions associated with your account for a minimum of five years from the date of the transaction. This retention is required for our AML compliance obligations and to resolve any financial disputes. Transaction records include the amount, date and time (Bangladesh Standard Time, UTC+6), payment method, and outcome of each transaction. Players may request a copy of their transaction history by contacting support at [email protected].

gb33 uses the following categories of cookies and similar tracking technologies when you access the platform:

• Essential cookies: required for core platform functionality including secure login sessions, account authentication, and navigation — these cannot be disabled without affecting platform operation
• Functional cookies: store your preferences such as language selection, display settings, and remembered login details to improve your experience across sessions
• Analytics cookies: collect anonymised data about how players use the platform — pages visited, time on site, game interactions — to help us improve performance and user experience
• Marketing cookies: where you have consented, these track your interaction with promotional content and help us deliver relevant offers — you may withdraw consent at any time

You can control and manage cookies through your browser settings. Most modern browsers allow you to refuse new cookies, delete existing cookies, and receive warnings before a cookie is stored. Please note that disabling essential cookies will prevent you from logging into your gb33 account and using core platform features. For detailed guidance on managing cookies in specific browsers, refer to your browser's help documentation. Requests to withdraw consent for non-essential cookies may also be submitted to [email protected].

gb33 retains your personal data for as long as your account remains active and for a period thereafter as required by our legal, regulatory, and operational obligations. Specifically: account registration data and KYC documents are retained for a minimum of five years following account closure; transaction records are retained for a minimum of five years from the date of each transaction; communication records (support tickets, chat logs) are retained for a minimum of two years. After the applicable retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be attributed to you. If you request account closure, your data will be retained for the minimum legal period before deletion.

Subject to applicable law and our compliance obligations, you have the following rights in respect of your personal data held by gb33:

• Right of access: you may request a copy of the personal data gb33 holds about you, together with information about how and why it is processed
• Right to rectification: you may request correction of any inaccurate or incomplete personal data we hold about you
• Right to erasure: in certain circumstances you may request deletion of your personal data; note that this right may be limited where we are required to retain data for legal or compliance reasons
• Right to object: you may object to the processing of your personal data for direct marketing purposes; upon such objection we will cease processing your data for that purpose immediately
• Right to data portability: where technically feasible, you may request that we provide your personal data in a structured, commonly used, machine-readable format

To exercise any of the rights described above, please contact the gb33 privacy team at [email protected] with the subject line "Privacy Request" and a clear description of your request. We will acknowledge your request within 3 business days and aim to complete all requests within 10 business days. We may need to verify your identity before fulfilling any data request to ensure we do not disclose your information to an unauthorised third party. There is no fee for making a data rights request.

gb33 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, access controls limiting data access to authorised personnel only, regular security audits and vulnerability assessments, and two-factor authentication options for player accounts. While gb33 takes all reasonable precautions to protect your data, no internet-based service can guarantee absolute security. In the event of a data breach that affects your personal information, gb33 will notify you as required by applicable law.

The gb33 platform is strictly intended for adults aged 21 years and above. gb33 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the relevant account. Deposits made by an underage user will be returned via the original payment method; any winnings generated during the underage access period will be forfeited. If you believe a minor has registered on the gb33 platform, please notify us immediately at [email protected].

gb33 reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will notify registered players by email or via an in-platform notification at least 7 days before the updated Policy takes effect. The date of the most recent revision is shown at the top of this page. Your continued use of the gb33 platform following the effective date of any update constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way gb33 handles your personal data, please contact our privacy team at:

Email: [email protected]