gd222 Privacy Policy

01 Introduction

This Privacy Policy ("Policy") sets out the principles and practices that govern how gd222 ("the Platform", "we", "us", "our") collects, stores, processes, and discloses personal data relating to individuals ("Player", "you", "your") who register for and use any service offered through the gd222 online casino and sports betting platform, accessible at gd222.io.

gd222 is committed to handling personal data responsibly, transparently, and in a manner consistent with applicable data protection principles. We recognise that trust is foundational to the relationship between a player and an online gaming platform, and we have designed our data practices with that trust in mind.

This Policy applies to all personal data collected through the gd222 website, mobile-optimised browser interface, customer support channels, and any promotional or marketing communications sent by or on behalf of gd222. It applies regardless of whether you access gd222 from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, or any other location in Bangladesh.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming guidelines, which together form the complete agreement between you and gd222.

---

02 Who We Are

gd222 is an online casino and sports betting platform operated for the Bangladesh market. For the purposes of this Privacy Policy, gd222 is the data controller — meaning we are the entity that determines the purposes and means by which personal data is processed.

If you have any questions about how gd222 processes your personal data, or if you wish to exercise any of your data rights described in this Policy, you can contact our data team at any time using the contact details set out in Section 14 of this Policy.

gd222 may appoint a Data Protection Lead who is responsible for overseeing compliance with this Policy and for responding to data-related enquiries from players. All such enquiries are handled in English and will receive a response within 5 working days of receipt.

---

03 Personal Data We Collect

gd222 collects the following categories of personal data, as summarised in the table above and described in further detail here:

• Identity Data: Your full legal name, date of birth, and government-issued identification number (National Identity Card, passport, or driving licence number). This information is collected at the point of registration and during KYC verification.
• Contact Data: Your email address, mobile phone number, and general location (city/district within Bangladesh). Contact data is used to communicate with you about your account, transactions, and responsible gaming.
• Financial Data: References to your registered payment accounts (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank), deposit and withdrawal amounts, and transaction history on the gd222 platform. gd222 does not store full payment account credentials — only the reference identifiers necessary to process transactions and reconcile your account.
• Technical Data: Your IP address at the time of login, device type and model, operating system version, browser type and version, and session start/end timestamps. This data is collected automatically when you access the gd222 platform.
• Usage Data: Records of which games you have played, your betting history (including stakes, outcomes, and running balance), session durations, page navigation patterns, and feature interactions within the platform. This data is used to deliver the core gaming service, monitor for responsible gaming thresholds, and improve platform features.
• Marketing Preference Data: Your opt-in or opt-out status for email and SMS marketing communications, and any stated preferences regarding game types or promotional categories. This data is only collected where you have actively provided your consent.
• Support and Correspondence Data: Transcripts of live chat sessions, email exchanges with the gd222 support team, and records of any formal complaints. This data is retained to resolve disputes, ensure quality of service, and meet any applicable regulatory reporting requirements.

We do not collect special categories of sensitive personal data (such as health information, political opinions, religious beliefs, or biometric data) as part of our standard service delivery. If such data is ever shared with us incidentally (for example, in a support communication), it will be handled with additional care and deleted as soon as it is no longer needed.

---

04 How We Collect Your Data

gd222 collects personal data through the following channels and mechanisms:

• Direct Submission: Data you provide directly when creating your account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or opting in to marketing communications.
• Automated Technical Collection: Data collected automatically by our platform systems when you access the gd222 website, including IP address logging, session cookie creation, and browser/device fingerprinting for security purposes.
• Payment Provider Confirmation: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a partner bank, we receive confirmation data from the payment provider confirming that the transaction was successfully authorised. We do not receive your full payment account password or PIN.
• Third-Party Game Providers: Game studios supplying content to gd222 (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may provide us with aggregate game-session data linked to your player account for the purpose of game history records, dispute resolution, and responsible gaming monitoring.
• KYC and Fraud-Prevention Services: Where required to verify your identity or assess fraud risk, gd222 may use third-party identity verification services that cross-reference the information you provide against public or commercially available records.

---

05 How We Use Your Personal Data

gd222 uses the personal data it collects for the following specific purposes:

• Account Creation and Management: To register your gd222 account, verify your eligibility (including the 21+ age requirement), maintain your account profile, and authenticate your identity each time you log in.
• Transaction Processing: To process deposits and withdrawals via your chosen Bangladeshi payment method, to maintain an accurate transaction history on your account, and to investigate and resolve any payment discrepancies or disputes.
• KYC and Anti-Money Laundering (AML) Compliance: To verify your identity and the legitimacy of your source of funds as required by applicable regulatory standards. gd222 takes its obligations with respect to preventing money laundering and financial crime seriously.
• Service Delivery: To provide you with access to all games and betting markets available on the gd222 platform, to personalise your game lobby based on your activity history, and to save your preferences and settings.
• Responsible Gaming Monitoring: To track your deposit amounts, session durations, and wagering patterns against responsible gaming thresholds, and to proactively contact you if your activity suggests that you may be experiencing difficulties with gambling.
• Customer Support: To respond to your support enquiries, investigate complaints, and maintain records of correspondence that may be needed to resolve future disputes.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, account takeover attempts, bonus abuse, multi-accounting, and any other activity that threatens the integrity or security of the gd222 platform or its players.
• Marketing Communications (Consent-Based Only): To send you promotional emails or SMS messages about gd222 bonuses, new games, tournament events, and seasonal promotions (such as Eid and BPL cricket season offers) where you have given explicit consent to receive such communications. You may withdraw consent at any time.
• Platform Improvement: To analyse aggregate usage patterns, identify technical issues, and make data-driven improvements to the gd222 platform that benefit all players.

---

06 Legal Bases for Processing

gd222 processes your personal data only where it has a valid legal basis for doing so. The legal bases we rely on are as follows:

• Contract Performance: Much of the data processing described in this Policy is necessary to fulfil the contract between you and gd222 — specifically, to provide the gaming and betting services you have registered to use. Without this processing, gd222 cannot deliver its core service to you.
• Legal Obligation: Certain processing activities — particularly identity verification, KYC, AML monitoring, and the retention of transaction records — are required by applicable law and regulatory standards. gd222 must carry out this processing regardless of any individual player's preferences.
• Legitimate Interests: gd222 processes some personal data on the basis of its legitimate interests as a platform operator, including fraud detection, platform security, abuse prevention, and service improvement. Where we rely on legitimate interests, we have assessed that our interests do not override the fundamental privacy rights of our players.
• Consent: Where gd222 relies on consent as a legal basis — in particular for marketing communications and for non-essential cookies — we will always obtain a clear, specific, and freely given consent before proceeding. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

---

07 Data Sharing & Third Parties

gd222 does not sell, rent, or trade your personal data. We may, however, share your data with the following categories of third parties where necessary and proportionate:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and Islami Bank receive only the minimum transaction data required to process your deposit or withdrawal. These providers have their own independent data protection obligations.
• Game Content Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other studio partners receive anonymised or pseudonymised player session identifiers necessary to deliver game content and maintain game-history records. They do not receive your full identity or financial data.
• Identity Verification Services: Third-party KYC and fraud-prevention providers may process your identity documents and cross-reference your information against public records. These providers are bound by strict confidentiality and data protection obligations.
• Customer Support Tools: gd222 uses professional support platform software to manage live chat and email support. These tools may process the content of your support communications on our behalf as data processors, subject to data processing agreements consistent with applicable data protection standards.
• Legal and Regulatory Authorities: Where required by law, court order, or regulatory direction, gd222 will disclose personal data to the relevant authority. gd222 will notify you of such disclosures where it is legally permitted to do so.
• Business Transfers: In the event that gd222's business or any substantial part of it is acquired, merged, or transferred to another entity, personal data held by gd222 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material changes to how their data is processed as a result.

All third parties with whom gd222 shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose other than the purpose for which it was shared.

---

08 Cookies & Tracking Technologies

gd222 uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your login session, and to improve your experience. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the gd222 platform to operate. They maintain your authenticated session while you are logged in, protect against cross-site request forgery (CSRF), and ensure that the platform's security mechanisms function correctly. These cookies cannot be disabled without preventing you from using the platform.
• Performance and Analytics Cookies: These cookies collect aggregated, anonymised data about how players navigate the gd222 platform — for example, which pages are visited most frequently, how long sessions last, and where errors occur. This information helps us improve the platform. We obtain your consent before placing these cookies.
• Functional Cookies: These cookies remember your preferences, such as your preferred game lobby layout or language settings, so that you do not need to re-configure them on every visit. They are placed only with your consent.

gd222 does not use third-party advertising cookies or cross-site behavioural tracking technologies. You may review and manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies may prevent you from accessing your gd222 account.

---

09 Data Retention

gd222 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any applicable legal or regulatory minimum retention periods. The key retention periods that apply to gd222 player data are as follows:

• Account and Identity Data: Retained for the duration of your active account, plus a minimum of 5 years following account closure to comply with AML and financial record-keeping obligations.
• Transaction Records: All deposit and withdrawal records, including transaction amounts and payment method references, are retained for a minimum of 5 years from the date of the transaction.
• KYC Documents: Copies of identity documents submitted for KYC verification are retained for a minimum of 5 years from the date of verification or the date of account closure, whichever is later.
• Support Correspondence: Records of customer support interactions are retained for 2 years from the date of the interaction, or for the duration of any active dispute resolution process, whichever is longer.
• Marketing Preference Data: Records of your consent to receive marketing communications are retained for the duration of your account plus 1 year, in order to demonstrate compliance with consent requirements.
• Technical and Log Data: IP address logs and session data are retained for a maximum of 12 months unless a longer period is required for an ongoing security investigation.

When the applicable retention period expires and no other legal obligation requires continued storage, gd222 will securely delete or irreversibly anonymise the relevant personal data so that it can no longer be attributed to any individual.

---

10 Data Security

gd222 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• Encryption in Transit: All data transmitted between your browser and the gd222 platform is encrypted using TLS 1.2 or TLS 1.3 protocols with 256-bit encryption, the same standard used by leading international financial institutions.
• Encryption at Rest: Sensitive personal data stored on gd222's servers — including identity documents and payment references — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within the gd222 organisation is strictly limited on a need-to-know basis. Staff members are granted access only to the categories of data required to perform their specific role, and all access is logged and audited.
• Two-Factor Authentication: gd222 encourages all players to enable two-factor authentication (2FA) on their accounts for an additional layer of login security. Internal system access for gd222 staff requires 2FA without exception.
• Penetration Testing and Vulnerability Scanning: The gd222 platform undergoes regular third-party security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: gd222 maintains a documented data breach response procedure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you as promptly as practicable and take immediate steps to contain and investigate the incident.

Despite these measures, no internet-based system can guarantee absolute security. You are responsible for keeping your gd222 login credentials confidential. If you suspect that your account has been compromised, please contact our support team immediately at [email protected].

---

11 Your Data Rights

As a gd222 player, you hold the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact us using the details in Section 14. We will respond to all valid requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of all personal data that gd222 holds about you, along with information about how that data is being used.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to Erasure ("Right to Be Forgotten"): You may request that gd222 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you have objected to processing based on legitimate interests. This right is subject to any overriding legal obligations that require us to retain certain data.
• Right to Restrict Processing: You may request that gd222 restrict the processing of your personal data in certain circumstances — for example, while we investigate a rectification request or an objection to processing.
• Right to Data Portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where gd222 relies on legitimate interests as the legal basis, including profiling based on legitimate interests. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based solely on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

---

12 Children and Minors

The gd222 platform is strictly intended for adults aged 21 years and above. gd222 does not knowingly collect, store, or process personal data relating to individuals under the age of 21. Our registration process includes an age verification step, and KYC procedures are designed to confirm that all players meet the minimum age requirement.

If gd222 discovers or is notified that personal data has been collected from an individual who is under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has registered an account on the gd222 platform, please contact us immediately at [email protected] so that we can investigate and act promptly.

gd222 also supports responsible gaming tools that allow account holders to self-exclude or set deposit limits. These tools are described in full on our Responsible Gaming page.

---

13 Updates to This Privacy Policy

gd222 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our business practices, or the services we offer. When we make material changes to this Policy, we will notify registered players by email at the address associated with their gd222 account and will post a prominent notice on the gd222 website for a period of not less than 30 days before the updated Policy takes effect.

The date on which the current version of this Policy became effective is stated at the top of this page. We recommend that you review this Policy periodically to stay informed about how gd222 protects your personal data. Your continued use of the gd222 platform following the effective date of any updated Policy constitutes your acceptance of the updated terms.

If you do not agree with any changes made to this Privacy Policy, you must stop using the gd222 platform and may request closure of your account by contacting us at [email protected].

---

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way gd222 processes your personal data, please contact us using the details below. All privacy-related communications should be directed to our support team, who will route your enquiry to the appropriate member of the gd222 data team.

• Email: [email protected]
• Subject Line: "Privacy Policy Enquiry" or "Data Rights Request"
• Response Time: Within 5 working days for general enquiries; within 30 days for formal data rights requests
• Language: English
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

gd222 is committed to resolving all privacy-related enquiries fairly, promptly, and transparently. If you feel that your concern has not been adequately addressed after contacting us, you retain the right to escalate your complaint to any relevant data protection authority or seek independent legal advice.