gh33 Privacy Policy

1 Information We Collect

gh33 collects personal information about you when you register an account, use our platform services, interact with our support team, or otherwise engage with gh33 as a player. The categories of personal information we collect are described in detail below.

1.1 Registration and Account Information

When you create a gh33 account, we collect the information you provide during the registration process. This includes:

• Full legal name as it appears on your Bangladesh National ID
• Date of birth (to verify that you are 18 years of age or older)
• Mobile phone number registered in your name in Bangladesh
• Your chosen username and a hashed version of your password (we never store plain-text passwords)
• Preferred payment method (e.g., bKash account number, Nagad number, or card details)

1.2 Identity Verification (KYC) Documents

As part of our Know Your Customer (KYC) process, required before processing withdrawals, gh33 may collect copies of:

• Your Bangladesh National ID card (front and back)
• A recent utility bill or bank statement as proof of address (where required)
• A selfie photograph for facial verification purposes (where required for high-value withdrawal requests)

KYC documents are handled with the highest level of care and stored securely. They are used solely for identity verification and anti-money laundering compliance purposes and are never shared with third parties except where legally required.

1.3 Transaction and Financial Data

When you make deposits or request withdrawals on gh33, we collect transaction records including:

• Deposit amounts, timestamps, and payment method references (e.g., bKash transaction IDs, Nagad reference numbers)
• Withdrawal request amounts, processing timestamps, and destination payment method identifiers
• Account balance history and bonus credit records

gh33 does not store full card numbers. Card payment data is processed through PCI-DSS compliant payment gateways and only tokenised references are retained on our systems.

1.4 Gameplay and Betting Activity Data

gh33 automatically records data about your activity on the platform, including:

• Games played, bets placed, wager amounts, and outcomes
• Session start and end times, session duration, and frequency of play
• Sports betting selections, odds accepted, and market types accessed
• Bonus offers viewed, claimed, and wagering progress

This gameplay data is used for account management, responsible gaming monitoring, dispute resolution, and fraud prevention. It also informs the personalised game recommendations and promotional offers presented to you.

1.5 Technical and Device Data

When you access gh33 from a browser or mobile device, our systems automatically collect certain technical information, including:

• IP address and approximate geographic location (country and city level)
• Browser type, version, and operating system
• Device type (mobile, tablet, desktop) and screen resolution
• Referring URL and pages visited within the gh33 platform
• Cookie identifiers and session tokens

1.6 Communications Data

When you contact gh33 via email or live support chat, we retain records of those communications, including the content of your messages and any attachments you send. This data is used to resolve your query, improve our support quality, and maintain an audit trail of player interactions.

Data Category	Examples	Collection Method
Account Information	Name, mobile number, date of birth	Provided by player at registration
KYC Documents	National ID, selfie photo	Uploaded by player on request
Transaction Data	Deposit/withdrawal records, bKash/Nagad refs	Automatically recorded on each transaction
Gameplay Data	Bets placed, games played, session duration	Automatically recorded during platform use
Technical Data	IP address, device type, browser	Automatically collected via server logs
Communications	Support chat logs, emails	Collected when you contact gh33 support

2 How We Use Your Data

gh33 uses the personal information we collect strictly for the purposes described below. We do not use your data for any purpose that is incompatible with the reason it was originally collected.

2.1 Account Management and Service Delivery

The primary purpose of collecting your personal information is to create and manage your gh33 account and to deliver the services you have requested. This includes processing your deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment methods, crediting winnings to your account balance, applying bonus offers, and maintaining accurate account records.

2.2 Identity Verification and Fraud Prevention

gh33 uses your identity and KYC documentation to verify that you are who you claim to be, that you are aged 18 or above, and that your payment methods are registered in your own name. This process is essential to prevent identity fraud, account takeovers, money laundering, and underage gambling — all of which gh33 has a legal and ethical obligation to prevent.

2.3 Responsible Gaming Monitoring

gh33 analyses your gameplay and session data to identify patterns that may indicate problem gambling behaviour, such as unusually long sessions, rapidly increasing bet sizes, or frequent deposits following losing streaks. Where such patterns are detected, gh33 may proactively reach out to offer responsible gaming tools, including deposit limits, cooling-off periods, and self-exclusion options. This monitoring is carried out in your interest and in fulfilment of gh33's responsible gaming commitments.

2.4 Legal and Regulatory Compliance

gh33 is required by applicable laws and anti-money laundering frameworks to retain certain records of player identity, transactions, and betting activity for defined periods. We use your personal data to meet these legal retention and reporting obligations. In cases of suspected fraud or criminal activity, gh33 may be required to share relevant data with law enforcement authorities without prior notice to you.

2.5 Platform Improvement and Analytics

Aggregated and anonymised gameplay, session, and device data is used by gh33's product and technology teams to understand how players use the platform, identify technical issues, and improve the overall gaming experience. Individual player data used for this purpose is de-identified wherever possible before analysis.

2.6 Marketing and Promotional Communications

Where you have provided your consent to receive marketing communications, gh33 may send you information about new games, promotions, seasonal offers (for example, Eid or Pohela Boishakh specials), and personalised bonus offers based on your gameplay history. You may withdraw your consent to marketing communications at any time by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before withdrawal.

3 Data Sharing & Disclosure

gh33 does not sell your personal information. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

3.1 Payment Processing Partners

To process your deposits and withdrawals, gh33 must share relevant transaction details with your chosen payment service provider — for example, bKash, Nagad, Rocket, Upay, SureCash, or card payment processors such as Visa and Mastercard networks. The data shared is limited to what is technically required to complete the transaction (such as your account identifier, transaction amount, and reference number). These payment partners operate under their own privacy policies and are bound by applicable financial services regulations.

3.2 Identity Verification Service Providers

gh33 may engage third-party KYC and identity verification service providers to assist with the processing of National ID documents and other verification materials. These providers act as data processors on behalf of gh33 and are contractually required to process your data only as instructed by gh33, to maintain appropriate security standards, and not to retain or use your identity documents for any independent purpose.

3.3 Game Software Providers

gh33's game library is powered by licensed third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game powered by one of these providers, certain technical data (such as your anonymised session identifier and bet data) may be transmitted to that provider's systems to facilitate gameplay and settlement. Game providers do not receive your name, National ID, or payment method details.

3.4 Legal and Law Enforcement Disclosures

gh33 may disclose personal data to government authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or lawful official request. In such cases, gh33 will disclose only the minimum information necessary to satisfy the legal requirement and will, where permitted by law, notify the affected player.

3.5 Business Transfers

In the event that gh33 undergoes a merger, acquisition, restructuring, or sale of all or a material portion of its assets, player data held by gh33 may be transferred to the acquiring entity as part of that transaction. gh33 will take reasonable steps to ensure that any such transfer is subject to appropriate data protection obligations and that affected players are notified of any change in data controller.

4 Cookies & Tracking Technologies

gh33 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and gather analytical data about how the platform is used. This section explains what cookies we use and how you can manage them.

4.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites function properly, to remember your preferences between visits, and to provide site operators with information about how their platforms are used. Cookies set by gh33 do not contain your full name, password, or payment details.

4.2 Types of Cookies Used by gh33

Cookie Type	Purpose	Duration
Essential Cookies	Required to keep you logged in and maintain your active session on gh33. Without these, the platform cannot function.	Session (deleted when browser closes)
Preference Cookies	Remember your display preferences, language settings, and last-visited game categories between sessions.	Up to 12 months
Analytics Cookies	Collect anonymised data about how players navigate the platform — pages visited, features used, and time spent. Used to improve the gh33 experience.	Up to 24 months
Security Cookies	Help detect and prevent fraudulent login attempts, bot activity, and CSRF attacks on your account.	Session

4.3 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most modern browsers allow you to view the cookies stored on your device, block cookies from specific sites, and delete cookies that have already been set. Please note that disabling essential cookies will prevent gh33 from functioning correctly and you will not be able to maintain a logged-in session. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

4.4 Third-Party Cookies

Certain game providers integrated into the gh33 platform may set their own cookies on your device when you launch a game in your browser. These are set by the game provider's servers directly and are subject to the respective provider's own cookie policy. gh33 does not control third-party cookies and recommends reviewing the privacy and cookie policies of game providers if you have specific concerns.

5 Data Retention & Security

gh33 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The specific retention periods applied to different categories of data are described below.

5.1 Retention Periods

• Account and KYC data: Retained for the lifetime of your account and for a minimum of five (5) years following permanent account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Gameplay and betting records: Retained for a minimum of three (3) years from the date of the relevant session or wager.
• Support communications: Retained for two (2) years from the date of the last communication in each support case.
• Technical log data: Typically retained for ninety (90) days, unless longer retention is required for an ongoing security investigation or dispute.

Once the applicable retention period has expired and no legal obligation requires continued retention, your personal data is securely deleted or anonymised.

5.2 Security Measures

gh33 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and gh33's servers
• Encrypted storage for sensitive personal and financial data at rest
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular internal security assessments and vulnerability testing
• Multi-factor authentication requirements for staff accessing production systems
• Incident response procedures for detecting and responding to data security events

5.3 Data Breach Notification

In the unlikely event of a data breach that poses a significant risk to your personal data, gh33 will take immediate steps to contain the breach, assess its scope and impact, and notify affected players as promptly as practicable. Notifications will be sent to the mobile number or email address registered on your gh33 account. gh33 will also take corrective measures to prevent recurrence of similar incidents.

6 Your Privacy Rights

As a gh33 player, you have the following rights in relation to the personal data we hold about you. gh33 is committed to honouring these rights in a timely and transparent manner.

6.1 Right of Access

You have the right to request a copy of the personal data that gh33 holds about you. Upon receiving a verified access request, gh33 will provide you with a summary of the categories of data held, the purposes for which it is processed, and the third parties with whom it has been shared. Access requests are processed within 30 days of receipt.

6.2 Right to Rectification

If any personal data held by gh33 about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update certain account details (such as your preferred payment method) directly through your account settings panel. For corrections to identity data (such as your registered name or date of birth), please contact [email protected] with supporting documentation.

6.3 Right to Erasure

You may request that gh33 delete your personal data. However, this right is subject to important limitations — gh33 is required by law to retain certain categories of data (particularly KYC and transaction records) for defined periods regardless of an erasure request. Where erasure of specific data categories is possible without conflicting with legal retention obligations, gh33 will action such requests within a reasonable timeframe.

6.4 Right to Restrict Processing

In certain circumstances — for example, where you contest the accuracy of data we hold or where you have objected to processing — you may request that gh33 restrict further processing of your personal data while the matter is being investigated or resolved. Restrictions on processing may affect your ability to use certain gh33 platform features during the restriction period.

6.5 Right to Object to Marketing

You have the right to object to gh33 using your personal data for direct marketing purposes at any time. To opt out of marketing communications, contact [email protected] stating your request. Marketing opt-out requests are actioned within five (5) business days. Note that opting out of marketing does not affect essential account communications such as transaction confirmations, security alerts, and support responses.

6.6 Exercising Your Rights

To exercise any of the rights described in this section, contact the gh33 support team at [email protected] with your registered account username and a clear description of your request. gh33 may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to or actioned by an unauthorised person.

7 Third-Party Services

The gh33 platform integrates a number of third-party services that enhance the player experience. This section describes how those integrations interact with your personal data and what responsibilities gh33 has in relation to them.

7.1 Game Providers

gh33 partners with internationally licensed game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to deliver its casino and live dealer game content. These providers host their games on their own servers and may collect certain technical gameplay data (such as session identifiers and bet outcomes) directly. gh33 has data processing agreements in place with all game providers to ensure that data is handled in accordance with applicable privacy standards. You are encouraged to review the privacy policies of these providers for full details of their data practices.

7.2 Payment Service Providers

Deposit and withdrawal transactions on gh33 are processed through third-party payment service providers including bKash, Nagad, Rocket, Upay, SureCash, and international card networks (Visa and Mastercard). Each of these providers operates under its own privacy policy and is subject to the data protection regulations applicable to financial services in Bangladesh and internationally. gh33 is not responsible for the data practices of payment service providers once transaction data has been transmitted to them for processing.

7.3 Analytics and Security Vendors

gh33 may use third-party analytics and security service providers to assist with platform performance monitoring, fraud detection, and bot mitigation. These vendors process data only as instructed by gh33, under contractual data processing agreements, and are not permitted to use gh33 player data for their own independent commercial purposes.

7.4 External Links Disclaimer

The gh33 website does not include outbound links to external third-party websites in its main navigation or content areas. Should any informational reference to a third party appear on the platform, gh33 is not responsible for the privacy practices of any such external site. This Privacy Policy applies exclusively to data collected and processed by gh33.

8 Policy Updates & Contact

8.1 Updates to This Privacy Policy

gh33 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When this policy is updated, the "Last Updated" date at the top of this page will be revised. Where changes are material — meaning they significantly affect how we use your personal data or your rights in relation to it — gh33 will notify registered players via the mobile number on their account prior to the changes taking effect.

Continued use of the gh33 platform following notification of a material policy update constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed of how gh33 protects and uses your personal information.

8.2 Contacting gh33 About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or gh33's data practices, please contact the gh33 support team. All privacy-related enquiries are handled by our support team, who will escalate data rights requests and complex privacy concerns to the appropriate internal team for resolution.

Contact for privacy matters: [email protected]

gh33 aims to acknowledge all privacy enquiries within two (2) business days and to resolve substantive data rights requests within thirty (30) days of receipt, subject to identity verification requirements.