gk33 Privacy Policy

gk33 ("we", "us", "our", "the Platform") operates the online betting and casino gaming platform available at https://gk33.lat. We are committed to protecting and respecting the privacy of every person who uses our platform, particularly our users across Bangladesh including players based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by gk33. Please read the following carefully to understand our practices regarding your personal data and how we treat it. This policy applies to all users of the gk33 website and any related mobile-optimised pages or services.

This Privacy Policy should be read in conjunction with the gk33 Terms & Conditions and the gk33 Responsible Gaming Policy. Collectively, these documents form the complete legal framework governing your use of the gk33 platform.

For the purposes of this Privacy Policy, gk33 is the data controller responsible for the personal information collected and processed through the gk33 platform. As data controller, gk33 determines the purposes and means by which your personal data is processed.

If you have any questions, concerns, or requests relating to the processing of your personal data by gk33, you may contact our Data Protection team at any time:

gk33 collects and processes the following categories of personal information from its users. We collect only the data that is necessary to deliver our services securely and in compliance with applicable legal requirements.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless specifically required for identity verification purposes and with your explicit consent.

gk33 collects personal data through the following methods and channels:

• Direct Registration: When you create a gk33 account, you provide identity data, contact data, and payment method details directly through the registration form.
• Account Activity: As you use the platform — placing bets, playing casino games, depositing and withdrawing funds, and claiming bonuses — usage data and financial data are generated and recorded automatically.
• Identity Verification: When you submit documents for KYC (Know Your Customer) verification, we collect and process the identity information contained within those documents.
• Customer Support Interactions: When you contact the gk33 support team via live chat or email, the content of those communications is recorded and stored as communications data.
• Automated Technologies: When you visit gk33.lat, we automatically collect technical data through cookies, server logs, and similar tracking technologies as described in Section 8 of this policy.
• Third-Party Payment Providers: When you process a payment via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the relevant payment provider may share transaction confirmation data with gk33 to enable crediting of your account balance.

gk33 uses your personal data for the following specific and lawful purposes:

• Account Management: To create, maintain, and manage your gk33 user account, including processing login requests, updating your profile details, and managing your account security settings.
• Service Delivery: To enable you to place bets, play casino games, access slots, and use all features of the gk33 platform.
• Payment Processing: To process your deposits and withdrawals in Bangladeshi Taka via your chosen payment method, including bKash, Nagad, Rocket, and Upay, and to maintain accurate records of your transaction history.
• Identity and Age Verification: To verify that you are aged 21 or above and that your identity matches the information provided during registration, as required by our responsible gaming obligations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, collusion, money laundering, and other activities that violate our Terms & Conditions or applicable law.
• Responsible Gaming: To monitor your betting and gaming behaviour for indicators of problem gambling and to apply responsible gaming tools (deposit limits, cool-off periods, self-exclusion) where appropriate or where you request them.
• Legal Compliance: To comply with applicable anti-money laundering (AML), counter-terrorism financing (CTF), and other legal or regulatory obligations that require us to collect, retain, and in some cases disclose certain user data.
• Customer Support: To respond to your queries, complaints, and support requests, and to maintain records of those interactions for quality and dispute resolution purposes.
• Platform Improvement: To analyse aggregate usage patterns and technical data to improve the performance, stability, and user experience of the gk33 platform.
• Marketing Communications: Where you have opted in to receive promotional communications, to send you relevant offers, bonus notifications, and platform updates. See Section 13 for details on how to opt out.

gk33 processes your personal data only where a lawful basis for doing so exists. The legal bases on which gk33 relies for the various processing activities described in this policy are as follows:

• Contractual Necessity: The processing of identity data, contact data, financial data, and usage data is necessary to perform the contract between you and gk33 — namely, the provision of the betting and gaming services described in our Terms & Conditions. Without this data, gk33 cannot create or maintain your account or process your transactions.
• Legal Obligation: Processing related to identity verification (KYC), anti-money laundering checks, and the retention of transaction records is carried out to comply with applicable legal obligations. gk33 is required by law to verify the identity of its users and to maintain records of financial transactions.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform performance improvement is carried out on the basis of gk33's legitimate interests in operating a safe, secure, and fair betting platform. We have assessed that these interests are not overridden by your data protection rights.
• Consent: Where gk33 processes your data for direct marketing purposes, we do so on the basis of your explicit opt-in consent. You may withdraw this consent at any time as described in Section 13.

gk33 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share your personal data only in the limited circumstances described below, and always under appropriate data protection safeguards:

• Payment Service Providers: We share the minimum necessary financial data with bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing partners to enable the processing of your deposits and withdrawals. These partners are bound by their own privacy obligations and may not use your data for any purpose beyond the specific transaction.
• Identity Verification Partners: We may share identity document data with third-party KYC verification service providers who assist us in confirming that users meet the age and identity requirements of the platform.
• Technology and Infrastructure Providers: Our platform operates on third-party cloud hosting, database, and security infrastructure. These providers process data strictly as data processors on our instructions and under confidentiality agreements.
• Game Content Providers: Game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited session and game-play data necessary to deliver game functionality and calculate outcomes. These providers do not receive your identity or payment data.
• Legal and Regulatory Authorities: gk33 may disclose your personal data to law enforcement, regulatory authorities, or legal counsel where required to do so by applicable law, court order, or in response to a legitimate investigation of fraud, money laundering, or other criminal activity.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or substantially all assets of gk33, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any material changes to the data processing practices that result from it.

gk33 uses cookies and similar tracking technologies on the gk33.lat website to enhance your experience, maintain your login session, and analyse platform usage. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the operation of the gk33 platform. They enable core functions such as maintaining your login session, storing your account preferences, and remembering items in your bet slip. These cookies cannot be disabled without impairing platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised information about how visitors interact with the gk33 website — such as which pages are visited most frequently, how long users spend on each page, and which features are used most often. This data helps us improve the platform experience. These cookies do not identify you personally.
• Functionality Cookies: These cookies remember choices you make on the platform — such as your preferred language, display settings, or notification preferences — to provide a more personalised experience during your session and across return visits.
• Security Cookies: These cookies support our fraud detection and security monitoring systems. They help us identify unusual access patterns and protect your account from unauthorised access attempts.

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will affect the functionality of the gk33 platform and may prevent you from accessing certain features including your account dashboard and payment functions.

gk33 does not use third-party advertising cookies or tracking pixels that profile your behaviour across external websites for the purpose of serving targeted advertisements on other platforms.

gk33 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• TLS/SSL Encryption: All data transmitted between your browser and the gk33 servers is encrypted using Transport Layer Security (TLS). The padlock icon visible in your browser address bar confirms that your connection is secure at all times.
• Access Controls: Access to personal data within gk33's internal systems is restricted to authorised personnel only, on a strict need-to-know basis. All internal data access is logged and audited.
• Password Hashing: User account passwords are stored using cryptographic hashing algorithms. gk33 staff members cannot view your password in plain text at any time.
• Intrusion Detection: Our platform infrastructure is monitored 24 hours a day, 7 days a week by automated intrusion detection systems that alert our security team to any unusual activity in real time.
• Regular Security Audits: gk33 conducts periodic security assessments and penetration tests to identify and remediate potential vulnerabilities in the platform before they can be exploited.
• Data Breach Response: In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, gk33 will notify affected users without undue delay and take immediate steps to contain the breach and mitigate its impact.

gk33 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. The following retention guidelines apply:

• Active Account Data: Personal data associated with your gk33 account is retained for the duration of your account's active status plus a period of 5 years following account closure, to meet our legal and regulatory obligations.
• Financial Transaction Records: Records of all deposits, withdrawals, and betting transactions denominated in Bangladeshi Taka are retained for a minimum of 7 years from the date of each transaction, in accordance with standard financial record-keeping requirements.
• Identity Verification Documents: KYC documents (copies of government-issued ID) are retained for 5 years following the closure of your account or the completion of the transaction for which verification was required.
• Customer Support Records: Transcripts of support interactions, including live chat and email correspondence, are retained for 3 years from the date of the interaction.
• Technical Log Data: Server logs and security monitoring data are retained for a maximum of 12 months from the date of generation, unless a specific security incident requires their preservation for a longer period.
• Marketing Consent Records: Records of your marketing communication opt-in consent (or withdrawal of consent) are retained for the duration of your account plus 3 years, to demonstrate compliance with our consent obligations.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual user. Anonymised aggregate data may be retained indefinitely for statistical and platform improvement purposes.

As a user of the gk33 platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Request — [Right Type]".

• Right of Access: You have the right to request a copy of all personal data that gk33 holds about you. We will provide this information in a structured, commonly used format within 10 business days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update basic profile information directly within your account settings at any time.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to our legal retention obligations — for example, we may not be able to delete financial transaction records that we are required by law to retain.
• Right to Restriction of Processing: In certain circumstances, you have the right to request that we limit the ways in which we use your personal data while a query or dispute is being investigated.
• Right to Data Portability: You have the right to request that we provide the personal data you have given us in a machine-readable format, where technically feasible, so that you can transfer it to another service provider.
• Right to Object: Where we process your personal data on the basis of legitimate interests, you have the right to object to that processing. We will cease processing your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests.
• Right to Withdraw Consent: Where we process your data on the basis of your consent (for example, for direct marketing), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

The gk33 platform is strictly intended for adults aged 21 years and above. gk33 does not knowingly collect, process, or retain personal data from any person under the age of 21. Age verification is a mandatory step in the gk33 account registration process, and we reserve the right to request additional documentary proof of age from any user at any time.

If gk33 becomes aware that personal data has been collected from a person under the age of 21 without verifiable parental or guardian consent, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage user will be returned in full via the original payment method, minus any applicable processing fees, following verification of identity.

gk33 may send you promotional communications about new games, bonus offers, seasonal promotions (including Eid, Pohela Boishakh, and BPL season specials), and platform updates, but only where you have explicitly opted in to receive such communications during or after the account registration process.

We may send marketing communications via the following channels where you have provided the relevant contact detail and opt-in consent:

• Email (to the address registered on your gk33 account)
• SMS (to the phone number registered on your gk33 account)
• In-platform notifications visible when you are logged in to gk33

gk33 does not use third-party social media platforms to send personalised marketing communications that target you specifically based on your gk33 account activity.

How to Opt Out: You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in your gk33 account settings;
• Clicking the "unsubscribe" link included in any marketing email we send you; or
• Contacting our support team at [email protected] with the subject line "Marketing Opt-Out".

Please allow up to 5 business days for your opt-out request to take effect across all channels. Please note that opting out of marketing communications will not affect the delivery of transactional communications such as deposit confirmations, withdrawal notifications, and security alerts, which are essential to the operation of your account.

gk33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When we make material changes to this policy, we will notify registered users via email to the address on file and/or via a prominent notice on the gk33.lat website at least 14 days before the changes take effect.

The date of the most recent revision to this Privacy Policy is displayed at the top of this page alongside the "Last Updated" indicator. We encourage you to review this page periodically to stay informed about how gk33 protects your personal data.

Your continued use of the gk33 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you should cease using the platform and contact us to request closure of your account and deletion of your personal data in accordance with Section 11 of this policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way gk33 processes your personal data, please do not hesitate to reach out to our Data Protection team. We are committed to addressing all privacy-related enquiries promptly, transparently, and in full compliance with our obligations as a responsible data controller.

gk33 is committed to resolving all privacy concerns fairly and efficiently. If you feel that your concern has not been adequately addressed by our team, you may have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.