gb22 Privacy Policy — How We Handle Your Data
Your privacy matters to us. This policy explains exactly what data gb22 collects, why we collect it, and how we keep it safe.
Introduction
This Privacy Policy ("Policy") describes how gb22 ("we", "us", "Platform") collects, processes, stores, and protects personal data provided by or generated about players ("you", "User") who access or use the gb22 website at gb22.bio, including all games, payment services, support functions, and promotional features available through the platform.
By registering an account or using the gb22 platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should not register or use the platform.
What Data We Collect
gb22 collects personal data in three main ways: data you provide directly when registering or using the platform, data generated automatically during your use of the platform, and data received from trusted third-party partners. The specific categories of data we collect are described below.
- Registration details: full name, date of birth, Bangladeshi mobile number, and account password.
- Identity verification (KYC) documents: national identity card (NID), passport, or other government-issued photo identification, and proof of address where required.
- Payment method details: mobile wallet information (bKash, Nagad, Rocket, Upay) or bank account details sufficient to process deposits and withdrawals. gb22 does not store full card numbers or full wallet PINs.
- Support communications: messages, emails, and chat records you exchange with the gb22 customer support team.
- Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
- Usage data: pages visited, features accessed, session duration, navigation paths, game history, bet history, and deposit and withdrawal records.
- Cookie data: session cookies, persistent cookies, and similar tracking technologies as described in the Cookies section of this Policy.
- Payment processors: transaction confirmation data, payment status, and fraud-screening signals from bKash, Nagad, Rocket, Upay, and banking partners.
- Identity verification services: KYC confirmation results from third-party identity verification providers used to comply with age verification and anti-money laundering obligations.
- Game providers: game session outcomes, RNG audit data, and technical event logs provided by licensed third-party game studios (e.g. Pragmatic Play, Evolution Gaming, Spribe) to support fair-play compliance and dispute resolution.
How We Use Your Data
gb22 uses personal data collected from players for the following purposes. We only process your data where we have a lawful basis to do so, as described in the Legal Basis section of this Policy.
- Account management: registering and maintaining your player account, verifying your identity, processing deposits and withdrawals, and delivering platform features.
- Security and fraud prevention: detecting and preventing unauthorised access, account fraud, money laundering, bonus abuse, and other prohibited conduct described in our Terms and Conditions.
- Responsible gaming compliance: operating age verification, monitoring play patterns for signs of problem gambling, and delivering responsible gaming tools including deposit limits, time-outs, and self-exclusion.
- Customer support: responding to your enquiries, resolving disputes, investigating complaints, and maintaining support records.
- Promotions and communications: delivering bonus offers, promotional notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time by contacting [email protected].
- Platform improvement: analysing aggregated usage data, session patterns, and game performance metrics to improve platform stability, user experience, and game selection.
gb22 does not engage in unsolicited cold marketing. Promotional communications are sent only to players who have explicitly opted in during registration or through their account settings. You may withdraw consent for marketing communications at any time without affecting your ability to use the platform.
Legal Basis for Processing
gb22 processes your personal data only where a lawful basis exists. The primary legal bases on which we rely are described below.
The majority of data processing on gb22 is necessary to perform the contract between gb22 and the player — specifically, to register your account, process payments, deliver games, and provide customer support. Without this processing, gb22 cannot provide the platform services.
Certain processing activities are required to comply with applicable legal obligations, including age verification, KYC identity checks, anti-money laundering screening, and the retention of financial transaction records. gb22 cannot waive these obligations regardless of player consent.
gb22 processes certain data on the basis of legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the platform experience. We balance these interests against your privacy rights and do not process data on this basis where your interests override ours.
Sharing Your Data
gb22 does not sell your personal data. We share your data only in limited circumstances, with trusted partners and as required by law, as described below.
gb22 shares payment-relevant data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and City Bank solely for the purpose of processing your deposit and withdrawal transactions. These partners are contractually bound to handle your data securely and not to use it for their own marketing purposes.
Licensed game studios (including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and Microgaming) receive the minimum technical data necessary to deliver game sessions to your device and to maintain fair-play audit trails. Game providers are not permitted to use your data for independent marketing.
gb22 may disclose your personal data to law enforcement agencies, courts, or regulatory bodies where required by applicable law, a valid court order, or where necessary to protect the rights, property, or safety of gb22, its players, or the public.
gb22 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Data shared with the third parties described above is governed by strict data-processing agreements that prohibit secondary use of your information.
Cookies and Tracking Technologies
gb22 uses cookies and similar tracking technologies to operate and improve the platform, maintain your session, and detect fraudulent activity. The types of cookies we use are described below.
You may manage non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the gb22 platform, including your ability to log in and access game sessions. Essential cookies cannot be disabled as they are strictly necessary for the platform to operate.
Data Retention
gb22 retains your personal data for as long as your player account remains active and for a period thereafter as required by applicable law and our internal data governance policies. The standard retention periods applied by gb22 are: account data and KYC records — 5 years from account closure; financial transaction records — 5 years from the date of transaction; support communications — 3 years from the date of the last communication; analytical and aggregated data — retained indefinitely in anonymised form.
When the applicable retention period expires, gb22 will securely delete or anonymise your personal data. Where deletion is not immediately possible due to technical constraints, gb22 will isolate the data from active processing until it can be securely destroyed.
Your Privacy Rights
As a gb22 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact gb22 at [email protected]. We will respond to all valid requests within 7 working days.
- Right of access: you may request a copy of the personal data gb22 holds about you, together with information about how it is used.
- Right to rectification: you may request that gb22 correct any inaccurate or incomplete personal data held about you.
- Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
- Right to restrict processing: you may request that gb22 restrict processing of your data in certain circumstances, for example while a rectification request is being assessed.
- Right to data portability: you may request a copy of the personal data you provided to gb22 in a structured, commonly used, machine-readable format.
- Right to object: you may object to processing carried out on the basis of legitimate interests, including profiling for fraud prevention and direct marketing. gb22 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
Please note that some requests may be subject to identity verification before gb22 can act on them. Where a request cannot be fulfilled — for example because legal retention obligations override your right to erasure — gb22 will explain the reason in writing.
Data Security
gb22 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security programme includes SSL encryption for all data in transit, encrypted storage of sensitive data at rest, access controls restricting data access to authorised personnel only, regular security reviews and vulnerability assessments, and automated fraud-detection systems monitoring account activity in real time.
No method of transmission over the internet or electronic storage is 100% secure. While gb22 uses commercially reasonable measures to protect your data, we cannot guarantee absolute security. In the event of a data breach that is likely to affect your rights, gb22 will notify affected players without undue delay using the contact details registered on their account.
Protection of Minors
gb22 does not knowingly collect or process personal data from individuals under the age of 21. Registration on the gb22 platform is strictly prohibited for persons under 21 years of age. If gb22 discovers that personal data has been collected from a person under 21, that data will be permanently deleted and the account will be closed immediately. If you believe that a person under 21 has registered on gb22, please contact us immediately at [email protected].
Changes to This Privacy Policy
gb22 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, gb22 will post the updated Policy on the gb22 website with a revised effective date and, where appropriate, notify affected players via their registered contact details.
Your continued use of the gb22 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with the updated Policy, you should stop using the platform and contact gb22 support to request closure of your account.
Contact and Privacy Queries
If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to report a privacy concern, please contact the gb22 privacy team. We aim to respond to all privacy-related enquiries within 7 working days of receipt.
Email us at: [email protected]
Explore gb22 Safely
Your data is protected and your privacy respected. Now enjoy the platform — live casino, cricket betting, slots, and more are waiting for you.