gd333 Privacy Policy
Your privacy matters to us. This Privacy Policy explains what personal data gd333 collects from players in Bangladesh, how that data is used, who it may be shared with, and the rights you hold over your own information. We are committed to handling all personal data with transparency, care, and appropriate technical safeguards.
How gd333 Keeps Your Data Safe
These six principles summarise gd333's approach to data privacy. They complement — but do not replace — the full legal text further down this page.
Minimal Data Collection
gd333 collects only the personal data that is genuinely necessary to operate your account, process your transactions, and comply with identity verification requirements. We do not gather data speculatively or in categories beyond those described in this Policy.
No Sale of Personal Data
gd333 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Data shared with third parties is limited to service providers who act under strict contractual obligations and process data solely on gd333's behalf.
Encryption at Every Layer
All data transmitted between your device and the gd333 platform is protected by 256-bit TLS encryption. Sensitive data stored on our servers — including payment details and identity documents — is encrypted at rest using industry-standard algorithms. Access to stored personal data is restricted to authorised personnel only.
Your Rights, Respected
You have the right to access the personal data gd333 holds about you, to request corrections, and — in certain circumstances — to request deletion. Requests are handled within 30 days and without charge in the majority of cases. Full details of your rights are set out in Section 9 of this Policy.
Defined Retention Periods
gd333 does not retain personal data indefinitely. Each category of data is held for the minimum period necessary to fulfil its stated purpose or to comply with legal obligations. Retention periods for each data category are set out in Section 7 of this Policy. Data that has passed its retention period is securely deleted or anonymised.
Breach Notification
In the unlikely event of a data breach that poses a risk to your rights and freedoms, gd333 will notify affected players without undue delay once the breach has been identified and assessed. We maintain an internal incident response procedure and conduct regular security audits to minimise the risk of unauthorised access.
1 Introduction
gd333 takes the privacy of its players seriously. This Policy has been written to give you a clear, plain-English account of our data practices — what we collect, why we collect it, how long we keep it, and what your rights are in relation to that data. We have structured this document to be read either from beginning to end or by using the table of contents to navigate directly to the section most relevant to your query.
This Policy applies to all personal data collected through the gd333 website (gd333.bio), including all pages, sub-pages, and features accessible from that domain. It also applies to personal data collected through our customer support channels (live chat, email, and WhatsApp) and through identity verification processes conducted by gd333 or its authorised service providers.
This Policy should be read alongside gd333's Terms & Conditions and Responsible Gaming policy, both of which form part of the overall contractual framework between gd333 and its registered players.
2 Who We Are
gd333 is an online gambling platform providing casino games, live dealer experiences, sports betting markets, crash games, and instant-win titles to adult players in Bangladesh and other permitted jurisdictions. The platform is accessible at gd333.bio and is operated as a unified service under the gd333 brand.
For the purposes of data privacy, gd333 acts as the data controller in respect of personal data collected from registered players through the platform. As data controller, gd333 determines the purposes for which personal data is processed and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.
For any privacy-related enquiries, players may contact gd333 at the address set out in Section 14 of this Policy. All privacy requests are handled by gd333's support team and escalated to the relevant internal function where specialist expertise is required.
3 Personal Data We Collect
3.1 Registration Data
When you create a gd333 account, we collect the information you provide during the registration process. This includes your mobile phone number, a username of your choosing, your date of birth (for age verification purposes), and your acceptance of the Terms & Conditions and this Privacy Policy.
3.2 Identity Verification Data
To comply with our identity verification and anti-money-laundering obligations, gd333 may request documentary evidence of your identity and address. This may include scanned copies or photographs of a government-issued national identity card, passport, driving licence, or a recent utility bill or bank statement showing your name and address. This data is processed and stored in accordance with Section 7 (Retention Periods) below.
3.3 Financial and Transaction Data
gd333 records all financial transactions associated with your account, including deposit amounts and timestamps, withdrawal requests and their processing status, bonus credits and their associated wagering activity, bet placements, game results, and account balance history. Payment method identifiers — such as the registered mobile number associated with your bKash, Nagad, Rocket, or Upay account — are recorded to facilitate transaction processing and withdrawal verification.
3.4 Technical and Device Data
When you access the gd333 platform, our servers automatically collect certain technical data about your device and connection. This includes your IP address, browser type and version, operating system, device type (desktop, mobile, or tablet), screen resolution, time zone, and the pages or game titles you access during your session. This data is used for security monitoring, fraud prevention, platform optimisation, and responsible gaming analysis.
3.5 Communications Data
When you contact gd333 via live chat, email, or WhatsApp, we retain a record of those communications. This includes the content of messages sent and received, the date and time of contact, the channel used, and any account or transaction information referenced during the interaction. Communications records are used for quality assurance, dispute resolution, and training purposes.
3.6 Behavioural and Usage Data
gd333 analyses patterns in how players use the platform, including session duration, game preferences, deposit frequency, betting patterns, and response to promotional offers. This analysis is used to personalise your experience, improve platform design, identify potentially problematic gambling behaviour at an early stage, and optimise the range of games and promotions offered.
4 How We Use Your Personal Data
gd333 uses the personal data it collects for the following purposes:
| Purpose | Data Categories Used |
|---|---|
| Account management — creating, maintaining, and closing player accounts | Registration data, identity verification data |
| Payment processing — facilitating deposits and withdrawals in BDT | Financial and transaction data, registration data |
| Identity verification — confirming age (21+) and preventing duplicate accounts | Identity verification data, registration data, device data |
| Fraud prevention and security — detecting and investigating suspicious activity | Device data, financial data, behavioural data, communications data |
| Responsible gaming — identifying at-risk play patterns and applying requested restrictions | Behavioural data, financial data, registration data |
| Customer support — handling queries, complaints, and disputes | Communications data, registration data, financial data |
| Platform improvement — analysing usage patterns to enhance game offering and UX | Behavioural data, device data (anonymised where possible) |
| Promotional communications — sending bonus offers and platform news (where opted in) | Registration data, behavioural data |
| Legal compliance — meeting anti-money-laundering and record-keeping obligations | All categories as required by the applicable obligation |
gd333 does not use personal data for automated decision-making that produces significant legal effects without human review. Where automated systems flag an account for a security review or responsible gaming intervention, that flag is reviewed by a member of the gd333 operations team before any account-level action is taken.
5 Legal Basis for Processing
gd333 processes personal data under one or more of the following legal bases depending on the specific processing activity:
- Contractual necessity: Processing required to create and operate your player account and to provide the services you have requested, including processing deposits, settling bets, and handling withdrawals.
- Legal obligation: Processing required to comply with applicable identity verification, anti-money-laundering, and record-keeping obligations imposed on gd333 as a platform operator.
- Legitimate interests: Processing for fraud prevention, platform security, abuse detection, responsible gaming monitoring, and platform improvement — where those interests are not overridden by your privacy rights.
- Consent: Processing for optional marketing communications and non-essential cookie placement, where you have given explicit consent. You may withdraw consent at any time by contacting support or updating your account preferences.
6 Sharing Your Personal Data
6.1 Service Providers
gd333 shares personal data with a limited number of third-party service providers who perform functions on our behalf. These include payment processing partners (bKash, Nagad, Rocket, Upay, and participating Bangladeshi banks), identity verification service providers, customer support platform providers, and cloud infrastructure providers. All service providers are contractually bound to process personal data only as instructed by gd333 and to maintain appropriate security standards.
6.2 Game Studio Partners
Game titles on the gd333 platform are provided under licence by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and Hacksaw Gaming. Where game results and session data must be transmitted to a game studio's server to resolve a game round, the minimum necessary technical data (session token, bet amount, game outcome) is shared. Personal identifying information is not passed to game studios beyond what is technically required for game integrity.
6.3 Legal and Regulatory Disclosures
gd333 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or valid legal process. gd333 will, where legally permitted to do so, notify the relevant player of any such disclosure request before complying.
6.4 Business Transfers
In the event that gd333 undergoes a merger, acquisition, or transfer of all or part of its business assets, player personal data may be transferred to the successor entity as part of that transaction. Players will be notified of any such transfer and of any resulting change to data controller identity in advance of the transfer taking effect.
6.5 No Sale of Data
gd333 does not sell, rent, lease, or otherwise commercially transfer personal data to unaffiliated third parties for their own marketing or commercial purposes. Any sharing of data is limited to the categories described in this Section 6 and is subject to contractual safeguards in every case.
7 Data Retention Periods
gd333 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable legal or regulatory obligations. The following table summarises our standard retention periods by data category:
| Data Category | Retention Period | Reason |
|---|---|---|
| Registration data | Duration of account + 5 years post-closure | Legal and regulatory record-keeping obligations |
| Identity verification documents | 5 years from date of verification | Anti-money-laundering compliance |
| Financial and transaction data | 7 years from transaction date | Financial record-keeping and audit requirements |
| Communications records | 3 years from date of communication | Dispute resolution and quality assurance |
| Device and technical data | 12 months from collection | Security monitoring and fraud detection |
| Behavioural and usage data | 24 months from collection (then anonymised) | Platform improvement and responsible gaming analysis |
| Marketing preferences | Until consent is withdrawn, then deleted within 30 days | Consent-based processing |
Upon expiry of the applicable retention period, personal data is either securely and permanently deleted from gd333's systems or irreversibly anonymised such that it can no longer be attributed to an identifiable individual.
8 Cookies and Tracking Technologies
8.1 What Are Cookies
Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites function efficiently, to remember user preferences, and to provide analytical data to site operators. gd333 uses cookies and similar tracking technologies on the gd333.bio platform for the purposes described in this section.
8.2 Types of Cookies We Use
- Essential cookies: Required for the platform to function. These include session authentication tokens, security identifiers, and load-balancing cookies. These cannot be disabled without disrupting core platform functionality.
- Analytical cookies: Used to understand how players interact with the platform — which pages are visited most, how long sessions last, and where players encounter errors. This data is used in aggregated, anonymised form to improve platform design and game offering.
- Preference cookies: Used to remember your settings and preferences, such as language selection or display preferences, across sessions.
- Security cookies: Used to identify and prevent fraudulent login attempts, detect bot activity, and flag unusual access patterns for security review.
8.3 Managing Cookies
You may control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies placed by specific websites. Please note that disabling essential cookies will affect the functionality of the gd333 platform and may prevent you from logging in or completing transactions. Instructions for managing cookies in common browsers are available through the respective browser's help documentation.
9 Your Privacy Rights
As a player whose personal data is processed by gd333, you hold the following rights in relation to that data. To exercise any of these rights, please contact gd333 using the details in Section 14. We will respond to all valid requests within 30 days of receipt and will not charge a fee for standard requests.
- Right of access: You may request a copy of the personal data gd333 holds about you. We will provide this in a structured, readable format.
- Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it. Account details such as your registered mobile number can also be updated directly via the account settings page.
- Right to erasure: In certain circumstances — for example, where data is no longer necessary for its original purpose and no legal retention obligation applies — you may request that we delete your personal data. Note that some data (such as transaction records) must be retained for the periods set out in Section 7 regardless of an erasure request.
- Right to restriction: You may request that we restrict processing of your data in certain circumstances, for example while an accuracy dispute is being resolved.
- Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that we provide your data in a machine-readable format or transfer it directly to another data controller where technically feasible.
- Right to object: You may object to processing based on legitimate interests at any time. gd333 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
- Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of prior processing.
10 Data Security
gd333 implements a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures in place include:
- 256-bit TLS encryption for all data in transit between player devices and gd333 servers;
- Encryption at rest for sensitive data categories including identity documents and payment method identifiers;
- Role-based access controls ensuring that staff members access only the personal data necessary for their specific operational function;
- Multi-factor authentication requirements for all gd333 staff accessing systems that contain personal data;
- Regular penetration testing and vulnerability assessments conducted by qualified security professionals;
- Automated anomaly detection systems that flag unusual access patterns or bulk data queries for immediate review;
- Formal incident response procedures with defined escalation paths and player notification protocols.
While gd333 takes all reasonable steps to secure personal data, no internet-based system can guarantee absolute security. Players are also responsible for maintaining the confidentiality of their own account credentials and for ensuring their devices are adequately protected against malware and unauthorised access.
11 Children and Minors
The gd333 platform is strictly for adults aged 21 years and above. gd333 does not knowingly collect personal data from individuals under the age of 21. If gd333 becomes aware that personal data has been collected from a minor, that data will be deleted without delay and the associated account will be permanently closed.
If you believe a minor has registered with gd333 or that personal data belonging to a minor has been collected by us, please contact our support team immediately via live chat or at the email address in Section 14. We treat all such reports as high-priority and will investigate and act promptly.
12 Third-Party Links and Embedded Content
The gd333 platform may from time to time contain references to or interfaces with third-party services, including payment service providers and game studio platforms. Where your interaction with gd333 involves the transmission of data to a third-party service (for example, initiating a bKash payment or loading a game title from a studio server), that third party's own privacy practices apply to data collected directly by them through their own systems.
gd333 is not responsible for the privacy practices of third-party service providers beyond the contractual data processing obligations described in Section 6 of this Policy. Players are encouraged to review the privacy policies of relevant payment service providers and game studios independently.
13 Changes to This Privacy Policy
gd333 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Where a material change is made to this Policy, gd333 will notify registered players via email or an on-platform notification at least 7 days before the revised Policy takes effect.
The effective date of the current version of this Policy is stated at the top of this page and in the table of contents sidebar. Players are encouraged to review this Policy periodically. Continued use of the gd333 platform following the effective date of a revised Policy constitutes acceptance of the updated terms.
If you do not agree with a revised version of this Policy, you should cease using the platform and contact support to close your account and request the deletion of your personal data to the extent permitted by our legal retention obligations.
14 Contact Information
For any privacy-related queries, rights requests, or concerns relating to this Privacy Policy, please contact gd333 through one of the following channels. All contact details are displayed as plain text only and are not clickable links.
- Live Chat: Available 24/7 via the gd333 website — the fastest channel for urgent privacy concerns
- Email: [email protected]
- WhatsApp: +880 1700-000333 (08:00–24:00 BST)
Privacy rights requests submitted by email should include your registered mobile number, a description of the right you wish to exercise, and the data category or processing activity your request relates to. gd333 will acknowledge receipt within 24 hours and provide a substantive response within 30 days.
Ready to Experience gd333?
Now that you understand how gd333 protects your personal data, explore our full range of casino games, live sports betting, and instant-win titles — all on a platform built with your privacy and security in mind.