Privacy Policy — gdb33
Your privacy matters to gdb33. This Privacy Policy explains in plain English what personal data we collect, how we use it, who we share it with, and how you can exercise your data rights as a registered player on our platform.
Privacy at a Glance
These cards summarise gdb33's core privacy commitments. They are provided as a quick reference only — the full legal text in the sections below governs how we handle your personal data.
SSL-Encrypted Data Transmission
Every piece of data exchanged between your browser and the gdb33 platform travels over an industry-standard SSL/TLS encrypted connection. Your account credentials, financial details, and personal information are never transmitted in plain text.
We Never Sell Your Data
gdb33 does not sell, rent, or trade your personal information to third-party advertisers or data brokers. Data is shared only with regulated partners who are necessary for operating the platform — such as payment processors and identity verification services.
Transparent Data Collection
We only collect the personal data we genuinely need. This Privacy Policy gives you a clear account of every category of data we gather, the lawful basis on which we process it, and the specific purpose for which it is used — nothing is hidden.
Your Rights, Respected
You have the right to access, correct, or request deletion of the personal data gdb33 holds about you. You may also object to certain types of processing or withdraw consent at any time. Our support team at [email protected] handles all data rights requests.
Cookie Transparency
gdb33 uses cookies and similar tracking technologies solely for operational and analytical purposes — to keep you logged in, remember your preferences, and understand how players navigate the platform so we can improve the experience over time.
Secure Payment Data
Financial data related to your bKash, Nagad, Rocket, Upay, Visa, or Mastercard transactions is processed by regulated payment partners and is never stored in full on gdb33's servers. We retain only the transaction reference data required for accounting and compliance.
- 1. Introduction
- 2. Data We Collect
- 3. How We Use Your Data
- 4. Lawful Basis for Processing
- 5. Data Sharing & Disclosure
- 6. Cookies & Tracking
- 7. Data Retention
- 8. Data Security
- 9. Your Rights
- 10. Children & Minors
- 11. Third-Party Links
- 12. Changes to This Policy
- 13. Contact & Complaints
About This Policy: This Privacy Policy applies to all personal data processed by gdb33 in connection with the gdb33.io platform, including the website, any mobile-optimised interface, and all associated services. It should be read alongside the gdb33 Terms & Conditions. By creating a gdb33 account or using the platform, you confirm that you have read and understood this Privacy Policy.
Introduction
gdb33 ("we", "us", "our") operates the online casino and sports betting platform available at gdb33.io (the "Platform"). In the course of providing our services to players in Bangladesh and elsewhere, we collect and process personal data about you. We take our responsibilities as a data controller seriously and are committed to handling your personal information with care, transparency, and respect.
This Privacy Policy explains what personal data we collect when you interact with the gdb33 Platform, the purposes for which that data is used, the legal grounds on which we rely to process it, how long we retain it, and the rights you hold with respect to that data. It also explains how we use cookies and similar technologies, and the limited circumstances in which we share your data with third parties.
We encourage you to read this document in full. If you have questions about any aspect of this Privacy Policy, or if you wish to exercise any of your data rights, please contact us at [email protected]. We will respond to all data-related enquiries within a reasonable timeframe and in no event later than 30 days from receipt of your request.
This Privacy Policy is written in English. In the event of any inconsistency between this English version and any translation, the English version shall prevail.
Personal Data We Collect
gdb33 collects personal data about you from a number of sources, including directly from you when you register or use the Platform, automatically when you interact with our services, and from trusted third-party partners where permitted by applicable law. The categories of personal data we collect are described below.
2.1 Registration & Account Data
When you create a gdb33 account, we collect the information you provide during the registration process. This includes your full legal name, date of birth, email address, mobile phone number, and residential address. This information is necessary to create and maintain your account, verify your identity, and comply with our age verification obligations.
2.2 Identity Verification (KYC) Data
To comply with our Know Your Customer ("KYC") obligations and to prevent fraud and underage gambling, we may collect copies of identity documents such as your National ID Card, passport, or birth certificate, as well as proof-of-address documentation and images of payment instruments where required. This data is processed by our regulated identity verification partner and is not stored on gdb33's primary servers beyond the period necessary for verification.
2.3 Financial & Transaction Data
When you make a deposit or withdrawal on the Platform, we collect transaction data including the payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard), transaction amounts in Bangladeshi Taka (BDT), transaction timestamps, and transaction reference numbers. Full financial account numbers and card numbers are handled exclusively by our regulated payment partners and are not stored on gdb33's servers.
2.4 Gaming & Betting Activity Data
We maintain records of your activity on the Platform, including games played, bets placed, sports markets wagered on, win and loss records, bonus usage, and session duration. This data is used for account management, bonus administration, responsible gaming monitoring, fraud detection, and improving the Platform's game selection and user experience.
2.5 Technical & Device Data
When you access the gdb33 Platform, our systems automatically collect certain technical data, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, and timestamps of access. This data is used for security monitoring, fraud prevention, and analytical purposes.
2.6 Communications Data
If you contact gdb33 via live chat, email, or any other channel, we retain records of those communications, including the content of your messages, the channel used, and timestamps. This data is used to resolve your query, improve our support quality, and maintain a record of our interactions with you.
2.7 Preference & Marketing Data
Where you have provided consent, we may collect information about your preferences — such as your preferred games, preferred sports markets, and promotional opt-in status — in order to personalise your experience and send you relevant marketing communications. You may withdraw marketing consent at any time by contacting [email protected].
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Account Data | Name, email, phone, date of birth | Account creation, age verification |
| KYC Data | National ID, passport, proof of address | Identity verification, fraud prevention |
| Financial Data | bKash/Nagad transaction references, amounts | Payment processing, compliance |
| Gaming Activity | Bets placed, games played, session length | Account management, responsible gaming |
| Technical Data | IP address, device type, browser | Security, fraud detection, analytics |
| Communications | Live chat logs, email correspondence | Customer support, quality assurance |
| Preference Data | Preferred games, marketing opt-ins | Personalisation, direct marketing |
How We Use Your Personal Data
gdb33 uses the personal data it collects for a range of operational, legal, and service improvement purposes. We do not use your personal data in any way that goes beyond what is described in this Privacy Policy without first obtaining your consent or establishing a separate lawful basis for doing so.
- Account Management: To create, maintain, and administer your gdb33 account, including verifying your identity, managing your balance, and processing deposits and withdrawals via bKash, Nagad, Rocket, and other accepted payment methods.
- Age & Identity Verification: To verify that you meet the minimum age requirement of 21 years before granting access to real-money gaming and sports betting features on the Platform.
- Service Delivery: To deliver the games, sports betting markets, promotions, and other features available on the gdb33 Platform, and to process your transactions accurately.
- Fraud & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multiple-account abuse, bonus abuse, and other prohibited conduct on the Platform.
- Responsible Gaming: To monitor gaming activity for signs of problem gambling behaviour, to administer deposit limit, loss limit, and self-exclusion tools, and to contact you where we have concerns about your gaming activity.
- Legal & Regulatory Compliance: To comply with applicable laws and regulatory requirements, including anti-money laundering (AML) obligations, record-keeping requirements, and any requests from competent authorities.
- Customer Support: To respond to your enquiries, resolve disputes, investigate complaints, and improve the quality of our customer support services.
- Platform Improvement: To analyse aggregated and anonymised usage data in order to understand how players navigate the Platform and to improve the user experience, game selection, and technical performance.
- Marketing Communications: Where you have given consent, to send you promotional offers, bonus notifications, and news about gdb33 products and services that may be of interest to you. You may opt out at any time.
Lawful Basis for Processing
gdb33 processes your personal data on one or more of the following lawful grounds, depending on the specific processing activity:
- Contract Performance: Processing that is necessary to perform our contractual obligations to you — including account creation, payment processing, and service delivery — is carried out on the basis that it is necessary for the performance of our contract with you.
- Legal Obligation: Processing carried out to comply with our legal and regulatory obligations — including AML checks, age verification, and record-keeping requirements — is carried out on the basis of legal obligation.
- Legitimate Interests: Processing carried out for fraud prevention, security monitoring, responsible gaming oversight, and Platform analytics is based on gdb33's legitimate interests in operating a safe, secure, and commercially viable gaming platform, provided those interests are not overridden by your fundamental rights.
- Consent: Processing for direct marketing communications and personalisation based on your preferences is carried out on the basis of your explicit consent. You may withdraw consent at any time by contacting [email protected] without affecting the lawfulness of processing carried out before the withdrawal.
Where gdb33 relies on legitimate interests as the lawful basis for processing, we have conducted a balancing assessment to confirm that our interests do not override your rights and freedoms. You may request information about these assessments by contacting [email protected].
Data Sharing & Disclosure
gdb33 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your personal data only in the limited circumstances described below, and only with recipients who are bound by appropriate data protection obligations.
5.1 Payment Service Providers
We share transaction data with our regulated payment partners — including the operators of bKash, Nagad, Rocket, Upay, and card processing networks — to the extent necessary to process your deposits and withdrawals. Each payment partner is subject to its own privacy policy and is independently responsible for the personal data it processes in connection with your transactions.
5.2 Identity Verification Partners
Where identity verification is required, we share relevant personal data (such as copies of identity documents) with our regulated KYC verification partner. This partner is contractually bound to use the data only for the purpose of performing identity verification on gdb33's behalf and to maintain appropriate data security standards.
5.3 Game Content Providers
The games available on gdb33 are supplied by third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited technical data (such as a pseudonymous player identifier and bet amounts) for the purpose of delivering game functionality and maintaining game integrity. They do not receive your full personal profile.
5.4 Legal & Regulatory Authorities
gdb33 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or other legal process, or where disclosure is necessary to protect the safety or security of users, the Platform, or third parties.
5.5 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or substantially all of gdb33's assets, personal data held about Platform users may be transferred to the acquiring entity as part of that transaction. We will notify affected users by email and by posting a notice on the Platform in advance of any such transfer taking effect.
5.6 Fraud Prevention & AML Partners
We may share data with regulated fraud prevention and anti-money laundering agencies where there are reasonable grounds to suspect fraudulent activity, money laundering, or other prohibited conduct. Disclosure to such agencies is strictly controlled and limited to the minimum information necessary for the relevant investigation.
Cookies & Tracking Technologies
gdb33 uses cookies and similar technologies — including local storage, session storage, and pixel tags — on the Platform. These technologies help us keep your session active, remember your preferences, detect fraudulent access, and understand how users navigate the Platform so we can improve it.
6.1 Types of Cookies We Use
- Strictly Necessary Cookies: These cookies are essential for the Platform to function. They keep you authenticated during your session and prevent cross-site request forgery attacks. They cannot be disabled without preventing you from using core Platform features.
- Functional Cookies: These cookies remember your preferences — such as your preferred language or table game stakes — so that you do not have to re-configure them on each visit.
- Analytical Cookies: These cookies collect anonymised or aggregated information about how users interact with the Platform — such as which pages are visited most frequently and how long users spend on each page. This data is used solely to improve the Platform.
- Security Cookies: These cookies assist in detecting and preventing fraudulent login attempts, bot activity, and other security threats.
6.2 Managing Cookies
You can control or delete cookies through your browser settings at any time. However, please be aware that disabling strictly necessary cookies will prevent you from logging into your gdb33 account and using the Platform's core features. Disabling analytical or functional cookies will not prevent you from accessing the Platform but may affect your experience.
gdb33 does not use third-party advertising cookies or retargeting pixels. Our cookies are used exclusively for operational, security, and analytical purposes in connection with the gdb33 Platform itself.
Data Retention
gdb33 retains personal data only for as long as is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulation.
- Account Data: Retained for the duration of your active account and for a period of five (5) years after account closure, to comply with legal and regulatory record-keeping requirements.
- KYC & Identity Documents: Retained for a minimum of five (5) years from the date of verification, in accordance with anti-money laundering obligations.
- Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, for accounting, compliance, and dispute resolution purposes.
- Gaming Activity Logs: Retained for a period of three (3) years, for responsible gaming monitoring, fraud detection, and dispute resolution purposes.
- Customer Support Communications: Retained for three (3) years from the date of the last interaction, to support quality assurance and dispute resolution.
- Technical & Device Logs: Retained for up to twelve (12) months from the date of collection, for security monitoring and fraud detection purposes.
- Marketing Preference Data: Retained until you withdraw consent or for a maximum of three (3) years from the date of last interaction, whichever comes first.
When personal data is no longer required for any of the purposes described above, it will be securely deleted or anonymised in a manner that renders re-identification impossible.
Data Security
gdb33 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:
- SSL/TLS Encryption: All data transmitted between your device and the gdb33 Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
- Access Controls: Access to personal data is restricted on a strict need-to-know basis. gdb33 staff are granted access to personal data only to the extent required to perform their specific job functions.
- Password Hashing: Account passwords are stored in irreversibly hashed form and are never stored or transmitted in plain text. gdb33 support staff do not have access to your password.
- Intrusion Detection: gdb33 operates automated intrusion detection and anomaly monitoring systems to identify and respond to suspicious access patterns in real time.
- Secure Data Storage: Personal data is stored on secured servers with access restricted by multi-factor authentication and physical access controls.
- Vendor Due Diligence: Third-party processors who handle personal data on gdb33's behalf are subject to contractual data security requirements and regular due diligence assessments.
Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. If you believe your gdb33 account has been compromised, please contact us immediately at [email protected].
gdb33 will never ask for your account password via email, live chat, or any other communication channel. If you receive any communication purporting to be from gdb33 that requests your password, please report it to [email protected] immediately.
Your Data Rights
Depending on applicable law, you may have the following rights in relation to the personal data gdb33 holds about you. To exercise any of these rights, please contact us at [email protected]. We will acknowledge your request within 5 business days and respond in full within 30 days.
- Right of Access: You have the right to request confirmation of whether gdb33 processes personal data about you, and if so, to receive a copy of that data along with information about how it is processed.
- Right to Rectification: You have the right to request that inaccurate or incomplete personal data held about you is corrected or completed without undue delay.
- Right to Erasure: In certain circumstances, you have the right to request the deletion of personal data gdb33 holds about you. Please note that we may be required to retain certain data for legal or regulatory compliance purposes, in which case we will explain why deletion is not possible in the circumstances.
- Right to Restrict Processing: You have the right to request that gdb33 restricts the processing of your personal data in certain circumstances — for example, while a query about the accuracy of your data is being resolved.
- Right to Data Portability: Where processing is based on consent or contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
- Right to Object: You have the right to object to processing based on gdb33's legitimate interests. Where you object, gdb33 will cease processing unless it can demonstrate compelling legitimate grounds that override your rights, or that processing is necessary for the establishment, exercise, or defence of legal claims.
- Right to Withdraw Consent: Where processing is based on consent (such as for marketing communications), you may withdraw consent at any time. Withdrawal will not affect the lawfulness of processing carried out prior to withdrawal.
Children & Minors
The gdb33 Platform is strictly restricted to individuals who are 21 years of age or older. gdb33 does not knowingly collect, process, or retain personal data from any individual under the age of 21. If gdb33 becomes aware that personal data has been collected from a person under the age of 21, that data will be immediately deleted and any associated account will be closed without payment of funds.
If you are a parent or guardian and believe that a person under the age of 21 has provided personal data to gdb33 or has accessed the Platform, please contact us immediately at [email protected]. We take underage access to our Platform extremely seriously and will take all reasonable steps to investigate and address any such reports promptly.
21+ Only. Real-money gaming on the gdb33 Platform is for adults aged 21 and above only. Age verification is conducted at registration. 21+ Only
Third-Party Links
The gdb33 Platform may contain references to third-party game providers, payment partners, and other services. While gdb33 takes care to work with reputable partners, we have no control over the content, privacy practices, or data handling of third-party websites or services. This Privacy Policy applies solely to personal data processed by gdb33 in connection with the gdb33 Platform and does not extend to any third-party services.
We recommend that you review the privacy policies of any third-party services with which you interact in connection with your use of the gdb33 Platform, including the mobile wallet operators (bKash, Nagad, Rocket, Upay) and card network operators (Visa, Mastercard) that you use to make deposits and withdrawals.
Changes to This Privacy Policy
gdb33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the services we offer. When we make material changes — meaning changes that significantly affect your rights or the way we handle your personal data — we will provide reasonable advance notice by posting the updated Privacy Policy on the Platform and, where we hold a valid email address for your account, by notifying you by email.
The "Last Updated" date at the top of this Privacy Policy will be revised to reflect the date of any amendment. Your continued use of the gdb33 Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you may request account closure by contacting [email protected].
Contact & Complaints
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way gdb33 processes your personal data, please contact our support team using the details below. We are committed to resolving all privacy-related enquiries promptly, fairly, and in full compliance with applicable data protection principles.
Email: [email protected]
Response Time: We aim to acknowledge all privacy-related enquiries within 5 business days and to provide a full response within 30 calendar days of receipt.
Language: All correspondence regarding privacy matters is handled in English.
When submitting a data rights request, please include your full name, the email address associated with your gdb33 account, and a clear description of the right you wish to exercise or the concern you wish to raise. We may ask you to verify your identity before processing your request, to ensure that personal data is not disclosed to unauthorised parties.
gdb33 takes all privacy complaints seriously. If you are not satisfied with our response, you retain the right to escalate your complaint to the relevant data protection authority in your jurisdiction.
Play Responsibly. gdb33 is a safe and reliable platform committed to the wellbeing of all our players. If you feel that gambling is affecting your daily life, please visit our Responsible Gaming page for self-exclusion tools, deposit limits, and support resources. 21+ Only
Ready to Experience gdb33?
Now that you understand how gdb33 protects your personal data, explore our full range of games, live casino tables, and cricket betting markets — all on a secure platform built for Bangladesh.