gt333 Privacy Policy — How We Handle Your Personal Data

The data controller responsible for the personal data of all gt333 users is the legal entity operating the gt333.io platform. All data-related correspondence should be directed to the gt333 support team via the email address provided in Section 13 of this Privacy Policy.

As data controller, gt333 determines the purposes and means by which personal data is processed. Where gt333 engages third-party service providers to process personal data on its behalf, those providers act as data processors and are contractually bound to process data only in accordance with gt333's documented instructions and applicable data protection obligations.

gt333 collects several categories of personal data in connection with the operation of the platform. The following table summarises the categories of data we collect and provides examples of the specific data points within each category:

gt333 does not knowingly collect sensitive personal data beyond what is required for KYC identity verification (i.e., NID documents). We do not collect racial or ethnic origin data, religious beliefs, biometric data for identification purposes, or health data except where a user voluntarily discloses a gambling-related health concern in the context of a responsible gaming support request.

gt333 collects personal data through the following channels and mechanisms:

• Direct Submissions: Data you provide when registering an account, completing KYC verification, submitting a deposit or withdrawal request, contacting support, or participating in a promotion.
• Automated Platform Collection: Technical and usage data is automatically collected when you visit or use the gt333 platform, including through cookies, web beacons, server logs, and similar tracking technologies.
• Payment Processors: When you transact via bKash, Nagad, Rocket, Upay, or a bank transfer, the payment processor confirms transaction status and the associated payment method identifier to gt333 to enable reconciliation of your account balance.
• Third-Party Game Providers: Game studios such as Pragmatic Play, Evolution Gaming, Ezugi, and Spribe may transmit gameplay session data to gt333 for the purposes of balance reconciliation, dispute resolution, and responsible gambling monitoring.
• Identity Verification Services: Where gt333 uses a third-party KYC provider to validate NID documents, that provider returns a verification result (pass/fail) to gt333 along with the data fields confirmed during verification.

gt333 uses the personal data it collects for the following purposes, all of which are directly connected to the lawful operation of the platform and the delivery of services to registered users:

• Account Creation and Management: To register your account, verify your identity, maintain your account balance, and administer your account settings including responsible gambling tools.
• Payment Processing: To facilitate BDT deposits and withdrawals via your chosen payment method and to maintain an accurate transaction history for your account.
• KYC Compliance: To verify your identity and age (21+) in accordance with our obligations under the Terms & Conditions and to prevent underage gambling, money laundering, and fraud.
• Platform Delivery: To provide you with access to sports betting, live casino, slots, crash games, and all other features of the gt333 platform.
• Customer Support: To respond to your queries, resolve disputes, investigate complaints, and administer account-related requests submitted to [email protected].
• Promotions and Bonuses: To credit eligible bonuses to your account, verify wagering requirement completion, and administer promotional campaigns including seasonal offers around Eid, Pohela Boishakh, and BPL and IPL cricket tournaments.
• Responsible Gambling: To monitor your usage patterns for signs of problem gambling behaviour, apply your self-imposed deposit limits and session timers, and intervene proactively where required.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, account sharing, multiple account creation, bonus abuse, and any attempt to circumvent platform rules.
• Platform Improvement: To analyse aggregate and anonymised usage data in order to improve the platform's functionality, user experience, and content offerings.
• Legal Compliance: To comply with applicable legal obligations, respond to lawful requests from competent authorities, and enforce the gt333 Terms & Conditions.

gt333 processes personal data on the following legal bases, applied as appropriate to each processing activity:

• Contractual Necessity: Processing required to fulfil the contract between gt333 and the registered user, including account creation, payment processing, and delivery of betting and casino services.
• Legal Obligation: Processing required to comply with applicable legal requirements, including KYC verification, anti-money-laundering checks, and responses to lawful requests from competent authorities.
• Legitimate Interests: Processing carried out in pursuit of gt333's legitimate business interests, including fraud detection, platform security, responsible gambling monitoring, and aggregate analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where gt333 relies on your consent as the legal basis for a specific processing activity (for example, sending you personalised promotional communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

gt333 shares personal data with third parties only in the following defined circumstances, and only to the minimum extent necessary for the relevant purpose:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and City Bank receive the minimum personal and financial data required to process your requested transaction. These providers operate under their own privacy policies and are independent data controllers for their own processing activities.
• Game Providers: Third-party game studios (Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, etc.) receive your anonymous session token and wager data necessary to run the game you are playing. They do not receive your full name, NID number, or payment method details.
• KYC Verification Providers: Where a third-party identity verification service is used, it receives your submitted identity document and returns a verification result. This provider acts as a data processor under a binding data processing agreement with gt333.
• IT and Platform Infrastructure Providers: Cloud hosting, cybersecurity, anti-fraud, and platform analytics vendors may process data on gt333's behalf under binding contractual obligations that restrict them to processing data solely as instructed by gt333.
• Legal and Regulatory Authorities: gt333 may disclose personal data to law enforcement, regulatory bodies, or courts when required to do so by applicable law, a valid legal order, or in connection with the investigation of serious fraud or criminal activity.

gt333 does not share personal data with advertising networks, data brokers, social media platforms, or any other third party for the purpose of targeted advertising or commercial profiling.

gt333 uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences, and gather aggregate data about how users interact with the platform. Cookies are small text files stored on your device by your browser.

Essential and security cookies are required for the platform to function and cannot be disabled without impacting your ability to use the platform. Preference and analytics cookies may be declined by configuring your browser settings to refuse cookies; however, doing so may affect certain non-essential features of the gt333 platform.

gt333 does not use third-party advertising cookies or permit advertising networks to place cookies on gt333.io.

gt333 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following retention periods apply:

• Active Account Data: Retained for the full duration of your active account relationship with gt333, plus a minimum period of 5 years following account closure to satisfy anti-money-laundering record-keeping obligations.
• KYC and Identity Documents: Retained for a minimum of 5 years following the completion of the most recent KYC verification, or for the duration of any ongoing investigation involving the account, whichever is longer.
• Financial Transaction Records: Retained for a minimum of 5 years following the date of each transaction in accordance with financial record-keeping requirements.
• Support Communications: Retained for 2 years following the date of the most recent communication in a support thread, or for the duration of any unresolved dispute.
• Technical and Usage Data: Retained in aggregate anonymised form for up to 3 years for the purpose of platform analytics and improvement. Individual-level usage data is deleted or anonymised within 12 months of account closure.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identifiable individual.

gt333 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL Encryption: All data transmitted between your device and the gt333 platform is encrypted in transit using industry-standard 256-bit SSL/TLS encryption.
• Encryption at Rest: Personal data and financial records stored in gt333's database infrastructure are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data held by gt333 is restricted to authorised personnel on a strictly need-to-know basis. All personnel with access to personal data are subject to confidentiality obligations.
• Password Security: Account passwords are stored in hashed form using a one-way cryptographic hashing algorithm. gt333 staff cannot view your plaintext password.
• Intrusion Detection: gt333's infrastructure is monitored for unusual access patterns, potential intrusion attempts, and data exfiltration activity on a continuous basis.
• Vendor Security Assessments: Third-party vendors who process personal data on gt333's behalf are assessed for security compliance before engagement and are required to maintain security standards equivalent to those applied by gt333 itself.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected users, gt333 will notify affected users as promptly as practicable via their registered email addresses and will take immediate steps to contain and remediate the breach.

As a data subject whose personal data is processed by gt333, you hold the following rights with respect to your personal information. Requests to exercise any of these rights should be submitted in English to [email protected] from your registered email address. gt333 will respond to all valid data subject requests within 30 days of receipt.

Where gt333 relies on your consent as the legal basis for a processing activity, you may withdraw that consent at any time without affecting the lawfulness of processing already carried out. To exercise any of the rights listed above, contact [email protected] with the subject line "Data Subject Request" and specify clearly which right(s) you wish to exercise.

The gt333 platform is strictly intended for adults aged 21 and above. gt333 does not knowingly collect personal data from individuals under the age of 21. The KYC verification process is specifically designed to confirm that each registered user meets the minimum age requirement before any real-money activity is permitted on the account.

If gt333 becomes aware — through KYC review, fraud investigation, or any other means — that an account has been opened by or on behalf of an individual under the age of 21, that account will be immediately suspended, all real-money activity will be reviewed, and the account will be permanently closed. Personal data associated with a confirmed underage account will be retained only to the extent required by applicable law and will then be securely deleted.

If a parent or guardian believes that a minor has registered an account on gt333, they should contact the support team immediately at [email protected]. gt333 treats all such notifications as a priority and will investigate and act within 24 hours of receipt.

gt333 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, technology infrastructure, or applicable legal requirements. All revisions will be published at gt333.io/privacy-policy with an updated effective date at the top of the document.

Where a change is material — meaning it significantly alters how gt333 collects, uses, or shares personal data — registered users will be notified via the email address associated with their account at least 14 days before the change takes effect. For non-material clarifications or corrections, updates may be made without advance notice.

Your continued use of the gt333 platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of the revised terms. If you do not agree with any update to this Privacy Policy, you may close your account by contacting [email protected].

For any questions, concerns, or formal complaints relating to this Privacy Policy or the way in which gt333 handles your personal data, please contact the gt333 data protection team using the details below. All correspondence must be submitted in English from your registered email address to receive a substantive response.

• Privacy Contact Email: [email protected]
• Subject Line (for data requests): "Data Subject Request — [Your Request Type]"
• Subject Line (for complaints): "Privacy Complaint — [Brief Description]"
• Response Time: Acknowledgement within 24 hours; substantive response within 30 days
• Language: English only
• Support Hours: 24 hours per day, 7 days per week

If you are not satisfied with gt333's response to a privacy complaint, you retain the right to escalate the matter to an appropriate supervisory or dispute resolution body in accordance with applicable law in your jurisdiction.