gd888 Privacy Policy — How We Protect Your Data

Privacy at a Glance — What We Promise

The six cards below summarise gd888's core privacy commitments. The full legal detail for each commitment is set out in the numbered sections that follow. If anything is unclear, contact our support team at [email protected].

1. Information We Collect

When you register an account, use gd888's services, or contact our support team, we collect personal information that is necessary to provide you with a safe, compliant, and enjoyable betting and gaming experience. The categories of information we collect include:

• Identity information: full name, date of birth, gender, and government-issued identification document details (National ID card number, passport number, or driving licence number) provided during KYC verification.
• Contact information: email address, mobile phone number (including your registered bKash, Nagad, or Rocket number), and residential address in Bangladesh.
• Financial information: deposit and withdrawal transaction history, payment method references (e.g. the last four digits of your registered mobile banking account), and account balance history. gd888 does not store full card numbers or mobile banking PINs.
• Technical and device information: IP address, device type, operating system, browser type and version, session timestamps, and approximate geographic location derived from your IP address.
• Usage and gaming data: betting history, game session records, wagering patterns, bonus usage, and platform interaction logs. This data is used to provide the service, detect fraud, and meet responsible gaming obligations.

We collect information only to the extent necessary for the purposes described in this Privacy Policy. We do not collect sensitive personal information such as religious beliefs, political views, or biometric data beyond what is required for identity document verification.

2. How We Use Your Information

gd888 uses the personal information we collect for the following purposes. We process your data only where we have a lawful basis for doing so, which is explained in Section 3 of this Policy.

• Account management and service delivery: to create and maintain your gd888 account, process deposits and withdrawals, verify your identity (KYC), manage bonuses, and provide customer support.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent transactions, money laundering, bonus abuse, account takeovers, and other illegal or prohibited activities on the platform.
• Responsible gaming compliance: to monitor gaming behaviour for signs of problem gambling, apply deposit limits or self-exclusion periods where requested, and meet applicable responsible gaming obligations.
• Legal and regulatory compliance: to comply with applicable laws, respond to lawful requests from competent authorities, retain records as required, and enforce these Terms & Conditions and this Privacy Policy.
• Service improvement: to analyse aggregated and anonymised usage data to improve gd888's platform features, game selection, payment processing speed, and overall user experience.
• Marketing communications: to send you promotional offers, bonus notifications, and platform updates via email or SMS, where you have given your explicit consent to receive such communications. You may opt out of marketing at any time by contacting [email protected].

3. Legal Basis for Processing Your Data

gd888 processes your personal data on one or more of the following lawful grounds, depending on the specific purpose of the processing:

• Contract performance: processing is necessary to provide the gd888 service you have contracted for, including account management, payment processing, and game delivery.
• Legal obligation: processing is necessary to comply with applicable law, including anti-money laundering (AML) requirements, KYC obligations, and responsible gaming rules.
• Legitimate interests: processing is in gd888's legitimate interests for fraud prevention, platform security, and service improvement, where those interests are not outweighed by your privacy rights.
• Consent: for marketing communications and non-essential cookies, processing is based on your freely given, specific, and informed consent. You have the right to withdraw consent at any time without detriment.

4. Cookies and Tracking Technologies

gd888 uses cookies and similar technologies on its website to ensure the platform functions correctly, to maintain your login session, and to improve your experience. Cookies are small text files placed on your device when you visit gd888. We use three categories of cookies:

• Essential cookies: these are strictly necessary for the website to function. They manage your login session, remember your language preference, and ensure security features work correctly. These cookies cannot be disabled without breaking the platform.
• Analytics cookies: these help us understand how players interact with gd888 — which pages are visited, how long sessions last, and where technical errors occur. Analytics data is aggregated and does not identify you personally.
• Functional cookies: these remember your preferences (such as currency display or notification settings) to personalise your platform experience. These cookies are only set where you have given consent.

5. Sharing Your Personal Information

gd888 does not sell, rent, or trade your personal information. We share your data only in the following limited and controlled circumstances:

• Payment processors: we share the minimum necessary payment data with our payment processing partners (including bKash, Nagad, Rocket, and Upay) to process your deposits and withdrawals. These partners are bound by strict confidentiality obligations.
• Identity and KYC verification providers: we use trusted third-party KYC service providers to verify identity documents. These providers receive only the data necessary to perform the verification and are prohibited from using it for any other purpose.
• Game content providers: game providers integrated into gd888 (such as Pragmatic Play, Evolution Gaming, and Spribe) receive a session token and player ID to deliver their game content. They do not receive your full personal profile or payment data.
• Legal authorities: we may disclose personal information to law enforcement agencies, regulators, or courts where we are required to do so by applicable law, court order, or lawful authority request.

In all cases where we share data with third parties, we require those parties to handle your personal information with appropriate security measures, and we permit them to use it only for the specific purpose for which it was shared.

6. How Long We Keep Your Data

gd888 retains your personal information only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The following general retention principles apply: account data is retained for the duration of your active account plus a minimum of five years following account closure, to comply with financial record-keeping obligations. Transaction records are retained for a minimum of five years from the date of the transaction.

Where you request deletion of your personal data and gd888 is not required by law to retain it, we will action your deletion request within 30 calendar days and confirm deletion in writing. We will retain only the minimum data required for legal compliance (e.g. a record that an account existed and the date of closure, retained for AML purposes).

7. How We Secure Your Information

gd888 implements a range of technical and organisational security measures to protect your personal information against unauthorised access, loss, destruction, or disclosure. These measures include: SSL/TLS encryption for all data transmission between your device and gd888's servers; encrypted storage of sensitive account credentials; access controls restricting personal data access to authorised gd888 personnel only; regular security reviews and penetration testing of gd888's platform infrastructure; and secure destruction procedures for data that is no longer required to be retained.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, gd888 will notify affected players without undue delay and take all reasonable steps to contain and remediate the breach. If you believe your account has been compromised, contact our support team immediately at [email protected].

8. Your Rights Over Your Personal Data

You have the following rights in relation to the personal data gd888 holds about you. To exercise any of these rights, contact our support team at [email protected]. We will respond to all verified rights requests within 30 calendar days.

• Right of access: you may request a copy of the personal data gd888 holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification: if any personal data gd888 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed.
• Right to erasure: you may request that gd888 delete your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (for consent-based processing), or where the data has been unlawfully processed. This right is subject to legal retention requirements.
• Right to restrict processing: in certain circumstances you may request that gd888 restrict processing of your personal data while a dispute is resolved, rather than deleting it.
• Right to object to marketing: you have an unconditional right to object to your personal data being used for direct marketing. Submit an opt-out request to [email protected] and we will action it within 5 business days.

9. Third-Party Services and Links

gd888 integrates third-party game content from providers including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and Microgaming. These providers operate under their own privacy policies and security standards. When you launch a game from one of these providers, a session is established between your browser and the provider's servers. gd888 passes only a session token and anonymised player identifier — not your full personal details — to enable the game session.

gd888's website may contain links to third-party payment provider websites (such as the bKash or Nagad apps). Once you leave gd888's platform and access a third-party site, gd888's Privacy Policy no longer applies. We encourage you to read the privacy policy of any third-party service you use in connection with your gd888 account.

10. Children's Privacy and Age Restriction

gd888 is strictly an adult platform for players aged 21 and above only. gd888 does not knowingly collect personal information from individuals under the age of 21. If we become aware that a player is under 21 years of age, we will immediately close that account, void any associated bets or winnings, return any real-money deposits to the originating payment source, and securely delete or anonymise all personal data associated with the underage account. If you believe an underage person has created an account on gd888, please contact us at [email protected] immediately so we can investigate and take appropriate action.

11. Changes to This Privacy Policy

gd888 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform features. When we make material changes to this Policy, we will update the Last updated date at the top of this page and, where the changes significantly affect your rights, notify you by email to your registered address or by displaying a prominent notice on the gd888 platform. Your continued use of gd888 after the effective date of any updated Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically.

12. Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or the personal data gd888 holds about you, please contact our support team by email at [email protected]. Include the subject line 'Privacy Enquiry' and your registered account email address so we can locate your account records promptly. We aim to acknowledge all privacy enquiries within 48 hours and provide a substantive response within 30 calendar days. gd888 will never initiate unsolicited contact asking for your password, payment PIN, or full identity document details — treat any such communication as fraudulent and report it to us immediately.