gcd33 Privacy Policy — How We Protect Your Data

This Privacy Policy ("Policy") sets out how gcd33 ("we", "us", "the Platform") collects, processes, stores, and protects the personal data of its registered users ("you", "Player", "User") in connection with the use of the gcd33 online gaming platform, including its website, mobile interface, and associated services. This Policy is part of gcd33's Terms & Conditions and should be read alongside them.

By registering an account on gcd33, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not consent to these practices, you should not create an account or use the gcd33 platform.

gcd33 collects personal data in three primary ways: information you provide directly during registration and account use, information generated automatically when you use the Platform, and information received from third-party payment processors and identity verification services. The categories of personal data we collect are described below.

gcd33 uses the personal data we collect for the following purposes, all of which are necessary to operate the Platform lawfully and deliver the services you have requested:

• Account creation and management: We use your registration data to create and maintain your gcd33 account, authenticate your identity when you log in, and manage your account settings and preferences.
• Payment processing: We use your payment data to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard. Transaction records are retained for audit and reconciliation purposes.
• Identity verification and KYC compliance: We use personal and documentary data to verify that you meet the age requirement (21+), confirm your identity, and comply with applicable Know Your Customer obligations.
• Fraud prevention and security: We analyse account behaviour, login patterns, and transaction data to detect and prevent fraudulent activity, money laundering, and other prohibited conduct.
• Platform improvement and personalisation: We use technical and usage data to understand how players interact with gcd33, identify performance issues, and improve the platform's features and usability for Bangladesh players.
• Customer support: We use your account and transaction data to respond to support requests, resolve account issues, and handle complaints submitted by Bangladesh players.

gcd33 does not use your personal data for unsolicited third-party marketing. Where we send promotional communications about gcd33 offers and bonuses to registered players, we do so only where you have not opted out of marketing communications. You may opt out of promotional messages at any time by contacting gcd33 customer support.

gcd33 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing is required to fulfil the contract between you and gcd33 — specifically, to operate your account, process deposits and withdrawals, and deliver gaming services.
• Legal obligation: Processing is required to comply with applicable legal obligations, including anti-money laundering regulations, Know Your Customer requirements, and age verification obligations.
• Legitimate interests: Processing is carried out in gcd33's legitimate business interests, including fraud prevention, platform security, and service improvement, provided these interests are not overridden by your fundamental rights.
• Consent: Where gcd33 sends you promotional communications about current offers and bonuses, we rely on your consent as the legal basis. You may withdraw consent at any time.

gcd33 does not sell, rent, or trade your personal data. We share personal data with third parties only in the limited circumstances described below:

• Payment processors: We share necessary transaction data with bKash, Nagad, Rocket, Upay, and other payment partners strictly for the purpose of processing your deposit and withdrawal requests. These processors are contractually obligated to use your data only for the specified payment processing purpose.
• Identity verification services: We may share identification data with third-party KYC verification providers to confirm your identity and age in accordance with applicable regulations.
• Game content providers: gcd33 hosts games from providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. These providers may receive session-level technical data (such as your device type and connection quality) necessary to deliver their game content.
• Law enforcement and regulatory authorities: We will disclose personal data to law enforcement agencies, regulatory bodies, or government authorities where we are legally required to do so, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of gcd33 or its players.

All third parties with whom gcd33 shares data are required to implement appropriate technical and organisational security measures and are permitted to use the data only for the purposes for which it was shared. gcd33 does not allow any third party to use your data for their own independent commercial or marketing purposes.

gcd33 uses cookies and similar tracking technologies to maintain your session, remember your preferences, improve platform performance, and analyse usage patterns. The cookies used on gcd33 fall into the following categories:

• Essential cookies: These cookies are strictly necessary for the Platform to function. They manage your login session, maintain your account authentication state, and enable core features such as the cashier and game loading. These cookies cannot be disabled without preventing you from using gcd33.
• Performance and analytics cookies: These cookies collect anonymised data about how players use gcd33 — including which pages are visited most frequently, how long sessions last, and which features are most used. This data is used to improve the platform for Bangladesh players.
• Functional cookies: These cookies remember your language preference, display settings, and other personalisation choices to deliver a more consistent experience across sessions.

You may control cookie preferences through your mobile browser settings. Please note that disabling essential cookies will prevent you from logging in to your gcd33 account. gcd33 does not use cookies to track your activity on third-party websites or serve you targeted advertising outside of the Platform.

gcd33 retains your personal data for as long as your account remains active and for a reasonable period thereafter to comply with legal and regulatory obligations. Specifically, account registration data and transaction records are retained for a minimum of five years following account closure to satisfy anti-money laundering record-keeping requirements and to enable gcd33 to respond to any regulatory enquiries.

Where you request deletion of your account, gcd33 will suppress your data from active use and delete it from live systems as soon as reasonably practicable, subject to mandatory retention periods required by law. Data held for legal compliance purposes will be kept in restricted-access archives and will not be used for any commercial purpose.

gcd33 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL encryption for all data in transit, password hashing using industry-standard algorithms, role-based access controls limiting staff access to personal data on a need-to-know basis, regular security audits of our platform infrastructure, and firewall and intrusion detection systems monitoring our servers.

Despite these measures, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a risk to your rights or freedoms, gcd33 will notify affected players as soon as reasonably practicable and will take all necessary steps to contain and mitigate the breach.

As a registered player on gcd33, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact gcd33 customer support at [email protected] with your registered username and a clear description of your request:

• Right of access: You have the right to request a copy of the personal data gcd33 holds about you. We will provide this information within a reasonable timeframe.
• Right of rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it.
• Right of erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any mandatory legal retention obligations that apply.
• Right to restrict processing: In certain circumstances, you have the right to request that we restrict the processing of your personal data — for example, where you contest the accuracy of the data or where you object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on your consent (for example, promotional communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

gcd33 will respond to all data rights requests within a reasonable timeframe. In some cases, we may need to verify your identity before processing your request to ensure we are disclosing or modifying data belonging to the correct account holder.

The gcd33 platform may contain integrations with third-party game providers, payment processors, and support tools. While gcd33 takes care to work with reputable third-party partners, we are not responsible for the privacy practices of those third parties. Each third-party provider operates under its own privacy policy, and we encourage you to review those policies where relevant. gcd33 does not control how third-party providers handle any data transmitted to them in the course of delivering their services on our platform.

If gcd33 discovers or is notified that personal data has been collected from a player who is under the age of 21, we will immediately suspend that account, delete the associated personal data, return any deposits made to the payment source, and take all further action required under applicable law. If you are a parent or guardian and believe your child has registered on gcd33, please contact us immediately at [email protected] so we can take prompt action.

gcd33 reserves the right to update or modify this Privacy Policy at any time. When we make material changes, we will update the Last Updated date at the top of this page and, where appropriate, notify registered players via their registered contact details or via a notice on the Platform. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

Your continued use of gcd33 following the publication of an updated Privacy Policy constitutes your acceptance of the changes. If you disagree with any changes made to this Policy, you should stop using the Platform and contact gcd33 support to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data gcd33 holds about you, please contact our support team. We are committed to responding to all privacy-related enquiries promptly and transparently.