gt333 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1 Data We Collect

gt333 collects personal data in three principal ways: information you provide directly during registration and account management, information generated automatically by your interaction with the platform, and information supplied to us by trusted third-party partners such as payment processors and identity verification services. We collect only what is genuinely necessary for the purposes described in this Policy.

Information You Provide Directly

• Registration data: Full legal name, date of birth, email address, mobile number (Bangladesh), and chosen username and password.
• Identity verification (KYC) documents: National ID card, passport, or driving licence; proof of address documents such as utility bills or bank statements dated within the last three months.
• Payment information: Mobile financial service account numbers (bKash, Nagad, Rocket, Upay), bank account details, and Visa/Mastercard numbers (where applicable). We do not store full card numbers — only masked references and transaction identifiers.
• Support communications: Messages, emails, and live chat transcripts exchanged with the gt333 support team, including any attachments you submit as evidence in a dispute or complaint.
• Responsible gaming declarations: Self-exclusion requests, deposit limit selections, cooling-off period activations, and any voluntary problem-gambling disclosures you make to our team.

Information Collected Automatically

• Device and browser data: IP address, device type (mobile/desktop/tablet), operating system version, browser type and version, screen resolution, and language settings.
• Session and usage data: Pages visited, time spent on each page, games launched, bets placed, wager amounts, game outcomes, bonus interactions, login timestamps, and logout timestamps.
• Geolocation data: Approximate geographic location derived from your IP address. We use this for fraud detection and to identify players accessing the platform from restricted jurisdictions.
• Cookies and tracking technologies: See Section 5 for a full breakdown of the cookies deployed on the gt333 platform.

Information Received from Third Parties

• Payment providers: Transaction confirmation, payment status, and fraud-flag signals from bKash, Nagad, Rocket, Upay, and card processing networks.
• Identity verification services: Document authenticity results and watchlist screening outcomes from third-party KYC/AML service providers.
• Game providers: Round IDs, game session data, and RTP logs shared by studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe for dispute resolution and audit purposes.

2 How We Use Your Data

The personal data gt333 collects is used for specific, documented purposes. We do not use your data for purposes that are incompatible with the reason it was originally collected without informing you in advance and, where required, obtaining your consent.

gt333 does not use automated decision-making or algorithmic profiling to make decisions that have significant legal or similarly material effects on you as a player — for example, we do not use automated profiling to deny withdrawals or close accounts. All account actions of that nature involve human review.

3 Legal Basis for Processing

gt333 processes personal data on one or more of the following recognised legal bases, depending on the specific processing activity in question:

• Contractual necessity: Processing required to perform the contract between you and gt333 — including account creation, payment processing, and game delivery — is carried out on the basis that it is necessary to fulfil our contractual obligations to you.
• Legal obligation: Certain processing activities — including KYC identity verification, anti-money laundering record-keeping, and age verification — are required by applicable law and international financial crime prevention standards. gt333 cannot waive these requirements regardless of your preferences.
• Legitimate interests: gt333 processes certain data (such as usage analytics, fraud detection signals, and platform security monitoring) on the basis of its legitimate interests in operating a secure, fair, and commercially viable gaming platform, provided those interests are not overridden by your privacy rights.
• Consent: Where processing is not required by contract or law, and where gt333's legitimate interests do not apply, we rely on your freely given, specific, informed consent. Consent-based processing (such as sending promotional offers) can be withdrawn at any time without affecting your other rights or access to the platform.

4 Data Sharing & Third Parties

gt333 does not sell, rent, or exchange your personal data with third parties for their own commercial marketing purposes. We share data only in the specific circumstances described below, and only with parties who are contractually bound to protect it to a standard consistent with this Privacy Policy.

Service Providers

We engage carefully selected third-party service providers who process data on our behalf as data processors. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, and international card networks receive the minimum payment data necessary to execute and verify your transactions.
• KYC / identity verification providers: Specialist third-party services that check the authenticity of identity documents and screen names against international sanctions and watchlists.
• Game software providers: Studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe receive session identifiers and round data necessary to deliver and audit game outcomes. They do not receive your full personal profile.
• Technology infrastructure: Cloud hosting, content delivery, database management, and cybersecurity service providers who operate within contractually defined data processing boundaries.
• Analytics platforms: Anonymised or pseudonymised usage data may be processed by analytics services to help gt333 understand platform performance and improve user experience.

Legal and Regulatory Disclosure

gt333 may disclose your personal data to law enforcement agencies, financial intelligence units, courts, or other government bodies where we are legally compelled to do so, or where we determine in good faith that disclosure is necessary to prevent imminent harm, financial crime, or fraud. We will notify you of any such disclosure to the extent we are legally permitted to do so.

Business Transfers

In the event that gt333 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred as part of that transaction. In such circumstances, gt333 will take reasonable steps to ensure that the receiving entity applies data protection standards no less protective than those described in this Policy, and will notify registered players of any material change to how their data is handled.

5 Cookies & Tracking Technologies

The gt333 platform uses cookies — small text files placed on your device — and related tracking technologies to make the site function correctly, to keep you securely logged in during your session, and to help us understand how the platform is used. We do not use cookies to serve third-party advertising or to track your activity on other websites.

Cookie Categories Used on gt333

You can control or delete cookies through your browser settings at any time. Please note that disabling essential or security cookies will impair your ability to use the gt333 platform, including logging in and processing payments. Clearing all cookies will log you out of your current session. If you wish to opt out of analytics processing specifically, please contact the gt333 support team at [email protected].

6 Data Retention & Deletion

gt333 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods below reflect our standard data management schedule.

Account Closure and Data Deletion Requests

When you request closure of your gt333 account, your account is deactivated immediately. However, because certain data categories are subject to mandatory retention periods under financial crime and identity verification laws, we cannot delete all data on request. Data subject to legal retention requirements will be archived securely, access-restricted, and used only for compliance purposes during the retention window. Upon expiry of the applicable retention period, that data is permanently deleted from our systems.

To submit a data deletion request for data categories that are not subject to mandatory retention, please contact [email protected] with the subject line "Data Deletion Request" and include your registered email address and account username. We will confirm receipt and advise on the scope of deletion achievable within 14 calendar days.

7 Your Privacy Rights

As a gt333 player, you have a set of rights concerning your personal data. We are committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, contact our support team at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 calendar days of receiving a valid, verified request.

• Right of access: You may request a copy of the personal data gt333 holds about you. We will provide a structured summary of your data in a commonly used electronic format.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct it. For data that affects your account (e.g., name or date of birth), we may require identity verification before making corrections.
• Right to erasure: You may request deletion of personal data that is no longer necessary for its original purpose, where you have withdrawn consent, or where processing was unlawful. This right is subject to our legal data retention obligations described in Section 6.
• Right to restrict processing: In certain circumstances — for example, while a data accuracy dispute is being resolved — you may request that we restrict the active processing of your data without deleting it.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that we provide your data in a structured, machine-readable format suitable for transfer to another service provider.
• Right to object: You may object to processing based on legitimate interests, including any profiling carried out on that basis. You also have an unconditional right to object to the processing of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where gt333 relies on your consent as the legal basis for processing (such as marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal date.

8 Data Security Measures

gt333 maintains a comprehensive set of technical and organisational security measures designed to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, and destruction. While no digital system can guarantee absolute security, the measures below represent our ongoing commitment to protecting player data to the highest practical standard.

Technical Safeguards

• TLS/SSL encryption: All data transmitted between your browser or app and gt333 servers is encrypted using TLS 1.2 or higher. Connections using outdated protocol versions are rejected.
• At-rest encryption: Sensitive data fields including identity document scans, payment account references, and personal identifiers are encrypted at rest within our database infrastructure.
• Password hashing: Your account password is never stored in plain text. We apply a strong cryptographic hashing algorithm with salting so that even internal staff cannot read your password.
• Firewalls and intrusion detection: Our network infrastructure is protected by enterprise-grade firewalls, and all inbound/outbound traffic is monitored for anomalous patterns indicative of intrusion attempts or data exfiltration.
• Two-factor authentication (2FA): gt333 offers and encourages the use of two-factor authentication for account login. When 2FA is enabled, a one-time code is sent to your registered Bangladesh mobile number via SMS each time you log in from a new device.
• Regular vulnerability assessments: The platform undergoes periodic security reviews and penetration testing conducted by qualified security professionals to identify and remediate potential weaknesses before they can be exploited.

Organisational Safeguards

• Access to personal data is restricted to gt333 staff and contractors on a strict need-to-know basis. Access privileges are reviewed regularly and revoked immediately upon role change or departure.
• All staff with access to personal data undergo data protection training and are bound by confidentiality obligations in their employment or contractor agreements.
• gt333 maintains an internal data incident response procedure. In the event of a confirmed data breach that presents a material risk to affected players, we will notify impacted individuals promptly via their registered email address, describing the nature of the breach and the steps we are taking in response.

Your Role in Account Security

Data security is a shared responsibility. You can significantly reduce the risk of unauthorised access to your gt333 account by using a strong, unique password that is not reused across other online services, enabling two-factor authentication, logging out after each session — especially on shared or public devices — and reporting any suspicious activity or unrecognised login notifications to [email protected] without delay.