gbagee Privacy Policy
How We Protect Your Personal Data

1.1 Registration Data. When you create a gbagee account, we collect your full legal name, date of birth, residential address in Bangladesh (street, city, district, postal code), mobile phone number, and email address. This information is required to create and manage your account and to comply with our Know Your Customer (KYC) obligations.

1.2 Identity Verification Documents. During the KYC verification process, which is triggered at your first withdrawal request or at our compliance team's request, gbagee may collect scanned copies or photographs of government-issued identity documents. These include but are not limited to Bangladesh National Identity Cards (NID), passports, and driver's licences. These documents are used solely for age verification and identity confirmation purposes.

1.3 Financial Data. To process deposits and withdrawals, gbagee records transaction amounts, timestamps, payment method types (bKash, Nagad, Rocket, Upay, bank transfer), and the last four digits of relevant account numbers or mobile numbers. gbagee does not collect or store full mobile banking PINs, OTP codes, or internet banking passwords.

1.4 Gameplay & Betting Activity. gbagee records all betting and gaming activity associated with your account, including sports wagers placed on BPL cricket fixtures, T20 matches, live casino game rounds, slot spins, and fishing game sessions. This data is used to calculate winnings, apply bonus wagering progress, generate account statements, and detect irregular patterns that may indicate problem gambling or fraud.

1.5 Technical & Device Data. When you access gbagee via a web browser or mobile device, we automatically collect certain technical data including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session timestamps. This data is used for security monitoring, fraud detection, and platform performance optimisation.

1.6 Communications Data. If you contact gbagee's support team via email at [email protected] or through the platform's live chat, we retain records of those communications including the content of messages, timestamps, and any attachments you provide. These records are used to resolve your queries, improve support quality, and maintain an audit trail.

1.7 Responsible Gaming Data. If you activate any responsible gaming tool — such as deposit limits, session time reminders, cooling-off periods, or self-exclusion — gbagee records the activation date, the parameters you selected, and any subsequent modifications. This data is used to enforce the restrictions you have chosen and to ensure they remain in place even if you request their removal during the exclusion period.

1.8 Marketing Preferences. Where you have opted in to receive promotional communications from gbagee, we record your consent and preference settings. You may update your marketing preferences at any time from your account settings or by contacting [email protected].

2.1 Account Operation. The primary purpose for which gbagee processes your personal data is to operate your account and deliver the services you have registered to use. This includes processing deposits and withdrawals in Bangladeshi Taka (৳), settling sports bets and casino game outcomes, applying bonus offers to your account, and providing customer support when you need it.

2.2 Legal Compliance & KYC. gbagee processes identity and financial data to meet its obligations under applicable anti-money laundering (AML) and counter-terrorism financing (CTF) requirements. This includes verifying your identity before processing withdrawals, monitoring account transactions for patterns indicative of money laundering, and maintaining financial records for the legally required retention period.

2.3 Fraud Prevention & Security. gbagee uses technical data, device fingerprints, IP addresses, and betting pattern analysis to identify and prevent fraudulent activity. This includes detecting account takeover attempts, identifying the use of stolen payment methods, and flagging multi-accounting or collusion between players. These activities are carried out in gbagee's legitimate interest in maintaining a secure and fair platform for all Bangladesh players.

2.4 Responsible Gaming Enforcement. gbagee processes gameplay data and account activity to identify players who may be exhibiting signs of problem gambling — for example, sharply increasing deposit frequency, chasing losses across consecutive sessions, or placing unusually large wagers relative to their account history. Where such patterns are detected, gbagee's responsible gaming team may proactively contact the player with information about available support tools.

2.5 Platform Improvement. Aggregated and anonymised technical and gameplay data is used by gbagee's product and technology teams to improve platform performance, identify popular game categories among Dhaka and Chittagong players, optimise page load times, and refine the mobile experience. This analysis does not identify individual players.

2.6 Marketing Communications. Where you have given your consent to receive promotional communications, gbagee may use your email address and mobile number to send you information about new promotions, seasonal bonus offers (such as BPL cricket season bonuses or Eid reload promotions), and platform updates. You may withdraw your marketing consent at any time. Withdrawal of marketing consent does not affect the lawfulness of communications sent prior to withdrawal.

2.7 Dispute Resolution. Communications data and betting records are retained and used to investigate and resolve disputes raised by players regarding bet settlements, payment transactions, or bonus calculations. These records may also be produced in response to a valid legal or regulatory request.

3.1 Payment Processors. To process deposits and withdrawals, gbagee shares the minimum necessary transaction data with our payment processing partners, which include bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank (DBBL), City Bank, BRAC Bank, Islami Bank, and Sonali Bank. Each payment partner operates under its own privacy policy and is independently responsible for the security of data within its own systems. gbagee does not store your full bKash or Nagad wallet PINs.

3.2 Game Content Providers. Live casino games streamed on the gbagee platform are provided by certified studios including Evolution Gaming, Pragmatic Play Live, and Ezugi. RNG game titles are provided by Pragmatic Play, NetEnt, Microgaming, and Spribe. These providers may receive session tokens and anonymised game round identifiers necessary to deliver their game content. They do not receive your full personal registration data.

3.3 KYC Verification Partners. gbagee works with a third-party identity verification service to validate NID and passport documents submitted during KYC. This partner processes your identity document data under strict confidentiality obligations and is not permitted to use your data for any purpose other than performing the identity check on gbagee's behalf.

3.4 Analytics & Platform Technology. gbagee uses server-side analytics tools to monitor platform performance and detect technical issues. These tools process anonymised or pseudonymised technical data (such as aggregated page view counts and error rates) and do not have access to your personal account data.

3.5 Legal & Regulatory Disclosure. gbagee may be required to disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction in Bangladesh where required to do so by a valid legal order, warrant, or regulatory requirement. gbagee will notify you of such a disclosure request where legally permitted to do so.

3.6 Business Transfers. In the event that gbagee undergoes a merger, acquisition, or transfer of its business assets, your personal data may be transferred to the successor entity as part of that transaction. gbagee will provide advance notice of any such transfer via the email address registered to your account, and the successor entity will be required to honour the commitments made in this Privacy Policy.

3.7 No Cross-Border Transfers Without Safeguards. Where any of the above data sharing arrangements involve transferring your personal data outside of Bangladesh, gbagee will ensure that appropriate contractual safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

4.1 What Are Cookies. Cookies are small text files that are stored on your device when you visit a website. They allow the website to recognise your browser, remember your preferences, and maintain your logged-in session. gbagee uses cookies and similar technologies (such as local storage and session storage) to operate the platform reliably and to understand how players use the site.

4.2 Essential Cookies. These cookies are strictly necessary for the gbagee platform to function. They include session authentication tokens that keep you logged in during your visit, CSRF protection tokens that secure form submissions, and load-balancing cookies that route your requests to the correct server. Essential cookies cannot be disabled without breaking core platform functionality.

4.3 Functional Cookies. Functional cookies remember your preferences to personalise your experience. On gbagee, this includes storing your preferred game lobby view (e.g., cricket markets vs. live casino), your currency display preference (৳ BDT), and your responsible gaming reminder settings. These cookies improve convenience but are not strictly necessary for the platform to operate.

4.4 Analytics Cookies. gbagee uses first-party analytics cookies to measure aggregate platform performance — for example, which game categories are most visited by players in Dhaka, Chittagong, and Sylhet, how long sessions last on average, and which pages generate the most support queries. This data is used in anonymised form and is not linked back to your individual account.

4.5 No Third-Party Advertising Cookies. gbagee does not use third-party advertising or retargeting cookies. We do not permit advertising networks to place cookies on gbagee pages to build a behavioural profile of your browsing activity across other websites.

4.6 Managing Cookies. You may manage cookie preferences through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored by specific websites. Blocking essential cookies will prevent you from logging in to your gbagee account. Blocking analytics or functional cookies will not prevent you from using core platform features but may result in a less personalised experience.

5.1 Retention Principles. gbagee retains your personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The retention periods applicable to each category of data are summarised in the table in Section 1 of this Privacy Policy. Once the applicable retention period expires, your data is securely deleted or irreversibly anonymised.

5.2 Active Account Data. While your gbagee account remains active, we retain all registration, financial, gameplay, and communications data associated with your account. This data is necessary to provide you with the platform's services, resolve any disputes you may raise, and maintain the records required by our compliance obligations.

5.3 Post-Closure Retention. Following account closure — whether initiated by you or by gbagee — certain categories of data are retained for a post-closure period as required by law or by legitimate operational necessity. Financial transaction records are retained for a minimum of 7 years post-closure in line with standard financial record-keeping requirements. Identity verification documents are retained for 5 years post-closure. Gameplay records are retained for 5 years post-closure to support any future dispute investigations or regulatory inquiries.

5.4 Self-Exclusion Records. Where you have activated a self-exclusion, gbagee retains a record of your self-exclusion for the full duration of the exclusion period plus a minimum of 5 years thereafter. This record is maintained to prevent the inadvertent reactivation of accounts for self-excluded players and to demonstrate compliance with responsible gaming commitments.

5.5 Data Storage Location. gbagee's primary data storage infrastructure is hosted on secure servers. All data is encrypted at rest using AES-256 encryption. Access to personal data is restricted to gbagee staff and authorised partners who require it to perform their role, and all such access is logged and auditable.

5.6 Data Deletion Requests. You may request deletion of your personal data at any time by contacting [email protected]. gbagee will fulfil verified deletion requests within 30 days, subject to any overriding legal obligation to retain specific data categories (as noted above). gbagee will confirm in writing once deletion has been completed or explain any legal basis for retaining specific data elements beyond your deletion request.

6.1 Right of Access. You have the right to request a copy of all personal data that gbagee holds about you. Upon a verified request, gbagee will provide you with a structured summary of your registration data, account activity records, transaction history, and any communications data we hold, in a readable format.

6.2 Right to Rectification. If any personal data that gbagee holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For example, if your registered address has changed or your name appears incorrectly, contact our support team with the correct details and we will update our records promptly.

6.3 Right to Erasure. You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis for processing exists), or where you object to processing and there is no overriding legitimate interest. Note that this right is subject to gbagee's legal retention obligations described in Section 5.

6.4 Right to Restrict Processing. In certain circumstances — for example, where you contest the accuracy of your data or where you have objected to processing and we are considering your objection — you may request that gbagee restricts its processing of your personal data to storage only, pending resolution of the issue.

6.5 Right to Data Portability. You have the right to receive the personal data you have provided to gbagee in a structured, commonly used, machine-readable format (such as CSV), so that you can transfer it to another service provider if you wish. This right applies to data processed on the basis of your consent or for the performance of your account contract.

6.6 Right to Object to Marketing. You have an unconditional right to object to gbagee processing your personal data for direct marketing purposes at any time. You may opt out of marketing communications by updating your preferences in your gbagee account settings or by emailing [email protected]. Opting out of marketing does not affect your ability to use the platform.

6.7 Rights Related to Automated Decision-Making. gbagee uses automated systems to detect fraud and identify responsible gaming risk signals. Where an automated decision has a significant effect on your account — for example, a system-triggered account suspension — you have the right to request human review of that decision by contacting our compliance team.

7.1 Technical Safeguards. gbagee implements a range of technical security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include 256-bit SSL/TLS encryption for all data in transit, AES-256 encryption for data at rest, firewalled server infrastructure with intrusion detection systems, and regular third-party security penetration testing.

7.2 Access Controls. Access to systems holding player personal data is restricted to authorised gbagee personnel and contracted partners on a strict need-to-know basis. All internal access is authenticated via multi-factor authentication, and all data access events are logged and subject to regular audit review. Employees who no longer require access to personal data systems have their access revoked immediately upon role change or departure.

7.3 Payment Security. gbagee does not store full payment credentials for bKash, Nagad, Rocket, or bank accounts. Payment transactions are processed via each provider's secure API, and the only financial data stored by gbagee is the masked reference required to match a transaction to your account (such as the last four digits of a mobile number or account number). Full card numbers and mobile banking PINs are never transmitted to or stored on gbagee's servers.

7.4 Account Security — Your Responsibilities. gbagee's security measures protect data held on our systems, but you also have a role in keeping your account secure. You are responsible for maintaining the confidentiality of your gbagee Login credentials. gbagee will never ask you for your password via email, phone, or live chat. If you receive a communication claiming to be from gbagee that requests your password or PIN, treat it as fraudulent and report it immediately to [email protected].

7.5 Data Breach Response. In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, gbagee will notify affected players by email within 72 hours of becoming aware of the breach, describing the nature of the data affected, the likely consequences, and the steps gbagee has taken or will take to address it. gbagee maintains a documented data breach response plan that is reviewed and updated regularly.

8.1 Right to Update. gbagee reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. The current version of this Privacy Policy is always accessible at gbagee.com/privacy-policy and bears the effective date at the top of the document.

8.2 Notification of Material Changes. Where a change to this Privacy Policy is material — meaning it significantly affects how we collect, use, or share your personal data — gbagee will notify registered account holders by email to their registered address at least 14 days before the change takes effect. Continuing to use the gbagee platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.

8.3 Version History. gbagee maintains an internal version history of all Privacy Policy updates. If you wish to review a previous version of this policy, contact our support team at [email protected] and we will provide the requested version upon identity verification.

8.4 Contact for Privacy Enquiries. If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how gbagee has handled your personal information, please contact us at: [email protected]. Our support team is available 24 hours a day, 7 days a week, and will direct your enquiry to the appropriate team member. You may also consult our FAQ page for answers to common privacy questions from Bangladesh players.