gg333 Privacy Policy

Privacy at a Glance

1Introduction

This Privacy Policy ("Policy") is issued by gg333 ("we", "us", "our", "the Company") and applies to all personal data collected from players, visitors, and users ("you", "the Data Subject") of the gg333 platform, including the website at gg333.bio and all associated mobile interfaces and services. This Policy describes the categories of personal data we collect, the purposes for which we process that data, the legal bases on which processing rests, the circumstances in which data may be shared with third parties, the security measures we apply to protect your data, the retention periods we observe, and the rights you have in relation to your personal data.

gg333 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. We collect only the data we genuinely need to operate a safe, fair, and compliant gaming platform for players in Bangladesh and elsewhere. We do not collect excessive data, and we do not use your data for purposes beyond those described in this Policy without your prior consent.

2Personal Data We Collect

We collect personal data from three primary sources: information you provide directly when registering or using gg333, information generated automatically through your use of the platform, and information received from third-party service providers we work with to operate the platform.

Information You Provide Directly

• Registration data: full name, date of birth, email address, mobile phone number, and residential address. This data is collected when you create a gg333 account and is required to verify your identity, process your financial transactions, and comply with our age verification obligations.
• Identity verification documents (KYC): government-issued photo identification (national ID card, passport, or driving licence) and proof of address documents (utility bill, bank statement). These are collected when gg333 is required to verify your identity prior to processing a withdrawal or at any other point where KYC is required.
• Financial data: deposit and withdrawal transaction records, including the payment method used (bKash account number, Nagad mobile number, bank account details), transaction amounts, dates, and transaction reference numbers. This data is required for payment processing and financial crime compliance.
• Communications data: messages sent to gg333 via live chat, email, or any other customer support channel, including the content of those messages and any attachments. This data is retained to maintain a record of support interactions and to improve service quality.

Automatically Collected Data

• Technical data: IP address, device type and model, operating system version, browser type and version, screen resolution, and language settings. This data is collected each time you access the gg333 platform and is used for fraud prevention, security monitoring, and platform optimisation.
• Behavioural and gameplay data: game history, wagering activity (games played, bet amounts, win/loss outcomes, session durations), bonus usage, and platform navigation patterns. This data is used to personalise your experience, detect problem gambling patterns, and fulfil responsible gaming obligations.
• Cookie and tracking data: session cookies, preference cookies, and analytics identifiers. See Section 7 of this Policy for a full description of the cookies we use and how to manage your cookie preferences.

Data Received from Third Parties

• Payment processor data: transaction confirmation and status data received from bKash, Nagad, Rocket, Upay, and bank payment gateways. This data is used to reconcile transactions and investigate payment disputes.
• Identity verification data: confirmation data received from third-party KYC providers when gg333 uses an automated identity verification service. gg333 does not retain copies of your identity documents on behalf of such providers; documents are processed by the KYC provider and confirmation data is shared with gg333.
• Fraud prevention data: risk scores and flagging data provided by fraud detection service providers. This data is used to identify and prevent fraudulent account activity, bonus abuse, and payment fraud.
• Referral and affiliate data: where you have arrived at gg333 through an affiliate or referral link, we may receive data from the referring partner confirming the source of your registration. This data is used for affiliate commission tracking only and does not affect how your personal data is otherwise processed.

3How We Use Your Personal Data

The table below summarises the primary purposes for which gg333 processes your personal data and the categories of data used for each purpose.

4Legal Basis for Processing

gg333 processes your personal data on one or more of the following legal bases, depending on the purpose for which the data is being processed:

• Contractual necessity: processing required to perform the contract between you and gg333 — i.e., to provide you with access to the gaming platform, process your deposits and withdrawals, and manage your account. Without this processing, gg333 cannot provide you with the Services.
• Legal obligation: processing required to comply with applicable law, including anti-money laundering regulations, age verification requirements, and financial record-keeping obligations. gg333 cannot waive or opt out of processing carried out on this basis.
• Legitimate interests: processing necessary for gg333's legitimate business interests, including fraud prevention, platform security, product improvement, and responsible gaming compliance, where those interests are not overridden by your data protection rights.
• Consent: where you have given your explicit consent to a specific processing activity, such as receiving promotional email communications. You may withdraw consent at any time by contacting [email protected] or adjusting your notification preferences in account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

5Sharing Your Personal Data

gg333 does not sell your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

Categories of Recipients

• Payment service providers: bKash, Nagad, Rocket, Upay, and banking partners receive the financial data necessary to process your deposits and withdrawals. These providers act as independent data controllers for their own processing of payment transaction data and are subject to their own privacy policies and applicable financial regulations.
• Identity verification providers: third-party KYC service providers receive the identity documents you submit during the verification process. These providers are contractually bound to process your data only for identity verification purposes and to maintain appropriate security standards.
• Regulatory and law enforcement authorities: gg333 may be required to disclose personal data to regulatory bodies, law enforcement agencies, or courts in response to a lawful request, court order, or legal obligation. gg333 will disclose only the minimum data required to comply with the specific legal request and will notify you of such disclosure where legally permitted to do so.
• Fraud prevention and security partners: aggregated or pseudonymised data may be shared with fraud detection service providers to identify patterns of fraudulent activity. Individual player data is shared only where a specific fraud investigation requires it, and only to the extent necessary for that investigation.

6Payment Data and Financial Privacy

gg333 processes payment transaction data — including bKash mobile numbers, Nagad account references, and bank account details — solely for the purposes of processing your requested deposits and withdrawals, reconciling your account balance, and complying with anti-money laundering record-keeping requirements. Payment data is not used for marketing, profiling, or any purpose unrelated to the operation of your gg333 account.

gg333 does not store full card numbers for Visa or Mastercard transactions. Card payments are processed by PCI-DSS compliant payment processors; gg333 retains only a tokenised reference and the last four digits of the card for transaction identification purposes. bKash, Nagad, and Rocket transaction records are retained in accordance with the data retention schedule set out in Section 8 of this Policy.

7Cookies and Tracking Technologies

gg333 uses cookies and similar tracking technologies on its platform. Cookies are small text files placed on your device that help us recognise returning visitors, maintain your session, remember your preferences, and collect analytics data to improve the platform. The following categories of cookies are used on gg333.

Cookie Categories

• Strictly necessary cookies: these cookies are essential for the gg333 platform to function. They manage your login session, maintain your security token, and ensure the platform responds correctly to your actions. These cookies cannot be disabled without preventing core platform functionality from working. No consent is required to set strictly necessary cookies.
• Performance and analytics cookies: these cookies collect anonymised data about how visitors use the gg333 platform — which pages are visited most frequently, how long sessions last, and where users encounter errors. This data helps us improve platform performance and user experience. These cookies do not identify individual players.
• Functional cookies: these cookies remember your preferences, such as your preferred language, notification settings, and responsible gaming tool configurations. They are not strictly necessary but improve the quality of your experience on the platform.

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Please note that blocking strictly necessary cookies will impair the functionality of the gg333 platform and may prevent you from logging in or completing financial transactions.

8Data Retention

gg333 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of personal data we hold.

• Account and registration data: retained for the duration of your active account plus a minimum of 5 years following account closure, to comply with financial record-keeping and anti-money laundering obligations. Where a regulatory investigation is ongoing at the time of account closure, data is retained until the investigation is concluded.
• Financial transaction data: retained for a minimum of 6 years following the date of the transaction, in accordance with standard financial record-keeping requirements. This includes deposit records, withdrawal records, and bonus transaction logs.
• Customer support communications: retained for 3 years from the date of the communication, to maintain a record of support interactions and to assist in the resolution of any future disputes arising from the same subject matter.

9Your Data Rights

As a data subject whose personal data is processed by gg333, you have the following rights in relation to your personal data. To exercise any of these rights, please contact gg333 at [email protected]. We will respond to all valid data rights requests within 30 days of receipt.

• Right of access: you have the right to request confirmation of whether gg333 processes personal data about you, and if so, to receive a copy of that data together with information about the purposes for which it is processed, the categories of data held, and the recipients to whom it has been disclosed.
• Right to rectification: if any personal data gg333 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You may update certain account details directly through your gg333 account settings; for changes to identity documents or other sensitive data, please contact [email protected].
• Right to erasure: you have the right to request that gg333 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where processing is unlawful. This right is subject to gg333's legal obligations to retain certain data for specified periods as described in Section 8.
• Right to restrict processing: in certain circumstances (for example, where you contest the accuracy of data gg333 holds about you), you have the right to request that gg333 restrict processing of your personal data while the accuracy dispute is resolved.
• Right to object: you have the right to object to processing of your personal data where that processing is carried out on the basis of gg333's legitimate interests. You also have an unconditional right to object to processing of your personal data for direct marketing purposes. Where you object to direct marketing, gg333 will cease that processing immediately.

To exercise any of the above rights, email [email protected] with the subject line "Data Rights Request" and include your registered name and account email address so we can verify your identity before processing the request. gg333 will not charge a fee for data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable fee may apply.

10Data Security

gg333 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes 256-bit SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, access controls restricting internal data access to authorised personnel on a need-to-know basis, regular security audits and penetration testing, and real-time fraud monitoring systems.

Despite these measures, no data transmission over the internet or electronic storage system is completely secure. gg333 cannot guarantee the absolute security of your personal data. If you suspect that your gg333 account has been compromised or that your personal data has been accessed without authorisation, please contact [email protected] immediately so that we can take appropriate protective action.

11Protection of Minors

gg333 is strictly an adults-only platform. We do not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the gg333 registration process. If gg333 discovers that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the account will be permanently closed. If you are a parent or guardian and believe that a person under 21 in your care has registered a gg333 account, please contact [email protected] immediately.

12Changes to This Privacy Policy

gg333 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new processing purpose or share data with a new category of recipient — we will notify registered players by email at least 14 days before the changes take effect. For minor changes (such as typographical corrections or clarifications that do not substantively alter the Policy), we will update the Policy on the gg333 platform without prior notice. The date at the top of this Policy indicates when it was last updated. Your continued use of gg333 following any update constitutes acceptance of the revised Policy.

13Contact Our Privacy Team

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how gg333 handles your personal data, please contact our privacy team using the details below. We are committed to responding to all privacy enquiries promptly and transparently.

Privacy contact email: [email protected] (plain text — not a clickable link). Please include "Privacy Enquiry" or "Data Rights Request" in your subject line so your message is routed to the correct team. We aim to respond to all privacy-related enquiries within 5 business days of receipt.