gbd3 Privacy Policy

Introduction and Scope

This Privacy Policy ("Policy") describes how gbd3 ("we", "us", "our") collects, uses, stores, and discloses information about individuals who access or use the gbd3 website, mobile platform, casino games, sports betting services, and all related features (collectively, the "Platform"). By registering an account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy applies to all personal data we process in connection with your use of the Platform, regardless of whether you access gbd3 from Bangladesh or from another location. It should be read alongside our Terms and Conditions, which govern the overall contractual relationship between you and gbd3.

Information We Collect

We collect personal data from you directly, automatically through your use of the Platform, and in limited circumstances from third-party sources. The categories of information we may collect include:

• Identity data: full name, date of birth, national identity card number or passport details, and a photograph where KYC verification is required.
• Contact data: email address, phone number, and residential address in Bangladesh (city/district level at minimum, e.g., Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barishal, Rangpur, Mymensingh).
• Financial data: deposit and withdrawal transaction records, payment method type (e.g., bKash, Nagad, Rocket, Upay, bank transfer), and transaction amounts in BDT.
• Technical data: IP address, device type and identifiers, browser type and version, operating system, session timestamps, and geolocation data (country and region level only).
• Usage data: games played, bets placed, wager amounts, bonus usage, session duration, pages visited within the Platform, and any preferences or settings configured in your account.
• Communications data: records of any messages sent to or received from our support team, including email correspondence, chat transcripts, and complaint records.

How We Use Your Information

We process your personal data only for specified, explicit, and legitimate purposes. The primary purposes for which gbd3 uses your data are:

• Account creation and management: to register your account, verify your identity through our KYC process, maintain your account profile, and provide customer support.
• Platform operation and service delivery: to process deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment methods; to credit winnings; and to manage bonus and promotional offer eligibility.
• Fraud prevention and security: to detect, investigate, and prevent money laundering, fraud, multi-account abuse, bot activity, and any other prohibited activity under our Terms and applicable law.
• Legal and regulatory compliance: to comply with applicable Bangladeshi law, anti-money laundering obligations, and any lawful request from competent regulatory or law enforcement authorities.
• Responsible gaming: to identify patterns of problem gambling, enforce self-exclusion requests, apply deposit and session limits, and fulfil our obligations under our Responsible Gaming policy.

Disclosure of Your Information

gbd3 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We may disclose your personal data only in the following limited circumstances:

• Payment processors and financial service providers: we share transaction data with bKash, Nagad, Rocket, Upay, and other payment partners solely to process deposits and withdrawals. These processors are contractually bound to handle data securely and to use it only for the payment purpose.
• Identity verification providers: we share identity documents and biographic data with KYC service providers for the purpose of verifying player eligibility and preventing fraudulent registration.
• Game and platform technology providers: our casino game content is supplied by third-party providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi. These providers may receive limited session and wager data solely for the purpose of delivering and auditing game rounds.
• Legal and regulatory authorities: we will disclose your data if required by law, court order, or valid request from a competent authority in Bangladesh or internationally, including anti-money laundering or tax compliance obligations.

Data Retention

gbd3 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to maintain our legal and contractual obligations, and to resolve any disputes. Our standard retention periods are:

• Account data: retained for the lifetime of your account and for a minimum of 5 years after account closure, in compliance with anti-money laundering record-keeping requirements.
• Financial transaction records: retained for a minimum of 7 years from the date of each transaction, in line with applicable financial recordkeeping obligations.
• KYC verification documents: retained for a minimum of 5 years from account closure or from the date the document was submitted, whichever is later.
• Support and communications records: retained for 3 years from the date of the last communication, unless the record relates to an ongoing dispute, investigation, or legal proceeding in which case it is retained until that matter is fully resolved.

Cookies and Tracking Technologies

gbd3 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your session security, and analyse aggregate usage patterns to improve our service. Cookies are small text files stored on your device by your browser. We use the following types of cookies:

Strictly necessary cookies are essential for the Platform to function correctly, enabling login sessions, security controls, and core gameplay features. These cannot be disabled. Functional cookies remember preferences such as language settings. Analytics cookies collect anonymised aggregate data about how players use the Platform, helping us identify areas for improvement. You may disable functional and analytics cookies at any time through your browser settings without affecting the core functionality of your account.

Your Data Rights

As a player registered on gbd3, you have the following rights regarding your personal data. To exercise any of these rights, contact us at [email protected] with your registered account details:

• Right of access: you may request a copy of all personal data gbd3 holds about you. We will provide this within 30 days of a verified request, free of charge for the first request in any 12-month period.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it without undue delay.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that we may be required to retain certain data even after an account closure to comply with anti-money laundering or other applicable law.
• Right to restriction: you may request that we restrict processing of your data in certain circumstances, for example while a dispute about data accuracy is being resolved.
• Right to object: you may object to processing of your personal data for direct marketing purposes at any time and at no cost. We will cease such processing immediately upon receiving your objection.

Data Security

gbd3 implements comprehensive technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• SSL/TLS encryption for all data transmitted between your device and the gbd3 Platform, ensuring that your login credentials, payment details, and personal data cannot be intercepted in transit.
• Encrypted storage of sensitive data at rest, including financial records and identity documents submitted for KYC verification.
• Access controls that restrict internal access to personal data on a need-to-know basis, with all internal access logged and periodically audited.
• Real-time fraud and intrusion detection systems that monitor Platform activity and flag anomalous behaviour for immediate investigation.
• Regular security reviews and vulnerability assessments to identify and remediate potential weaknesses in our systems before they can be exploited.

Children's Privacy

The gbd3 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or retain personal data from any person under the age of 21. If we become aware that we have inadvertently collected data from a minor, we will delete that data immediately and close the associated account without delay.

If you are a parent or guardian and believe that a minor has registered on gbd3 without your consent, please contact us immediately at [email protected] with the relevant account details so that we can investigate and take appropriate action.

Changes to This Privacy Policy

gbd3 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the Platform's features. The most current version of this Policy will always be accessible on this page, with the effective date updated accordingly. We recommend that you review this Policy periodically to remain informed of how we handle your data.

• Where a change materially affects your rights or the way we process your data, we will make reasonable efforts to notify you via your registered email address prior to the change taking effect. Your continued use of the Platform after the revised Policy is published constitutes acceptance of the updated terms.
• Where a change materially affects your rights or the way we process your data, we will make reasonable efforts to notify you via your registered email address prior to the change taking effect.
• Right of portability: where technically feasible, you may request that we provide your personal data in a structured, machine-readable format so that it can be transferred to another controller.
• Right to withdraw consent: where our processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

International Data Transfers

gbd3 primarily processes your data within secure data centres. In limited circumstances, data may be transferred to or accessed from locations outside Bangladesh, for example where a game provider or payment processor operates servers in another country. In all such cases, we ensure that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this Policy.

Where data is transferred internationally, gbd3 uses contractual safeguards including data processing agreements that obligate the recipient to maintain security standards consistent with this Policy. We do not transfer personal data to any jurisdiction known to have inadequate data protection frameworks without first implementing additional protective measures.

Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way gbd3 processes your personal data, our support team is available to assist you. We will acknowledge all privacy-related enquiries within 48 hours and aim to fully resolve them within 14 calendar days. For data deletion or data access requests, please include your registered username and the email address associated with your gbd3 account so that we can verify your identity before actioning your request.