GB22 Privacy Policy — Your data is safe with us

1 Introduction & Scope

GB22 is a trusted online gaming platform in Bangladesh. We believe every user's personal data is their own asset, and protecting that asset is our primary responsibility. This privacy policy applies to the GB22 website, mobile app, and all associated services.

By using the GB22 platform, you are considered to have read and agreed to the terms of this privacy policy. We collect your data solely to provide you with a better service — for no other purpose.

In this privacy policy, we clearly set out:

• What information we collect and how we collect it
• How Collected Data Is Used
• Who Your Information May Be Shared With
• How your data is kept secure
• What rights you have over your data

2 What data we collect

GB22 only collects information that is necessary. No excess or irrelevant data is collected.

Information Collected at Registration

• Full Name & Username
• Mobile Number
• Date of Birth (for age verification)
• Password (stored in encrypted form)

Information collected for KYC verification

• National ID Number or Passport Number
• Photo ID
• Selfie Photo (if required)
• Proof of Current Address

Transaction Information

• Mobile Banking Number (bKash, Nagad, Rocket)
• Deposit & Withdrawal History
• Gaming History & Betting Records

Automatically Collected Data

• IP address & device information
• Browser Type & Version
• Access time and date
• Page Visit & Click Data
• Cookie & session data

3 Use of Information

GB22 uses the data it collects for the following purposes:

We will never misuse your data in any way. Every use of your information has a clear purpose, and once that purpose is fulfilled, the data is no longer used.

4 Data Sharing Policy

GB22 does not share your personal information with third parties for commercial purposes. However, certain information may be shared in the following circumstances:

• Payment Processing: Necessary information is shared with payment providers such as bKash, Nagad, and Rocket to process transactions.
• Legal obligation: We may be required to share information in response to lawful requests from authorities under Bangladesh law.
• Fraud Prevention: Anonymized data may be shared with industry partners to help detect organized fraud.
• Technology Providers: Contracted providers handling server, analytics, and security services may have limited access to data.

5 Data Security Measures

GB22 follows the highest industry standards to protect your data. Our security measures are multi-layered:

Technical Security

• 256-bit TLS/SSL Encryption — applied to all data transfers
• AES-256 encryption — for stored sensitive data
• Bcrypt hashing — for password storage
• Two-Factor Authentication (2FA) — for account security
• Firewall & DDoS Protection
• Regular Penetration Testing

Organizational Security

• Only authorized personnel may access sensitive data
• All data access is logged and monitored
• Staff receive regular privacy training
• Users are notified within 72 hours in the event of a data breach

6 Cookies & tracking technologies

GB22 uses cookies and similar technologies on its website and app. Cookies are small text files stored on your device.

The cookies we use

• Essential cookies: Required to maintain login sessions and ensure security — the platform cannot function without these.
• Functional cookies: To remember your preferences such as language and layout.
• Analytics Cookies: Collects anonymous data to help us understand which pages are used most.
• Security Cookies: To detect fraud and bot activity.

Cookie controls

You can disable non-essential cookies at any time through your browser settings. Please note that disabling essential cookies may prevent certain features of the platform from working properly.

7 Your data rights

GB22 gives you full control over your personal information. You have the following rights:

• Right of Access: You can find out what information we hold about you.
• Right to Rectification: You may update any incorrect or outdated information.
• Right to Erasure: You may request deletion of your data under certain circumstances.
• Right to Restrict Processing: You can restrict the use of your data for certain purposes.
• Right to Withdraw Consent: You may withdraw consent for data processed on the basis of your consent.
• Right to lodge a complaint: If you are unhappy with how your data is being used, you have the right to file a complaint with the relevant authority.

To exercise any of these rights, contact our support team. We will respond to your request within 30 days.

8 Data Retention Period

GB22 does not retain your data longer than necessary. Retention periods vary depending on the type of information:

• Account information: For the duration the account remains active, and 5 years after closure (as required by law).
• Transaction Records: 7 years after the last transaction (in accordance with financial regulations).
• KYC documents: 5 years after account closure.
• Log Data: Up to 12 months.
• Marketing Information: Until consent is withdrawn.

9 Third-Party Services

GB22 works with trusted third parties to keep certain services running. Strict data protection agreements are in place with each of them.

• Payment Gateway: bKash, Nagad, Rocket — limited information is shared during transaction processing.
• Game Providers: Anonymous session data may be shared to support game operations.
• Analytics Tools: Anonymized usage data is used to monitor site performance.
• Security Services: Specialist fraud detection providers are granted access to specific data.

These third parties have their own privacy policies and are not permitted to use your data beyond GB22's instructions.

10 Child Protection Policy

GB22 strictly does not collect information from or provide services to anyone under 18. Our registration process includes age verification.

If we become aware that an account has been created by someone under the age of 18, that account will be immediately closed and all associated data will be deleted.

11 Policy Change Process

GB22 may update this privacy policy as needed. Changes may be prompted by:

• Compliance with new laws or regulations
• Addition of new services or technologies
• Security Enhancements
• Refined Based on User Feedback

For any significant changes, we will publish a notice on the platform at least 7 days in advance and may send a notification to your registered number. Your continued use of the platform after such changes will be considered acceptance of the updated policy.

12 Contact & Complaints

For any questions, concerns, or requests regarding our Privacy Policy, please reach out to our dedicated Privacy Team. We're always here to help.

• Live Chat: Chat with us directly from any page on the platform — get an instant response.
• Email: [email protected]
• Response Time: Instant via Live Chat; up to 30 business days via email.