gb44r Privacy Policy —
Your Data, Your Rights

1 Data Controller Information

gb44r is the data controller responsible for the personal information you provide when using our platform. As data controller, gb44r determines the purposes and means by which your personal data is processed. All data processing activities carried out by gb44r are conducted in accordance with this Policy and applicable data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

gb44r is an internationally operated online gaming platform with a primary focus on serving players in Bangladesh. Our platform is accessible to eligible players in Bangladesh via the internet, and all account-related communications are conducted in English.

For all privacy-related enquiries, complaints, or requests to exercise your data rights, you may contact our Data Protection team directly at:

2 Information We Collect

gb44r collects personal data through several channels: directly from you during registration and account use, automatically through your use of our platform, and in limited circumstances from third-party service providers. We collect only the data that is necessary for the purposes described in this Policy.

Information You Provide Directly

• Registration data: Full legal name, date of birth, email address, mobile number, and residential address.
• Identity verification (KYC) documents: National Identity Card (NID), passport, driving licence, or other government-issued identification. Proof of address documents such as utility bills or bank statements.
• Payment information: Mobile financial service account numbers (bKash, Nagad, Rocket, Upay), bank account details, and card information where applicable. Note that full payment credentials are processed by our payment partners and are not stored in full on gb44r servers.
• Support communications: Any messages, complaints, or enquiries you submit to our support team via live chat or email, including the content of those communications and any attachments you provide.
• Responsible gaming submissions: Self-exclusion requests, deposit limit preferences, time-out requests, and any information you share when seeking responsible gaming assistance.

Information Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage and behavioural data: Pages visited, time spent on each page, navigation paths, games played, bets placed, session duration, and click patterns.
• Transaction data: Deposit and withdrawal history, bet history, bonus redemptions, and account balance changes.
• Location data: Approximate geographic location derived from your IP address, used for fraud prevention and to verify eligibility to use the platform from your region.
• Cookie and tracking data: See Section 5 (Cookies & Tracking Technologies) for full details.

Information from Third Parties

• Identity verification services: Third-party KYC and anti-money laundering (AML) screening providers may supply supplementary data to verify the accuracy of the information you have provided.
• Payment processors: Payment confirmation and transaction status data from bKash, Nagad, Rocket, Upay, and card processing networks.
• Fraud prevention agencies: Risk scoring and fraud alert data from specialist third-party fraud detection services used to protect both the platform and its players.

3 How We Use Your Data

gb44r processes your personal data only where we have a lawful basis for doing so. The table below sets out the primary purposes for which we use your data and the corresponding lawful basis for each processing activity.

Marketing Communications

gb44r may send you promotional emails, SMS notifications, or in-platform messages about bonuses, new game releases, seasonal promotions (including Eid, Pohela Boishakh, and BPL season offers), and other platform news, provided you have given your explicit consent to receive such communications at the time of registration or subsequently through your account settings. You may withdraw this consent at any time by updating your notification preferences in your account settings or by contacting us at [email protected]. Withdrawal of marketing consent does not affect your ability to use gb44r's services or the processing of your data for other lawful purposes.

4 Sharing Your Information

gb44r does not sell your personal data to third parties. We do not share your personal information with advertisers, data brokers, or unrelated commercial entities. We share your data only in the limited and specific circumstances described below.

Service Providers and Technology Partners

gb44r works with carefully selected third-party service providers who process your data on our behalf and under our instruction. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing networks receive the payment data necessary to execute your deposit and withdrawal transactions.
• KYC and AML providers: Identity verification and anti-money laundering screening services receive the documents and registration data needed to verify your identity.
• Game studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe, and other game content providers receive a player session token to deliver game content. These providers do not receive your full name, payment details, or contact information — only a session identifier.
• Cloud infrastructure providers: Our platform is hosted on enterprise-grade cloud infrastructure. Data is stored on servers with strong physical and logical security controls, including encryption at rest and in transit.
• Analytics and fraud prevention tools: Specialist technology partners assist with platform analytics, performance monitoring, and real-time fraud detection.

All third-party service providers that process data on gb44r's behalf are bound by data processing agreements that require them to maintain appropriate technical and organisational security measures and to use your data only for the specific purposes for which it was shared.

Legal and Regulatory Disclosures

gb44r may disclose your personal data to government authorities, law enforcement agencies, financial intelligence units, or regulatory bodies where required to do so by applicable law, court order, or regulatory direction. We will not disclose more information than is strictly required in such circumstances, and we will notify you of any such disclosure where we are legally permitted to do so.

Business Transfers

In the event that gb44r undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will provide reasonable notice of any such transfer and ensure that any successor entity is bound by privacy obligations no less protective than those in this Policy.

5 Cookies & Tracking Technologies

gb44r uses cookies and similar tracking technologies (including web beacons and local storage objects) to operate the platform, remember your preferences, analyse usage patterns, and support fraud prevention. By continuing to use gb44r after being presented with this Policy, you acknowledge and accept our use of cookies as described below.

Types of Cookies We Use

• Strictly necessary cookies: These cookies are essential for the gb44r platform to function. They include session cookies that keep you logged in, security tokens that protect against cross-site request forgery, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: These remember your preferences such as language settings, preferred payment method, and responsible gaming settings so that you do not need to re-enter them on each visit.
• Analytics cookies: These collect aggregated, anonymised data about how players navigate the gb44r platform, which pages are most visited, and where users encounter difficulties. This data is used solely to improve the platform experience.
• Security and fraud prevention cookies: These help our fraud detection systems identify unusual or suspicious session behaviour, including account takeover attempts and bot activity.

Managing Your Cookie Preferences

You may control non-essential cookies through your web browser's settings. Most modern browsers allow you to block or delete cookies, or to receive a notification before a cookie is placed. Please note that disabling certain cookies may affect the functionality of the gb44r platform — in particular, strictly necessary cookies cannot be disabled without preventing you from logging into your account. For specific browser instructions on managing cookies, please refer to your browser's help documentation.

6 Data Security Measures

gb44r employs a layered security architecture designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures are reviewed and updated regularly in response to evolving threats and industry best practices.

• Encryption in transit: All data transmitted between your device and the gb44r platform is protected by 256-bit TLS/SSL encryption, the same standard used by major financial institutions worldwide.
• Encryption at rest: Personal data and sensitive account information stored on gb44r servers is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data is restricted to gb44r personnel who require it for specific, legitimate operational purposes. Access is governed by role-based permissions, and all access events are logged and auditable.
• Two-factor authentication: gb44r offers two-factor authentication (2FA) for player accounts as an additional layer of protection against unauthorised login attempts. We strongly encourage all players to enable 2FA.
• Penetration testing and security audits: gb44r commissions independent security assessments on a regular basis to identify and remediate vulnerabilities before they can be exploited.
• Incident response: gb44r maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to affected players, we will notify affected players without undue delay and take all reasonable steps to contain and remediate the breach.

7 Data Retention

gb44r retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, and to resolve disputes or enforce our agreements. The specific retention periods applicable to each category of data are summarised below.

Upon expiry of the applicable retention period, gb44r will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual. Where deletion is not immediately possible due to backup or archival processes, the data will be isolated and protected from further processing until deletion is technically feasible.

8 Your Privacy Rights

Depending on your jurisdiction and the circumstances of your data processing, you may have one or more of the following rights in relation to your personal data held by gb44r. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy / Data Request".

• Right of access: You have the right to request a copy of the personal data gb44r holds about you, together with information about how it is used and with whom it has been shared. We will respond to subject access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account information (such as email address and phone number) directly through your account settings at any time.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other lawful basis applies), or where processing is unlawful. Note that this right is subject to our legal retention obligations — we cannot delete data that we are required to retain under AML, financial record-keeping, or other regulatory rules.
• Right to restrict processing: In certain circumstances, you may request that gb44r restrict the processing of your personal data while a query or dispute is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time, with immediate effect. You also have the right to object to processing carried out on the basis of legitimate interests, though such objections will be considered against gb44r's legitimate reasons for processing.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

9 Third-Party Services

The gb44r platform integrates with a number of third-party services to deliver game content, process payments, and provide a fully featured player experience. While gb44r takes care to work with reputable partners who maintain high data protection standards, we cannot control and are not responsible for the privacy practices of independent third-party services once your data has been transmitted to them in accordance with the purposes described in this Policy.

Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe — may collect certain technical and gameplay data within their own game environments. This data collection is governed by each studio's own privacy documentation. gb44r requires all game studio partners to maintain player data in accordance with applicable data protection standards as a condition of their partnership agreement.

Payment service providers including bKash, Nagad, Rocket, Upay, Visa, and Mastercard maintain their own privacy policies governing the processing of payment transaction data. gb44r recommends that you review the privacy documentation of any payment provider you use in connection with your gb44r account to understand their data practices.

gb44r's website does not contain links to external third-party websites for commercial purposes, and we do not embed third-party social media widgets or external advertising scripts that collect your data without your knowledge.

10 Updates to This Policy

gb44r reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, updates to applicable law, or improvements to our platform. The date of the most recent revision is displayed in the hero section at the top of this page.

When material changes are made to this Policy — changes that affect your rights or the way your data is processed in a significant way — gb44r will notify registered players by email and/or by posting a prominent notice on the platform prior to the changes taking effect. Non-material changes (such as corrections of typographical errors or clarifications that do not affect the substance of the Policy) may be made without prior notice.

Your continued use of the gb44r platform following the publication of any updated Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not agree with any changes to this Policy, you should stop using gb44r and request account closure as described in the Terms & Conditions.