gd22 Privacy Policy — How We Protect Your Personal Data

Account Administration

Your identity and contact data is used to create and manage your account, verify your age and identity, process deposits and withdrawals, and communicate with you regarding your account status, transactions, and security alerts.

Platform Operation

Technical and gaming activity data is used to deliver the platform's games and services, personalise your experience where applicable, detect and prevent fraud, and maintain the security and integrity of the platform.

Responsible Gaming

Gaming activity and account data is used to monitor for signs of problem gambling behaviour and to administer responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion requests. This processing is in the interest of player welfare and is a core operational function of gd22.

Legal Compliance

Personal data may be processed to fulfil gd22's legal and regulatory obligations, including anti-money laundering (AML) checks, fraud prevention, age verification, and responding to lawful requests from competent authorities.

Contractual Necessity

Much of the personal data we process is necessary to perform the contract we have entered into with you (or to take steps to enter into that contract). This includes processing data to create your account, verify your identity, process transactions, and deliver games and services.

Legal Obligation

Certain processing activities are required by law. This includes KYC and AML checks, retaining transaction records for audit purposes, and disclosing data to law enforcement or regulatory authorities when required by a lawful order.

Legitimate Interests

Some processing is carried out on the basis of gd22's legitimate business interests, such as preventing fraud, improving platform security, monitoring for responsible gaming indicators, and analysing usage patterns to improve the service. Where we rely on this basis, we have assessed that our interests do not override your fundamental privacy rights.

Service Providers

gd22 works with third-party service providers who assist in operating the platform. These include payment processors (such as the technical operators of bKash, Nagad, and Rocket integrations), identity verification services, fraud detection providers, and hosting infrastructure providers. All service providers are contractually bound to use your data only for the specific purpose for which it was shared and to maintain appropriate security standards.

Legal Authorities

gd22 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities when required to do so by applicable law, court order, or in connection with the prevention or detection of criminal activity including fraud and money laundering.

Essential Cookies

Essential cookies are required for the platform to function. They manage your login session, maintain your language preference, and enable secure payment processing. These cookies cannot be disabled without breaking core platform functionality. By using gd22, you consent to the use of essential cookies.

Analytical Cookies

Analytical cookies help gd22 understand how players navigate the platform, which pages are most visited, and where technical improvements are needed. This data is aggregated and does not identify individual players. You may disable analytical cookies through your browser settings without affecting your ability to use the platform.

Technical Measures

All data transmissions between your device and gd22's servers are encrypted using SSL/TLS protocols. Sensitive data including payment credentials and identity documents are stored in encrypted form. Access to personal data within gd22's systems is restricted to authorised personnel on a need-to-know basis.

Your Responsibilities

While gd22 takes robust steps to protect your data, the security of your account also depends on you. You are responsible for maintaining the confidentiality of your login credentials and for ensuring that your device and email account are secured. You must notify gd22 support immediately if you suspect any unauthorised access to your account.

Retention Periods

Active account data is retained for as long as your account remains open. Following account closure, gd22 will retain transaction records, identity verification documents, and gaming activity logs for a minimum period of five years to satisfy legal, audit, and anti-money laundering retention requirements. After the applicable retention period expires, data will be securely deleted or anonymised so that it can no longer be attributed to any individual.

Right of Access

You have the right to request a copy of the personal data gd22 holds about you. We will provide this information in a clear and accessible format. We may request proof of your identity before fulfilling an access request to ensure we disclose data only to the rightful account holder.

Right to Rectification

If any personal data gd22 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details (such as your contact email address) directly through your account settings, or by contacting support for assistance with data that cannot be self-corrected.

Right to Deletion

You may request the deletion of your personal data in certain circumstances, for example when the data is no longer necessary for the purpose it was collected. However, gd22 may be required to retain certain data for legal or regulatory reasons even following a deletion request. We will inform you of any such retention obligations when responding to your request.

Right to Object

You have the right to object to the processing of your personal data where gd22 relies on legitimate interests as the legal basis. If you object, gd22 will assess whether its legitimate interests are overridden by your rights in the specific circumstances. You also have the right to opt out of receiving promotional communications from gd22 at any time by notifying support.

Notification of Changes

Where changes to this Policy are significant, gd22 may notify active players by email or by displaying a prominent notice on the platform. Your continued use of gd22 following publication of an updated Privacy Policy constitutes acceptance of the revised terms. We recommend reviewing this Policy periodically to stay informed about how gd22 protects your personal data.