Your Privacy Matters —
gbagie Data Policy

01 Data We Collect

gbagie collects personal data from you in several ways: directly when you register or interact with our Platform, automatically when you browse or use our services, and from trusted third-party sources for identity verification and fraud-prevention purposes. The categories of data we may collect include:

1.1 Registration & Identity Data

• Full legal name as it appears on a government-issued identity document.
• Date of birth — collected to verify that you are 18 years of age or older.
• Country and city of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi).
• Email address — used as your primary account identifier and for platform communications.
• Mobile phone number — used for account verification and two-factor authentication.
• Username and encrypted password — your login credentials; passwords are stored using strong one-way hashing algorithms and are never accessible in plain text by our staff.

1.2 Identity Verification (KYC) Data

• Scanned or photographed copies of your National ID Card, Passport, or Driving Licence.
• Proof of address documents such as utility bills or bank statements issued within the previous three months.
• Proof of payment method ownership (e.g., a screenshot of your registered bKash or Nagad account showing your name and number).

1.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and transaction reference IDs.
• Payment method identifiers (e.g., your registered bKash number, Nagad number, or bank account suffix — never full account credentials).
• Account balance history, bonus credits received, and wagering activity records.

1.4 Technical & Usage Data

• IP address and geolocation data (country and city level).
• Device type, operating system version, browser type, and screen resolution.
• Session timestamps, login history, and pages visited on the Platform.
• Game play history including games played, stake amounts, outcomes, and session durations.
• Cookies, pixel tags, and similar tracking technologies (see Section 5 for full details).

1.5 Communications Data

• Records of your correspondence with our customer support team via live chat, email, or WhatsApp.
• Feedback, complaint records, and survey responses you submit voluntarily.

02 How We Use Your Data

gbagie uses your personal data only for the purposes described in this Policy. We do not sell, rent, or trade your personal data to third parties for their own marketing purposes. The primary purposes for which we process your data are:

We will never use your data for purposes that are incompatible with those listed above without first obtaining your explicit consent or having a valid legal basis to do so.

03 Legal Basis for Processing

gbagie processes your personal data on the following legal grounds, depending on the nature of the processing activity:

• Contractual necessity: Most processing activities — including account management, KYC verification, payment processing, and game delivery — are necessary for the performance of the agreement between you and gbagie (i.e., our Terms & Conditions).
• Legal obligation: Certain processing activities, such as anti-money-laundering (AML) checks and the retention of financial records, are required by applicable law and regulatory obligations.
• Legitimate interests: We process technical and usage data to detect and prevent fraud, protect the security of our Platform, and improve our services. These activities are in the legitimate interests of gbagie and our player community and do not override your fundamental privacy rights.
• Consent: Where we send you promotional communications about bonuses, seasonal offers (e.g., Eid promotions, BPL cricket season offers), or new features, we rely on your consent. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting our support team.

04 Data Sharing & Third Parties

gbagie does not sell your personal data. We share your data only with the following categories of trusted third parties, strictly on a need-to-know basis and subject to appropriate data-protection safeguards:

4.1 Payment Service Providers

We share necessary transaction data with payment partners including bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, and partner banks (City Bank, BRAC Bank, Islami Bank, Sonali Bank) to process deposits and withdrawals. These providers operate under their own privacy policies and are independently regulated financial institutions.

4.2 Game Software Providers

When you play games powered by our software partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — limited gameplay and session data is transmitted to those providers' servers to enable real-time game delivery. These providers are certified gaming suppliers and handle data in accordance with industry-standard security protocols.

4.3 Identity Verification Partners

To fulfil our KYC and AML obligations, we may use specialist identity-verification and fraud-screening service providers. These partners process your identity documents and verification data solely for compliance purposes and are contractually prohibited from using that data for any other purpose.

4.4 Analytics & Technology Providers

We use trusted technology service providers for platform hosting, security monitoring, and aggregated analytics. These providers act as data processors on our behalf and are bound by strict contractual data-processing agreements that prohibit them from using your data for their own purposes.

4.5 Legal & Regulatory Disclosure

We may disclose your personal data to law-enforcement authorities, courts, or government bodies where we are legally required or compelled to do so — for example, in response to a valid court order, AML investigation, or regulatory inquiry. In such cases, we will disclose only the minimum data necessary to comply with the legal obligation.

05 Cookies & Tracking Technologies

gbagie uses cookies and similar tracking technologies (including pixel tags and local storage) to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. The cookies we use fall into the following categories:

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in and accessing core Platform features. For most modern browsers, cookie settings can be found under Settings → Privacy & Security → Cookies and Site Data.

06 Data Retention

gbagie retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations. Our standard retention periods are as follows:

• Active account data: Retained for the lifetime of your account plus a minimum of 5 years after account closure, to comply with anti-money-laundering regulations and financial record-keeping requirements.
• KYC and identity documents: Retained for a minimum of 5 years following the end of the business relationship, as required under AML compliance obligations.
• Transaction records: Retained for a minimum of 5 years to support financial audits and regulatory inquiries.
• Customer support records: Retained for 3 years following the resolution of the relevant query or complaint.
• Marketing consent records: Retained for as long as you remain an active marketing recipient, plus 2 years after consent withdrawal, for audit purposes.
• Technical and usage logs: Retained for 12 months in aggregated or anonymised form for platform analytics and security purposes.

When your data is no longer required and no legal obligation exists to retain it, we securely delete or anonymise it so that it can no longer be linked back to you as an individual.

07 Your Privacy Rights

gbagie respects your rights over your own personal data. Depending on applicable law and the specific circumstances of your request, you may be entitled to exercise the following rights:

• Right of Access: You may request a copy of all personal data we hold about you. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic profile information directly within your account dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected. Please note that this right is subject to our legal obligation to retain certain data (e.g., KYC and financial records) for a minimum statutory period.
• Right to Restriction: You may request that we restrict the processing of your data in specific circumstances — for example, while the accuracy of the data is being verified.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for marketing personalisation. You can opt out of marketing communications at any time via your account settings.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place prior to withdrawal.

To exercise any of the above rights, please contact our support team at [email protected]. We may ask you to verify your identity before processing your request. We will respond within 30 days; in complex cases, we may extend this by a further 30 days with prior notification.

08 Data Security

gbagie takes the security of your personal data seriously. We implement a multi-layered set of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and gbagie.net is encrypted using industry-standard TLS 1.2 or higher. Look for the padlock icon in your browser's address bar when accessing the Platform.
• Encrypted Password Storage: User passwords are never stored in plain text. We use strong one-way cryptographic hashing algorithms with per-user salting to protect login credentials.
• Access Controls: Access to personal data within gbagie is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational reason may access player data, and all internal access is logged.
• Two-Factor Authentication (2FA): We offer optional 2FA on player accounts to provide an additional layer of login security.
• Fraud & Anomaly Detection: Our Platform employs real-time monitoring systems to detect and flag unusual account activity, including multiple failed login attempts, suspicious IP addresses, and abnormal transaction patterns.
• Secure Data Centres: Player data is hosted in secure, access-controlled data centre facilities. Physical and environmental security controls are in place to guard against hardware-level threats.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, gbagie will notify affected users without undue delay and take all reasonable steps to contain the breach and mitigate its impact.

09 Children's Privacy

The gbagie Platform is strictly for adults aged 18 years and above. We do not knowingly collect personal data from any individual under the age of 18. By registering an account, you confirm that you are at least 18 years old. If we discover that personal data has been collected from a person under 18, we will immediately close the account, delete all associated personal data, and take appropriate steps to prevent recurrence.

If you believe that a minor has registered an account on gbagie.net, please contact us immediately at [email protected] and we will investigate and take prompt action.

10 Policy Updates

gbagie reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify registered players via the email address associated with their account and update the "Last Updated" date at the top of this page. The revised Policy will take effect from the date it is published on this page.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. Continued use of the gbagie Platform following publication of an updated Policy constitutes your acceptance of the revised terms. If you disagree with any changes, please contact our support team or request account closure in accordance with our Terms & Conditions.

11 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way gbagie handles your personal data, please reach out to our support team using the contact details below. We are committed to responding to all privacy-related inquiries promptly and thoroughly.

• Email: [email protected] — response within 2–6 hours, Bangladesh Standard Time (BST, UTC+6).
• Live Chat: Available 24/7 inside your gbagie account dashboard — the fastest way to reach us for urgent privacy or security concerns.
• WhatsApp: Contact number available inside your account dashboard after login.

All privacy-related correspondence should be submitted in English to ensure the fastest and most accurate response from our team.