gbd3 Privacy Policy

1.1 This Privacy Policy applies to all personal data collected by gbd3 through the gbd3.io website, any associated mobile applications, and all related services and communications. It sets out the basis on which we process personal data about our players and visitors.

1.2 This policy should be read alongside the gbd3 Terms & Conditions, which together form the complete contractual and regulatory framework governing your use of the gbd3 Platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions on data-related matters, this Privacy Policy shall prevail.

1.3 We may update this Privacy Policy from time to time to reflect changes in our data practices, operational requirements, or applicable legal obligations. All updates will be clearly dated and communicated to registered players. The version published on the gbd3 Platform on any given date constitutes the current and binding version of this policy.

2.1 For the purposes of this Privacy Policy, gbd3 acts as the data controller in respect of all personal data collected from players and visitors through the gbd3 Platform. As data controller, gbd3 determines the purposes and means by which personal data is processed.

2.2 If you have any questions about how gbd3 handles your personal data, or if you wish to exercise any of the rights described in Section 10 of this policy, you may contact our Data Protection team at [email protected]. Please use the subject line "Data Protection Inquiry" to ensure your query is routed to the correct team without delay.

3.1 gbd3 collects personal data from players across several categories. The specific data collected depends on the nature of your interaction with the Platform:

Data Category	Examples	When Collected
Identity Data	Full legal name, date of birth, national ID number, passport number	Registration and KYC verification
Contact Data	Email address, mobile phone number, residential address in Bangladesh	Registration and account updates
Financial Data	bKash / Nagad / Rocket / Upay account numbers, Visa / Mastercard last four digits, transaction history	Deposits, withdrawals, and KYC
Transaction Data	Deposit amounts, withdrawal requests, bet history, win/loss records, bonus usage	Ongoing Platform use
Technical Data	IP address, device type, browser type and version, operating system, session timestamps	Every Platform visit
Usage Data	Pages visited, games played, features accessed, click patterns, session duration	Every Platform visit
Communications Data	Live chat transcripts, support email content, feedback submissions	When you contact support
Marketing Preferences	Opt-in / opt-out status for promotional emails and SMS, preferred communication channel	Registration and account settings

3.2 gbd3 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data, except where a specific document submitted for KYC purposes incidentally contains such information (for example, a national ID card that lists religion). In such cases, the sensitive data is not recorded or processed beyond what is necessary to confirm identity.

4.1 gbd3 uses the personal data we collect for the following specific purposes:

• Account Registration and Management: To create, maintain, and administer your gbd3 account, verify your identity and age (21+), and provide you with access to the Platform's full feature set.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records associated with your account.
• KYC and Fraud Prevention: To conduct identity verification checks, detect and prevent fraudulent activity, bonus abuse, money laundering, and other prohibited conduct as described in the gbd3 Terms & Conditions.
• Customer Support: To respond to queries, complaints, and support requests submitted via live chat or email, and to maintain a record of communications for quality assurance purposes.
• Responsible Gaming: To monitor player activity for signs of problem gambling behavior, enforce self-exclusion and deposit limit requests, and deliver reality check notifications in accordance with our Responsible Gaming Policy.
• Platform Improvement: To analyse usage patterns, identify technical errors, test new features, and improve the overall performance and user experience of the gbd3 Platform.
• Marketing Communications: To send promotional offers, bonus notifications, and seasonal campaigns to players who have opted in to receive such communications. Marketing emails will always include a clear and functional unsubscribe option.
• Legal Compliance: To comply with applicable laws, respond to lawful requests from regulatory or law enforcement authorities in Bangladesh, and enforce the gbd3 Terms & Conditions.

5.1 gbd3 processes player personal data on the following legal bases, depending on the purpose of processing:

• Contractual Necessity: Processing required to perform the contract between gbd3 and the player — including account management, payment processing, and game delivery — is carried out on the basis that it is necessary to fulfil our contractual obligations to you.
• Legal Obligation: Processing required for KYC compliance, fraud prevention, anti-money laundering checks, and responses to lawful regulatory or law enforcement requests is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for Platform security monitoring, fraud detection, and Platform improvement analytics is carried out on the basis of gbd3's legitimate business interests, provided those interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications is carried out solely on the basis of your freely given and specific consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6.1 gbd3 does not sell, rent, or trade your personal data. We share personal data only in the following limited and controlled circumstances:

• Payment Processors: We share necessary financial data with bKash, Nagad, Rocket, Upay, and card processing partners solely to facilitate deposits and withdrawals. These providers process your data under their own privacy policies and are contractually bound to handle your data securely.
• Game Technology Providers: Providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (such as session identifiers) necessary to deliver game content. No personally identifiable financial data is shared with game providers.
• KYC and Identity Verification Services: Where gbd3 uses a third-party identity verification service to support the KYC process, the minimum necessary identity data is shared with that provider under strict confidentiality and data processing agreements.
• Legal and Regulatory Authorities: gbd3 will disclose personal data to law enforcement, regulatory bodies, or courts in Bangladesh where required to do so by a legally binding order or where disclosure is necessary to prevent fraud, financial crime, or serious harm.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of gbd3's assets, player personal data may be transferred as part of that transaction. Affected players will be notified in advance and given the opportunity to close their accounts if they do not wish their data to be transferred.

6.2 All third parties with whom gbd3 shares personal data are required to implement appropriate technical and organisational security measures and to process the data only for the specific, documented purposes for which it was shared.

7.1 gbd3 uses cookies and similar tracking technologies to support Platform functionality, analyse usage patterns, and personalise your experience. The following types of cookies are used on the gbd3 Platform:

• Strictly Necessary Cookies: Required for the Platform to function correctly, including session management, login state maintenance, and security token validation. These cookies cannot be disabled without impairing Platform functionality.
• Analytics Cookies: Used to collect anonymised data about how players navigate the Platform, which pages are visited most frequently, and where technical errors occur. This data is used exclusively to improve Platform performance.
• Preference Cookies: Store user preferences such as language settings, display options, and responsible gaming reminder intervals so that these do not need to be re-entered on each visit.

7.2 You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to log in and use core Platform features. gbd3 does not use third-party advertising cookies or retargeting pixels.

8.1 gbd3 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of the account relationship plus a minimum of 5 years following account closure, to satisfy legal and regulatory record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of 7 years from the date of the transaction in accordance with standard financial record-keeping obligations.
• KYC Documents: Retained for a minimum of 5 years following account closure or the completion of the KYC verification process, whichever is later.
• Support Communications: Retained for 3 years from the date of the last communication, unless the communication forms part of an ongoing dispute or legal matter, in which case it is retained until resolution plus 1 year.
• Marketing Consent Records: Retained for 3 years from the date of consent or the date of withdrawal of consent, whichever is later.

8.2 Upon expiry of the applicable retention period, gbd3 will securely delete or anonymise personal data in accordance with our internal data destruction procedures.

9.1 gbd3 implements comprehensive technical and organisational security measures to protect player personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the gbd3 Platform;
• AES-256 encryption for sensitive data stored on gbd3 servers;
• Role-based access controls ensuring that only authorised staff can access personal data, and only to the extent required for their specific role;
• Regular internal security audits and penetration testing of the gbd3 Platform;
• Two-factor authentication (2FA) available to all registered players to protect account access;
• Automated anomaly detection systems that flag unusual login activity, payment patterns, or access attempts for review.

9.2 In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected players, gbd3 will notify affected players without undue delay and will take all reasonable steps to contain the breach and mitigate its impact.

9.3 While gbd3 takes data security very seriously, no online platform can guarantee absolute security. Players are responsible for maintaining the confidentiality of their own account credentials and should contact gbd3 support immediately at [email protected] if they suspect unauthorised access to their account.

10.1 As a registered gbd3 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request":

• Right of Access: You have the right to request a copy of the personal data gbd3 holds about you, along with information about how it is processed. We will provide this within 30 days of a verified request.
• Right to Rectification: If any personal data gbd3 holds about you is inaccurate or incomplete, you have the right to request correction. You may also update certain account details directly through your account settings page.
• Right to Erasure: Subject to our legal and contractual retention obligations, you may request the deletion of your personal data. Note that we cannot delete data we are legally required to retain (e.g., financial transaction records).
• Right to Restrict Processing: You may request that gbd3 restricts the processing of your personal data in certain circumstances — for example, if you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on gbd3's legitimate interests. Upon receipt of a valid objection, gbd3 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

10.2 gbd3 will respond to all verified data rights requests within 30 days. Where a request is complex or numerous, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason within the initial 30-day period.

11.1 The gbd3 Platform is strictly intended for adults aged 21 and above. gbd3 does not knowingly collect or process personal data from individuals under the age of 21. If gbd3 discovers or is notified that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account will be closed without compensation.

11.2 If you believe that a minor may have registered an account on gbd3, please contact us immediately at [email protected] so that the matter can be investigated and resolved promptly.

12.1 gbd3 will only send you marketing communications — including promotional emails, SMS messages, and in-platform notifications — if you have explicitly opted in to receive them during registration or through your account settings. We do not send unsolicited marketing communications.

12.2 Marketing communications from gbd3 may include information about deposit bonuses, reload offers, free bets, seasonal promotions tied to events such as BPL, IPL, T20 World Cup, Eid, and Pohela Boishakh, as well as new game announcements and Platform feature updates.

12.3 You may withdraw your consent to receive marketing communications at any time by:

• Clicking the unsubscribe link included in every marketing email;
• Updating your communication preferences in your gbd3 account settings; or
• Contacting gbd3 support at [email protected] with the subject line "Marketing Opt-Out".

12.4 Opting out of marketing communications will not affect your ability to use the gbd3 Platform, receive transactional account emails (such as deposit confirmations, withdrawal notifications, and KYC requests), or access any Platform features.

13.1 The gbd3 Platform may contain references to third-party game providers and payment processors. While these services are integrated into the gbd3 Platform, each third-party provider operates under its own privacy policy and is independently responsible for its own data processing practices.

13.2 gbd3 is not responsible for the privacy practices of third-party providers. Players who interact directly with third-party services (for example, by contacting a payment provider's customer support) should review the relevant provider's own privacy documentation.

14.1 gbd3 reserves the right to update this Privacy Policy at any time. Where a material change is made — that is, a change that meaningfully affects how we collect or use personal data — we will notify registered players via the email address on their account and post a visible notice on the gbd3 Platform at least 7 days before the change takes effect.

14.2 Non-material changes (such as clarifications in language, formatting updates, or corrections of typographical errors) may be made without prior notice, although the policy version date will always be updated to reflect the most recent revision.

14.3 Continued use of the gbd3 Platform following the effective date of a policy update constitutes your acceptance of the revised Privacy Policy. If you do not agree with any change, you may request account closure by contacting gbd3 support before the effective date.

15.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the way gbd3 handles your personal data, please contact our Data Protection team through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Data Protection Inquiry" or "Data Rights Request"
• Live Chat: Available 24 hours a day, 7 days a week via the gbd3 Platform
• Response Time: We aim to respond to all data-related inquiries within 5 business days (Bangladesh Standard Time, UTC+6)

15.2 If you are not satisfied with our response to a data protection inquiry, you have the right to escalate your complaint by emailing [email protected] with the subject line "Formal Data Complaint". All formal complaints will receive a written response within 10 business days.