gt888 Privacy Policy

1 Who We Are

gt888 is Bangladesh's premier online casino and sports betting platform, operated at gt888.bio. We provide casino games, live dealer experiences, sports betting markets — including cricket (BPL, Bangladesh Tigers, IPL, T20 World Cup), slots, and fishing games — to adult players aged 21 and above who are physically located in Bangladesh.

For the purposes of this Privacy Policy, gt888 acts as the data controller in respect of personal data collected through the gt888 platform. This means we determine the purposes for which your personal data is collected and the means by which it is processed.

If you have any questions about how your personal data is handled, you may contact our dedicated privacy support team at any time. Contact details are provided in Section 14 of this Policy.

2 Data We Collect

gt888 collects personal data through multiple channels in the ordinary course of operating a regulated online gaming platform. The categories of data we collect are described below.

2.1 Registration Data

When you create a gt888 account, we collect the personal information you provide during the registration process, including:

• Full legal name (as it appears on your National Identity Card)
• Date of birth (to verify you are 21 years of age or older)
• Residential address in Bangladesh (including district, division, and postcode)
• Mobile phone number
• Email address
• Username and encrypted password

2.2 Identity Verification (KYC) Data

To comply with our KYC obligations and to process withdrawal requests, we may collect:

• A copy of your National Identity Card (NID) issued by the Bangladesh Election Commission
• A copy of your valid Bangladeshi passport (where NID is unavailable)
• A recent utility bill or bank statement confirming your residential address
• Evidence of ownership of your payment account (e.g., a bKash or Nagad account screenshot)
• A selfie photograph for live facial verification where required

2.3 Financial Transaction Data

When you deposit or withdraw funds via bKash, Nagad, Rocket, or Upay, we record:

• Transaction reference numbers
• Deposit and withdrawal amounts (in BDT)
• Payment method type and masked account identifiers
• Transaction timestamps (Bangladesh Standard Time, UTC+6)

2.4 Gaming & Betting Activity Data

gt888 automatically records all gaming and betting activity conducted through your account, including game sessions, bet amounts, win/loss outcomes, game types played (slots, live casino, cricket betting, fishing games), and session durations. This data is used for account management, responsible gaming monitoring, and fraud detection.

2.5 Technical & Device Data

When you access the gt888 platform, our servers automatically collect certain technical information, including your IP address, browser type and version, device type, operating system, screen resolution, and referring URL. This information is used to ensure the platform functions correctly on your device and to detect unusual or fraudulent access patterns.

Data Category	Examples	Collection Method
Registration	Name, DOB, address, email, phone	User-provided at sign-up
KYC Documents	NID, passport, utility bill	User-uploaded on request
Financial	Transaction IDs, amounts, payment method	Automatically on transaction
Gaming Activity	Bets, wins, game sessions	Automatically during play
Technical	IP address, device, browser	Automatically on access
Communications	Support chat logs, emails	During support interactions

3 How We Use Your Data

gt888 uses the personal data it collects for the following specific purposes:

• Account creation and management: To register your account, authenticate your identity at login, maintain your account balance and transaction history, and provide you with access to all gt888 services.
• Age and identity verification: To confirm that you are at least 21 years of age and that your identity matches the registration information you have provided, as required by our responsible gaming obligations.
• Payment processing: To process deposits made via bKash, Nagad, Rocket, and Upay, and to execute withdrawal requests to your verified payment method in BDT.
• Responsible gaming monitoring: To track your gaming activity and identify patterns that may indicate problem gambling, such as sudden increases in bet sizes, extended session durations, or rapid sequential deposits. This data is used to prompt responsible gaming interventions where appropriate.
• Fraud prevention and anti-money-laundering: To detect, investigate, and prevent fraudulent activity, account takeovers, collusion, bonus abuse, and money laundering. This includes automated transaction monitoring and periodic manual review.
• Customer support: To respond to your queries, resolve disputes, process complaints, and deliver a high standard of after-care service.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the gt888 platform, optimise game offerings, and enhance user experience for Bangladeshi players.
• Marketing communications (with consent): To send you promotional offers, deposit bonuses, free bet notifications, and seasonal promotions (e.g., Eid specials, BPL cricket offers, Pohela Boishakh promotions) where you have given your explicit consent to receive such communications.
• Legal compliance: To comply with applicable legal obligations, respond to lawful requests from authorities, and enforce our Terms & Conditions.

4 Legal Basis for Processing

gt888 processes your personal data on the following legal bases:

• Contractual necessity: Processing your registration data, KYC documents, and financial transaction records is necessary to perform the contract between you and gt888 (i.e., to operate your account and provide gaming services).
• Legal obligation: Processing for identity verification, fraud prevention, anti-money-laundering checks, and retention of financial records is required by applicable law.
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and platform improvement is carried out on the basis of gt888's legitimate interests in operating a safe, fair, and sustainable gaming platform, balanced against your privacy rights.
• Consent: Processing for marketing communications is conducted only where you have given your explicit, freely given consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Data Sharing & Third Parties

gt888 does not sell your personal data to any third party. We share data only in the limited circumstances described below:

5.1 Payment Service Providers

To process deposits and withdrawals, we share necessary transaction data with our approved payment partners: bKash, Nagad, Rocket (Dutch-Bangla Bank), and Upay. These providers act as independent data controllers for the transaction data they receive and are subject to their own privacy policies.

5.2 Identity Verification Partners

Where automated KYC checks are required, we may share document images and personal details with regulated identity verification service providers. These providers are contractually bound to process your data solely for verification purposes and must maintain appropriate security standards.

5.3 Game Software Providers

Game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive anonymised session and wagering data necessary to operate their games on the gt888 platform. No personally identifiable information is shared with game providers beyond what is technically required for game delivery.

5.4 Legal and Regulatory Authorities

gt888 may disclose personal data to law enforcement agencies, courts, or regulatory bodies where we are legally required to do so. Such disclosures are made only to the extent necessary and in strict compliance with applicable law. Where permitted, we will notify affected players of such disclosures.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of assets involving gt888, your personal data may be transferred to the acquiring entity as part of that transaction. We will provide notice before your personal data is subject to a different privacy policy as a result of such a transfer.

6 Cookies & Tracking Technologies

gt888 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit the gt888 website. They allow us to recognise returning users, maintain session state, remember your preferences, and analyse platform usage patterns.

6.1 Types of Cookies We Use

• Essential cookies: Required for the platform to function correctly. These include session cookies that keep you logged in during your visit and security cookies that help us detect fraudulent activity. You cannot opt out of essential cookies while using the platform.
• Analytics cookies: Used to collect anonymised data about how players navigate the gt888 platform — which pages are visited most, how long sessions last, and where users encounter issues. This data helps us improve the platform experience.
• Preference cookies: Store your platform settings such as language preference, display options, and notification preferences so you do not have to reset them on each visit.
• Marketing cookies: Used only with your consent to track your interaction with gt888 promotional content and to deliver relevant offers. You may opt out of marketing cookies at any time by contacting our support team.

7 Data Retention

gt888 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any applicable legal retention requirements. Our standard retention periods are as follows:

Data Type	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	Legal and contractual obligation
KYC documents	Duration of account + 5 years after closure	Anti-money-laundering compliance
Financial transaction records	7 years from transaction date	Financial record-keeping requirements
Gaming activity logs	3 years from session date	Responsible gaming & dispute resolution
Customer support communications	3 years from last interaction	Dispute resolution & quality assurance
Marketing consent records	Until consent is withdrawn + 1 year	Proof of consent compliance

Once data is no longer required and the applicable retention period has expired, it is securely deleted or anonymised so that it can no longer be associated with any individual.

8 Data Security

gt888 takes the security of your personal data seriously. We have implemented a comprehensive set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the gt888 platform is encrypted using industry-standard Transport Layer Security (TLS) protocols, ensuring that your login credentials, personal details, and financial transactions cannot be intercepted in transit.
• AES-256 encryption at rest: Sensitive data stored on gt888 servers — including KYC documents and financial records — is encrypted using AES-256 encryption, the same standard used by major financial institutions worldwide.
• Access controls: Access to personal data within gt888's systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and regular security training.
• Two-factor authentication: gt888 strongly recommends that all players enable two-factor authentication (2FA) on their accounts for an additional layer of login security.
• Penetration testing and audits: gt888 conducts regular security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data breach that poses a risk to your rights and freedoms, gt888 will notify affected players without undue delay and take all necessary steps to contain the breach and prevent recurrence.

9 Your Privacy Rights

As a gt888 player based in Bangladesh, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team using the details in Section 14.

• Right of access: You have the right to request a copy of all personal data that gt888 holds about you. We will respond to verified access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain details directly within your account settings; for other changes, please contact support.
• Right to erasure: You may request that gt888 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you believe the data has been processed unlawfully. Note that we may be required to retain certain data to comply with legal obligations even after an erasure request.
• Right to restrict processing: You may request that gt888 temporarily pause processing of your data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that we provide your personal data in a structured, machine-readable format so that it can be transferred to another service provider.
• Right to object: You have the right to object to processing of your personal data where gt888 relies on legitimate interests as the legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

10 Children's Privacy

gt888 is strictly an adults-only platform. You must be at least 21 years of age to register an account or use any gt888 service. We do not knowingly collect, store, or process personal data from individuals under the age of 21.

If gt888 becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. Any winnings accumulated by an underage account will be forfeited in full in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that your child has registered an account with gt888, please contact our support team immediately so that the account can be investigated and closed without delay.

11 Third-Party Links

The gt888 platform does not contain links to external third-party websites. All navigation within the platform remains on the gt888 domain (gt888.bio). As such, the risk of inadvertent data exposure through third-party links is minimised by design.

Game software providers — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — deliver their game content within an embedded interface on the gt888 platform. While the game engine itself is operated by the provider, gt888 does not redirect you to an external provider website at any point during normal gameplay. Each provider's own data practices are governed by their respective privacy policies, which are separate from this gt888 Privacy Policy.

12 Marketing Communications

gt888 sends promotional communications — including deposit bonus offers, free bet alerts, game launch announcements, and seasonal promotions — only to players who have explicitly consented to receive them. Marketing consent is requested during the registration process and may be updated at any time through your account preferences.

12.1 Types of Marketing We Send

• Welcome bonus and first-deposit offer notifications
• Reload bonuses and weekly cashback promotions
• BPL, IPL, and T20 World Cup cricket betting offers
• Seasonal promotions for Eid, Pohela Boishakh, Victory Day, and other Bangladeshi occasions
• New game launch announcements from providers like Pragmatic Play and Evolution Gaming
• VIP programme updates and exclusive player rewards

12.2 How to Opt Out

You may withdraw marketing consent at any time by contacting gt888 customer support at [email protected] or by updating your notification preferences within your account settings. Opting out of marketing communications has no effect on your ability to use the gt888 platform or on any current bonus balances.

13 Policy Updates

gt888 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will notify registered players via a prominent notice on the platform or by email to the address associated with your account, at least seven (7) days before the changes take effect.

Minor and non-material updates — such as clarifications of existing practices, typographical corrections, or formatting changes — may be made without prior notice. The "Effective Date" shown at the top of this Policy and in the hero section above reflects when the current version came into force.

We encourage you to review this Privacy Policy periodically to stay informed of how gt888 protects your personal data. Continued use of the gt888 platform after any update constitutes your acknowledgement of the revised Policy.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way gt888 handles your personal data, please contact our privacy support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for privacy requests: "Privacy Request — [Your Username]"
• Support availability: 24 hours a day, 7 days a week, including all Bangladesh public holidays
• Average response time: Within 24 hours for email; within 3 minutes for live chat
• Time zone: Bangladesh Standard Time (BST, UTC+6)

For data erasure, access, or portability requests, please include your full name, registered email address, and a description of your request. gt888 will verify your identity before processing any data rights request to ensure that personal data is only disclosed to or deleted upon the instruction of the account holder.