gk22 Privacy Policy – How We Collect, Use, and Protect Your Personal Data

01 Introduction

gk22 ("we", "us", "our", "Platform") is committed to protecting the privacy and personal data of every player who uses our online betting and casino services at gk22.bar. This Privacy Policy describes our practices with respect to the collection, use, storage, disclosure, and protection of personal information we receive from players based in Bangladesh and elsewhere.

We take our data protection responsibilities seriously. The gk22 platform uses industry-standard security measures to safeguard all personal data against unauthorised access, loss, misuse, and disclosure. This Policy is designed to be transparent and straightforward so that you can make informed decisions about sharing your information with us.

This Privacy Policy should be read alongside our Terms and Conditions, available at /terms-conditions, and our Responsible Gaming Policy, available at /responsible-gaming. Together, these documents form the full framework governing your use of the gk22 Platform.

If you have any questions about how we handle your personal data, our dedicated support team is available 24 hours a day, 7 days a week via live chat and email at [email protected].

02 Data We Collect

gk22 collects personal data from you through several channels: directly when you register or interact with the Platform, automatically through your use of our services, and from third-party sources such as payment processors and identity verification providers. The categories of data we collect are detailed below.

2.1 Registration and Account Data

• Full legal name as it appears on your government-issued identity document
• Date of birth (used for mandatory 21+ age verification)
• Residential address in Bangladesh (district, city, postcode)
• Mobile phone number (used for account verification and two-factor authentication)
• Email address (used for account correspondence and security alerts)
• Username and encrypted password
• Account preferences and communication settings

2.2 KYC and Identity Verification Data

• Scanned copy or photograph of National Identity Card (NID) or passport
• Proof of address documentation (utility bill, bank statement dated within 90 days)
• Proof of payment method ownership (e.g., screenshot of bKash or Nagad account)
• Selfie or photograph submitted for face-match verification where required

2.3 Financial and Transaction Data

• Deposit and withdrawal transaction records including amounts in BDT (৳) and timestamps
• Payment method details (bKash account number, Nagad number, Rocket number, bank account reference — stored in hashed or tokenised form where technically possible)
• Bonus redemption history and wagering completion records
• Account balance history

2.4 Betting and Gaming Activity Data

• Bet slips, stake amounts, odds accepted, and settlement outcomes
• Casino game session records, round durations, and results
• Sports markets accessed and cricket/football events wagered on
• Session duration and frequency of play data (used for responsible gaming monitoring)

2.5 Technical and Device Data

• IP address and approximate geolocation (country and city level)
• Device type, operating system version, and browser type
• Unique device identifiers and session tokens
• Log data including pages visited, features used, error reports, and access timestamps

2.6 Communications Data

• Live chat transcripts and support ticket content
• Email correspondence with the support team
• Responses to surveys, feedback forms, or promotional campaigns (where voluntarily provided)

03 How We Use Your Data

We process your personal data for specific, legitimate purposes only. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which gk22 uses personal data are as follows:

Where you have given explicit consent, we may also use your contact details to send promotional communications about gk22 offers, new game launches, and seasonal promotions relevant to players in Bangladesh. You may withdraw this consent at any time by contacting support or adjusting your communication preferences in your account settings.

04 Legal Basis for Processing

gk22 processes personal data on one or more of the following legal grounds:

• Contractual necessity: Processing required to provide the services you have registered for, including account management, payment processing, and bet settlement.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) obligations, age verification requirements, and regulatory reporting duties.
• Legitimate interests: Processing carried out to pursue our legitimate business interests, such as fraud prevention, platform security, responsible gaming monitoring, and service improvement — where such interests are not overridden by your fundamental rights.
• Consent: Processing carried out on the basis of your explicit, freely given consent, such as sending promotional communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

05 Sharing Your Data

gk22 may share your personal data with carefully selected third parties only where necessary and only for the purposes described in this Policy. All third-party recipients are bound by confidentiality obligations and data protection requirements consistent with this Policy.

5.1 Payment Processors

To facilitate deposits and withdrawals, we share relevant financial data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These providers receive only the data necessary to process the specific transaction and are bound by their own regulatory obligations as licensed financial service providers in Bangladesh.

5.2 KYC and Identity Verification Partners

We work with third-party identity verification services to conduct KYC checks on player accounts. These providers receive the KYC documents you submit and return a verification outcome to gk22. They do not retain your documents beyond what is required for the verification process.

5.3 Game Content Providers

Casino and sports betting game content is provided by third-party studios including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe. These providers receive anonymised session identifiers and game outcome data required to operate their software. They do not receive your full profile or payment details.

5.4 Regulatory and Law Enforcement Authorities

gk22 will disclose personal data to competent authorities where required to do so by applicable law, court order, or regulatory direction. We may also disclose data where we reasonably believe disclosure is necessary to prevent fraud, protect the safety of any person, or protect the rights and property of gk22.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of our assets, personal data held by gk22 may be transferred to the acquiring entity as part of that transaction. We will notify affected players via the contact details on record before any such transfer takes effect, and the recipient entity will be bound by terms no less protective than this Privacy Policy.

06 Data Storage and Security

We store all personal data on secure servers. Our security framework includes the following controls and safeguards:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the gk22 platform
• AES-256 encryption for sensitive personal and financial data stored in our databases
• Role-based access controls ensuring that only staff with a legitimate operational need can access personal data
• Multi-factor authentication required for all staff accessing internal data systems
• Regular third-party security audits and penetration testing of Platform infrastructure
• Automated intrusion detection and real-time monitoring of system access logs
• Secure data backup procedures with encrypted offsite redundancy

Despite the robust security measures in place, no method of data transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your personal data using commercially acceptable means, we cannot guarantee its absolute security. In the event of a data breach that poses a material risk to your rights, we will notify affected players without undue delay.

07 Data Retention

gk22 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to any individual. Anonymised, aggregated data may be retained indefinitely for analytical and statistical purposes.

08 Cookies and Tracking Technologies

gk22 uses cookies and similar tracking technologies on its platform to maintain session state, prevent fraud, and understand how players interact with the site. A cookie is a small text file stored on your device by your web browser when you visit a website.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: These are required for the platform to function. They maintain your login session, store your language preferences, and prevent cross-site request forgery attacks. These cookies cannot be disabled without breaking core platform functionality.
• Analytical Cookies: These help us understand how players use the platform — which games are most popular, how long sessions last, and where players encounter errors. We use this data in aggregated form to improve the gk22 experience. These cookies do not identify you as an individual.
• Fraud Prevention Cookies: These store device fingerprint signals to help us detect suspicious or automated access patterns. They are essential for platform security and are classified as necessary.
• Preference Cookies: These remember your display settings, notification preferences, and betting interface configuration between sessions.

8.2 Managing Cookies

You can control and delete cookies through your web browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and set preferences for specific websites. Note that disabling strictly necessary cookies will prevent you from logging into your gk22 account and using key platform features.

gk22 does not use cookies to track your browsing activity on other websites or to deliver third-party advertising targeted at you across the internet.

09 Your Privacy Rights

As a player using the gk22 platform, you hold a number of rights with respect to your personal data. We are committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, please contact our support team at [email protected].

We will not charge a fee for handling privacy rights requests unless a request is manifestly unfounded or excessive. In such cases, we may charge a reasonable administrative fee or decline to respond, and will explain our reasoning in writing. Identity verification may be required before we act on any request to ensure we are disclosing or modifying data belonging to the correct person.

10 Minors and Age Verification

gk22 requires all players to confirm that they are aged 21 or above at the point of registration. We conduct mandatory KYC age verification using government-issued identity documents before withdrawal rights are granted on any account.

Parents and guardians in Bangladesh who believe that a minor in their household has registered on the gk22 Platform should contact our support team immediately at [email protected]. We will investigate and close the account within two business hours of a confirmed underage report. We strongly encourage the use of parental control software on any device that may be accessed by minors.

11 International Data Transfers

gk22 operates as an internationally licensed offshore platform. Your personal data may be transferred to and processed in countries outside Bangladesh for the purposes described in this Policy — for example, when data is processed by our KYC verification partner or game content provider infrastructure hosted in a third country.

Where such transfers occur, we ensure that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this Policy. These safeguards may include contractual clauses that bind the recipient to our data protection standards, or reliance on the recipient's participation in a recognised international data protection framework.

By using the gk22 Platform and agreeing to this Privacy Policy, you consent to such international transfers of your personal data, subject to the safeguards described above.

12 Changes to This Privacy Policy

gk22 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players via the email address or mobile number on record, and will publish the updated Policy on this page with a revised effective date.

Your continued use of the gk22 Platform following notification of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with any material change, you must cease using the Platform and contact support to close your account. Any data collected and processed prior to the effective date of the revised Policy will remain subject to the version of the Policy that was in effect at the time of collection.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way gk22 handles your personal data, please reach out to our support team through any of the following channels:

• Live Chat: Available 24/7 on the gk22 Platform (Bangladesh Standard Time, UTC+6)
• Email: [email protected] (plain text — not a clickable link)
• WhatsApp: +880 1700 000000

We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a full written response within five business days. For complex requests involving data access or erasure, we may require identity verification before proceeding.