Your Privacy
Matters to g33

Document version: 2.4  |  Effective: 1 January 2026  |  Controller: g33 (g33.club)  |  Contact: [email protected]

This Privacy Policy ("Policy") describes how g33 ("g33", "we", "us", "our"), the operator of the online gaming platform at g33.club, collects, uses, stores, shares, and protects the personal data of users ("you", "your", "the player") who access our website, create an account, or use any of our services — including live casino, cricket betting, online slots, crash games, and related features targeted at the Bangladesh market.

By registering a g33 account or continuing to use our platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you disagree with any part of this Policy, you should discontinue use of g33 and contact [email protected] (plain text — not a clickable link) to request account closure.

1. Data We Collect

g33 collects personal data through several channels: directly from you when you register and use the platform, automatically through technical systems as you browse and play, and in limited cases from trusted third parties involved in payment processing and identity verification. The categories of data we collect are set out below.

1.1 Registration & Account Data

When you create a g33 account, we collect the following information:

• Full legal name — as it appears on your government-issued identity document
• Date of birth — to verify that you are aged 18 or above 18+
• Email address — used for account communications and security alerts
• Mobile number — used for two-factor authentication (2FA) and transaction notifications
• Residential address — including district and division within Bangladesh
• Username and password — passwords are stored as salted cryptographic hashes; we never store plain-text passwords

1.2 Identity Verification (KYC) Data

Before processing your first withdrawal, g33 is required to complete Know Your Customer (KYC) identity verification. At this stage, we collect:

• Copies of government-issued photo ID (Bangladesh National ID card, passport, or driving licence)
• Proof of address documentation (bank statement, utility bill, or equivalent), where required
• Source of funds declaration, where transaction volumes trigger enhanced due diligence requirements
• Selfie or live photo for facial comparison against submitted ID, in certain verification scenarios

KYC documents are handled by g33's compliance team and, where applicable, by our contracted identity verification partner. They are not used for any purpose other than verification, fraud prevention, and regulatory compliance.

1.3 Financial Transaction Data

When you make deposits or withdraw funds via bKash, Nagad, Rocket, Upay, or bank transfer, we collect:

• Mobile wallet account number (last four digits only, for reconciliation)
• Transaction reference IDs issued by the payment provider
• Deposit and withdrawal amounts in ৳ BDT
• Date, time, and method of each transaction

g33 does not store full mobile banking PINs, full card numbers, or complete bank account credentials. Financial credentials are handled exclusively by the relevant payment service provider under their own privacy and security frameworks.

1.4 Gameplay & Betting Data

For every gaming session on g33 — including live casino tables, cricket betting markets, online slots, and crash games — we record:

• Games played, bet amounts, outcomes, and session duration
• Responsible gaming tool usage (e.g., deposit limit activations, self-exclusion requests, session time reminders)
• Bonus and promotional offer interactions

This data enables g33 to deliver a fair gaming experience, detect problem gambling patterns so we can intervene early, investigate disputes, and comply with our anti-money-laundering (AML) monitoring obligations.

1.5 Technical & Device Data

When you access g33, our systems automatically collect technical information, including:

This technical data is used for security monitoring, fraud detection, geographic access controls, platform performance optimisation, and aggregate analytics. We do not use IP addresses to identify individuals beyond what is necessary for security and compliance purposes.

2. How We Use Your Data

g33 uses personal data only for purposes that are directly connected to providing, securing, and improving our gaming platform and associated services. The table below maps each primary purpose to the data categories involved.

Purpose	Data Categories Used
Account creation and management	Registration data, device data
Age and identity verification (KYC)	Registration data, KYC documents
Processing deposits and withdrawals	Financial transaction data, KYC data
Delivering gaming services	Gameplay data, account data
Fraud prevention and AML monitoring	All categories as required
Responsible gaming interventions	Gameplay data, account data
Customer support	Account data, transaction data, gameplay data
Platform security and abuse prevention	Technical data, account data
Marketing communications (opt-in only)	Email address, gameplay preferences
Platform analytics and improvement	Technical data, gameplay data (aggregated)

g33 will never use your data for purposes incompatible with those listed above without providing prior notice and, where required, obtaining your consent. Where we intend to use your data for a new purpose, we will update this Policy and notify registered players via email.

3. Legal Basis for Processing

g33 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the account agreement — including account creation, payment processing, gaming services, and customer support.
• Legal obligation: Processing required to comply with applicable legal requirements — including KYC identity verification, AML transaction monitoring, and regulatory reporting.
• Legitimate interests: Processing carried out for our legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security, and aggregate analytics.
• Consent: Processing based on your specific, informed, and freely given consent — principally marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

4. Data Sharing & Third Parties

g33 does not sell, rent, or trade your personal data. We share data only in the limited circumstances described below, and only to the extent strictly necessary for the specific purpose.

4.1 Payment Service Providers

To process deposits and withdrawals, g33 shares relevant financial and identity data with our contracted payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These providers act as independent data controllers for the transactions they process and are subject to their own privacy policies.

4.2 Identity Verification Partners

KYC document verification is carried out by a contracted third-party identity verification service. This partner receives only the documents necessary to complete verification and is contractually prohibited from using that data for any other purpose.

4.3 Game Technology Providers

g33 integrates games from providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised or pseudonymised session data (such as a player token and bet history) to operate their game engines and resolve game-related disputes. They do not receive your full name, NID number, or financial account credentials.

4.4 Legal and Regulatory Disclosure

g33 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by law, court order, or in response to a lawful request related to fraud investigation, money laundering, or other unlawful activity. We will notify affected players of such disclosures to the extent permitted by law.

5. Cookies & Tracking

g33 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain session security, and gather aggregate analytics. Cookies are small text files placed on your device by your browser when you visit g33.club.

5.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. You cannot opt out of strictly necessary cookies while using g33.
• Functional Cookies: Store your preferences such as language settings, display preferences, and responsible gaming tool configurations to personalise your experience.
• Analytics Cookies: Collect aggregated, anonymised data about how players use the platform — pages visited, time on page, and navigation paths. This data helps us improve g33's design and performance. No individual player is identified in analytics reports.
• Security Cookies: Used to detect suspicious login attempts, bot activity, and account takeover attempts. These cookies are part of g33's fraud prevention system.

5.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies via the browser's privacy or settings menu. Please note that disabling functional or analytics cookies may affect certain features of the g33 platform. Strictly necessary cookies cannot be disabled without preventing you from using the platform altogether.

6. Data Retention

g33 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, to maintain the account relationship, and to comply with legal obligations. The following retention periods apply as a general guide:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	Legal obligation, dispute resolution
KYC identity documents	5 years after account closure	AML regulatory requirement
Financial transaction records	5 years after the transaction date	AML and accounting obligations
Gameplay and betting history	3 years after last activity	Dispute resolution, responsible gaming
Customer support communications	3 years after resolution	Quality assurance, dispute evidence
Technical and device logs	12 months	Security monitoring
Marketing preferences	Until opt-out or account closure	Consent management

After the applicable retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual.

7. Your Privacy Rights

As a g33 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] (plain text — not a clickable link) with the subject line "Privacy Rights Request" and your registered email address. g33 will respond within 30 calendar days.

• Right of Access: You may request a copy of the personal data g33 holds about you, along with information about how it is being used.
• Right to Rectification: If any personal data g33 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal ground for processing exists. Note that data subject to legal retention obligations (e.g., AML records) cannot be deleted before the mandatory retention period expires.
• Right to Restrict Processing: You may request that g33 limits the processing of your data in certain circumstances — for example, where you contest the accuracy of the data or object to a specific processing activity.
• Right to Data Portability: Where processing is based on your consent or on a contractual relationship, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes. Where you object to marketing, g33 will cease that processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

8. Data Security

g33 takes data security seriously and has implemented a layered set of technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. Our key security measures include:

• SSL/TLS encryption on all data in transit between your device and our servers
• AES-256 encryption for sensitive data at rest, including KYC documents and identity records
• Bcrypt password hashing with per-account salt — we never store plain-text passwords
• Two-factor authentication (2FA) available for all player accounts — strongly recommended
• Role-based access controls ensuring that only authorised g33 staff with a legitimate need can access player data
• Intrusion detection systems and 24/7 security monitoring for anomalous activity
• Regular third-party security audits and penetration testing of the g33 platform
• Secure, access-controlled data storage with regular encrypted backups

While g33 employs strong security practices, no system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights or freedoms, g33 will notify affected players without undue delay and provide clear guidance on protective steps you can take.

You also have a role in protecting your own account. Use a strong, unique password for your g33 account, enable 2FA, and never share your login credentials with anyone. If you suspect your account has been compromised, contact [email protected] (plain text — not a clickable link) immediately.