ggobd Privacy Policy — How We Handle Your Personal Data
Your privacy matters to us. This policy explains exactly what personal data ggobd collects from Bangladeshi players, why we collect it, how it is stored and protected, and what rights you have over your information.
01 Introduction
ggobd is an online betting and casino platform built specifically for the Bangladeshi market. As part of delivering a safe, personalised, and legally compliant service to our players, we are required to collect and process certain categories of personal data. We take this responsibility seriously and are committed to handling your information with transparency, integrity, and care.
This Policy applies to all personal data collected through the ggobd website, mobile-optimised web interface, and any related customer support or communications channels. It covers data collected from players located in Bangladesh and governs how that data is handled from the point of collection through to its eventual deletion.
We do not sell, rent, or trade your personal data to third-party marketing organisations. Any sharing of data with external parties is strictly limited to what is necessary to operate the platform and comply with applicable legal obligations, as described in detail in this Policy.
02 Data We Collect
The categories of personal data that ggobd collects from players are set out in the table below. We only collect data that is necessary for one or more of the purposes described in Section 4 of this Policy.
| Data Category | Examples | Required / Optional |
|---|---|---|
| Identity Data | Full legal name, date of birth, National ID (NID) number, passport number, selfie with ID photograph | Required |
| Contact Data | Bangladesh mobile number, email address | Required |
| Financial Data | bKash / Nagad / Rocket / Upay account number linked to your profile, transaction amounts in BDT, deposit and withdrawal history | Required |
| Account Data | Username, hashed password, account creation date, account status, responsible gaming settings | Required |
| Gaming Activity Data | Bets placed, games played, wagering amounts, win/loss history, bonus usage records, session durations | Automatic |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, time zone (BST UTC+6) | Automatic |
| Usage Data | Pages visited, navigation paths, session timestamps, feature interactions, referral source | Automatic |
| Communications Data | Live chat transcripts, support email correspondence, complaint records | When applicable |
| Location Data | Country and city inferred from IP address (e.g., Dhaka, Chittagong, Sylhet, Khulna) | Automatic |
We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or biometric data beyond what is strictly necessary for identity verification purposes.
03 How We Collect Your Data
ggobd collects personal data through several channels depending on how you interact with the platform:
Direct Collection
You provide data directly to us when you register an account, complete the KYC (Know Your Customer) verification process, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion. This includes identity documents submitted for verification and financial account details linked for payment processing.
Automated Collection
When you access and use the ggobd platform, we automatically collect technical and usage data through cookies, server logs, and similar tracking technologies. This data is collected whether you are a registered user or a visitor who has not yet created an account. See Section 7 (Cookies & Tracking) for full details.
Third-Party Sources
We may receive supplementary data about you from third-party identity verification services, fraud prevention databases, payment processing partners (such as bKash and Nagad gateway providers), and game content providers (such as Pragmatic Play, Evolution Gaming, Ezugi, and NetEnt) where such data is relevant to the administration of your account or the security of the platform.
04 Why We Use Your Data
ggobd uses the personal data we collect for the following purposes:
- Account creation and management: To register your account, verify your identity, manage your profile settings, and maintain your account records throughout the lifecycle of your relationship with ggobd.
- Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay; to verify that payment accounts are registered in your own name; and to maintain accurate transaction records in BDT.
- Legal and regulatory compliance: To fulfil KYC obligations, conduct anti-money laundering (AML) checks, respond to lawful requests from regulatory or law enforcement authorities, and retain records as required by applicable law.
- Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, multiple account creation, bonus abuse, match fixing, and other prohibited activities as defined in our Terms & Conditions.
- Service delivery and personalisation: To provide you with access to betting markets, casino games, promotional offers you are eligible for, and a platform experience tailored to your account history and preferences.
- Responsible gaming: To monitor gaming activity for signs of problem gambling behaviour, administer self-exclusion or deposit limit requests, and fulfil our obligations under our Responsible Gaming policy.
- Customer support: To respond to your queries, resolve disputes, and maintain a record of communications for quality assurance and training purposes.
- Platform analytics and improvement: To analyse how players use the platform, identify technical issues, improve navigation and game selection, and develop new features and services.
- Marketing communications (where consented): To send you promotional offers, bonus alerts, and platform updates via email or SMS, where you have opted in to receive such communications. You may withdraw consent at any time via your account settings.
05 Legal Basis for Processing
ggobd processes your personal data on the following legal bases:
- Contractual necessity: Processing required to create and manage your account, process transactions, and deliver the services you have requested by agreeing to our Terms & Conditions.
- Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC, AML, and record-keeping obligations.
- Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and service analytics, where these interests are not overridden by your data protection rights.
- Consent: Processing for optional marketing communications, where you have given clear and specific consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
06 Data Sharing & Disclosure
ggobd does not sell your personal data to third parties. We share personal data only in the circumstances described below, and only to the extent necessary for the stated purpose:
Payment Service Providers
We share financial data with the payment gateway operators that facilitate your bKash, Nagad, Rocket, and Upay transactions. These providers receive only the data required to process the specific transaction and are contractually prohibited from using your data for any other purpose.
Identity Verification Partners
We use third-party KYC and identity verification services to validate your National ID documents and confirm your age. These providers process your identity data under data processing agreements that restrict their use of the data to verification purposes only.
Game Content Providers
Third-party game studios — including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe — receive a player session token and anonymised player reference when you launch their games. They do not receive your full name, mobile number, or financial data unless explicitly required for a specific product feature you have opted into.
Legal and Regulatory Authorities
ggobd will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by lawful order, subpoena, or other legal process. We will notify the affected player of such a disclosure where we are legally permitted to do so.
Fraud Prevention Databases
We may share identifying data with industry fraud prevention databases and networks to protect against money laundering, identity fraud, and multi-account abuse. Data shared with such databases is governed by the terms of those specific data-sharing arrangements.
07 Cookies & Tracking Technologies
The ggobd platform uses cookies and similar technologies (including local storage, session tokens, and server-side logging) to operate core platform functionality, maintain your authenticated session, and collect usage analytics. The categories of cookies we use are as follows:
- Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing identifiers. These cookies cannot be disabled without breaking core platform features.
- Functional cookies: Used to remember your preferences such as language, display settings, and last-visited game categories. These persist across sessions for your convenience.
- Analytics cookies: Used to collect anonymised data about how players navigate the platform, which pages are visited most frequently, and where technical errors occur. This data is used exclusively for platform improvement and is not linked to your personal identity.
- Fraud prevention cookies: Short-lived fingerprinting tokens used to detect suspicious login patterns, bot activity, and automated betting tools. These are essential to platform security and responsible gaming monitoring.
ggobd does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts on the platform. You can manage cookie preferences through your browser settings, though disabling strictly necessary cookies will impair your ability to use the platform.
08 Data Retention
ggobd retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Identity & KYC documents | 5 years from account closure | AML and regulatory compliance |
| Financial transaction records | 5 years from transaction date | Legal and tax record-keeping |
| Betting and gaming history | 3 years from account closure | Dispute resolution, responsible gaming audit |
| Account profile data | Duration of account + 2 years | Service delivery, reactivation |
| Support communications | 3 years from last contact | Dispute resolution, quality assurance |
| Technical and usage logs | 13 months on a rolling basis | Security monitoring, analytics |
| Marketing consent records | Until consent is withdrawn + 1 year | Consent audit trail |
At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised aggregate data may be retained indefinitely for statistical analysis purposes.
09 Data Security
ggobd implements a layered technical and organisational security framework to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our security measures include:
- 256-bit SSL/TLS encryption on all data transmitted between your browser or device and the ggobd servers. All connections are enforced over HTTPS with HSTS headers enabled.
- Bcrypt password hashing with a per-user salt. Passwords are never stored in plain text and cannot be recovered by ggobd staff.
- Database access controls based on the principle of least privilege. Only specific system roles with a documented operational need can query production databases containing personal data.
- Two-factor authentication (2FA) via SMS OTP, available to all players and mandatory for all ggobd staff accounts with access to player data.
- Regular security audits including penetration testing by independent third-party security specialists. Critical findings are remediated within 48 hours of identification.
- Data minimisation practices ensuring that only necessary data is collected, stored, and accessible at any given time.
10 Your Data Rights
As a ggobd player, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request – [Your Username]". We will respond within 30 days.
Right of Access
Request a copy of all personal data we hold about you, including gaming history, transaction records, and communications.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held in your ggobd account profile.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for its original purpose and no legal obligation requires retention.
Right to Restriction
Request that we restrict processing of your data while a dispute regarding its accuracy or lawfulness is being resolved.
Right to Portability
Receive a structured, machine-readable export of the personal data you provided to ggobd directly, where technically feasible.
Right to Object
Object to processing carried out on the basis of legitimate interests, including direct marketing communications you previously consented to.
Please note that certain data rights may be limited where ggobd has a legal obligation to retain data — for example, KYC records required for AML compliance cannot be erased prior to the end of the mandatory retention period regardless of an erasure request.
11 Third-Party Services & Links
The ggobd platform integrates with third-party game studio software provided by Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and other certified providers. When you launch a game from one of these studios within the ggobd interface, a secure session token is passed to the game provider's servers to authenticate your game session. ggobd is not responsible for the privacy practices of these third-party studios beyond the contractual restrictions imposed via our data processing agreements.
The ggobd platform does not contain outbound links to external websites. All navigation within the platform remains on ggobd-owned infrastructure. If you navigate away from the platform independently (for example, via a search engine result), the privacy practices of any third-party website you visit are governed by that site's own privacy policy, and ggobd has no responsibility for those practices.
12 Children's Privacy
If you are a parent or guardian and believe that your child (or a person under 21 in your care) has registered an account on ggobd, please contact us immediately at [email protected]. We will act promptly to investigate and, where confirmed, to close the account and delete all associated data.
13 Cross-Border Data Transfers
The personal data of ggobd players is primarily processed and stored on servers located in data centres serving the South and Southeast Asian region. Where it is necessary to transfer data to infrastructure or service providers located outside Bangladesh — for example, to cloud-based analytics tools, third-party KYC verification services, or game studio session servers — ggobd ensures that appropriate contractual protections are in place to govern that transfer.
These protections include data processing agreements that impose equivalent data protection obligations on the recipient, restrictions on onward transfer without ggobd's prior written consent, and requirements for the recipient to implement appropriate technical and organisational security measures.
14 Changes to This Privacy Policy
ggobd may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, registered players will be notified via the email address on their account at least 7 days before the revised Policy takes effect, where reasonably practicable.
The effective date at the top of this Policy will always reflect the date of the most recent revision. We recommend reviewing this Policy periodically so that you remain informed about how your data is being handled. Continued use of the ggobd platform after a revised Policy has taken effect constitutes your acceptance of the updated terms.
All previous versions of this Privacy Policy are available upon request by contacting [email protected] with the subject line "Previous Privacy Policy – [Version Date]".
15 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way ggobd handles your personal data, please contact our support team using the details below. We take all privacy enquiries seriously and will respond within 5 business days of receipt.
- Email: [email protected]
- Subject line for data rights requests: "Data Rights Request – [Your Username]"
- Subject line for privacy queries: "Privacy Enquiry – [Your Username]"
- Live Chat: Available 24 hours a day, 7 days a week via the ggobd platform.
- Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6).
Our Privacy Commitments
Six principles that guide how ggobd handles the personal data of every Bangladeshi player on the platform.
End-to-End Encryption
Every data exchange between your device and ggobd servers is protected by 256-bit SSL/TLS encryption. Your personal and financial data is never transmitted in plain text over any network.
No Data Selling
ggobd will never sell, rent, or trade your personal data to advertisers, data brokers, or marketing platforms. Your information exists solely to support your account and our legal obligations.
You Control Your Data
You have the right to access, correct, export, or delete your personal data at any time. Submit a data rights request to our support team and we will respond within 30 days.
Clear Retention Limits
We hold data only for as long as legally required or operationally necessary. Transaction and KYC records are retained for 5 years post-closure; usage logs are purged on a 13-month rolling cycle.
Minimal Third-Party Sharing
Personal data is shared with third parties — such as bKash and Nagad payment g ateways and KYC verification partners — only to the minimum extent necessary. All third-party data processors are bound by contractual data protection obligations.
Regular Security Audits
Independent third-party security specialists conduct penetration tests and vulnerability assessments on the ggobd platform on a regular basis. Critical findings are remediated within 48 hours of identification.
Questions About Your Privacy?
Our 24/7 support team is ready to help with any data-related query. You can also explore our full platform, review our FAQ, or read our Responsible Gaming guide.