gv222 Privacy Policy — How We Handle Your Personal Data

1. About This Policy

This Privacy Policy ("Policy") describes how gv222 ("we", "us", "our", "the Platform") collects, processes, stores, and shares personal data relating to individuals ("you", "the Player") who access or use the gv222.io website and any associated services, applications, or features.

This Policy forms part of gv222's broader legal framework alongside the Terms & Conditions and the Responsible Gaming Policy. By registering a player account on gv222.io, you acknowledge that you have read and understood this Policy and consent to the data-processing activities described herein. If you do not agree with this Policy, you must not register or continue to use the gv222 Platform.

This Policy is written in plain English to ensure that every player can understand how their personal data is handled. Where legal or technical language is unavoidable, we provide plain-language explanations alongside it.

2. Personal Data We Collect

gv222 collects personal data across the following categories. The specific data collected in each category depends on how you interact with the Platform:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify that you are aged 21 or above)
• Residential address, including city, district, and postal code
• Email address used for account communication
• Mobile phone number registered to your account
• Copies of identity documents submitted during KYC verification (National ID Card, passport, or driving licence)

2.2 Financial & Transaction Data

• bKash, Nagad, Rocket, or Upay mobile wallet account numbers used for deposits and withdrawals
• Transaction histories including deposit amounts, withdrawal amounts, dates, and statuses
• Wagering history including game titles, bet amounts, outcomes, and session timestamps
• Account balance information at defined points in time

2.3 Technical & Device Data

• IP address at the time of each login and significant account action
• Device type, operating system, and browser version
• Device fingerprint data used to detect duplicate accounts
• Session duration and activity logs
• Referring URL and on-platform navigation data

2.4 Communications Data

• Content of messages sent to gv222 via email, live chat, or support ticket
• Records of any responsible gaming requests, self-exclusion applications, or limit-setting actions
• Your marketing communication preferences

Data Category	Examples	Collected At
Identity & Contact	Name, DOB, address, email, phone, ID documents	Registration & KYC
Financial & Transaction	Wallet numbers, deposit/withdrawal history, bet history	Deposits, withdrawals, gameplay
Technical & Device	IP address, device fingerprint, browser, session logs	Every login and session
Communications	Support messages, responsible gaming requests, marketing preferences	Contact with support team

3. How We Collect Your Data

gv222 collects personal data through the following channels:

• Directly from you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact the support team, or update your account settings.
• Automatically — through server logs, cookies, and session-tracking technologies as you navigate the Platform. This includes device fingerprinting used to detect duplicate accounts and ensure platform integrity.
• From payment service providers — when you initiate a transaction via bKash, Nagad, Rocket, or Upay, relevant transaction reference data is passed to gv222 to confirm and reconcile the payment. gv222 does not receive or store your full mobile banking PIN or password.
• From identity verification services — during KYC checks, gv222 may use third-party identity verification tools to cross-reference the documents you submit. These tools process your data only on gv222's behalf and under binding data-processing agreements.

4. How We Use Your Personal Data

gv222 uses the personal data it collects for the following specific purposes:

4.1 Account Management

To create, maintain, and administer your player account; to verify your identity and age as part of KYC obligations; to process your deposits and withdrawals; and to provide you with access to the full range of gv222 Services.

4.2 Transaction Processing

To process, reconcile, and record all financial transactions carried out through your account. Transaction records are maintained for a minimum of five years as required for anti-money laundering compliance purposes.

4.3 Responsible Gaming & Player Protection

To monitor gameplay patterns for signs of problem gambling behaviour; to administer any deposit limits, time-out periods, cooling-off requests, or self-exclusion applications you initiate; and to proactively contact players whose account activity suggests they may benefit from responsible gaming support.

4.4 Security & Fraud Prevention

To detect and prevent fraudulent activity, duplicate account creation, money laundering, bonus abuse, and any other conduct that violates gv222's Terms & Conditions. Device and IP data play a central role in this function.

4.5 Platform Improvement

To analyse aggregated, anonymised usage data in order to improve the performance, design, and feature set of the gv222 Platform. Individual player data is not used in this analysis in a form that would identify you personally.

4.6 Legal & Regulatory Compliance

To meet gv222's obligations under applicable law, including anti-money laundering regulations, responsible gaming requirements, and any lawful requests from regulatory or law-enforcement authorities.

4.7 Communications

To send you account-related communications such as transaction confirmations, security alerts, and policy update notifications. Where you have opted in to receive promotional communications, to send you relevant bonus offers, game recommendations, and seasonal promotions. You may opt out of promotional communications at any time by contacting [email protected].

5. Legal Basis for Processing

gv222 processes your personal data on the following legal bases:

• Contractual necessity — processing is required to fulfil our obligations under the player agreement you entered into when registering your gv222 account, including account management, payment processing, and service delivery.
• Legal obligation — processing is required to comply with applicable law, including anti-money laundering rules, age-verification requirements, and law-enforcement disclosure obligations.
• Legitimate interests — processing is necessary for gv222's legitimate interests in fraud detection, platform security, duplicate-account prevention, and aggregated analytics, where these interests are not overridden by your data-protection rights.
• Consent — where you have given explicit consent, such as opting in to receive promotional communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Data Sharing & Disclosure

gv222 does not sell or rent your personal data to third parties. Data sharing is limited to the following categories of recipients, each of whom is subject to contractual data-protection obligations:

6.1 Payment Service Providers

bKash, Nagad, Rocket, and Upay receive only the transaction reference data necessary to process your deposits and withdrawals. These providers operate under their own published privacy policies and are independent data controllers for data processed within their own systems.

6.2 Identity Verification Providers

Third-party KYC and identity verification service providers process the identity documents you submit solely for the purpose of verifying your identity on gv222's behalf. They are bound by data-processing agreements that prohibit any secondary use of your data.

6.3 Game Software Providers

Game suppliers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and session data necessary to deliver game content. These providers do not receive your full name, contact details, or financial data.

6.4 Legal & Regulatory Authorities

gv222 will disclose personal data to law-enforcement agencies, regulatory bodies, or courts when required to do so by a lawful order, warrant, or statutory obligation. Where permitted by law, gv222 will notify you of such a disclosure.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of gv222's business, player data may be transferred to the successor entity as part of the transaction. You will be notified of any such transfer and of any material changes to this Policy that result from it.

7. Cookies & Tracking Technologies

gv222 uses cookies and similar tracking technologies to operate the Platform, maintain your login session, detect fraudulent activity, and analyse usage patterns. The following categories of cookies are used:

• Essential cookies — required for the Platform to function. These include session cookies that keep you logged in during your visit and security cookies that support fraud detection. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies — remember your preferences such as language settings, display options, and last-visited game category. These improve your experience but are not essential to Platform operation.
• Analytics cookies — collect anonymised data about how players navigate the Platform, which pages are visited most frequently, and where errors occur. This data is used in aggregate form only and does not identify individual players.

You may manage cookie preferences through your browser settings. Disabling essential cookies will prevent certain Platform features from functioning correctly. gv222 does not use advertising or cross-site tracking cookies.

8. Data Retention

gv222 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to the following minimum retention periods:

• Account and identity data — retained for the duration of your account and for a minimum of five years following account closure, to comply with anti-money laundering and responsible gaming record-keeping requirements.
• Financial transaction records — retained for a minimum of five years from the date of each transaction.
• Support and communications records — retained for a minimum of two years from the date of the communication, or longer if the communication relates to an ongoing dispute or regulatory matter.
• Technical and session logs — retained for a maximum of 12 months from the date of recording, unless they are required in connection with a security investigation or legal proceeding.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identified individual.

9. Data Security

gv222 implements a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and gv222 servers
• Encryption of sensitive data fields at rest in the gv222 database
• Role-based access controls limiting data access to authorised personnel with a legitimate need
• Regular independent security audits and penetration testing
• Intrusion detection and anomaly monitoring systems operating 24/7
• Multi-factor authentication requirements for internal system access
• Staff training on data protection obligations and security practices

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, gv222 will notify affected players without undue delay and will take all appropriate steps to contain and remediate the breach.

10. Your Data Protection Rights

As a gv222 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request". gv222 will respond within 30 days of receiving a valid request.

• Right of Access — you have the right to request a copy of all personal data gv222 holds about you, along with an explanation of how it is being used.
• Right to Rectification — you have the right to request correction of any inaccurate or incomplete personal data held about you.
• Right to Erasure ("Right to be Forgotten") — you have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (if consent was the basis for processing), or where you object to processing and there are no overriding legitimate grounds. Note that this right is subject to gv222's legal obligation to retain certain data for anti-money laundering compliance purposes.
• Right to Restriction of Processing — you have the right to request that gv222 restricts its processing of your data in certain circumstances, for example while a rectification request is being evaluated.
• Right to Data Portability — you have the right to receive a copy of the personal data you have provided to gv222 in a structured, commonly used, machine-readable format, and to request that it be transmitted directly to another controller where technically feasible.
• Right to Object — you have the right to object to processing of your personal data carried out on the basis of legitimate interests. gv222 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent — where processing is based on your consent (for example, for promotional communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

11. Children & Minors

gv222 operates a strict 21+ policy. The Platform is not intended for, marketed to, or accessible to individuals under the age of 21. gv222 does not knowingly collect personal data from individuals under 21 years of age.

If gv222 discovers that it has inadvertently collected personal data from an individual who is under 21, it will immediately close the associated account, return any Real Money Funds (subject to verification that the funds were not obtained through fraudulent means), and delete all personal data associated with the account from its systems.

If you are the parent or guardian of a minor and believe they may have accessed gv222.io, please contact [email protected] immediately. gv222 recommends the use of parental control software to prevent minors from accessing online gambling platforms. Information on parental controls is available from your internet service provider.

12. International Data Transfers

gv222 operates primarily to serve players in Bangladesh. However, some of the third-party service providers we use — including cloud infrastructure providers, identity verification services, and game software suppliers — may process data on servers located outside Bangladesh.

Where personal data is transferred outside Bangladesh, gv222 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that provided by this Policy. Such safeguards include contractual data-processing agreements incorporating standard data-protection clauses, and selection of service providers who maintain internationally recognised security certifications.

13. Third-Party Links

The gv222 Platform may contain references to or links to third-party websites, payment platforms, or game provider portals. This Policy applies solely to personal data collected and processed by gv222 through gv222.io. gv222 is not responsible for the privacy practices of any third-party website or service, and players are encouraged to review the privacy policies of any external platforms they visit. Third-party game providers such as Pragmatic Play, Evolution Gaming, and Spribe operate under their own published privacy policies in respect of data processed within their own game environments.

14. Amendments to This Policy

gv222 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, our data practices, or the services we offer. The current version of this Policy, along with its effective date, is always available at gv222.io/privacy-policy.

Where changes to this Policy are material — such as changes to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — gv222 will notify registered players by email to the address associated with their account at least 14 days before the changes take effect. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

15. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or have a concern about how gv222 has handled your personal data, please contact us:

• Data Queries & Rights Requests: [email protected] (subject line: "Data Rights Request")
• General Support: [email protected]
• Responsible Gaming: [email protected]
• Live Chat: Available 24/7 via your account dashboard

gv222 aims to acknowledge all data-related enquiries within 48 hours (Bangladesh Standard Time, UTC+6) and to resolve them within 30 calendar days of receipt. Where a request is complex or where you have submitted multiple requests simultaneously, the resolution period may be extended by a further 60 days. You will be informed of any such extension and the reasons for it within the initial 30-day period.

If you are not satisfied with how gv222 has handled your data privacy concern after raising it directly with us, you have the right to escalate your complaint to the relevant data-protection authority or consumer-rights body in your jurisdiction.