Privacy Policy — How gbaee Collects, Uses, and Protects Your Data

1Introduction and Identity of Data Controller

gbaee operates the online betting and casino platform accessible at https://gbaee.bio. In the context of this Privacy Policy, gbaee acts as the data controller — meaning we determine the purposes and means by which your personal data is processed. We are committed to handling your data responsibly, transparently, and in accordance with applicable data protection principles.

This Privacy Policy applies to all personal data collected through the gbaee website, mobile-optimised site, live chat function, email communications, and any other interaction you have with gbaee as a registered player or website visitor.

2Definitions

• "Personal Data" means any information that identifies or can identify you as an individual, directly or in combination with other data.
• "Processing" means any operation performed on personal data — including collection, storage, use, disclosure, and deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data (gbaee in this context).
• "Data Processor" means a third party that processes personal data on behalf of gbaee under a data processing agreement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your wishes by which you agree to the processing of your personal data for a stated purpose.
• "KYC" means Know Your Customer — the identity and age verification procedures required before withdrawal processing.
• "AML" means Anti-Money Laundering — the legal framework and internal procedures designed to detect and prevent money laundering activity.

3Data We Collect

3.1 Data You Provide Directly

When you register a gbaee account, complete KYC verification, make deposits or withdrawals, contact support, or participate in promotions, you provide us with personal data including:

• Full legal name and date of birth.
• Bangladeshi mobile phone number and email address.
• City or district of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna).
• Government-issued identity document details (National ID, passport, driving licence).
• Payment method details including bKash account number, Nagad account number, Rocket account number, Upay account number, or bank card details (we store only the last 4 digits of card numbers; full card numbers are handled by our PCI-DSS compliant payment processors).
• Any information submitted in support messages, complaint forms, or live chat sessions.

3.2 Data Collected Automatically

When you access gbaee, our systems automatically collect certain technical data:

• IP address and approximate geolocation (country and city level).
• Device type, operating system, and browser version.
• Session start and end timestamps in Bangladesh Standard Time (BST, UTC+6).
• Pages visited, game sessions initiated, bets placed, and clickstream data.
• Cookies and similar tracking technologies (see Section 7).

3.3 Data from Third Parties

We may receive personal data about you from third-party sources, including:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) confirming transaction success or failure.
• Identity verification service providers used to validate KYC documents.
• Fraud prevention and AML screening services that flag suspicious transaction patterns.

4How We Collect Your Data

gbaee collects your personal data through the following channels:

• Account registration form: Completed when you first create a gbaee account.
• KYC document upload: Submitted when you initiate your first withdrawal or when our compliance team requests verification.
• Deposit and withdrawal forms: Payment details entered when transacting on the platform.
• Live chat and email: Any information you share when contacting our support team at [email protected].
• Automated systems: Server logs, cookies, session tracking, and analytics tools that operate when you browse the platform.
• Promotional participation: Details shared when you opt into bonuses, tournaments, or seasonal campaigns (e.g., Eid promotions, Pohela Boishakh special offers, BPL cricket betting campaigns).

5Legal Bases for Processing

gbaee processes your personal data only where a valid legal basis exists. The legal bases we rely on are:

• Contractual necessity: Processing required to fulfil our contract with you — including account registration, payment processing, bet settlement, and customer support.
• Legal obligation: Processing required to comply with applicable law — including KYC identity checks, AML transaction monitoring, and record-keeping for regulatory purposes.
• Legitimate interests: Processing that serves gbaee's legitimate business interests, provided those interests are not overridden by your rights — including fraud prevention, platform security, product improvement, and responsible gaming monitoring.
• Consent: Processing for which you have given explicit, freely given consent — principally marketing communications via email and SMS. You may withdraw consent at any time by updating your preferences in the account dashboard or contacting support.

6How We Use Your Data

gbaee uses your personal data for the following purposes:

• Account management: Creating and maintaining your gbaee account, verifying your identity, and processing your login credentials securely.
• Payment processing: Executing bKash, Nagad, Rocket, Upay, bank card, and bank transfer deposits and withdrawals in BDT.
• KYC and AML compliance: Verifying your identity and age (21+), screening transactions for money laundering indicators, and maintaining required compliance records.
• Customer support: Responding to your queries, resolving disputes, and managing complaints.
• Security and fraud prevention: Detecting unauthorised account access, identifying duplicate accounts, preventing chargebacks, and blocking fraudulent transactions.
• Responsible gaming: Monitoring gameplay patterns for signs of problem gambling and delivering appropriate interventions — including self-exclusion tools, deposit limit reminders, and cooling-off period notifications.
• Platform improvement: Analysing usage patterns to improve game selection, page design, and overall user experience on gbaee.
• Marketing and promotions: Sending you relevant bonus offers, seasonal promotions, and gbaee news where you have opted in. Marketing communications are sent only with your consent.
• Legal and regulatory compliance: Retaining records as required by applicable law and responding to lawful requests from competent authorities.

7Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device by our web server when you visit gbaee. They help us recognise your device on subsequent visits, maintain your session login, and understand how you use the platform.

7.2 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function — including session authentication, security tokens, and load-balancing cookies. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and previously used payment methods to improve your experience.
• Analytics cookies: Collect anonymised data about how players navigate gbaee, which games are most popular, and where users encounter errors. Used to improve the platform.
• Marketing cookies: Track which promotions and pages you have visited so that we can serve you relevant bonus offers. Only active with your consent.

7.3 Managing Cookies

You can control and delete cookies through your browser settings. Disabling strictly necessary cookies will prevent you from logging into your gbaee account. Disabling analytics or marketing cookies will not affect your ability to use core platform features but may result in less personalised promotional communications.

8Sharing Your Data

gbaee does not sell your personal data to any third party. We share your data only in the following circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the transaction data necessary to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC services receive your identity documents to perform automated and manual verification checks.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming receive your player ID and session data to serve their games. They do not receive your full identity or financial data.
• Fraud and AML screening services: Transaction and behavioural data is passed to screening services to identify suspicious activity patterns.
• Legal and regulatory authorities: Where required by a valid legal order, court order, or regulatory mandate, gbaee will disclose personal data to competent authorities. We will notify you of such disclosures where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of gbaee's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

All third-party data processors engaged by gbaee are bound by written data processing agreements that require them to process your data only on gbaee's instructions, maintain appropriate security standards, and not retain data beyond the agreed purpose and period.

9International Data Transfers

Some of gbaee's data processors — particularly game content studios and cloud infrastructure providers — operate servers outside Bangladesh. Where personal data is transferred internationally, gbaee ensures that appropriate safeguards are in place, including contractual protections equivalent to internationally recognised data protection standards. If you wish to obtain information about the safeguards applicable to a specific international transfer, contact us at [email protected].

10Data Retention

gbaee retains your personal data for the following periods:

• Active account data: Retained for the duration of your account relationship with gbaee plus 5 years after account closure, to meet AML record-keeping obligations.
• KYC documents: Retained for a minimum of 5 years from the date of submission, in accordance with anti-money-laundering regulatory requirements.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Support communications: Retained for 2 years from the date of the final message in each support thread, or longer if related to an ongoing dispute or legal matter.
• Marketing preferences and consent records: Retained for as long as your account is active, and for 2 years after you withdraw consent, as evidence of the consent record.
• Technical and log data: Server and session logs are retained for up to 12 months from the date of generation, then deleted or anonymised.

When the applicable retention period expires, data is securely deleted or anonymised so that it can no longer be linked to you as an individual.

11Data Security

gbaee employs the following technical and organisational security measures to protect your personal data:

• SSL/TLS encryption: All data transmitted between your browser and our servers is encrypted using industry-standard TLS protocols.
• Access controls: Personal data is accessible only to gbaee staff and contractors who require it for their specific role. All access is logged and audited.
• Password security: Player passwords are stored as salted cryptographic hashes. We never store plaintext passwords.
• Two-factor authentication: OTP verification via your registered Bangladeshi mobile number is required for sensitive account actions including withdrawals and security setting changes.
• Regular security testing: Our platform undergoes regular penetration testing and vulnerability assessments by independent security professionals.
• Incident response: In the event of a personal data breach that poses a risk to you, gbaee will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

12Your Rights

You hold the following rights in relation to the personal data gbaee holds about you. To exercise any right, contact us at [email protected] or via 24/7 live chat. We will respond within 10 working days and will not charge a fee for standard requests.

• Right of access: Request a copy of all personal data we hold about you, along with information about how and why we process it.
• Right to rectification: Ask us to correct inaccurate or incomplete personal data. You can update basic account details directly in your account dashboard.
• Right to erasure ("right to be forgotten"): Request deletion of your personal data where we no longer have a legal basis to retain it. Note that AML and KYC regulations require us to retain certain data for at least 5 years after account closure, which takes precedence over erasure requests in those specific categories.
• Right to restriction of processing: Ask us to suspend processing of your data in certain circumstances — for example, while we verify the accuracy of disputed data.
• Right to data portability: Receive your account and transaction data in a structured, commonly used, machine-readable format (CSV or JSON), and transfer it to another platform if you wish.
• Right to object: Object to the processing of your data based on legitimate interests, or object to direct marketing at any time. Marketing objections will be actioned immediately.
• Right to withdraw consent: Where processing is based on consent (principally marketing communications), withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

13Marketing Communications

gbaee sends promotional emails and SMS messages only to players who have explicitly opted in during registration or subsequently through their account settings. Marketing content may include:

• Welcome bonus and first deposit offer reminders.
• Seasonal promotions linked to Bangladeshi cultural events such as Eid, Pohela Boishakh, Durga Puja, and Victory Day (December 16).
• Cricket betting promotions tied to BPL, IPL, T20 World Cup, and Bangladesh Tigers international fixtures.
• Reload bonuses, free spin offers, and loyalty rewards.
• Platform updates and new game launches.

You may opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email, by updating your notification preferences in your account dashboard, or by contacting support. Opting out of marketing does not affect transactional communications such as deposit confirmations, withdrawal notifications, and security alerts — these are sent regardless of marketing preferences as they are necessary for account management.

14Responsible Gaming and Data

gbaee uses personal data — including gameplay frequency, session duration, deposit patterns, and self-reported preferences — to support responsible gaming initiatives. Specifically, this data enables us to:

• Identify players whose behaviour may indicate signs of problem gambling and proactively reach out with information about self-exclusion and support tools.
• Enforce self-exclusion requests across all product categories (sports betting, live casino, slots, Wheel, Fisher Game) by recognising a self-excluded player's account credentials.
• Apply and monitor deposit limits and cooling-off periods set by the player in their account dashboard.
• Prevent self-excluded players from receiving marketing communications for the duration of their exclusion.

This processing is conducted on the basis of legitimate interests and legal obligations. For more information about the responsible gaming tools available on gbaee, visit our Responsible Gaming page.

15Children and Minors

The gbaee platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we discover that an account has been registered by or on behalf of a person under 21, we will immediately suspend the account, delete the associated personal data , and refund any deposits made during the period of underage use. If you believe that a minor has registered an account on gbaee, please contact us immediately at [email protected].

16Third-Party Links

The gbaee website may contain references to third-party payment services (bKash, Nagad, Rocket, Upay) and game studios. While we take care to work only with reputable partners, gbaee is not responsible for the privacy practices of third-party websites or applications. We encourage you to review the privacy policies of any third-party services you interact with independently of gbaee.

17Changes to This Policy

gbaee reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify registered players via email or a prominent notice on the platform at least 14 days before the changes take effect. The effective date at the top of this document will be updated accordingly. Continued use of gbaee after the effective date of a revised policy constitutes your acceptance of the changes. If you do not agree to the revised policy, you must close your account before the changes take effect.

We recommend that you review this Privacy Policy periodically to stay informed about how gbaee protects your personal data.

18Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data gbaee holds about you, please contact our Data Protection team through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly on the gbaee platform
• Support Hours: 00:00 – 24:00 BST (UTC+6), every day of the year

We aim to acknowledge all privacy-related enquiries within 2 working days and to resolve them within 10 working days. For complex requests — such as a full subject access request or a data portability export — we may require up to 30 days from the date of receipt of a valid, verified request.