gk23 Privacy Policy — Your Data, Our Responsibility

1 Who We Are

gk23 ("the Platform", "we", "us", "our") operates an online sports betting and casino gaming platform accessible at gk23.io, primarily serving players located in Bangladesh. gk23 is the data controller in respect of personal data collected from players via the gk23 website and associated mobile-optimised interfaces.

As data controller, gk23 determines the purposes and means of processing your personal data and is responsible for ensuring that all data processing activities described in this policy are carried out in a manner that is lawful, fair, and transparent.

For any questions, requests, or concerns relating to this Privacy Policy or the data gk23 holds about you, you may contact our data support team via live chat on the platform or by email at the address provided in Section 14 of this policy.

2 Data We Collect

gk23 collects several categories of personal data in the course of providing its betting and gaming services to players in Bangladesh. The categories of data we collect, and typical examples within each category, are set out in the table below.

3 How We Collect Your Data

3.1 Data You Provide Directly

The majority of personal data gk23 holds about you is provided directly by you during the account registration process, during KYC verification, when you contact our support team, or when you complete transactions on the platform. You are in control of what you submit at each of these touchpoints.

3.2 Data Collected Automatically

Certain technical data is collected automatically whenever you access the gk23 platform. This includes your IP address, device identifiers, browser information, pages visited, session duration, and in-game activity logs. This data is collected via server logs, session cookies, and analytics tools and is used primarily for platform security, fraud prevention, and service improvement.

3.3 Data from Third Parties

gk23 may receive personal data about you from third-party identity verification providers engaged to assist with KYC compliance, from payment processors such as bKash and Nagad in connection with transaction verification, and from fraud prevention and anti-money laundering screening services. Data received from these third parties is handled under the same protective standards as data collected directly.

4 How We Use Your Data

gk23 uses the personal data it collects exclusively for the purposes described below. We do not use your data for any purpose that is incompatible with the original reason it was collected without first obtaining your explicit consent.

• Account Management: Creating, maintaining, and securing your gk23 player account, including authentication and session management.
• Identity Verification (KYC): Confirming your identity, age (21+ requirement), and address in compliance with responsible gaming and anti-fraud principles.
• Transaction Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, and bank transfers; recording transaction history for your account.
• Service Delivery: Providing access to sports betting markets (BPL, T20, IPL), live casino games, and slot titles from providers including Pragmatic Play, Evolution Gaming, and NetEnt.
• Customer Support: Responding to your queries, resolving disputes, and maintaining records of support interactions for quality assurance.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, account abuse, multi-accounting, money laundering, and other prohibited conduct.
• Responsible Gaming: Monitoring betting patterns to identify problem gambling indicators and administering deposit limits, time-outs, and self-exclusion requests.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve platform performance, user experience, and game selection.
• Marketing Communications: Sending promotional offers, bonus notifications, and event updates to players who have opted in to receive such communications. Players may opt out at any time via account settings or by contacting support.
• Legal & Compliance: Maintaining records required for regulatory compliance, responding to lawful requests from authorities, and enforcing our Terms & Conditions.

5 Legal Basis for Processing

Every data processing activity carried out by gk23 is grounded in one of the following legal bases. Where more than one basis applies to a particular processing activity, both are identified in the table below.

Where gk23 relies on legitimate interests as a legal basis, we have assessed that those interests do not override your rights and freedoms as a data subject, taking into account the nature of the data processed and the safeguards in place.

6 Data Sharing & Disclosure

gk23 does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for each specific purpose.

6.1 Payment Processors

To facilitate deposits and withdrawals, gk23 shares transaction-relevant data (such as account identifiers and amounts) with payment service providers including bKash, Nagad, Rocket, Upay, and partnered Bangladeshi banks. These providers process data solely to execute the transaction and are contractually bound to protect the data shared with them.

6.2 Identity Verification Providers

For KYC verification, gk23 may share identity documents and personal data with accredited third-party verification specialists. These providers act as data processors under gk23's instruction and may not use your data for their own purposes.

6.3 Game Technology Providers

Game studios and technology providers such as Pragmatic Play, Evolution Gaming, NetEnt, and Microgaming may receive limited session data (such as player identifier, currency, and stake amounts) required to deliver and record gameplay. These providers operate under contractual data protection obligations.

6.4 Fraud Prevention & Security Services

gk23 may share relevant data with fraud prevention, anti-money laundering screening, and cybersecurity service providers for the purpose of protecting the platform and its players from financial crime and account abuse.

6.5 Legal & Regulatory Disclosure

gk23 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by law, court order, or in response to a lawful request. In such cases, gk23 will disclose only the minimum amount of data required to satisfy the legal obligation.

7 Cookies & Tracking Technologies

gk23 uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform correctly, maintain your logged-in session, remember your preferences, and gather aggregated analytics data. Cookies are small text files stored on your device by your browser.

7.1 Types of Cookies Used

• Essential Cookies: Required for core platform functionality including authentication, session management, and security. Cannot be disabled without breaking the platform.
• Functional Cookies: Remember your preferences such as language, display settings, and responsible gaming limit configurations across sessions.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate and interact with the platform, used to improve user experience and identify technical issues. No personally identifiable data is transmitted via analytics cookies.
• Security Cookies: Used to detect and prevent fraudulent logins, bot activity, and session hijacking attempts. These are essential and cannot be opted out of.

7.2 Managing Cookies

You may control non-essential cookies through your browser settings. Disabling functional or analytics cookies will not prevent you from using gk23 but may affect the quality of your experience. Note that disabling essential or security cookies will prevent you from logging in and using the platform. Browser-level cookie controls are available in the settings/preferences menu of all major browsers.

8 Data Retention

gk23 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The general retention periods that apply to the main categories of personal data held by gk23 are set out below.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Where deletion is not immediately practicable (for example, data within encrypted backup archives), the data will be isolated from active processing and deleted at the next scheduled purge cycle.

9 Data Security

gk23 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include, but are not limited to, the following:

• 256-bit SSL/TLS encryption on all data transmitted between your device and gk23's servers.
• Encrypted storage of all sensitive data at rest, including password hashes using industry-standard algorithms.
• Role-based access controls ensuring that only authorised personnel can access personal data, strictly on a need-to-know basis.
• Multi-factor authentication for all administrative access to systems holding personal data.
• Regular penetration testing and security audits by independent security specialists.
• Continuous monitoring of server and application logs for anomalous activity indicative of a security incident.
• An internal data breach response protocol that requires prompt assessment and, where appropriate, notification to affected players in the event of a confirmed breach.

While gk23 takes every reasonable step to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying gk23 immediately if you suspect any unauthorised access to your account.

10 Your Rights

As a player on the gk23 platform, you hold a number of rights in relation to the personal data gk23 holds about you. These rights are described below. To exercise any of these rights, please contact gk23 support via live chat or email as detailed in Section 14. We will respond to verified requests within 30 days.

• Right of Access: You may request a copy of all personal data gk23 holds about you, along with information about how it is being used.
• Right to Rectification: If any personal data gk23 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: You may request that gk23 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations (such as financial record-keeping requirements).
• Right to Restrict Processing: In certain circumstances, you may request that gk23 restricts the processing of your personal data while a dispute about its accuracy or the lawfulness of processing is resolved.
• Right to Data Portability: You may request that gk23 provides your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. Upon receipt of such an objection, gk23 will immediately cease processing your data for that purpose.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

Please note that some rights are subject to limitations where gk23 is required to retain or process data to comply with a legal obligation, prevent fraud, or resolve a dispute. In such cases, gk23 will explain the limitation and the reason for it when responding to your request.

11 Children's Privacy

The gk23 platform is strictly intended for adults aged 21 years and above. gk23 does not knowingly collect personal data from individuals under the age of 21. The registration process includes an age declaration and gk23 conducts KYC age verification on all accounts. If gk23 discovers that an account has been created by a person under 21, the account will be immediately closed, all funds returned where possible, and all associated data deleted except where retention is required by law.

12 Third-Party Services

The gk23 platform integrates with third-party services to deliver its full range of features. These include game providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Hacksaw Gaming, and Relax Gaming; payment processors including bKash, Nagad, and Rocket; and identity verification specialists. Each of these third-party providers operates under its own privacy and data protection policies.

While gk23 takes contractual steps to ensure that third-party processors handle data responsibly, gk23 cannot be held responsible for the independent data practices of third-party providers operating outside the scope of their data processing agreements with gk23. Players are encouraged to review the privacy policies of any third-party service they interact with directly, such as their bKash or Nagad mobile wallet application.

gk23 does not embed third-party advertising scripts, social media tracking pixels, or affiliate marketing trackers on the platform that would transmit your personal data to external marketing networks without your consent.

13 Policy Changes

gk23 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, gk23 will notify registered players via email and through a prominent notice on the platform at least seven days before the updated policy takes effect.

The effective date at the top of this page will always reflect the date the current version came into force. Continuing to use the gk23 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must stop using the platform and may request account closure by contacting support.

Minor clarifications that do not materially affect how your data is used (such as typographical corrections or improved explanations of existing practices) may be made without prior notice but will still be reflected in an updated effective date.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data gk23 holds about you, please contact our data support team using any of the following channels. All privacy-related enquiries are handled in English and are typically responded to within two business days.

• Email: [email protected] — please include "Privacy Request" in the subject line.
• Live Chat: Available 24/7 directly on the gk23 platform. Average response time is 2–5 minutes.
• WhatsApp: +880 1700 000000 — available during Bangladesh Standard Time (BST, UTC+6) business hours.

When submitting a data rights request, please be prepared to verify your identity before gk23 can action the request. This is to protect you and to ensure that personal data is not disclosed to or altered by an unauthorised party.