gv888 Privacy Policy

1. Information We Collect

gv888 collects personal information through multiple touchpoints during your use of the platform. The categories of data we collect, and the specific circumstances in which each is gathered, are set out in the table below.

gv888 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, or health information, except where health-related data is voluntarily disclosed by a Player in the context of a responsible gaming or self-exclusion request.

We do not collect personal data from individuals we know to be under 18 years of age. If we discover that a minor has provided personal information, we will immediately close the relevant account and delete the data in accordance with our data retention procedures.

2. How We Use Your Data

gv888 processes your personal data only for specific, legitimate purposes directly related to the operation of a safe and compliant online gambling platform. The following table sets out each purpose, the data categories involved, and the legal basis for processing.

• Account creation and management: We use your Identity Data and Contact Data to register your gv888 account, verify your eligibility (18+ check), authenticate your login sessions, and maintain your account profile throughout your membership.
• Payment processing: Your Financial Data is used to facilitate deposits from and withdrawals to your bKash, Nagad, Rocket, Upay, or bank accounts. We verify payment method ownership to prevent fraud and satisfy anti-money-laundering obligations.
• Game delivery and personalisation: Gaming Activity Data allows us to deliver the games you access, settle bets correctly, calculate and credit winnings, apply bonus wagering requirements, and personalise your game lobby to surface titles aligned with your demonstrated preferences.
• Responsible gaming compliance: Responsible Gaming Data enables us to monitor player behaviour for indicators of problem gambling, enforce self-exclusion periods, apply deposit limits, trigger session time-out warnings, and escalate welfare checks where appropriate.
• Fraud prevention and platform security: Device & Technical Data and Gaming Activity Data are analysed to detect irregular betting patterns, multi-account registrations, automated bot activity, bonus abuse, and financial fraud. This analysis protects the fairness of the platform for all gv888 players.
• Customer support: Communication Data is used to respond to support enquiries, resolve disputes, process complaints, and follow up on account or transaction issues. Support interactions are logged and retained for quality assurance and dispute resolution purposes.
• Legal and regulatory compliance: gv888 may be required to process and retain certain personal data to comply with applicable anti-money-laundering laws, financial reporting requirements, and lawful requests from law enforcement or judicial authorities.
• Platform improvement and analytics: Aggregated and anonymised Usage Data is used to analyse platform performance, identify navigation bottlenecks, improve page loading speeds, and develop new features that better serve Bangladeshi players. This data cannot be traced back to any individual user.
• Promotional communications: Where you have opted in to receive promotional messages, we use your Contact Data (mobile number or email) to notify you of relevant bonuses, seasonal offers (e.g., Eid promotions, BPL special offers), and platform updates. You may withdraw this consent at any time by contacting support.

3. Data Sharing & Third Parties

gv888 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

• Payment service providers: Financial Data is shared with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank solely to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and are responsible for securing data transmitted via their respective networks.
• Game content providers: When you launch a game, your session token and a pseudonymous player identifier are transmitted to the relevant game studio (e.g., Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) to initialise and authenticate your game session. No additional personal data beyond what is technically necessary is transmitted to game providers.
• Identity verification services: During KYC verification, your Identity Data (name, date of birth, NID / passport details) may be shared with a third-party identity verification provider to confirm the authenticity of documents submitted. Verification providers are contractually bound to use your data solely for verification purposes and to delete it after the verification process is complete.
• Fraud prevention and security partners: Device & Technical Data and aggregated Gaming Activity Data may be shared with specialist fraud detection platforms to identify and block known bad actors, compromised devices, and suspicious IP addresses. This data is shared in anonymised or pseudonymised form wherever possible.
• Legal and regulatory authorities: gv888 will disclose personal data to law enforcement agencies, financial intelligence units, or judicial authorities where we are legally compelled to do so by a valid court order, regulatory requirement, or lawful government request. Where permitted by law, gv888 will notify the affected Player of any such disclosure.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the gv888 business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified via the contact details on your account before your data is subject to a different privacy policy.

All third-party service providers who process personal data on behalf of gv888 are bound by contractual data processing agreements that require them to implement appropriate technical and organisational security measures, process data only for the specified purpose, and not further disclose the data to sub-processors without gv888's prior written consent.

4. Cookies & Tracking Technologies

gv888 uses cookies and similar tracking technologies (local storage, session storage, pixel tags) to operate the platform, remember your preferences, maintain your login session across pages, and gather anonymised analytics on platform usage patterns. By continuing to use the gv888 platform, you consent to the use of cookies as described in this section.

The following categories of cookies are used on the gv888 platform:

You may manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies, although doing so may impair your ability to log in and use certain features of the gv888 platform. Please note that strictly necessary cookies cannot be disabled via browser settings as they are fundamental to platform operation.

5. Data Retention

gv888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and compliance obligations. The following retention schedule applies:

• Active account data: Identity Data, Contact Data, and Financial Data are retained for the full duration of your gv888 account membership and for a minimum of 5 years following account closure, to satisfy anti-money-laundering record-keeping requirements.
• Transaction records: Individual deposit and withdrawal transaction records, including amounts, timestamps, payment method identifiers, and associated player IDs, are retained for a minimum of 5 years from the date of each transaction.
• Gaming activity logs: Bet settlement records, game session logs, and RNG outcome records are retained for a minimum of 3 years. These records are the authoritative source for dispute resolution as stated in the gv888 Terms & Conditions.
• KYC documents: Copies of identity documents submitted for KYC verification are retained for 5 years following account closure and are stored in encrypted form with strict access controls.
• Support communications: Live chat transcripts, email threads, and support ticket records are retained for 2 years from the date of the final interaction in each thread.
• Self-exclusion records: Where a Player has requested self-exclusion, a record of that exclusion — including the Player's name, contact details, and the exclusion start date — is retained indefinitely to prevent re-registration. This retention is in the Player's own interest and cannot be waived.
• Analytics data: Aggregated, anonymised usage and analytics data with no individual linkage is retained indefinitely for platform improvement and historical analysis purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not technically possible within a live system (e.g., backup tapes), the data is isolated and protected until routine destruction processes apply.

6. Data Security

gv888 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our key security measures include:

• Transport encryption: All data transmitted between your device and the gv888 platform is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock icon in your browser confirms that your connection to gv888 is encrypted at all times.
• Password hashing: Account passwords are stored as salted cryptographic hashes using industry-standard algorithms. gv888 staff cannot view or retrieve your plaintext password under any circumstance.
• Two-factor authentication: All gv888 accounts support OTP-based two-factor authentication via your registered Bangladeshi mobile number. We strongly recommend enabling 2FA immediately after account creation.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Only authorised members of our compliance, payments, and support teams can access player data, and all access is logged with timestamps and staff identifiers.
• Infrastructure security: The gv888 platform is hosted on servers protected by enterprise-grade firewalls, intrusion detection systems, and regular third-party penetration testing. Database servers are isolated from the public internet and accessible only via authenticated internal networks.
• KYC document encryption: All uploaded identity documents are encrypted at rest using AES-256 encryption and stored in a segregated, access-controlled document vault. They are not accessible from the main platform application layer.

Despite our comprehensive security measures, no internet-based platform can guarantee absolute security against all possible threats. You play an important role in keeping your account secure by using a strong, unique password, enabling 2FA, never sharing your login credentials, and notifying gv888 immediately at [email protected] if you suspect unauthorised access to your account.

7. Your Rights & Choices

As a gv888 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with your registered account username and mobile number for identity verification. gv888 will respond to all data rights requests within 30 days of receipt.

• Right of access: You may request a copy of all personal data gv888 holds about you, including your account profile, transaction history, gaming logs, and support communications. We will provide this in a structured, commonly used format.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Account profile details (name, date of birth, contact number) can be updated by contacting support and completing identity re-verification.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data. Please note that this right is subject to our legal obligation to retain certain data (e.g., transaction records, KYC documents) for anti-money-laundering compliance. Data subject to mandatory retention cannot be deleted until the applicable retention period expires.
• Right to restriction of processing: In certain circumstances — for example, where you contest the accuracy of your data or object to a particular use — you may request that we restrict processing of your data to storage-only while the matter is resolved.
• Right to data portability: You may request a machine-readable export of the personal data you have actively provided to gv888 (e.g., account registration details, deposit preferences) in CSV or JSON format.
• Right to object to direct marketing: You may withdraw consent to receive promotional communications (SMS, email) at any time by contacting [email protected] with the subject line "Unsubscribe". Withdrawal of marketing consent does not affect your ability to use the platform.
• Right to withdraw consent: Where gv888 processes your data on the basis of consent (e.g., optional analytics cookies, promotional messaging), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

gv888 will not discriminate against any player for exercising their data rights. Submitting a data rights request will not affect your account status, withdrawal processing speed, or access to promotions, provided your account remains in good standing.

8. Contact & Privacy Queries

If you have any questions, concerns, or requests related to this Privacy Policy or gv888's handling of your personal data, please contact our data protection team using the details below. All privacy-related correspondence must be submitted in English and include your registered account username and mobile number so that we can verify your identity before responding.

• Email: [email protected] — use the subject line "Privacy Query" for fastest routing to our data protection team.
• Live chat: Available 24/7 via the gv888 platform. Our support agents can escalate privacy-sensitive requests to the data protection team on your behalf.
• Response time: We aim to acknowledge all privacy queries within 48 hours (BST, UTC+6) and to provide a substantive response within 30 calendar days of receiving your request.

gv888 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made, we will publish the updated Policy at https://gv888.bio/privacy-policy with a revised "Last Updated" date and, where appropriate, notify registered players via their registered contact details. Your continued use of the gv888 platform following the publication of a revised Policy constitutes acceptance of the updated terms.