gc22 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how gc22 ("the Platform", "we", "us", "our") collects, uses, stores, and discloses information about users ("you", "your") of the gc22 website located at gc22.bio and all associated platform features, including sports betting, live casino, slots, and crash games. This Policy forms part of gc22's Terms & Conditions and should be read alongside them.

By accessing or registering on gc22, you confirm that you have read and understood this Privacy Policy and that you consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the gc22 platform.

2. Information We Collect

gc22 collects only the personal data that is necessary to provide you with a safe, compliant, and functional gaming experience. The categories of data we collect, together with the source and purpose of collection, are set out in the table below:

gc22 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information. If you choose to contact gc22 support, any personal information you voluntarily include in your message will be used solely to respond to your enquiry and will not be retained beyond the period necessary to resolve the matter.

3. How We Use Your Information

gc22 processes your personal data only for specific, lawful purposes. We do not process your data in any manner that is incompatible with the purposes for which it was collected. The purposes for which gc22 processes your personal data include:

• Creating and managing your gc22 account, including verifying your identity and age to ensure compliance with our 21+ policy and applicable platform rules.
• Processing your deposits and withdrawals via bKash, Nagad, Rocket, and Upay, including verifying that the payment method is registered in your name and detecting fraudulent transactions.
• Providing customer support services, including responding to account enquiries, processing bonus claims, resolving disputes, and assisting with responsible gaming requests such as deposit limits and self-exclusion.
• Complying with legal and regulatory obligations, including anti-money-laundering (AML) requirements, fraud prevention measures, and any other applicable legal obligations that gc22 is subject to.
• Monitoring and improving platform performance, security, and user experience, including analysing aggregate gameplay data to identify and fix technical issues and to optimise the gc22 platform for Bangladesh players.
• Sending you service-related communications, including transaction confirmations, security alerts, and important policy updates. gc22 does not send unsolicited marketing messages unless you have opted in to receive them.

4. Legal Basis for Processing

gc22 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: processing that is required to perform the contract between you and gc22, such as creating your account, processing your deposits and withdrawals, and resolving disputes.
• Legal obligation: processing that is required for gc22 to comply with its legal obligations, such as AML checks, KYC verification, age verification, and retaining transaction records for audit purposes.
• Legitimate interests: processing that is in gc22's legitimate business interests — provided those interests are not overridden by your data-protection rights — such as fraud detection, platform security monitoring, and improving the service.
• Consent: where you have given explicit consent for gc22 to process your data for a specific purpose, such as receiving promotional communications. You may withdraw your consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Payment Data and Mobile Financial Services

When you make a deposit or request a withdrawal on gc22 using bKash, Nagad, Rocket, or Upay, gc22 records the mobile wallet number associated with the transaction and the transaction reference ID provided by the mobile financial service. gc22 does not store your mobile financial service PIN, password, or any authentication credentials. All deposit and withdrawal transactions are processed directly through the respective mobile financial service provider's own secure systems.

gc22 retains payment transaction records for a minimum of five years from the date of the transaction to satisfy anti-money-laundering record-keeping requirements. These records may be disclosed to relevant authorities if gc22 is required to do so by law.

6. Cookies and Tracking Technologies

gc22 uses cookies and similar tracking technologies to maintain your session, remember your preferences, and monitor platform performance. The types of cookies gc22 uses are:

• Strictly necessary cookies: these are essential for the gc22 platform to function correctly. They maintain your login session, store your language preference, and ensure that pages load securely. These cookies cannot be disabled.
• Performance and analytics cookies: these collect aggregated, anonymised data about how players navigate and use the gc22 platform. This data helps gc22 identify technical issues, optimise page load times, and improve the overall user experience for Bangladesh players.
• Functional cookies: these remember choices you make on gc22 — such as your language setting — to provide a more personalised experience. Disabling functional cookies may affect the functionality of certain platform features.

You can manage cookie preferences through your mobile browser settings. Please note that disabling strictly necessary cookies will prevent gc22 from functioning correctly and may make it impossible to log in or place bets. gc22 does not use third-party advertising cookies or share your browsing data with advertising networks.

7. Sharing Your Information

gc22 does not sell, rent, or trade your personal data to third parties for commercial purposes. gc22 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary to fulfil the purpose of sharing:

• Payment processing partners (bKash, Nagad, Rocket, Upay): transaction data is shared with the relevant mobile financial service provider solely to execute your deposit or withdrawal request. These providers have their own privacy policies governing how they handle transaction data.
• Game content providers (such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming): limited technical data such as your player session identifier may be shared with the game provider to load and operate game content within the gc22 platform. Game providers do not receive your full personal profile.
• Technology and infrastructure service providers: gc22 may use third-party cloud hosting, server management, or customer support software providers to operate the platform. These providers act as data processors under binding data-processing agreements and are permitted to process your data only on gc22's documented instructions.
• Law enforcement and regulatory authorities: gc22 may disclose your personal data to police, financial intelligence units, courts, or other government authorities where required to do so by applicable law, court order, or lawful authority. gc22 will only disclose the minimum data necessary to satisfy the legal requirement.

8. Data Retention

gc22 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The specific retention periods that apply to different categories of data are as follows: account and identity data is retained for the duration of your active account plus a minimum of five years following account closure; financial transaction data (deposit and withdrawal records) is retained for a minimum of five years from the date of each transaction; gaming activity records are retained for five years from the date of the activity; customer support correspondence is retained for three years from the date of the last interaction; technical and log data (IP addresses, session data) is retained for a maximum of twelve months.

When the applicable retention period expires, gc22 will securely delete or anonymise your personal data so that it can no longer be associated with you. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregate statistical analysis purposes, but in a form that cannot identify you as an individual.

9. Data Security

gc22 applies a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or destruction. Our key security measures include:

• 256-bit SSL (Secure Socket Layer) encryption applied to all data transmissions between your device and the gc22 platform, ensuring that your personal and financial data cannot be intercepted during transit.
• Access-controlled server infrastructure: gc22 player data is stored on secure servers with strict role-based access controls. Only authorised gc22 personnel with a documented business need may access personal data, and all access events are logged and audited.
• Account security: player accounts are protected by password authentication. gc22 strongly recommends that you use a unique, strong password for your gc22 account and that you do not share your login credentials with any other person.
• Fraud detection systems: gc22 operates automated fraud detection and transaction monitoring systems that identify suspicious account activity in real time. Where suspicious activity is detected, gc22 may temporarily restrict account access pending investigation.

While gc22 takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is completely secure. If you suspect that your gc22 account has been compromised, please contact [email protected] immediately so that gc22 can take protective action on your account without delay.

10. Your Data Protection Rights

As a user of gc22, you have the following rights in relation to the personal data that gc22 holds about you. To exercise any of these rights, please contact gc22 at [email protected] with your account username and a description of the right you wish to exercise. gc22 will respond within 30 days of receiving a valid request.

• Right of access: you may request a copy of all personal data that gc22 holds about you, including the categories of data held, the purposes for which it is processed, and the recipients with whom it has been shared.
• Right to rectification: if any personal data that gc22 holds about you is inaccurate or incomplete, you may request that it be corrected or completed. For example, if your registered mobile number has changed, contact gc22 support to update your account details.
• Right to erasure: you may request that gc22 delete your personal data. gc22 will honour erasure requests to the extent permitted by law. Note that gc22 is required by law to retain certain categories of data (such as financial transaction records) for minimum prescribed periods, and erasure requests cannot override these legal retention obligations.
• Right to restriction of processing: in certain circumstances — for example, where you contest the accuracy of data gc22 holds about you — you may request that gc22 restrict its processing of your data while the matter is being resolved.
• Right to data portability: you may request a copy of the personal data that you provided to gc22 in a structured, commonly used, machine-readable format. This right applies to data processed on the basis of your consent or on the basis of a contract between you and gc22.
• Right to object: you may object to gc22's processing of your personal data where that processing is based on gc22's legitimate interests. If you object to receiving service communications (such as promotional emails), you may opt out at any time by contacting [email protected].

gc22 will not charge a fee for handling data rights requests unless the request is manifestly unfounded or excessive. In such cases, gc22 may charge a reasonable administrative fee or decline to act on the request, and will notify you of the reason for doing so.

11. Children's Privacy

gc22 is strictly an adult platform intended for players aged 21 and above. gc22 does not knowingly collect personal data from any individual under the age of 21. If gc22 discovers or is notified that it has inadvertently collected personal data from a person under the age of 21, gc22 will immediately delete that data and permanently suspend the associated account. All funds held in the account at the time of suspension will be forfeited.

12. Changes to This Privacy Policy

gc22 may update this Privacy Policy from time to time to reflect changes in the platform, applicable law, or gc22's data-processing practices. When material changes are made to this Policy, gc22 will make reasonable efforts to notify registered users via the contact details associated with their accounts before the changes take effect. The date at the top of this Policy indicates when it was last reviewed and updated.

Your continued use of the gc22 platform following the posting of a revised Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with the changes, you must stop using gc22 and may request account closure by contacting [email protected].

13. Contact and Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise a data protection right, or want to report a privacy concern, please contact the gc22 privacy and compliance team: