gv888 Privacy Policy — Your Data, Our Responsibility

1 Introduction

gv888 ("we", "us", "our") operates the online betting and casino platform accessible at gv888.io. In providing these services to players in Bangladesh, we collect and process certain personal data. We are committed to handling this data with transparency, integrity, and in compliance with applicable data protection principles.

This Privacy Policy describes:

• What categories of personal data gv888 collects from players.
• The purposes for which that data is processed.
• The legal bases on which processing is carried out.
• How and with whom data may be shared.
• How long data is retained and how it is protected.
• The rights players hold over their own personal data.
• How to contact gv888 in relation to privacy matters.

This policy applies to personal data collected through gv888.io, any associated mobile-optimised pages, and any direct communications between gv888 and a player (including customer support interactions via email or live chat).

By registering an account on gv888, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this policy, you must not register an account or use the gv888 platform.

2 Personal Data We Collect

gv888 collects the following categories of personal data from players:

3 How We Collect Your Data

gv888 collects personal data through the following methods:

3.1 Direct Collection

Data provided directly by the player at the time of account registration, KYC submission, deposit or withdrawal initiation, contact with customer support, or activation of responsible gaming tools. This is the primary source of identity, contact, and financial data held by gv888.

3.2 Automated Technical Collection

Technical and usage data is collected automatically through server logs, browser cookies, and session tracking technologies each time a player accesses gv888.io. This data is collected regardless of whether the player is logged in to an account and encompasses IP address, device identifiers, and page navigation records.

3.3 Third-Party Sources

gv888 may receive supplementary data from the following third-party sources to fulfil its operational and compliance obligations:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) — confirmation of transaction status and wallet ownership.
• KYC and identity verification partners — confirmation of identity document authenticity where automated KYC tools are used.
• Fraud detection services — risk scoring data relating to IP addresses, device fingerprints, and known fraud patterns.
• Game studio providers (Evolution Gaming, Pragmatic Play, Ezugi, and others) — game session outcomes and RNG certification data.

4 Purposes of Processing

gv888 processes personal data for the following specific and legitimate purposes:

gv888 does not use personal data for automated decision-making that produces significant legal effects on players without a meaningful opportunity for human review. Responsible gaming flags and fraud alerts are subject to review by gv888 compliance personnel before any account action is taken.

5 Legal Basis for Processing

gv888 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between gv888 and the player — including account management, payment processing, and game provision — is carried out on the basis that it is necessary to fulfil contractual obligations.
• Legal obligation: Processing required to comply with applicable law — including KYC, anti-money laundering record-keeping, and cooperation with law enforcement — is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform improvement is carried out on the basis of gv888's legitimate interest in operating a safe, fair, and compliant platform, balanced against the player's privacy interests.
• Consent: Processing for optional marketing communications is carried out on the basis of the player's freely given, specific, and informed consent. Players may withdraw this consent at any time by contacting [email protected] or updating preferences in their account dashboard.

6 Data Sharing and Disclosure

6.1 Service Providers

gv888 shares personal data with carefully selected third-party service providers who assist in delivering platform services. These providers are contractually bound to process data only in accordance with gv888's instructions and this Privacy Policy. They include:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard — for deposit and withdrawal processing.
• KYC verification providers: For automated identity document authentication and age verification.
• Fraud detection and risk management providers: For IP reputation checking and device fingerprint analysis.
• Game studio providers: Evolution Gaming, Pragmatic Play, Ezugi, Spribe, and others — for delivery of casino and live game content; these providers receive session data required to run game rounds.
• IT and hosting providers: Cloud infrastructure and server management partners who host gv888 platform data.
• Customer support platforms: Tools used to manage live chat and email support interactions.

6.2 Legal and Regulatory Disclosure

gv888 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, a court order, or a lawful demand from a competent authority. gv888 will, where legally permitted, notify the affected player of such a disclosure request before complying.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of gv888's business, personal data held about players may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and given the opportunity to close their account if they do not wish their data to be transferred.

6.4 No Commercial Sale of Data

gv888 does not sell, rent, lease, or otherwise commercially transfer personal data to any third party for that party's own marketing or commercial purposes. Data sharing is limited strictly to the operational purposes described in this clause.

7 Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on a player's device by the gv888 website when the site is accessed. They allow the site to recognise returning visitors, maintain session state (keeping a player logged in during a session), and gather aggregated usage analytics. gv888 uses both session cookies (which expire when the browser is closed) and persistent cookies (which remain on the device for a defined period).

7.2 Types of Cookies Used

• Strictly necessary cookies: Required for core platform functionality — including maintaining login sessions and remembering account preferences. These cannot be disabled without breaking the platform.
• Analytics cookies: Used to understand how players interact with gv888.io — which pages are visited most frequently, how long sessions last, and where players exit the site. This data is aggregated and anonymised.
• Functional cookies: Used to remember player preferences such as language settings and responsible gaming tool configurations.
• Security cookies: Used to detect and prevent fraudulent login attempts and automated bot activity.

7.3 Managing Cookies

Players may manage or delete cookies through their browser settings at any time. Please note that disabling strictly necessary cookies will impair platform functionality, including the ability to remain logged in to a gv888 account. Instructions for managing cookies are available in the help documentation of all major browsers including Chrome, Firefox, Safari, and Edge.

8 Data Retention

gv888 retains personal data for the periods set out below, after which data is securely deleted or anonymised:

Where a player requests deletion of their personal data, gv888 will assess the request against applicable legal retention obligations. Data that gv888 is legally required to retain cannot be deleted on request, but access to that data will be restricted to compliance and legal personnel only.

9 Data Security

gv888 implements a multi-layered security framework to protect player personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between a player's device and gv888 servers.
• At-rest encryption of sensitive data fields including NID numbers, wallet identifiers, and financial records stored in gv888 databases.
• Role-based access controls restricting access to personal data to gv888 staff members whose job function requires it, with access logged and audited.
• Two-factor authentication requirements for gv888 administrative systems that contain personal data.
• Regular penetration testing and vulnerability assessments conducted by qualified security professionals.
• Intrusion detection and prevention systems monitoring gv888 server infrastructure in real time.
• Incident response procedures to detect, contain, and notify affected players of any confirmed data breach within a reasonable timeframe.

While gv888 takes all reasonable measures to protect personal data, no internet transmission or storage system is entirely free from risk. Players are also responsible for maintaining the security of their own account login credentials and must notify gv888 immediately if they suspect unauthorised access to their account.

10 Your Data Rights

As a gv888 player, you hold the following rights over your personal data. These rights may be exercised by contacting gv888 at [email protected] with the subject line "Data Rights Request" and proof of your account identity.

10.1 Right of Access

You have the right to request a copy of all personal data held by gv888 about you. gv888 will respond to a verified access request within 30 days of receipt. The response will include a description of the categories of data held, the purposes for which it is processed, and the retention periods applied.

10.2 Right to Rectification

If any personal data held by gv888 about you is inaccurate or incomplete, you have the right to request that it be corrected. gv888 will update inaccurate records within 14 days of receiving a verified rectification request, except where the data is subject to a legal hold that prevents modification.

10.3 Right to Erasure

You may request that gv888 delete personal data about you where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where the data has been processed unlawfully. gv888 will assess erasure requests and delete data that is not subject to a legal retention obligation. Data required to be retained by law (such as AML transaction records) cannot be erased on request.

10.4 Right to Restrict Processing

You may request that gv888 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data and wish processing to be paused while accuracy is verified. During a restriction, gv888 may store the data but will not actively process it beyond what is legally required.

10.5 Right to Data Portability

Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON). This applies primarily to account profile data and transaction history.

10.6 Right to Object

You have the right to object to processing carried out on the basis of legitimate interests — including profiling for marketing purposes. Where you object to marketing communications, gv888 will cease sending promotional materials immediately. Objections to processing carried out for fraud prevention or legal compliance will be assessed case-by-case.

10.7 Withdrawal of Consent

Where processing is based on your consent — such as marketing communications — you may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. To withdraw consent, contact [email protected] or update your preferences in the account dashboard.

11 Children and Minors

If a parent or guardian believes that a minor has registered an account on gv888 and provided personal data without parental consent, they should contact gv888 immediately at [email protected] with the account details and relevant identification. gv888 will investigate the report, close the account if the player is confirmed to be underage, and delete any personal data collected from the minor that is not required to be retained by law.

gv888 employs age verification checks during the registration process and reserves the right to require documentary proof of age at any time during the account lifecycle. Players who are found to be under 21 years of age will have their account permanently closed and any deposits returned to the originating wallet after identity confirmation.

12 Third-Party Links and Embedded Content

The gv888 platform contains embedded content delivered by third-party game studio providers including Evolution Gaming, Pragmatic Play, Ezugi, Spribe, Microgaming, and NetEnt. When a player launches a game from one of these providers within the gv888 interface, a direct connection is established between the player's device and the studio provider's servers. The studio provider may independently collect technical data such as device identifiers and session data pursuant to its own privacy policy.

gv888 is not responsible for the privacy practices of third-party game studios or any other third-party services referenced on the platform. Players are encouraged to review the privacy policies of third-party providers whose content they access via gv888.

gv888 does not include links to external third-party websites that are outside the gv888 ecosystem. All navigation links on gv888.io point to internal pages within the gv888 platform.

13 Amendments to This Privacy Policy

gv888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. Where a material change is made to the policy, gv888 will notify registered players via their mobile number or email address on file at least 7 days prior to the change taking effect.

The effective date at the top of this document reflects the date of the most recent revision. Non-material changes such as typographical corrections or clarifications that do not affect the substance of the policy may be applied without prior notice. The current version of this Privacy Policy is always accessible at gv888.io/privacy-policy.

Continued use of the gv888 platform after a revised Privacy Policy takes effect constitutes acceptance of the updated policy. If you do not agree with the revised terms, you must cease using the platform and may request account closure by contacting [email protected].

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data gv888 holds about you, please contact the gv888 Data Support team using the details below. All privacy-related enquiries will be acknowledged within 3 business days and resolved within 30 days of receipt.

• Email: [email protected] (subject line: "Privacy Enquiry" or "Data Rights Request")
• Support hours: 24 hours a day, 7 days a week, including Bangladesh public holidays
• Response time: Acknowledgement within 3 business days (Bangladesh Standard Time, UTC+6); full response within 30 days

When submitting a data rights request, please include your registered mobile number and a description of your request so gv888 can verify your identity and respond efficiently. gv888 may request additional verification documents before actioning a data access, rectification, or erasure request to protect against unauthorised data disclosure.