Privacy Policy for gbaze
At gbaze, your privacy is treated as a core operational responsibility, not an afterthought. This Privacy Policy explains exactly what personal data we collect when you use the gbaze platform, why we collect it, how it is stored and protected, and what rights you have over your information as a user based in Bangladesh.
What This Policy Covers
Encrypted Data Storage
All personal data stored by gbaze is encrypted at rest using industry-standard AES-256 encryption. Your bKash, Nagad, and Rocket payment details are never stored as plain text on gbaze infrastructure.
No Data Sales
gbaze does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing networks. Your information is used solely to operate, secure, and improve the gbaze platform for your benefit.
Transparent Cookie Use
gbaze uses cookies primarily for session management, fraud prevention, and platform performance analytics. We do not use third-party advertising cookies. Full details are provided in the Cookies section of this policy.
Your Right to Access
You have the right to request a copy of all personal data gbaze holds about you at any time. Requests are processed within 30 days. Contact [email protected] with your account username to make a data access request.
Bangladesh-Focused Operations
gbaze primarily serves players in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and across Bangladesh. Data handling practices are designed with Bangladeshi users in mind, including localised payment method handling for bKash and Nagad.
Strict 18+ Policy
gbaze collects age verification data to enforce our strict 18+ only policy. We take the protection of minors seriously and will never knowingly retain personal data belonging to individuals under the age of 18.
Information We Collect
When you register and use the gbaze platform, we collect several categories of personal information. The scope of data collected depends on how you interact with the platform — some data is provided directly by you, some is collected automatically through your device and browser, and some is received from third-party payment processors such as bKash and Nagad when you make transactions.
Data You Provide Directly
- Registration data: Full name, date of birth, mobile phone number, and a self-chosen username and password when you create a gbaze account.
- Identity verification data: Government-issued ID documents, photographs, or other verification materials submitted in response to a gbaze identity check request.
- Payment information: Mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank), and transaction reference numbers related to deposits and withdrawals. Full wallet PINs or banking passwords are never collected by gbaze.
- Support communications: Any information you include in emails or messages sent to [email protected], including complaint details, screenshots, and account-related queries.
- Responsible gaming preferences: Deposit limit settings, time-out preferences, and self-exclusion requests submitted through the responsible gaming tools on the platform.
Data Collected Automatically
- Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device fingerprint identifiers used for security and fraud prevention.
- Session and activity data: Login timestamps, pages visited, games played, bets placed, wagering amounts, session duration, and clickstream data within the platform.
- Location data: Approximate geographic location derived from your IP address, used to verify that your access is consistent with the Bangladesh market and to detect unusual login patterns.
- Cookie and tracking data: Session cookies, persistent cookies, and analytics identifiers as described in the Cookies section of this policy.
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Name, date of birth, NID / passport | User-provided at registration or KYC |
| Contact Data | Mobile number, email address | User-provided at registration |
| Financial Data | bKash/Nagad wallet number, bank account | User-provided during deposit/withdrawal |
| Technical Data | IP address, device ID, browser type | Automatically collected on platform access |
| Usage Data | Games played, bets placed, session time | Automatically collected during play |
| Communications Data | Support emails, chat transcripts | User-initiated contact with support team |
How We Use Your Data
gbaze uses the personal data we collect for specific, legitimate purposes directly related to operating a safe and fair online gaming platform for players in Bangladesh. We do not use your data for purposes beyond those listed below without obtaining your prior consent.
Core Platform Operations
- Creating and managing your gbaze account, including authentication and session management.
- Processing deposits and withdrawals through bKash, Nagad, Rocket, Upay, and supported bank channels in Bangladeshi Taka (৳).
- Delivering the games, sports betting markets, live casino tables, and other services available on the gbaze platform.
- Settling bets and paying out winnings accurately and promptly.
- Administering bonuses, promotional offers, and wagering requirement tracking.
Safety, Security, and Compliance
- Verifying your age and identity to enforce the strict 18+ access policy.
- Detecting, investigating, and preventing fraud, money laundering, bonus abuse, and other prohibited conduct as defined in the gbaze Terms & Conditions.
- Monitoring account activity for unusual patterns that may indicate account compromise or unauthorised access.
- Maintaining records required for anti-money laundering (AML) compliance purposes.
Platform Improvement and Analytics
- Analysing aggregated, anonymised usage data to understand how players interact with gbaze features and to prioritise platform improvements.
- Monitoring platform performance, identifying technical errors, and resolving connectivity or game-loading issues.
- Conducting internal audits of game fairness, RTP accuracy, and odds integrity.
Customer Support
- Responding to your support queries, account disputes, and formal complaints submitted to [email protected].
- Sending account-related notifications such as password reset confirmations, deposit receipts, and withdrawal processing updates via your registered mobile number.
gbaze does not use your personal data for targeted advertising, profiling for commercial third parties, or any purpose unrelated to the direct provision of the gbaze platform and its associated support services.
Legal Basis for Processing
gbaze processes your personal data on the following legal grounds, which govern our data handling obligations and your corresponding rights in each context:
- Contractual necessity: The majority of data processing on gbaze is necessary to perform the contract between you and gbaze — specifically, to provide the account, payment, gaming, and support services you have signed up to use. Without this processing, gbaze cannot deliver the platform to you.
- Legal obligation: Certain data processing activities — particularly identity verification, age checks, and financial transaction records — are required by applicable law, including anti-money laundering obligations. gbaze is required to retain this data regardless of your preferences.
- Legitimate interests: gbaze processes some data — such as device fingerprinting, IP logging, and fraud-detection analytics — on the basis of our legitimate interest in maintaining a secure, fair, and operationally stable platform for all users. This processing does not override your fundamental privacy rights.
- Consent: Where gbaze sends optional communications (such as promotional updates about new games, seasonal offers, or BPL/IPL special betting markets), we do so only with your explicit opt-in consent. You may withdraw this consent at any time by contacting [email protected].
Data Sharing & Disclosure
gbaze does not sell, rent, or share your personal data with third parties for their own commercial purposes. However, certain operational functions of the gbaze platform require us to share limited data with trusted service partners. All such partners are contractually required to handle your data in a manner consistent with this Privacy Policy.
Categories of Third Parties We Share Data With
- Payment processors: bKash, Nagad, Rocket, Upay, and our banking partners require transaction data (wallet numbers, amounts, timestamps) to process your deposits and withdrawals in BDT. gbaze shares only the minimum data necessary to complete each transaction.
- Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe receive a session token and anonymised player identifier to deliver game content to your device. They do not receive your name, mobile number, or payment details.
- Fraud and security services: gbaze uses third-party fraud detection and device fingerprinting services that process technical data (IP address, device identifiers, browser attributes) to identify suspicious activity patterns. These services operate under strict data processing agreements with gbaze.
- Legal and regulatory authorities: gbaze will disclose personal data to law enforcement, regulatory bodies, or courts when required to do so by applicable law, a valid legal order, or to protect gbaze and its users from fraud, criminal activity, or serious legal risk.
gbaze will never share your mobile wallet number, bank account details, or identity documents with advertisers, data brokers, social media platforms, or any third party for marketing or profiling purposes. If you receive a communication claiming to be from gbaze and asking for your bKash PIN or banking credentials, treat it as fraudulent and report it to [email protected] immediately.
Cookies & Tracking Technologies
gbaze uses cookies and similar tracking technologies to operate the platform efficiently and securely. A cookie is a small text file placed on your device by the gbaze website when you visit. Cookies allow gbaze to remember your session, detect fraud, and understand how the platform is being used at an aggregate level.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential Session Cookies | Maintain your login session and game state while you are active on the platform | Session (deleted on browser close) |
| Security Cookies | Detect bot activity, prevent CSRF attacks, and flag suspicious login patterns | Up to 30 days |
| Preference Cookies | Remember your language preference, game lobby layout, and display settings | Up to 12 months |
| Analytics Cookies | Collect anonymised data on page visits, feature usage, and error rates for internal reporting | Up to 13 months |
No Advertising Cookies
gbaze does not deploy third-party advertising cookies, retargeting pixels, or social media tracking scripts on the gbaze platform. You will not be tracked across the web for the purpose of serving gbaze advertisements on other websites based on your activity on our platform.
Managing Cookies
You may disable non-essential cookies through your browser settings at any time. Please note that disabling essential session cookies will prevent you from logging in to your gbaze account and using most platform features. Disabling analytics cookies will not affect your ability to use the platform but will reduce our ability to diagnose technical problems that may affect your experience.
Data Retention
gbaze retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:
- Active account data: Retained for the full duration of your account's existence on the gbaze platform, plus a minimum post-closure period of 5 years for AML compliance purposes.
- Transaction records: All deposit, withdrawal, and betting transaction records are retained for a minimum of 5 years following the date of the transaction.
- Identity verification documents: Retained for a minimum of 5 years following account closure or the date of the most recent verification check, whichever is later.
- Support communications: Email and chat records are retained for 3 years from the date of the communication.
- Analytics and technical logs: Anonymised analytics data is retained for up to 24 months. Raw server logs containing IP addresses are retained for up to 12 months before being purged or anonymised.
When the applicable retention period expires, gbaze securely deletes or anonymises the relevant personal data so that it can no longer be associated with you as an individual.
If you close your gbaze account and wish to request early deletion of data that is not subject to a mandatory legal retention requirement, contact [email protected] with a formal deletion request. gbaze will process eligible requests within 30 days and confirm what data has been deleted and what must be retained under applicable law.
Data Security Measures
gbaze implements a multi-layered security framework to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:
- 256-bit SSL/TLS encryption: All data transmitted between your device and the gbaze platform is encrypted in transit using industry-standard TLS protocols. Look for the padlock icon in your browser's address bar when visiting gbaze.club.
- AES-256 encryption at rest: Sensitive personal data stored in gbaze databases — including identity documents, mobile wallet numbers, and account credentials — is encrypted at rest using AES-256 encryption.
- Password hashing: Your gbaze account password is stored as a one-way cryptographic hash. gbaze staff cannot read your password. If you forget your password, it must be reset rather than retrieved.
- Two-factor authentication (2FA): gbaze offers optional SMS-based 2FA on all accounts. We strongly recommend enabling 2FA to add a second layer of protection against unauthorised login attempts.
- Access controls: Access to personal data within gbaze's internal systems is restricted on a strict need-to-know basis. Staff with access to user data undergo background checks and are bound by confidentiality obligations.
- Regular security audits: gbaze conducts periodic internal and third-party security assessments of the platform infrastructure to identify and remediate vulnerabilities proactively.
No online platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your personal data, gbaze will notify affected users promptly and take immediate steps to contain the incident, assess the impact, and prevent recurrence. If you suspect your account has been compromised, contact [email protected] immediately.
Your Privacy Rights
As a gbaze user, you have the following rights with respect to your personal data. To exercise any of these rights, submit your request in writing to [email protected] with your registered account username and a clear description of your request. gbaze will respond within 30 days.
Right of Access
You have the right to request a copy of all personal data gbaze holds about you. gbaze will provide this in a structured, readable format. This includes your registration data, transaction history, identity verification records, and support communications.
Right to Rectification
If any personal data gbaze holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For changes to core identity data (such as your legal name or date of birth), gbaze may require supporting documentation to process the correction.
Right to Erasure
You may request that gbaze delete your personal data where it is no longer needed for the purpose for which it was collected, or where you withdraw consent for consent-based processing. Please note that gbaze is legally required to retain certain financial and identity records for a minimum of 5 years and cannot fulfil erasure requests for this data during the mandatory retention period.
Right to Restrict Processing
You may request that gbaze restrict the processing of your data — for example, while a dispute about the accuracy of your data is being resolved — without requiring full deletion of the data.
Right to Object
You may object to gbaze processing your data on the basis of legitimate interests at any time. gbaze will cease that processing unless we can demonstrate compelling legitimate grounds that override your objection.
Right to Withdraw Consent
Where processing is based on your consent (such as receiving optional promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Send all privacy rights requests to [email protected] with the subject line "Privacy Rights Request — [Your Username]". Our support team operates 24/7 on Bangladesh Standard Time (BST, UTC+6) and will confirm receipt of your request within 48 hours.
Children & Minors
The gbaze platform is strictly intended for adults aged 18 and above. gbaze does not knowingly collect, process, or retain personal data from individuals under the age of 18. Age verification is a mandatory step in the gbaze account registration process, and users may be required to submit proof of age at any stage of their account lifecycle.
If gbaze becomes aware that personal data has been collected from a minor — through a false declaration of age during registration or any other means — that account will be immediately suspended, all associated data will be scheduled for deletion (subject to any legal retention obligations), any deposited funds will be returned to the originating payment source, and any winnings will be forfeited.
If you are a parent or guardian and believe that your child has registered an account on gbaze, please contact [email protected] immediately with details of the account. gbaze will investigate and take appropriate action within 24 hours of receiving the report.
18+ only. Gambling is an adult activity. If you are under 18 years of age, you must not attempt to access or use the gbaze platform. 18+ Only
Updates to This Policy
gbaze reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, the services we offer, or applicable legal requirements. When material changes are made, gbaze will update the effective date and version number displayed at the top of this page.
For significant changes that materially affect how your personal data is processed — such as introducing a new category of data sharing or changing the legal basis for processing — gbaze will notify registered users by sending a notification to the mobile number associated with their account, in addition to updating this page.
Your continued use of the gbaze platform following the publication of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any change, you may request account closure by contacting [email protected]. gbaze recommends bookmarking this page and reviewing it periodically.
Contact for Privacy Queries
If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or need to report a potential data security concern, please contact the gbaze privacy team using the details below. All privacy-related enquiries are handled by a dedicated team member and are treated with strict confidentiality.
- Email: [email protected] — use the subject line "Privacy Enquiry" for faster routing
- Response time: gbaze aims to acknowledge all privacy enquiries within 48 hours and resolve them within 30 calendar days
- Operating hours: 24/7 support available in English, Bangladesh Standard Time (BST, UTC+6)
- Platform: gbaze.club
For formal data access, rectification, or erasure requests, please include your registered account username, your registered mobile number (last 4 digits only for security), and a clear description of your request in your email to ensure prompt processing.
Have Questions About Your Privacy?
Our English-language support team is available 24/7 to answer any questions about how gbaze handles your personal data. You can also explore our FAQ for quick answers, or visit the Responsible Gaming page for information on our player protection tools.