gf222 Privacy Policy

1. Who We Are

gf222 is an online cricket betting and casino platform operating at gf222.io, primarily serving players located across Bangladesh — including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. The gf222 platform is the data controller for all personal data collected through the gf222 website and its associated services.

As data controller, gf222 determines the purposes and means by which your personal data is processed. We are committed to handling all personal data in a lawful, fair, and transparent manner, and we take all reasonable steps to ensure that the data we hold about you is accurate, secure, and used only for the purposes described in this Privacy Policy.

Our designated data protection contact can be reached at [email protected]. All data-related enquiries, access requests, and complaints should be directed to this address. We aim to acknowledge all privacy-related correspondence within five business days.

2. Data We Collect

2.1 Data You Provide Directly

When you register for a gf222 account, make a deposit, request a withdrawal, contact support, or claim a promotion, you provide us with personal data directly. This includes identity data (name, date of birth, national identification number), contact data (email address, mobile number, postal address), financial data (mobile wallet identifiers, bank account details), and identity document scans submitted as part of the KYC verification process.

2.2 Data Collected Automatically

When you access the gf222 platform, we automatically collect certain technical and usage data. This includes your IP address, device identifiers, browser type and version, operating system, referring URL, pages visited, session duration, betting and game activity logs, and deposit and withdrawal patterns. This data is collected through server logs, cookies, and similar tracking technologies described further in Section 7.

2.3 Data From Third Parties

In certain circumstances, gf222 may receive personal data about you from third-party sources. These include identity verification service providers used during KYC processing, fraud prevention databases, payment processors (including bKash, Nagad, Rocket, and Upay), and game content providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi where game-session data is relayed to gf222 for the purposes of account settlement and responsible gaming monitoring.

2.4 Data You Choose Not to Provide

Certain personal data is required to create and maintain a gf222 account. If you choose not to provide mandatory data — such as identity information required for KYC verification — gf222 may be unable to process withdrawal requests, activate certain account features, or continue providing services to you. We will always make clear at the point of data collection which fields are mandatory and which are optional.

3. How We Use Your Data

gf222 processes your personal data for the following primary purposes:

• Account management: Creating, maintaining, and administering your gf222 account, including processing login credentials, updating profile information, and managing account preferences.
• Service delivery: Processing bets, settling wagers, crediting winnings, managing casino game sessions, and handling all associated financial transactions in Bangladeshi Taka (BDT).
• Identity and age verification (KYC): Confirming that you meet the minimum age requirement of 21 years and verifying your identity in accordance with our obligations to prevent underage gambling and fraud.
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, bonus abuse, multi-accounting, and any other prohibited conduct described in the gf222 Terms & Conditions.
• Responsible gaming: Monitoring betting patterns and account activity to identify indicators of problem gambling, and delivering responsible gaming interventions such as cooling-off notifications, deposit limit alerts, and self-exclusion processing.
• Customer support: Responding to your enquiries, resolving disputes, processing complaints, and delivering support communications via email and in-platform messaging.
• Legal and regulatory compliance: Retaining records required under applicable anti-money-laundering regulations, responding to lawful requests from regulatory authorities, and fulfilling any other mandatory legal obligations.
• Marketing communications: Sending promotional offers, bonus notifications, and seasonal campaign communications — but only where you have provided explicit consent to receive such communications. You may withdraw consent at any time as described in Section 11.
• Platform improvement: Analysing aggregated and anonymised usage data to improve the performance, content, and user experience of the gf222 platform.

4. Legal Bases for Processing

gf222 processes your personal data only where a valid legal basis exists. The legal bases we rely on are as follows:

• Contract performance: Processing is necessary to perform the contract between you and gf222, including account registration, bet settlement, deposit and withdrawal processing, and customer support.
• Legal obligation: Processing is required to comply with applicable legal requirements, including KYC identity verification, anti-money-laundering record retention, and responses to lawful regulatory requests.
• Legitimate interests: Processing is necessary for gf222's legitimate interests, including fraud detection, platform security, responsible gaming monitoring, and aggregated analytics — provided that these interests are not overridden by your fundamental rights and freedoms.
• Consent: For marketing communications and certain non-essential cookies, gf222 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

Where gf222 relies on legitimate interests as a legal basis, we have conducted an internal balancing assessment to confirm that our interests do not override your rights. You may request further information about any such assessment by contacting [email protected].

5. Sharing Your Data

gf222 does not sell, rent, or trade your personal data to any third party. We share personal data only in the following strictly limited circumstances:

• Payment processors: Your financial data is shared with our payment partners — including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank — solely to process deposit and withdrawal transactions on your behalf.
• Identity verification providers: Identity documents and personal details may be shared with third-party KYC verification services to confirm your identity and age in accordance with our legal obligations.
• Game content providers: Session data (bet amounts, game outcomes, session timestamps) is exchanged with licensed game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi for the purpose of game operation and bet settlement.
• Fraud prevention and security services: Technical data including IP addresses and device identifiers may be shared with fraud detection service providers to protect the integrity of the gf222 platform and its Players.
• Legal and regulatory authorities: Where required by law, court order, or lawful request from a competent regulatory or law enforcement authority, gf222 will disclose relevant personal data. We will notify you of any such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the gf222 business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via the email address associated with your account.

All third parties with whom gf222 shares personal data are required to process that data only for the specific purposes described above and in accordance with appropriate data protection standards.

6. International Data Transfers

Some of the third-party service providers used by gf222 — including certain game content providers and identity verification services — are located or operate servers outside of Bangladesh. Where personal data is transferred to a third country, gf222 takes appropriate safeguards to ensure that the data receives a level of protection equivalent to that provided within Bangladesh.

Such safeguards may include contractual clauses that require the recipient to protect your data to an equivalent standard, or reliance on the recipient's participation in a recognised data protection framework. If you would like further information about the safeguards applied to any specific international transfer, please contact us at [email protected].

7. Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. gf222 uses cookies and similar technologies (including browser local storage and session storage) to operate core platform functions, maintain your login session, detect fraud, and gather anonymised analytics data about platform usage.

7.2 Types of Cookies Used

• Strictly necessary cookies: Required for the gf222 platform to function correctly. These include session authentication cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without rendering the platform inoperable.
• Functional cookies: Used to remember your preferences (such as language settings and display preferences) to improve your experience. These are set only with your consent.
• Analytics cookies: Used to collect aggregated, anonymised data about how Players interact with the gf222 platform — such as which pages are visited most frequently and which features are used. This data is used exclusively to improve the platform and is never linked to your individual identity.
• Fraud detection cookies: Used to identify unusual access patterns, detect account sharing, and prevent unauthorised access. These are classified as strictly necessary and cannot be disabled.

7.3 Managing Cookies

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the gf222 platform. Strictly necessary cookies and fraud detection cookies are required for platform operation and cannot be disabled through browser settings alone.

8. Data Retention

gf222 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, as detailed in this Privacy Policy, or for such longer period as is required or permitted by law. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your account plus a minimum of five years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five years following the date of each transaction, as required for financial regulatory compliance.
• KYC documentation: Retained for a minimum of five years following account closure or the completion of the relevant KYC process, whichever is later.
• Customer support correspondence: Retained for three years following the resolution of the relevant support case.
• Marketing preference data: Retained until you withdraw consent to marketing communications, after which it is updated to reflect your opt-out status and retained for suppression purposes.
• Technical and usage data: Retained for up to 24 months in identifiable form, after which it is anonymised or deleted.

At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data management procedures.

9. Your Rights

As a Player using the gf222 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond to all valid requests within 30 calendar days, though complex requests may take up to 60 days, in which case we will notify you of the extension.

• Right of access: You have the right to request a copy of the personal data that gf222 holds about you, together with information about how it is being processed.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by gf222 be corrected or completed without undue delay.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to legal retention obligations — for example, transaction records required for AML compliance cannot be deleted early.
• Right to restriction: You have the right to request that gf222 restrict the processing of your personal data in certain circumstances, such as while an accuracy dispute is being resolved.
• Right to data portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests. gf222 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

gf222 will not charge a fee for handling data subject rights requests unless the request is manifestly unfounded, repetitive, or excessive. In such cases, we reserve the right to charge a reasonable administrative fee or to decline to respond, and will explain our reasoning in writing.

10. Children & Minors

The gf222 platform is strictly intended for adults aged 21 years or older. gf222 does not knowingly collect personal data from any person under the age of 21. If gf222 becomes aware that a minor has provided personal data or registered an account, that account will be immediately suspended, all associated data will be deleted in accordance with our retention procedures, and any funds held in the account will be returned to the payment source used for the original deposit.

If you believe that a minor has registered or is using a gf222 account, please notify us immediately at [email protected]. We take reports of underage use extremely seriously and will investigate all such reports as a matter of priority.

Parents and guardians are encouraged to make use of parental control software to prevent minors from accessing online gambling platforms, including gf222.

11. Marketing & Opt-Out

gf222 will only send you marketing communications — including promotional bonus offers, seasonal campaigns (such as BPL season promotions, Eid special offers, or Pohela Boishakh bonuses), and new feature announcements — where you have given your explicit consent to receive such communications during the registration process or through your account settings.

You may withdraw your consent to marketing communications at any time by updating your communication preferences in your account settings, by clicking the unsubscribe link included in any marketing email you receive from gf222, or by contacting our support team at [email protected]. Withdrawal of marketing consent does not affect the delivery of essential account communications such as transaction confirmations, security alerts, and support responses.

Please allow up to 5 business days for changes to your marketing preferences to take full effect across all communication channels.

12. Security Measures

gf222 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and the gf222 platform.
• Encryption of sensitive data at rest, including payment credentials and identity document files.
• Role-based access controls that restrict internal access to personal data on a strict need-to-know basis.
• Regular security audits and penetration testing of the gf222 platform infrastructure.
• Real-time fraud monitoring systems that detect and flag anomalous account activity.
• Mandatory security training for all gf222 staff who handle personal data.
• Incident response procedures that ensure prompt containment and notification in the event of a data breach.

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, gf222 will notify you without undue delay and will provide clear information about the nature of the breach and the steps you can take to protect yourself.

13. Third-Party Services

The gf222 platform integrates services provided by third-party organisations, including game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank), and identity verification services. Each of these third parties operates under its own privacy policy and data protection practices.

gf222 is not responsible for the privacy practices of third-party providers. When interacting with a third-party service — such as a live dealer game powered by Evolution Gaming or a payment transaction processed via bKash — the relevant third party's own privacy policy governs the processing of any data handled directly by that provider. We encourage you to review the privacy policies of any third-party services with which you interact through the gf222 platform.

gf222 carefully selects its third-party partners and, where data is shared with them, requires appropriate contractual data protection commitments to be in place before any sharing occurs.

14. Changes to This Privacy Policy

gf222 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. The most current version of this policy is always available at gf222.io/privacy-policy. The version number and last-updated date at the top of this document will be revised whenever material changes are made.

Where changes are material — meaning they significantly affect your rights or the way in which your personal data is processed — gf222 will notify you by email to the address associated with your account, or via an in-platform notification, no less than 14 days before the changes take effect. Your continued use of the gf222 platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated policy.

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have a concern about how gf222 handles your personal data, please contact us using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week, including all Bangladesh public holidays
• Response Time: Privacy enquiries are acknowledged within 5 business days and resolved within 30 calendar days
• Subject Line: Please use "Privacy Request" or "Data Subject Rights" in your email subject line to ensure your enquiry is routed to the correct team

For responsible gaming enquiries, including self-exclusion requests and deposit limit adjustments, please visit the dedicated Responsible Gaming page at gf222.io/responsible-gaming or contact support directly at the address above.