gx88 Privacy Policy — How We Handle Your Data

gx88 processes your personal data for clearly defined purposes, each grounded in a legitimate legal basis. We do not use your data for purposes that are incompatible with why it was originally collected. The following sets out the primary purposes for which we use each category of data we hold about you.

2.1 Account Management and Service Delivery

The most fundamental use of your personal data is to create and maintain your gx88 account and to deliver the Services you have requested. This includes processing your deposits and withdrawals in BDT via bKash, Nagad, Rocket, and Upay; crediting and debiting your account balance; awarding bonuses and promotional credits; and enabling you to place bets on cricket matches including BPL, IPL, T20 World Cup fixtures, and Bangladesh Tigers international games, as well as access our full library of slot and live casino games.

2.2 Identity Verification and KYC Compliance

We are required by our operational compliance framework to verify the identity and age of every player before processing withdrawal requests and, in certain circumstances, before permitting continued deposit activity. We use the identity and KYC document data you provide — such as your NID card scan and proof of address — to confirm that you are who you say you are, that you are aged 18 or above, and that your account is not being used for money laundering or fraud. This processing is necessary for compliance with legal obligations and for the protection of our platform and all players on it.

2.3 Fraud Prevention and Platform Security

gx88 uses technical data, usage data, and identity data in combination to detect and prevent fraudulent activity including multi-accounting, bonus abuse, chargeback fraud, identity theft, and money laundering. Automated systems and human analysts may review account patterns to identify unusual behaviour. Where fraud is suspected, we may restrict account activity, request additional documentation, and share relevant data with payment providers or authorities as required.

2.4 Responsible Gaming Compliance

We monitor player activity data — including session duration, deposit frequency, and bet sizing patterns — to identify indicators of potentially harmful gambling behaviour. This data is used to power our responsible gaming tools, including automated alerts, spending summaries sent to the account holder, and interventions by our player welfare team. This processing is fundamental to our commitment to player safety and the 18+ standard we uphold across the gx88 platform.

2.5 Customer Support

When you contact our support team via Live Chat, email, or WhatsApp, we use the communications data and account data you provide — or that we retrieve from your account record — to investigate your query, resolve disputes, process complaints, and improve the quality of our support service. Support interactions may be recorded and retained for training and quality assurance purposes.

2.6 Marketing Communications

With your consent, gx88 may use your contact data (email address and phone number) to send you promotional communications about new games, bonus offers, cricket betting markets, seasonal promotions for events like Eid, Pohela Boishakh, and Victory Day (December 16), and other platform news. You may withdraw your consent and opt out of marketing communications at any time via your account settings or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any prior communications sent while consent was active.

2.7 Platform Analytics and Improvement

Aggregated and anonymised usage data is used to analyse how players navigate the gx88 platform, which games and features are most popular, and where the user experience can be improved. This analytics processing is carried out on data that cannot be used to identify individual players and does not affect your personal privacy rights.

gx88 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. However, in order to operate the platform and fulfil our legal obligations, we may share specific categories of your data with the following categories of recipients under strict contractual and legal safeguards.

3.1 Payment Service Providers

To process your deposits and withdrawals in BDT, gx88 shares necessary transaction and identity data with our integrated payment partners including bKash, Nagad, Rocket, Upay, and card scheme processors such as Visa and Mastercard. These providers receive only the minimum information required to execute and verify a specific transaction and are contractually prohibited from using that data for any other purpose.

3.2 Identity Verification and KYC Providers

To complete the mandatory age and identity verification process, we share your KYC document data with specialist third-party identity verification service providers. These providers operate under strict data processing agreements and are certified to handle sensitive identity documents in compliance with internationally recognised data security standards.

3.3 Fraud Prevention and Cybersecurity Services

Technical data including IP addresses, device fingerprints, and behavioural patterns may be shared with our fraud detection and cybersecurity partners to assess the risk profile of account activity and to prevent platform abuse. These partners act as data processors on our behalf and may not use the data for their own commercial purposes.

3.4 Legal and Regulatory Authorities

gx88 may be required to disclose your personal data to law enforcement agencies, financial intelligence units, or other government bodies where we are legally obligated to do so — for example, as part of an AML investigation, a court order, or a regulatory inquiry. We will only disclose the minimum data necessary to comply with the specific legal requirement and, where permitted by law, we will notify you of any such disclosure.

3.5 Business Transfers

In the event that gx88 undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via the platform or by email in advance of any such transfer, and the recipient entity will be required to adhere to the same privacy standards as set out in this policy.

The gx88 website uses cookies and similar tracking technologies (collectively, "cookies") to provide essential platform functionality, remember your preferences, and gather anonymous analytics data that helps us improve the experience for all players in Bangladesh. This section explains what cookies we use, why we use them, and how you can control them.

4.1 What Are Cookies?

Cookies are small text files that are stored on your device (computer, tablet, or mobile phone) when you visit a website. They allow the website to recognise your device on subsequent visits and to store certain information about your session and preferences. Cookies are not programs and cannot carry viruses or install software on your device.

4.2 Types of Cookies We Use

4.3 Managing Your Cookie Preferences

You can control and manage cookies through your web browser settings. Most modern browsers allow you to view, block, and delete cookies on a per-site or global basis. Please note that blocking strictly necessary cookies will impair the functionality of the gx88 platform — for example, you may not be able to log in or place bets if session cookies are disabled. Instructions for managing cookies in the most common browsers are available via the official help documentation of each browser provider.

Deleting cookies does not delete any personal data held on our servers. To exercise your rights over server-held personal data, please refer to Section 7 of this Privacy Policy.

gx88 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. Our security programme is reviewed and updated regularly to address evolving threats and to reflect best practices in the online gaming industry.

5.1 Technical Safeguards

• SSL/TLS encryption: All data in transit between your browser or mobile device and the gx88 platform is encrypted using SSL/TLS protocols. The padlock indicator visible in your browser confirms that your connection to gx88 is secure.
• Password hashing: Account passwords are never stored in plain text. We use a cryptographically strong one-way hashing algorithm with per-account salting to store password data, meaning that even in the unlikely event of a data breach, your actual password cannot be recovered.
• Data encryption at rest: Sensitive personal data — including KYC document scans and financial records — is encrypted when stored on our servers using AES-256 or equivalent encryption standards.
• Access controls: Access to personal data on gx88's internal systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged, and privileged access rights are reviewed on a regular schedule.
• Intrusion detection: Our infrastructure is monitored around the clock (BST, UTC+6) for unauthorised access attempts, anomalous traffic patterns, and potential security incidents.

5.2 Organisational Safeguards

• All gx88 staff who handle personal data are required to complete data protection and information security training before being granted access to production systems.
• Third-party service providers who process personal data on our behalf are vetted for security compliance and are required to sign data processing agreements that mandate appropriate security standards.
• We conduct periodic security reviews and vulnerability assessments of the gx88 platform and its supporting infrastructure.

5.3 Data Breach Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, gx88 will take immediate containment action and will notify affected individuals as promptly as reasonably practicable. We will provide clear information about the nature of the breach, the categories of data involved, the likely consequences, and the steps being taken to address it. Players who believe their account has been compromised should contact our support team immediately at [email protected] or via Live Chat.

gx88 retains your personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable law. We do not keep personal data indefinitely and have established clear retention schedules aligned with our legal and operational obligations. The following table summarises our standard retention periods by data category.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised in accordance with our internal data disposal procedures. Where data must be retained for a longer period due to an ongoing legal dispute, regulatory investigation, or court order, it will be flagged accordingly and retained only until the resolution of that matter.

If you close your gx88 account voluntarily, your data will not be deleted immediately. We are required to retain certain categories of data — particularly financial records and KYC documentation — for the regulatory retention periods specified above, even after account closure. After those periods have elapsed, the data will be permanently deleted.

As a player on the gx88 platform, you have a number of rights in relation to the personal data we hold about you. We are committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our support team at [email protected] or via Live Chat. We will respond to all verified requests within a reasonable timeframe.

7.1 Right of Access

You have the right to request a copy of the personal data that gx88 holds about you, along with information about how it is being processed, the purposes for which it is used, and the categories of third parties with whom it has been shared. We will provide this information in a clear, structured format upon receipt of a verified identity check.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay. For certain data fields — such as your name, date of birth, or contact details — you may be able to update the information directly within your gx88 account settings. For data that cannot be self-corrected, please contact our support team.

7.3 Right to Erasure

In certain circumstances, you have the right to request that gx88 delete your personal data. This right applies where the data is no longer necessary for the purpose it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been unlawfully processed. Please note that this right is not absolute — we may be required by law to retain certain categories of data (such as financial transaction records and KYC documentation) for the mandatory retention periods specified in Section 6, and we cannot erase data that we are legally obligated to keep.

7.4 Right to Restrict Processing

You may request that we restrict the processing of your personal data in specific circumstances — for example, while you contest the accuracy of the data we hold, or while we assess your objection to processing based on legitimate interests. Where processing is restricted, we will continue to store the data but will not actively process it until the restriction is lifted.

7.5 Right to Data Portability

Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format. You may also request that we transmit that data directly to another service provider where technically feasible.

7.6 Right to Object

You have the right to object at any time to the processing of your personal data where that processing is based on gx88's legitimate interests. Upon receiving an objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or unless the processing is necessary for the establishment, exercise, or defence of legal claims. You also have an unconditional right to object to processing of your personal data for direct marketing purposes, including profiling related to marketing.

7.7 Right to Withdraw Consent

Where gx88 processes your personal data on the basis of your consent — for example, to send you marketing communications about bonuses, new cricket betting markets, or seasonal promotions — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. You can opt out of marketing communications via your account settings or by emailing [email protected].

gx88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the introduction of new platform features. When we make material changes to this policy, we will notify registered players by posting a prominent notice on the gx88 website and, where appropriate, by sending a notification to the email address associated with your account at least 14 days before the changes take effect.

The "Last updated" date at the top of this document reflects the most recent version of the Privacy Policy. We encourage you to review this page periodically to stay informed about how gx88 is protecting your personal data. Continued use of the gx88 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms.

8.1 Previous Versions

Archived versions of this Privacy Policy are available upon request. If you wish to review a previous version of this document — for example, to understand what terms applied at the time you first registered your gx88 account — please contact our support team and we will provide the relevant archived version.

8.2 How to Contact Us About Privacy

If you have any questions, concerns, or complaints about this Privacy Policy or about the way gx88 handles your personal data, please reach out to us using any of the following contact methods. We take all privacy-related enquiries seriously and will respond as promptly as possible, typically within 3 to 5 business days (BST, UTC+6).

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, via the gx88 website
• WhatsApp: +880 1700 000000 (plain text — not a clickable link)
• Hours: All support channels operate on Bangladesh Standard Time (BST, UTC+6)

If you are not satisfied with our response to a privacy complaint, you may have the right to escalate your concern to the relevant data protection or consumer rights authority in Bangladesh. We will always cooperate fully with any such inquiry.