Privacy Policy — Your Data, Your Rights

1.1 Why We Collect Data

gdaje collects personal data for the purpose of operating a safe, compliant, and enjoyable gaming platform for players in Bangladesh. We collect only the data that is necessary to deliver our services, verify your identity, process transactions, and meet our obligations under applicable laws. We do not collect data speculatively or for purposes unrelated to the delivery of our platform services.

1.2 Registration & Identity Data

• Full legal name and date of birth (required for age verification — players must be 21+)
• Mobile phone number (used for account security and bKash/Nagad/Rocket payment verification)
• Email address (used for account notifications, security alerts, and optional marketing communications)
• Government-issued identification documents (submitted during KYC verification, stored securely)
• Residential address (collected for identity verification and responsible gaming compliance purposes)

1.3 Technical & Behavioural Data

• IP address, device type, operating system, and browser version (used for fraud detection and security monitoring)
• Session data including login times, pages visited, game sessions played, and betting history
• Transaction records including deposit amounts, payment methods used, and withdrawal requests
• Cookie and tracking data collected via our website (see the Cookies section below for full details)

2.1 Lawful Basis for Processing

gdaje processes your personal data only where a lawful basis exists for doing so. This includes: the performance of your account contract (delivering the services you registered for), compliance with legal obligations (such as age verification and anti-money-laundering requirements), legitimate interests of the platform (such as fraud detection and platform security), and your explicit consent where required (such as for optional marketing communications).

2.2 Purposes of Processing

3.1 Our Commitment

gdaje does not sell, rent, or otherwise trade your personal data to third-party marketers, data brokers, or advertising networks. Your personal information is shared externally only in the limited circumstances described in this section, and only to the extent strictly necessary to fulfil the relevant purpose.

3.2 Permitted Disclosures

• Payment processors — bKash, Nagad, Rocket, Upay, and card payment partners receive transaction data strictly necessary to process your deposits and withdrawals
• Game software providers — Pragmatic Play, Evolution Gaming, Ezugi, Spribe and other game studios may receive anonymised session identifiers necessary to deliver and log game rounds
• Identity verification service providers — KYC partners process government ID documents solely for the purpose of verifying player identity and age; they are contractually prohibited from retaining or repurposing your data
• Law enforcement and regulatory authorities — where gdaje is legally required to disclose data in response to a lawful request, court order, or applicable regulation, we will comply and notify you where permitted by law

3.3 International Transfers

Some of our service providers and game platform partners operate servers located outside Bangladesh. Where your data is transferred internationally as part of service delivery, gdaje ensures that appropriate contractual safeguards are in place with the receiving party to maintain a standard of data protection consistent with this Privacy Policy. We do not transfer your data internationally for marketing or speculative purposes.

4.1 What Are Cookies

Cookies are small text files placed on your device by our website when you visit. They allow the site to remember information about your session — such as your login state, language preference, and recently visited pages — so the platform functions correctly and efficiently. gdaje uses first-party cookies (set by gdaje directly) and selected third-party cookies from service providers essential to platform operation.

4.2 Types of Cookies We Use

• Essential cookies — strictly necessary for the platform to function; these cannot be disabled without breaking core site functionality (e.g. session authentication, payment page security tokens)
• Functional cookies — remember your preferences such as language selection and display settings to improve your experience across visits
• Analytics cookies — collect anonymised usage data (pages visited, time on page, clicks) to help us understand how players navigate the platform and where improvements are needed
• Security and fraud-detection cookies — help identify suspicious login patterns, unusual betting activity, or device fingerprinting inconsistencies that may indicate account compromise

4.3 Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block, delete, or receive notifications when cookies are set. Please note that disabling essential cookies will impair the functionality of the gdaje platform — you may be unable to log in, process payments, or access game features. Instructions for managing cookies in your browser are available through your browser's help documentation. Continued use of the gdaje platform after being presented with cookie information constitutes acceptance of essential cookies.

5.1 Rights Available to You

• Right of access — you may request a copy of all personal data we hold about you, delivered in a readable format within a reasonable timeframe
• Right to rectification — if any personal data we hold about you is inaccurate or incomplete, you have the right to request correction or completion
• Right to erasure — subject to legal retention obligations, you may request deletion of your personal data where it is no longer necessary for the purposes it was collected
• Right to restrict processing — you may request that we limit how we use your data while a dispute about accuracy or lawfulness is being resolved
• Right to object — you have the right to object to processing of your data for direct marketing purposes; we will honour such requests promptly

5.2 How to Exercise Your Rights

To exercise any of the rights described above, contact the gdaje support team at [email protected] with the subject line "Data Rights Request". Please include your registered account username and a description of the right you wish to exercise. We will acknowledge your request within 3 business days and aim to fulfil it within 30 calendar days. For complex requests, we may extend this period by a further 30 days and will inform you of the extension in advance.

5.3 Marketing Communications

If you have opted in to receive promotional communications from gdaje — such as bonus offers, tournament announcements, or seasonal promotions — you may withdraw your consent and unsubscribe at any time by contacting [email protected] or using the unsubscribe mechanism included in any marketing email you receive. Withdrawing marketing consent does not affect the delivery of essential service communications such as account security alerts, transaction confirmations, or KYC verification requests.

6.1 How Long We Keep Your Data

gdaje retains personal data for as long as your account remains active and for a defined period thereafter as required by applicable legal, regulatory, and financial record-keeping obligations. Account transaction records, KYC documentation, and responsible gaming interaction logs are retained for a minimum of 5 years following account closure to meet anti-money-laundering and financial compliance requirements. Data collected purely for platform analytics purposes is anonymised or deleted within 24 months of collection.

6.2 Security Measures

gdaje employs industry-standard security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL encryption for all data in transit, encrypted storage for sensitive data at rest, role-based access controls limiting staff access to personal data on a need-to-know basis, automated intrusion detection systems, and regular security audits. Despite these measures, no method of electronic transmission or storage is 100% secure, and gdaje cannot guarantee absolute security. In the event of a data breach that affects your personal data, we will notify you in accordance with applicable requirements.

6.3 Your Responsibility

While gdaje takes every reasonable step to secure your data on our end, you also play a role in keeping your account safe. You are responsible for maintaining the confidentiality of your login credentials, for logging out of shared or public devices after each session, for using a strong and unique password for your gdaje account, and for notifying gdaje support immediately if you believe your account has been accessed without your authorisation. gdaje will never ask you to provide your password via email, chat, or phone.

7.1 Changes to This Policy

gdaje reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform services. When material changes are made, we will update the "Last updated" date at the top of this page and, where the change is significant, we may notify active account holders via email or an in-platform notice. Your continued use of the gdaje platform after a revised Privacy Policy has been published constitutes your acceptance of the updated terms. We encourage all players to review this page periodically.

7.2 Contact Our Privacy Team

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way gdaje handles your personal data, please contact our support team. We aim to respond to all privacy-related enquiries within 5 business days. You may reach us at [email protected] — please include "Privacy Query" in your subject line so your message is routed to the correct team. We are committed to resolving all privacy concerns transparently and in good faith.