Data Protection & Privacy
Privacy Policy — gkw22 Data Practices
At gkw22, the privacy of our players is a fundamental obligation, not an afterthought. This Privacy Policy explains in plain English what personal data we collect, why we collect it, how we use and protect it, and what rights you hold over your own information as a player on the gkw22 platform in Bangladesh.
Our Commitment
Privacy at a Glance
End-to-End Encryption
All data transmitted between your device and the gkw22 platform is protected using industry-standard TLS/SSL encryption. Your personal details and financial information are never transmitted in plain text.
No Unauthorised Data Sales
gkw22 does not sell, rent, or trade your personal information to third parties for marketing purposes. Your data is used solely to operate the platform, verify your identity, and improve your gaming experience.
Minimal Data Principle
We collect only the personal data that is strictly necessary to provide you with a safe, legal, and enjoyable platform experience. We do not request data that serves no legitimate operational purpose.
Your Rights, Always
You have the right to access, correct, export, or request deletion of your personal data at any time. gkw22 will respond to all data rights requests within 30 days of receipt via our support team.
Secure Payment Processing
Payment data processed via bKash, Nagad, Rocket, Upay, Visa, and Mastercard is handled by certified payment processors. gkw22 does not store full card numbers or mobile banking PINs on its own servers.
Defined Retention Periods
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, and anti-money laundering obligations.
Scope of This Policy
This Privacy Policy applies to all personal data collected by gkw22 through the gkw22.app website, associated mobile applications, and all related player-support communications. It does not apply to third-party websites or services linked from the gkw22 platform. Players are encouraged to review the privacy policies of any third-party service they access independently.
Section 1
Data We Collect
To operate the gkw22 platform lawfully and securely, we collect personal data in three broad categories: data you provide directly during registration and ongoing platform use; data generated automatically as a result of your activity on the platform; and data received from trusted third-party partners where necessary for identity verification and payment processing.
1.1 Data You Provide Directly
When you register an account or interact with the gkw22 platform, you may provide the following categories of personal information:
- Identity data: Full legal name, date of birth, and nationality.
- Contact data: Email address, mobile phone number, and residential address (including city, district, and division within Bangladesh).
- Verification documents: Copies of government-issued National ID (NID), passport, or other documentation submitted for KYC (Know Your Customer) compliance.
- Financial data: Payment method details such as bKash mobile number, Nagad account reference, Rocket number, Upay reference, or masked Visa/Mastercard details sufficient to process deposits and withdrawals. Full card numbers are not stored by gkw22.
- Account preferences: Username, preferred language, communication preferences, and responsible gaming limit settings.
- Support communications: Any information you share with the gkw22 support team via live chat, email to [email protected], or WhatsApp.
1.2 Data Collected Automatically
When you access the gkw22 platform, certain technical data is collected automatically to ensure security, monitor for fraud, and improve platform performance:
- Device and browser data: Device type, operating system, browser version, screen resolution, and installed language settings.
- Network data: IP address, approximate geolocation derived from IP (country and city level), internet service provider (ISP), and connection type.
- Usage and behavioural data: Pages visited, games played, session duration, betting patterns, deposit and withdrawal history, and frequency of platform access.
- Cookie and tracking data: First-party cookies, session tokens, and analytics identifiers as described in Section 4 of this policy.
1.3 Data From Third Parties
In limited circumstances, gkw22 may receive personal data about you from trusted third-party sources, including identity verification service providers, payment processors (such as bKash, Nagad, and Rocket), fraud prevention partners, and analytics providers. Such data is received only where it is necessary to fulfil a specific, lawful purpose and is handled in accordance with this Privacy Policy.
Data Categories Summary
| Identity | Name, DOB, NID |
| Contact | Email, phone, address |
| Financial | Payment references |
| Technical | IP, device, browser |
| Behavioural | Usage, sessions, bets |
| Support | Chat and email logs |
Section 2
How We Use Your Data
gkw22 processes personal data only where we have a lawful basis for doing so. The primary lawful bases we rely on are: performance of a contract (providing you with the services you signed up for), compliance with legal obligations (anti-money laundering, age verification, fraud prevention), and our legitimate interests in operating a secure and commercially viable platform.
2.1 Core Platform Operations
We use your personal data to operate the gkw22 platform, including creating and managing your player account, processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, settling sports bets and game outcomes, applying bonus and VIP programme benefits to your account, and providing 24/7 customer support in English and Bengali.
2.2 Identity Verification and Compliance
Bangladesh and internationally applicable anti-money laundering (AML) and counter-terrorism financing (CTF) regulations require gkw22 to verify the identity and age of all registered players before processing withdrawals. We use your identity and verification document data solely for this purpose and retain it for the period required by applicable law. We may also use transaction and behavioural data to identify and investigate suspicious activity in accordance with our AML obligations.
2.3 Platform Security and Fraud Prevention
Technical and behavioural data — including IP addresses, device fingerprints, login patterns, and betting activity — is analysed continuously to detect and prevent fraud, account takeover, collusion, and multi-accounting. Where a security threat is identified, we may temporarily restrict account access pending investigation and notify you at your registered email address.
2.4 Responsible Gaming
gkw22 uses your gaming activity and account data to support responsible gaming obligations. This includes monitoring for signs of problem gambling behaviour, enforcing deposit limits and self-exclusion periods you have set, and sending responsible gaming communications where appropriate. This processing is conducted in your interest and in fulfilment of our platform duty of care.
2.5 Platform Improvement and Analytics
Aggregated and anonymised usage data is used to analyse platform performance, improve user experience, optimise game selection, and refine our sports betting markets. Where analytics are conducted at an individual level, we ensure that your data is treated in accordance with this policy and not used for any purpose beyond platform improvement.
2.6 Marketing Communications
With your explicit consent, gkw22 may send you promotional emails, SMS notifications, or in-platform messages about new games, sports betting opportunities, VIP programme updates, and seasonal promotions relevant to Bangladesh (such as BPL and IPL cricket seasons or Eid special offers). You may withdraw your marketing consent at any time by updating your communication preferences in Account Settings or by contacting . Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.
Section 3
Data Sharing & Third Parties
gkw22 does not sell your personal data to any third party. We share personal data only where strictly necessary to deliver the gkw22 service, comply with legal obligations, or protect the security of the platform and its players. The categories of third parties with whom we may share data are described below.
3.1 Payment Service Providers
To process deposits and withdrawals, gkw22 shares the minimum necessary transaction data with licensed payment service providers including bKash, Nagad, Rocket, Upay, and card scheme processors for Visa and Mastercard. These providers are bound by their own privacy policies and applicable financial services regulations and are not permitted to use your data for purposes beyond payment processing.
3.2 Identity Verification Partners
To fulfil KYC obligations, gkw22 may share identity documents and related personal data with regulated third-party identity verification providers. These partners process your data under strict contractual obligations and may not retain your data beyond the period required to complete the verification check.
3.3 Game Technology Providers
Games available on gkw22 are supplied by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others. These providers may receive your player ID and session data for the purpose of delivering game content, recording game outcomes, and supporting dispute resolution. They do not receive your full identity or financial details.
3.4 Legal and Regulatory Authorities
gkw22 may be required to disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required by law, court order, or regulatory requirement. gkw22 will comply with all lawful requests and, where permitted by law, will notify the affected player that such a disclosure has been made.
3.5 Service Providers and Processors
gkw22 engages a limited number of trusted technology service providers — including cloud hosting providers, fraud detection systems, and customer support platforms — who process personal data on our behalf as data processors under contractual obligations that require them to maintain the same level of data protection as gkw22 itself. These providers may not use your data for their own purposes.
International Data Transfers
Some of gkw22's third-party service providers operate servers outside Bangladesh. Where personal data is transferred internationally, gkw22 ensures that appropriate safeguards are in place — including contractual protections and, where applicable, adherence to recognised data transfer frameworks — to maintain the level of protection described in this policy.
Section 4
Cookies & Tracking Technologies
gkw22 uses cookies and similar tracking technologies to keep you logged in, remember your preferences, detect fraud, and understand how the platform is used so that we can continue to improve it. This section explains the types of cookies we use and how you can manage them.
4.1 What Are Cookies?
Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, store session information, and collect usage data. Cookies may be session-based (deleted when you close your browser) or persistent (retained for a defined period).
4.2 Cookie Categories Used by gkw22
| Cookie Type | Purpose | Duration | Can Be Disabled? |
|---|---|---|---|
| Strictly Necessary | Session authentication, account security, fraud prevention | Session | No — platform will not function |
| Functional | Remembering language, game preferences, and responsible gaming settings | Up to 12 months | Yes — some features may be affected |
| Analytics | Aggregated usage data, page performance, game popularity tracking | Up to 24 months | Yes — no impact on core platform |
| Marketing | Tracking of promotional campaign performance and referral attribution | Up to 30 days | Yes — no impact on core platform |
4.3 Managing Your Cookie Preferences
You can manage cookie preferences directly within your gkw22 Account Settings panel under the Privacy section. You may also configure your browser to block or delete cookies; however, please be aware that disabling strictly necessary cookies will prevent you from logging into the platform. Detailed instructions for managing cookies on the most common browsers are available from the respective browser's help documentation.
Section 5
Data Retention
gkw22 retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of personal data held by gkw22:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and identity data | Duration of account + 5 years | AML and regulatory compliance |
| KYC verification documents | Duration of account + 5 years | Legal obligation |
| Transaction and financial records | 7 years from transaction date | Financial record-keeping obligations |
| Betting and gaming history | Duration of account + 3 years | Dispute resolution and responsible gaming |
| Support communications | 3 years from last interaction | Complaint resolution and audit trail |
| Analytics and usage data | Up to 24 months (aggregated) | Platform improvement |
| Marketing consent records | Until consent is withdrawn + 3 years | Proof of consent |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data is anonymised rather than deleted, it may be retained indefinitely for statistical and analytical purposes, as it can no longer be used to identify any individual.
Section 6
Data Security Measures
gkw22 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security posture is reviewed regularly and updated in response to evolving threats.
6.1 Technical Safeguards
- All data in transit between your device and gkw22 servers is encrypted using TLS 1.2 or TLS 1.3 protocols.
- Sensitive data at rest — including identity documents and financial references — is encrypted using AES-256 encryption.
- Access to production systems is restricted to authorised personnel only, with multi-factor authentication (MFA) enforced for all administrative access.
- Intrusion detection and real-time monitoring systems are in place across all platform infrastructure, operating on a 24/7 basis.
- Regular penetration testing and vulnerability assessments are conducted by independent security specialists.
6.2 Organisational Safeguards
- All gkw22 staff with access to personal data receive mandatory data protection training and are bound by confidentiality obligations.
- Access to personal data follows a strict need-to-know principle — staff members can only access data relevant to their specific operational role.
- Data processing activities are documented in an internal record of processing activities, reviewed annually.
- gkw22 maintains an incident response plan for data breaches; in the event of a breach affecting your personal data, gkw22 will notify affected players without undue delay in accordance with applicable obligations.
6.3 Your Role in Data Security
While gkw22 takes every reasonable precaution to protect your data, the security of your account also depends on the choices you make. You are responsible for keeping your password confidential, not sharing your login credentials with anyone, enabling two-factor authentication in your Account Settings, and logging out of the platform when using a shared device. If you suspect that your account has been compromised, contact the gkw22 support team at immediately.
Section 7
Your Privacy Rights
As a gkw22 player, you hold a number of rights in relation to the personal data we hold about you. gkw22 is committed to honouring these rights promptly and transparently. To exercise any of the rights below, contact the gkw22 support team at with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and provide a full response within 30 calendar days.
Right of Access
Request a copy of all personal data gkw22 holds about you, including account data, transaction history, and KYC records.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held in your gkw22 account profile.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
Right to Restrict Processing
Request that gkw22 temporarily pause processing of your data — for example, while an accuracy dispute is being resolved.
Right to Data Portability
Request a copy of your personal data in a structured, machine-readable format suitable for transfer to another service provider.
Right to Object
Object to processing of your data for marketing purposes or based on legitimate interests. Marketing objections are actioned immediately upon receipt.
Limitations on Erasure and Portability
The right to erasure and data portability may be limited where gkw22 is required to retain your data to comply with legal obligations — particularly AML, KYC, and financial record-keeping requirements. In such cases, gkw22 will explain the specific legal basis for retention and delete the data as soon as the retention obligation expires.
Section 8
Policy Updates & Contact
8.1 Changes to This Privacy Policy
gkw22 reviews this Privacy Policy periodically and may update it to reflect changes in platform operations, applicable law, or best-practice data protection standards. Where a material change is made, gkw22 will notify registered players via the email address associated with their account and will post a notice on the platform dashboard at least 14 days before the updated policy takes effect. The effective date at the top of this policy will be updated to reflect the date of the most recent revision. Continued use of the gkw22 platform following the effective date of a revised policy constitutes your acceptance of the updated terms.
8.2 Contact for Privacy Matters
For any questions, concerns, or requests relating to this Privacy Policy or the personal data gkw22 holds about you, please contact the gkw22 privacy team using the details below. All privacy-related communications are handled in English and are treated as confidential.
Email (Privacy Requests)
Subject line: "Data Rights Request" or "Privacy Policy Query"
Response Time
Acknowledgement within 5 business days.
Full response within 30 calendar days.
8.3 Minors
The gkw22 platform is strictly for adults aged 18 and above. gkw22 does not knowingly collect personal data from individuals under the age of 18. If you believe that a minor has registered an account or provided personal data to gkw22, please notify us immediately at . gkw22 will investigate the matter and, where confirmed, delete the relevant data and close the account without delay.
Explore gkw22
Your Privacy is Protected — Now Enjoy the Platform
With your data safeguarded by industry-leading security measures, explore everything gkw22 has to offer Bangladesh's most dedicated online gaming community.