gt44 Privacy Policy — How We Handle Your Data

Introduction

This Privacy Policy ("Policy") describes how gt44 ("gt44", "we", "us", "our") collects, uses, stores, discloses and protects personal information about individuals ("you", "your", "Player") who access or use the gt44 platform at gt44.org. By registering an account or using the Platform in any way, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal information as described herein.

gt44 takes the privacy of its players seriously. The Platform is designed for adult players aged 21 and above based primarily in Bangladesh. We collect only the personal data necessary to operate a safe, compliant and high-quality online gaming service. We do not sell your personal data to third parties for their own marketing purposes, and we apply technical and organisational safeguards to protect your information at every stage of its lifecycle on our systems.

Our Privacy Commitments at a Glance

The following cards summarise the key ways gt44 protects your personal information. Full details are in the sections below.

Information We Collect

gt44 collects personal information from you in the following categories, depending on how you interact with the Platform. We collect only information that is necessary for the purposes described in this Policy.

• a.Identity and registration data: your full legal name, date of birth, Bangladesh mobile number, and any government-issued identification documents provided during the KYC verification process.
• b.Financial and payment data: payment method details (bKash account number, Nagad number, Rocket number, Upay number, Visa/Mastercard partial card number), deposit amounts, withdrawal amounts and transaction history on the Platform.
• c.Gaming activity data: bet history, game sessions, wagering activity, bonus usage, win and loss records, and time spent on the Platform — used primarily for account management, responsible gaming monitoring, and fraud prevention.
• d.Device and technical data: IP address, device type, browser type and version, operating system, mobile network operator, session timestamps and navigation patterns within the Platform — used for security monitoring, fraud detection and Platform optimisation.
• e.Communications data: the content of any messages you send to our customer support team, including support tickets, chat transcripts and email correspondence — retained for quality assurance and dispute resolution purposes.

We do not knowingly collect special categories of sensitive personal data (such as health data, racial or ethnic origin, political opinions, religious beliefs or biometric data) unless required to do so by law or to satisfy a specific responsible gaming or anti-money-laundering obligation.

How We Use Your Information

gt44 uses your personal information only for the purposes described below. We do not use your data in ways that are incompatible with the purposes for which it was originally collected.

• a.Account creation and management: registering your account, verifying your identity and age, managing your profile and preferences, and maintaining your account security throughout the account lifecycle.
• b.Platform operation and service delivery: processing your deposits and withdrawals via bKash, Nagad, Rocket, Upay and card payment providers; enabling you to access games, place bets and receive winnings; and providing customer support.
• c.Legal and regulatory compliance: meeting our obligations under applicable anti-money-laundering (AML) regulations, Know Your Customer (KYC) requirements, responsible gaming mandates and any other applicable legal or regulatory requirements.
• d.Fraud prevention and security: monitoring account activity for signs of fraud, collusion, money laundering, underage gambling or other prohibited conduct; and taking protective action where such signs are detected.
• e.Responsible gaming: using your gaming activity data to identify patterns that may indicate problem gambling behaviour, and applying responsible gaming interventions (such as deposit limit suggestions or self-exclusion prompts) where appropriate.
• f.Service improvement: analysing aggregated, anonymised usage data to improve the Platform's features, performance, game offering and user experience. Individual player data is not used for this purpose in a form that identifies you personally.

Legal Basis for Processing

gt44 processes your personal data on one or more of the following legal grounds, depending on the specific purpose of the processing activity.

• a.Contractual necessity: processing required to perform the contract between you and gt44 — for example, operating your account, processing deposits and withdrawals, and delivering gaming services.
• b.Legal obligation: processing required to comply with applicable laws and regulations, including AML/KYC obligations and responsible gaming mandates.
• c.Legitimate interests: processing carried out in pursuit of gt44's legitimate business interests, including fraud prevention, Platform security, service improvement and responsible gaming monitoring — provided those interests are not overridden by your own privacy interests.
• d.Consent: where gt44 processes your data for purposes not covered by the above grounds — such as sending optional marketing communications — we will obtain your explicit consent prior to processing. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to that withdrawal.

Sharing Your Information

gt44 does not sell your personal data. We share your information with third parties only in the limited circumstances set out below, and only to the extent necessary for the stated purpose.

• a.Payment processors and mobile banking partners: bKash, Nagad, Rocket, Upay and card payment networks receive the financial data necessary to process your deposit and withdrawal transactions. These partners operate under their own data protection frameworks and are not authorised to use your data for any purpose beyond processing your transactions.
• b.Game providers and technology vendors: third-party game studios (such as Pragmatic Play, Evolution Gaming, Spribe and Ezugi) and Platform technology vendors may receive session and device data as part of delivering their services. They are contractually restricted from using this data for any purpose beyond service delivery.
• c.Regulatory and law enforcement authorities: where required by applicable law, court order or regulatory instruction, gt44 may disclose your personal data to government agencies, law enforcement bodies, financial regulators or tax authorities.
• d.Fraud prevention and identity verification partners: third-party identity verification and fraud prevention service providers who assist gt44 in meeting its KYC and AML obligations. These providers receive only the minimum data necessary to perform their verification function.

Payment Data and Financial Information

gt44 takes additional precautions with financial data. Full payment credentials — such as your complete bKash PIN, Nagad PIN or full card number — are never stored on gt44 servers. Payment transactions are processed directly through the payment provider's encrypted gateway, and gt44 retains only a tokenised reference sufficient to identify the payment method associated with your account for withdrawal matching purposes.

All financial transaction records are retained for a minimum period required under applicable financial regulations in order to satisfy audit, anti-money-laundering and tax reporting obligations. These records may be retained even after account closure if required by law. Access to financial transaction records is restricted to authorised gt44 compliance and finance staff and, where legally required, to regulatory or law enforcement authorities.

Cookies and Tracking Technologies

gt44 uses cookies and similar tracking technologies to operate the Platform, remember your session preferences, detect fraud and monitor Platform performance. The types of cookies we use are as follows.

• a.Essential cookies: strictly necessary for the Platform to function. These include session authentication cookies that keep you logged in during a gaming session, security tokens and load-balancing cookies. These cookies cannot be disabled without breaking core Platform functionality.
• b.Performance and analytics cookies: used to collect anonymised data about how players navigate and use the Platform, helping us identify areas for improvement. This data is aggregated and does not identify individual players.
• c.Fraud detection cookies: used to identify suspicious behaviour patterns, including bot activity, account takeover attempts and payment fraud signals. These cookies are essential for Platform security and cannot be disabled.

You may manage non-essential cookies through your browser settings. Please note that disabling certain cookies may affect your ability to use some features of the Platform. gt44 does not use cookies to serve third-party advertising or to track your activity on other websites.

Data Retention

gt44 retains your personal data for as long as your account is active, and for such additional period as is required to satisfy our legal, regulatory, fraud prevention and dispute resolution obligations after account closure. As a general guide, account and identity data is retained for a minimum of five years following account closure, and financial transaction data is retained for a minimum of seven years, in both cases subject to any longer period required by applicable law.

Where personal data is no longer required and there is no legal basis for continued retention, gt44 will securely delete or anonymise that data. Anonymised data (data from which all identifiers have been removed such that you cannot be re-identified) may be retained indefinitely for analytical purposes.

Your Rights Regarding Your Personal Data

Subject to applicable law, you have the following rights in relation to the personal data that gt44 holds about you. To exercise any of these rights, please contact our support team at [email protected]. We will respond to your request within a reasonable timeframe and at no charge in the first instance.

• a.Right of access: you have the right to request a copy of the personal data gt44 holds about you, together with information about how it is being used.
• b.Right to rectification: you have the right to request correction of any personal data we hold about you that is inaccurate or incomplete.
• c.Right to erasure: you have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• d.Right to restriction of processing: you have the right to request that we restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
• e.Right to object: you have the right to object to the processing of your personal data where that processing is based on gt44's legitimate interests, including the right to object to direct marketing communications.

Please note that some of these rights are not absolute and may be subject to limitations where gt44 has a legal obligation to retain or continue processing your data. We will always explain the reason if we are unable to fulfil a data rights request in full.

Security Measures

gt44 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include 256-bit SSL encryption for all data in transit, encrypted storage for sensitive personal data at rest, access controls limiting data access to authorised personnel only, regular security assessments and vulnerability testing of Platform systems, and fraud monitoring systems that operate on a continuous basis.

While gt44 takes all reasonable steps to protect your personal data, no electronic transmission or storage system is completely secure. If you suspect that your account has been compromised or that your personal data has been accessed without your authorisation, please contact our support team immediately at [email protected]. You also play an important role in keeping your account secure by using a strong, unique password and logging out after every session.

Minors and Age Restriction

The gt44 Platform is strictly for adults aged 21 and above. gt44 does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that a minor has used the gt44 Platform, please contact us immediately at [email protected].

Changes to This Privacy Policy

gt44 reserves the right to update or amend this Privacy Policy at any time. When we make material changes — meaning changes that substantively affect your rights or the way we process your personal data — we will update the effective date shown at the top of this Policy and, where appropriate, notify you through a notice on the Platform or by other reasonable means. Your continued use of the Platform after any such update constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically so that you remain informed about how gt44 handles your personal data.

Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the way gt44 handles your personal data, please contact our support team by email only. Do not send sensitive personal data through any channel other than our secure Platform. Email:

[email protected]