Privacy Policy — How gk2w Collects, Uses, and Protects Your Personal Data

1 Information We Collect

gk2w collects personal information from players through several channels: during account registration, during the Know Your Customer (KYC) verification process, when you make deposits or withdrawals, when you interact with our customer support team, and automatically through your use of the platform. The categories of information we collect are described in detail below.

1.1 Registration Information

When you create a gk2w account, we collect the following information that you provide directly:

• Full legal name as it appears on your government-issued identity document.
• Date of birth, used to verify that you meet the minimum age requirement of 18 years.
• Residential address, including city, district, and postal code.
• Email address, used as your primary contact channel and for account authentication.
• Mobile phone number, used for account security notifications and support communication.
• Username and encrypted password, used to authenticate your access to the platform.

1.2 Identity Verification (KYC) Information

To comply with our anti-money laundering obligations and to verify the age and identity of players, gk2w may request and collect copies of the following documents:

• A government-issued photo identification document such as a National ID card, passport, or driving licence.
• Proof of residential address, such as a utility bill, bank statement, or official government correspondence dated within the last three months.
• Proof of payment method ownership, such as a screenshot of a bKash, Nagad, or Rocket account showing the registered account holder name.
• Source of funds documentation in cases where the volume or nature of transactions warrants additional due diligence review.

KYC documents are stored securely and accessed only by authorised members of the gk2w compliance team. They are not shared with third parties except as described in Section 3 of this policy.

1.3 Transaction and Payment Information

When you make deposits or withdrawals using bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer, gk2w records transactional information including the payment method used, the transaction amount in Bangladeshi Taka (BDT), the date and time of the transaction, and a transaction reference number. gk2w does not store full card numbers or mobile banking PINs — payment processing is handled via the secure systems of the respective payment providers.

1.4 Gameplay and Betting Records

gk2w maintains records of all gaming activity on your account, including the games played, bet amounts, outcomes, bonus funds used, and session timestamps. This information is used for account integrity purposes, dispute resolution, responsible gaming monitoring, and to ensure compliance with applicable rules. Gameplay records are retained for the full duration of your account and for a minimum period thereafter as required under our data retention policy.

1.5 Technical and Device Information

When you access the gk2w platform, our servers automatically collect certain technical information about your device and connection. This includes your IP address, device type and operating system, browser type and version, session start and end times, pages visited within the platform, and referring URL. This information is used for security monitoring, fraud prevention, and platform performance optimisation. It is not used to identify you personally in isolation, but may be combined with account information where necessary for fraud or security investigations.

2 How We Use Your Data

gk2w uses the personal information it collects for specific, legitimate purposes. We do not use your data for any purpose that is incompatible with the original reason it was collected. The following table summarises the primary purposes for which your data is processed and the legal basis for each use.

2.1 Marketing Communications

gk2w may send you promotional emails and in-platform notifications about bonuses, new games, seasonal offers, and platform updates. Marketing communications are sent only to players who have opted in to receive them at the time of registration or through account settings. You may withdraw your consent to receive marketing communications at any time by updating your notification preferences in your account settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

2.2 Automated Decision-Making

gk2w uses automated systems to monitor account activity for fraud, bonus abuse, and responsible gaming purposes. These systems may flag accounts for review or apply temporary restrictions automatically where suspicious patterns are detected. Where an automated decision results in a material restriction on your account, you have the right to request a human review of that decision by contacting our support team. gk2w will respond to such requests within 5 business days.

3 Data Sharing and Disclosure

gk2w does not sell, rent, or trade your personal information to third-party marketers or data brokers. Your data is shared with external parties only in the specific circumstances described below, and always under appropriate data protection safeguards.

3.1 Payment Service Providers

To process your deposits and withdrawals, gk2w shares the minimum necessary transaction data with your chosen payment service provider — bKash, Nagad, Rocket, Upay, Visa, Mastercard, or your selected Bangladeshi bank. Each payment provider operates under its own privacy policy and data protection framework. gk2w is not responsible for the data practices of payment providers once data has been transmitted to them for the purpose of processing a transaction.

3.2 Game and Technology Providers

gk2w's platform integrates games and live casino streams from third-party providers including Evolution Gaming, Pragmatic Play, Spribe, Ezugi, Microgaming, NetEnt, and others. These providers may receive non-personally identifying session data — such as game session tokens and anonymised bet identifiers — for the purpose of delivering game content and resolving technical disputes. These providers are contractually prohibited from using any data received from gk2w for their own marketing purposes.

3.3 Legal and Regulatory Disclosure

gk2w may disclose your personal information to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where it is legally required to do so, or where disclosure is necessary to investigate or prevent fraud, money laundering, or other illegal activity. gk2w will notify affected players of such disclosures where it is legally permitted to do so.

3.4 Business Transfers

In the event that gk2w undergoes a merger, acquisition, restructuring, or sale of all or a substantial portion of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such cases, gk2w will provide registered players with advance notice and ensure that the receiving party agrees to be bound by data protection standards at least equivalent to those described in this Privacy Policy.

4 Cookies and Tracking Technologies

The gk2w platform uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience. A cookie is a small text file placed on your device by a website you visit. Cookies do not contain executable code and cannot carry viruses or malware. The following categories of cookies are used on the gk2w platform:

4.1 Strictly Necessary Cookies

These cookies are essential for the platform to function and cannot be disabled. They include session authentication cookies that keep you logged in during a gaming session, security tokens that protect against cross-site request forgery, and load-balancing cookies that ensure platform performance. Because these cookies are strictly necessary, they do not require your consent.

4.2 Functional Cookies

Functional cookies remember your preferences and settings — such as your preferred language, last visited game category, and display settings — so that you do not need to re-enter them on every visit. These cookies are not used for tracking or advertising purposes.

4.3 Analytics Cookies

gk2w uses first-party analytics tools to collect aggregated data about how players use the platform — which pages are visited most frequently, how long sessions last, and where players encounter errors. This data is used exclusively to improve platform performance and user experience. It is not shared with external analytics or advertising networks.

4.4 Managing Cookies

You may control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in and using core platform features. Detailed guidance on managing cookies is available in the help documentation of your browser.

5 Data Security Measures

gk2w implements a layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration, or destruction. The primary security measures in place include:

• SSL/TLS Encryption: All data transmitted between your device and the gk2w servers is encrypted using TLS 1.2 or higher, ensuring that login credentials, payment information, and personal data cannot be intercepted in transit.
• Password Hashing: Account passwords are never stored in plain text. gk2w uses industry-standard cryptographic hashing algorithms to store password representations, meaning that even in the unlikely event of a data breach, raw passwords are not exposed.
• Access Controls: Access to player data within gk2w's internal systems is governed by a strict role-based access control framework. Only staff members with a verified operational need to access specific categories of data are authorised to do so.
• Infrastructure Security: gk2w's servers are hosted in secure data centre facilities with physical access controls, redundant power systems, and network-level intrusion detection and prevention systems.
• Regular Security Reviews: gk2w conducts periodic internal security reviews and vulnerability assessments to identify and remediate potential weaknesses in its systems and processes before they can be exploited.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, gk2w will notify affected players without undue delay and take immediate steps to contain the breach and mitigate its impact.

While gk2w takes all reasonable and practicable steps to protect your personal data, no digital platform can guarantee absolute security against all possible threats. Players are encouraged to use strong, unique passwords and to enable any two-factor authentication features offered by the platform.

6 Data Retention Policy

gk2w retains your personal data for as long as your account remains active and for a defined period following account closure. Retention periods are set in accordance with our legal and regulatory obligations, operational necessity, and responsible gaming commitments.

Specifically, gk2w applies the following retention principles:

• Account registration data and KYC documents are retained for a minimum of five years following account closure to satisfy anti-money laundering record-keeping obligations.
• Transaction records including deposit and withdrawal histories are retained for a minimum of five years in accordance with financial record-keeping requirements.
• Gameplay and betting records are retained for the duration of your account and for three years following closure, for dispute resolution and responsible gaming audit purposes.
• Customer support communications are retained for two years following the resolution of the relevant query.
• Marketing preference records are retained until you withdraw consent or close your account, after which they are deleted within 30 days.
• Technical and device logs are retained for a maximum of 90 days for security monitoring purposes, after which they are purged or anonymised.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised data may be retained indefinitely for aggregate statistical and platform improvement purposes, as it no longer constitutes personal data.

7 Your Privacy Rights

As a player on the gk2w platform, you hold the following rights in relation to your personal data. These rights may be exercised at any time by contacting gk2w's support team using the contact details in Section 8 of this policy. gk2w will respond to all valid rights requests within 30 days without charge in standard cases.

Please note that certain rights are subject to limitations. For example, the right to erasure does not override gk2w's legal obligations to retain transaction and KYC records for the minimum periods specified in Section 6. Where a rights request cannot be fulfilled in full, gk2w will explain the reason clearly and advise on any available alternative options.

8 Contacting Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or to gk2w's handling of your personal data, you are encouraged to contact us directly. gk2w's support team is available 24 hours a day, 7 days a week, to assist with all privacy-related enquiries.

You may reach the gk2w privacy support team by email at [email protected]. Please include "Privacy Enquiry" in your subject line so that your message is routed to the appropriate team member. We aim to acknowledge all privacy-related communications within one business day and to provide a substantive response within 5 business days for straightforward queries, and within 30 days for formal rights requests.

gk2w takes all privacy complaints seriously. If you are dissatisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant data protection authority or seek independent legal advice. gk2w will cooperate fully with any such process.

This Privacy Policy was last reviewed and updated in January 2026. gk2w reserves the right to amend this policy at any time. Material amendments will be communicated to all registered players no less than 7 days before taking effect. The current version of this policy is always available on the gk2w website at gk2w.app/privacy-policy.