gk448 Privacy Policy — How We Protect Your Personal Data

1 Information We Collect

gk448 collects personal data from you in several ways — directly when you register or use our services, automatically as you interact with the Platform, and occasionally from trusted third-party sources. We only collect data that is genuinely necessary for the delivery of our services, compliance obligations, or the specific purposes set out in this Policy.

1.1 Information you provide directly:

• Registration data: Full legal name, date of birth, residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar), email address, and mobile phone number;
• Identity verification (KYC) documents: Copies of your National ID card, passport, or driving licence, and proof of payment method ownership, submitted as part of our mandatory Know Your Customer process;
• Financial data: Payment method details (bKash or Nagad mobile wallet numbers, bank account details for BRAC Bank, City Bank, Islami Bank, Sonali Bank, or card details for Visa/Mastercard), deposit and withdrawal transaction history, and account balance records;
• Communications data: Any messages, emails, live chat transcripts, or support tickets you send to the gk448 team;
• Responsible gaming preferences: Any deposit limits, session time limits, cooling-off requests, or self-exclusion instructions you submit through your account settings.

1.2 Information collected automatically:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and time zone (Bangladesh Standard Time, UTC+6);
• Usage and behavioural data: Pages visited, games played, bet history, session duration, click-stream data, search queries, and feature interactions within the Platform;
• Cookie and tracking data: Information collected via cookies, pixel tags, and similar technologies as described in Section 5 of this Policy.

1.3 Information from third parties:

• Identity and fraud-check data from KYC verification service providers;
• Age verification confirmations from authorised verification bureaus;
• Payment transaction confirmation data from bKash, Nagad, Rocket, Upay, and other payment partners.

2 How We Use Your Data

gk448 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with these stated uses without first notifying you and, where required, obtaining your consent.

Where gk448 relies on legitimate interest as a legal basis, we have conducted a balancing assessment confirming that our interests do not override your fundamental rights and freedoms. You have the right to object to processing based on legitimate interest — see Section 7 for details.

3 Legal Basis for Processing

gk448 processes your personal data only where a valid legal basis exists. The four principal legal bases we rely upon are as follows:

• Contract performance: Most of our core data processing is necessary to deliver the services you signed up for — registering your account, processing your bets, handling deposits and withdrawals, and providing customer support. Without this data, we cannot fulfil our contractual obligations to you;
• Legal obligation: Certain processing activities — particularly identity verification, anti-money laundering checks, responsible gaming record-keeping, and fraud reporting — are required by law. gk448 must retain and process data in compliance with applicable financial crime prevention standards;
• Legitimate interest: We process certain data (e.g., device fingerprinting for fraud detection, anonymised analytics for platform improvement, security log retention) where we have a genuine business interest that does not unduly infringe your privacy rights;
• Consent: Where we wish to send you personalised promotional offers, marketing emails, or SMS notifications, we will only do so if you have given us your explicit, freely given, and withdrawable consent. You may withdraw marketing consent at any time by contacting [email protected] or adjusting your account notification preferences.

4 Data Sharing & Disclosure

gk448 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

4.1 Service providers and processors:

gk448 works with a carefully selected set of third-party service providers who process data on our behalf under written data processing agreements. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, SureCash, Visa, Mastercard, BRAC Bank, City Bank, Islami Bank, and Sonali Bank — to facilitate deposits and withdrawals;
• KYC and identity verification providers: To confirm the identity and age of registered players in compliance with anti-money laundering obligations;
• Game studios and content providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi receive session data necessary to deliver their games. These providers operate under their own data protection frameworks and gk448 contracts with them to ensure appropriate safeguards;
• Cloud hosting and infrastructure providers: gk448's Platform is hosted on secure cloud infrastructure. Hosting providers access only encrypted data and operate under strict confidentiality obligations;
• Analytics and fraud prevention tools: Aggregated, pseudonymised data may be shared with analytics providers to help us improve the Platform and detect suspicious activity.

4.2 Legal and regulatory disclosure:

gk448 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a valid legal process, or an order from a competent authority. In such cases, gk448 will disclose only the data specifically requested and, where legally permissible, will notify you of the disclosure.

4.3 Business transfers:

In the event that gk448 undergoes a merger, acquisition, or sale of all or a substantial portion of its assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and any material change to the terms under which your data is held.

5 Cookies & Tracking Technologies

gk448 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, keep your session secure, and understand how players use our services so we can improve them.

5.1 Types of cookies we use:

• Strictly necessary cookies: These are essential for the Platform to function. They enable core features such as user authentication, session management, fraud prevention, and payment security. They cannot be disabled without breaking the Platform;
• Functional cookies: These remember your preferences — such as your preferred language, display settings, and responsible gaming limit configurations — to provide a personalised experience across sessions;
• Analytical cookies: These collect anonymised information about how players navigate the Platform — which pages are visited most frequently, where players drop off, and how different features perform. This data helps gk448 make evidence-based improvements to the user experience;
• Marketing cookies (consent-based only): If you have opted in to marketing communications, we may use cookies to track which promotions you have engaged with, so we can serve you relevant offers and avoid sending you promotions you have already seen. You may opt out at any time.

6 Data Retention

gk448 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply:

When personal data is no longer required for any of the above purposes and no legal obligation mandates its retention, gk448 will securely delete or permanently anonymise the data so it can no longer be attributed to an identifiable individual.

7 Your Privacy Rights

As a gk448 player, you hold the following rights over your personal data. gk448 is committed to honouring these rights without undue delay and free of charge, unless a request is manifestly unfounded or repetitive. We will respond to verified requests within 30 days.

• Right of access: You have the right to request a copy of the personal data gk448 holds about you, along with information about how it is processed. Submit your request to [email protected] with the subject line "Data Access Request";
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For basic account details, you can update most information directly through your account profile;
• Right to erasure ("right to be forgotten"): You may request that gk448 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing and there is no overriding legitimate ground. Note that legal retention obligations may prevent full erasure of some data categories;
• Right to restrict processing: In certain circumstances — for example, while a dispute about data accuracy is being resolved — you may request that gk448 restrict how your data is processed without deleting it entirely;
• Right to data portability: Where processing is based on your consent or on contract performance, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON), and to request that we transmit this data directly to another service provider where technically feasible;
• Right to object: You have the right to object to processing based on legitimate interest, including profiling for marketing purposes. Once you object, gk448 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests;
• Right to withdraw consent: Where processing is based solely on your consent (e.g., marketing emails, SMS promotions), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, contact gk448 at [email protected]. Please include your registered email address or mobile number so we can verify your identity before processing the request. We may ask for additional identification for high-sensitivity requests such as data erasure or full data exports.

8 Data Security

gk448 takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, disclosure, alteration, or destruction.

• Encryption in transit: All data transmitted between your device and the gk448 Platform is protected by 256-bit SSL/TLS encryption, the same standard used by major international banks. Look for the padlock icon in your browser address bar when visiting gk448.app;
• Encryption at rest: Sensitive data — including identity documents, financial records, and payment method details — is stored in encrypted form on our servers. Encryption keys are managed separately from the encrypted data;
• Access controls: Access to personal data within gk448 is restricted on a strict need-to-know basis. Staff members are granted the minimum level of access required for their role, and all access is logged and audited;
• Two-factor authentication: gk448 supports and encourages two-factor authentication (2FA) for all player accounts. 2FA adds a second layer of protection beyond your password, significantly reducing the risk of unauthorised account access;
• Penetration testing and vulnerability management: The Platform undergoes regular security assessments including penetration testing and vulnerability scanning to identify and remediate security weaknesses before they can be exploited;
• Incident response: gk448 maintains a documented data breach response plan. In the event of a security incident that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay with details of the incident and the steps taken to mitigate it.

9 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how gk448 handles your personal data, please contact our privacy team using the details below:

Privacy Team — gk448
Email: [email protected]
Subject line: "Privacy Enquiry" or "Data Rights Request"
Response time: Within 2 business days for general enquiries; within 30 days for formal data rights requests.

gk448 takes all privacy complaints seriously. If you contact us with a complaint, we will acknowledge receipt within 48 hours and provide a substantive response within 14 days. Where a complaint requires deeper investigation, we will keep you informed of progress at regular intervals.

If you are not satisfied with our response to a privacy complaint, or if you believe that gk448 is not processing your personal data in accordance with this Policy, you have the right to escalate your complaint. Mark your escalation email clearly as "Formal Privacy Complaint — Escalation" and address it to our compliance team at [email protected]. A final resolution letter will be issued within 21 days of formal escalation receipt.

gk448 reserves the right to update this Privacy Policy at any time. When material changes are made, registered users will be notified by email at least 7 days before the updated Policy takes effect. The "Last Updated" date at the top of this page will always reflect the most recent revision. Continued use of the Platform after the effective date of any update constitutes acceptance of the revised Privacy Policy.