gx88 Privacy Policy — How We Collect, Use, and Protect Your Data

1. Introduction

gx88 ("we", "us", "our") is committed to protecting the privacy of every player who uses our online casino and sports betting platform. This Privacy Policy sets out in clear terms what personal data we collect from you, the purposes for which that data is processed, the basis upon which processing is lawful, and the controls you have over your own information.

This policy applies to all personal data collected through the gx88 website at https://gx88.io, through our customer support channels, and through any communications you send to or receive from the gx88 team. It covers data collected from players located in Bangladesh, including those accessing the platform from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

This Privacy Policy should be read in conjunction with the gx88 Terms & Conditions, which also forms part of the agreement between you and gx88. In the event of any conflict between this Privacy Policy and the Terms & Conditions regarding data-related matters, this Privacy Policy shall take precedence.

2. Data We Collect

gx88 collects personal data from you in three principal ways: data you provide directly, data generated by your use of the platform, and data received from third-party payment service providers. The following table summarises the categories of data we collect and the context in which each is collected.

2.1 Data You Provide Voluntarily

When you register a gx88 account, you provide us with your name, date of birth, contact details, and chosen login credentials. If you proceed to verify your account (KYC), you additionally provide identity document scans and address proof. This data is provided voluntarily but is required to access full platform functionality, including BDT withdrawals.

2.2 Data Collected Automatically

When you visit the gx88 website — even without logging in — our servers automatically record certain technical data about your connection. This includes your IP address, the type of device and browser you are using, the pages you visit, and the duration of your session. This data is collected using server logs and cookies and is used primarily for platform security, fraud prevention, and performance optimisation.

2.3 Data From Payment Providers

When you make a deposit or withdrawal through a payment method such as bKash, Nagad, or Rocket, the relevant payment service provider may share limited transaction confirmation data with gx88 (such as a transaction reference number and payment status) to allow us to credit your account or confirm your withdrawal. gx88 does not receive your full mobile banking PIN or password from these providers at any point.

3. How We Use Your Data

gx88 uses the personal data we collect for the following defined purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent or establishing a separate lawful basis for doing so.

• Account Management: To create, maintain, and manage your gx88 player account, including processing your registration, managing your login credentials, and communicating account-related information to you.
• Identity Verification (KYC): To verify your identity and confirm your eligibility to use the platform, including confirming that you meet the 21+ age requirement and that your account information is accurate and complete.
• Payment Processing: To process your BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate records of all financial transactions on your account.
• Platform Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct. This includes automated monitoring of betting patterns and login activity.
• Customer Support: To respond to your enquiries, resolve account issues, and maintain records of support interactions for quality assurance and dispute resolution purposes.
• Responsible Gaming: To monitor your gaming behaviour for signs of problem gambling and to administer responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion requests.
• Legal Compliance: To comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, record-keeping obligations, and any lawful requests from competent authorities.
• Platform Improvement: To analyse aggregate usage data (in anonymised or pseudonymised form) to understand how players use the gx88 platform and to improve its features, performance, and user experience.
• Marketing Communications (opt-in only): To send you promotional offers, bonus notifications, game updates, and seasonal promotions — but only if you have explicitly opted in to receive such communications. You may withdraw your consent at any time.

4. Legal Basis for Processing

gx88 processes your personal data on one or more of the following lawful bases, depending on the purpose of the processing activity in question:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions agreement with you, including operating your account, processing transactions, and providing gaming services.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out to pursue gx88's legitimate business interests, including fraud prevention, platform security, abuse detection, and platform performance analysis — provided such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent. This basis applies primarily to marketing communications. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

5. Data Sharing & Disclosure

gx88 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

5.1 Payment Service Providers

To process your BDT deposits and withdrawals, gx88 shares necessary transactional information with our payment processing partners, including bKash, Nagad, Rocket, Upay, and card networks Visa and Mastercard. These providers act as independent data controllers for their own services and are bound by their own privacy policies and applicable financial regulations.

5.2 Game Content Providers

gx88 integrates games from third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To facilitate gameplay, limited technical data (such as a player session token and currency) may be passed to these providers. Game providers do not receive your full identity data or financial account details.

5.3 Identity Verification Services

Where gx88 uses a third-party KYC verification service to assist with identity document checks, relevant identity data (such as your name, date of birth, and document images) may be shared with that provider solely for verification purposes. All such providers are contractually bound to process your data only for the stated purpose and to maintain appropriate security standards.

5.4 Legal and Regulatory Authorities

gx88 may be required to disclose your personal data to law enforcement agencies, financial intelligence units, or other competent authorities where we are under a legal obligation to do so — for example, in connection with an AML investigation or a court order. Such disclosures are made only to the extent required and do not constitute a breach of this Privacy Policy.

6. Cookies & Tracking Technologies

The gx88 website uses cookies and similar tracking technologies to operate core platform functions, remember your preferences, analyse usage patterns, and protect against fraudulent access.

6.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, remember your session state, and gather analytics data. Cookies do not contain executable code and cannot access other files on your device.

6.2 Types of Cookies Used by gx88

• Strictly Necessary Cookies: These cookies are essential for the gx88 website to function. They maintain your login session, preserve your account state during gameplay, and enable security features such as CSRF protection. These cookies cannot be disabled without breaking core platform functionality.
• Analytics Cookies: These cookies collect anonymised information about how visitors use the gx88 website — for example, which pages are visited most frequently and how users navigate between sections. This data is used to improve the platform experience and is not linked to your personal identity.
• Functional Cookies: These cookies remember your preferences such as your chosen language, display settings, and recently played games, so you do not need to re-enter them on each visit.
• Fraud Prevention Cookies: These cookies assist gx88's security systems in identifying and blocking fraudulent access attempts, detecting bots, and flagging unusual login behaviour.

6.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Most modern browsers — including Chrome, Firefox, Safari, and Edge — provide options to view, block, or delete cookies. Please be aware that disabling certain cookies may impair the functionality of the gx88 platform, including the ability to maintain a login session.

7. Data Security

gx88 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your information against unauthorised access, alteration, disclosure, or destruction.

• SSL Encryption: All data transmitted between your device and gx88 servers is protected by 256-bit SSL (Secure Socket Layer) encryption — the same standard used by major global financial institutions.
• Secure Data Storage: Personal data stored on gx88 servers is held in encrypted form. Financial data, including mobile wallet account references, is stored using industry-standard encryption algorithms.
• Access Controls: Access to personal data within the gx88 organisation is restricted on a strict need-to-know basis. Staff members are only granted access to the data necessary for their specific role and are bound by confidentiality obligations.
• OTP Verification: gx88 offers one-time password (OTP) verification for account login and sensitive account actions. Players are strongly encouraged to enable OTP as an additional layer of protection.
• Fraud Monitoring: Automated systems continuously monitor account activity for signs of unauthorised access, unusual transaction patterns, and other security anomalies. Suspected security incidents trigger immediate investigation and, where necessary, temporary account restrictions.

While gx88 employs robust security measures, no internet-based system can be guaranteed to be 100% impenetrable. In the event of a data breach that is likely to result in a significant risk to your rights and interests, gx88 will notify affected players promptly and take all reasonable steps to mitigate the impact.

8. Data Retention

gx88 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following general retention principles apply:

• Active Account Data: Personal data associated with an active gx88 account is retained for the full duration of the account's active status. This includes identity data, contact details, transaction records, and gameplay history.
• Closed Account Data: Following the closure of a gx88 account — whether initiated by the player or by gx88 — core account and transaction records are retained for a minimum period of five (5) years to meet legal obligations, including anti-money laundering record-keeping requirements.
• KYC Documents: Identity verification documents (national ID scans, passport copies, address proof) are retained for the duration of the account relationship and for a minimum of five (5) years following account closure.
• Support Communications: Live chat transcripts and support email records are retained for a period of two (2) years from the date of the interaction for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Records of your marketing opt-in or opt-out status are retained for the duration of the account relationship and for a period of two (2) years following account closure, to demonstrate compliance with consent obligations.

Upon expiry of the relevant retention period, personal data is securely deleted or irreversibly anonymised in accordance with gx88's internal data lifecycle management procedures.

9. Your Privacy Rights

As a gx88 player, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact the gx88 support team via 24/7 live chat.

• Right of Access: You have the right to request a copy of the personal data gx88 holds about you, along with information about how that data is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held on your account. For basic contact details, you may also update information directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to gx88's legal retention obligations (see Section 8).
• Right to Restriction of Processing: You have the right to request that gx88 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of the personal data you have provided to gx88 in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent (primarily marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on gx88's legitimate interests, unless gx88 can demonstrate compelling legitimate grounds for the processing that override your interests.

gx88 will respond to all valid data rights requests within a reasonable timeframe. We may need to verify your identity before processing a request to ensure that data is not disclosed to an unauthorised party.

10. Children's Privacy

The gx88 platform is strictly intended for adults aged 21 years and above. gx88 does not knowingly collect personal data from any individual under the age of 21. If you are under 21, you must not use the gx88 platform or provide any personal data through it.

If gx88 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that a minor in your care has provided personal data to gx88, please contact our support team immediately via live chat so that we can take appropriate action.

gx88 employs age verification procedures as part of the account registration and KYC process specifically to prevent access by underage individuals. These measures include date-of-birth collection at registration and identity document verification before withdrawal access is granted.

11. Third-Party Links

The gx88 website may contain references to third-party services such as payment providers (bKash, Nagad, Rocket) and game content studios (Pragmatic Play, Evolution Gaming, Spribe). While gx88 takes care in selecting its partners, we do not control the privacy practices of third-party websites or services, and this Privacy Policy does not apply to any data collected by those parties through their own platforms.

If you access a third-party service through an integration on the gx88 platform — for example, completing a bKash payment via the bKash payment gateway — your interaction with that third-party service is governed by that party's own privacy policy. gx88 recommends that you review the privacy policies of any third-party services you use in connection with your gx88 account.

12. Updates to This Privacy Policy

gx88 reserves the right to update, revise, or replace this Privacy Policy at any time. When we make material changes to this policy, we will update the "Last Updated" date displayed at the top of this page. In cases of significant changes — particularly those that affect how we process your data or your rights as a player — gx88 may provide additional notice via in-platform notification or to your registered email address.

Your continued use of the gx88 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated policy. If you do not agree with any changes to this Privacy Policy, you should cease using the platform and contact support to close your account and exercise any applicable data rights.

We encourage you to review this Privacy Policy periodically to stay informed about how gx88 is protecting your information. The most current version of this policy is always available at https://gx88.io/privacy-policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data that gx88 holds about you, please contact our support team through the following channel:

When submitting a data rights request, please include your registered account username and the specific right you wish to exercise. gx88 may request additional information to verify your identity before processing the request, to ensure that your data is not disclosed to or acted upon by an unauthorised third party.