gk2w Privacy Policy — How We Collect, Use, and Safeguard Your Personal Information

1 Introduction

gk2w ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who interacts with our online betting and casino platform at gk2w.io ("the Platform"). This Privacy Policy sets out in clear and accessible terms what personal information we gather from you, the purposes for which that information is used, the parties with whom it may be shared, and the rights you may exercise in relation to your data.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are published on the Platform and incorporated by reference. By accessing or using gk2w, you acknowledge that you have read, understood, and consented to the practices described in this Policy. If you do not agree with the terms of this Policy, please do not use the Platform and contact our support team to arrange account closure.

gk2w takes data protection seriously and applies appropriate technical and organisational measures to safeguard your information against unauthorised access, disclosure, alteration, or destruction.

---

2 Data Controller

For the purposes of applicable data protection law, gk2w operates as the data controller in respect of the personal data collected from players and visitors through the Platform. As data controller, gk2w determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

If you have questions about how gk2w processes your personal data, or if you wish to exercise any of the rights described in Section 12 of this Policy, you may contact our Data Protection team at the email address provided in Section 17.

---

3 Information We Collect

3.1 Account Registration Data

When you create a gk2w account, we collect the personal information you provide during the registration process. This typically includes:

• Full legal name (as it appears on government-issued identification)
• Date of birth (to verify that you meet the 21-year minimum age requirement)
• Residential address, including city, district, and postcode
• Email address
• Mobile phone number (used for account verification and two-factor authentication)
• Chosen username and encrypted password

3.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations and to prevent fraud and money laundering, gk2w may request documentary evidence to verify your identity. This may include scanned copies or photographs of:

• National Identification Card (NID)
• Passport or driving licence
• A recent utility bill or bank statement confirming your residential address (dated within 90 days)
• Screenshot or confirmation of ownership of the payment method used for deposits (e.g., bKash, Nagad, Rocket account details)

3.3 Financial Data

We collect transactional information associated with your account activity, including deposit amounts, withdrawal requests, betting and wagering history, bonus balances, and payment method identifiers (such as the last four digits of a card number or a mobile wallet reference number). gk2w does not store full card numbers, CVV codes, or full mobile banking PINs on its servers.

3.4 Technical and Usage Data

When you access the Platform, we automatically collect certain technical information, including your IP address, browser type and version, device type and operating system, referring URL, pages visited, session duration, and clickstream data. This information is used for security monitoring, fraud detection, and platform optimisation and does not on its own identify you as an individual unless combined with your account data.

3.5 Communications Data

If you contact gk2w via live chat, email, or any other support channel, we retain records of those communications — including the content of messages, timestamps, and associated account identifiers — for quality assurance, dispute resolution, and compliance purposes.

3.6 Responsible Gaming Data

Where you elect to use gk2w's responsible gaming tools — such as setting deposit limits, activating cooling-off periods, or requesting self-exclusion — we record and store those preferences to give effect to your instructions and to ensure they are not circumvented.

---

4 How We Collect Your Data

gk2w collects personal data through the following primary channels:

• Directly from you — through the registration form, KYC submission portal, deposit and withdrawal forms, live chat, email support, and any feedback or complaints you submit.
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies when you browse or interact with the Platform.
• From third-party service providers — including payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) who confirm transaction status; fraud prevention and identity verification partners who validate KYC documents; and game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) who may share session-level data with us for auditing purposes.
• From publicly available sources — where necessary for fraud prevention, we may cross-reference information provided by you against publicly available records.

---

5 Legal Basis for Processing

gk2w processes your personal data on the following legal grounds:

Processing Activity	Legal Basis
Account registration and operation	Performance of a contract (you and gk2w)
Identity verification (KYC)	Legal obligation / contractual necessity
Processing deposits and withdrawals	Performance of a contract
Fraud detection and prevention	Legitimate interests of gk2w and its players
Responsible gaming monitoring	Legal obligation / legitimate interests
Marketing communications	Consent (freely given and withdrawable)
Platform analytics and improvement	Legitimate interests of gk2w
Record-keeping and audit compliance	Legal obligation

---

6 How We Use Your Data

gk2w uses the personal information it collects for the following purposes:

• To create, verify, maintain, and secure your gk2w account.
• To process deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, or Mastercard).
• To comply with our KYC and anti-money laundering (AML) obligations by verifying your identity and the source of your funds where required.
• To deliver a personalised gaming experience, including game recommendations, promotional offers relevant to your play history, and localised content for players based in Bangladesh.
• To detect, investigate, and prevent fraudulent activity, collusion, bonus abuse, and any conduct that violates our Terms & Conditions.
• To administer and give effect to responsible gaming preferences you have set, including deposit limits, cooling-off periods, and self-exclusion requests.
• To communicate with you about your account, including transactional notifications, security alerts, and responses to your support enquiries.
• To send you promotional communications and bonus offers, where you have given explicit consent to receive marketing from gk2w.
• To conduct internal analytics, statistical analysis, and platform testing to continuously improve the gk2w experience for all players.
• To fulfil any legal, regulatory, or compliance obligations applicable to gk2w's operations.

---

7 Sharing Your Personal Data

7.1 Service Providers

gk2w shares personal data with carefully selected third-party service providers who assist in operating the Platform. These providers are contractually bound to process your data only on gk2w's instructions and in accordance with this Privacy Policy. Categories of service providers include payment processors, identity verification partners, cloud hosting providers, cybersecurity firms, and customer support platform operators.

7.2 Game Providers

Certain game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive limited session-level data (such as player ID, bet amounts, and game outcomes) for the purpose of game delivery, auditing, and regulatory compliance. These providers are prohibited from using your personal data for any purpose other than game operation and compliance.

7.3 Legal and Regulatory Disclosures

gk2w may disclose your personal data to law enforcement agencies, regulatory authorities, or other competent bodies where required to do so by law, court order, or binding regulatory direction. We may also disclose data where we have a good-faith belief that disclosure is necessary to prevent imminent harm, fraud, or criminal activity.

7.4 Business Transfers

In the event that gk2w undergoes a merger, acquisition, asset sale, or corporate restructuring, your personal data may be transferred to the relevant successor entity as part of that transaction. Where such a transfer materially affects your rights under this Policy, you will be notified in advance via your registered email address.

7.5 No Sale of Data

gk2w does not sell, rent, lease, or otherwise transfer your personal information to third parties for their own marketing or commercial purposes. Any sharing of personal data is strictly limited to the purposes described in this Section 7.

---

8 Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device by the Platform when you visit gk2w.io. They enable the Platform to recognise your device on subsequent visits, maintain your login session, remember your preferences, and collect analytical data about how you interact with the site.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that maintain your logged-in state and security tokens that protect against cross-site request forgery. These cannot be disabled without affecting Platform functionality.
• Performance and Analytics Cookies: Used to collect anonymised data about how visitors navigate the Platform, which pages are most visited, and where errors occur. This information is used to improve Platform performance and user experience.
• Functional Cookies: Store your preferences such as preferred language, last visited game category, and responsible gaming settings so the Platform can deliver a consistent experience across sessions.
• Security Cookies: Used to detect and prevent fraudulent account access, unusual login patterns, and other security threats.

8.3 Managing Cookies

You can control and delete cookies through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of gk2w and may prevent you from accessing certain features, including your account dashboard, deposits, and game play. Instructions for managing cookies in major browsers are available in each browser's help documentation.

---

9 Data Retention

gk2w retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law. The following general retention periods apply:

• Account data: Retained for the duration of your active account relationship with gk2w, and for a minimum of five (5) years following account closure to comply with anti-money laundering recordkeeping obligations.
• KYC documents: Retained for a minimum of five (5) years from the date of last transaction or account closure, whichever is later.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Support communications: Retained for two (2) years from the date of the communication, unless the communication is relevant to an ongoing dispute, in which case it is retained until the dispute is fully resolved.
• Technical and usage data: Retained in anonymised or aggregated form for up to three (3) years for analytical purposes.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

---

10 Data Security

gk2w implements a multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your browser or device and gk2w's servers is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Data Encryption at Rest: Sensitive personal and financial data stored on gk2w's servers is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Platform staff are granted only the minimum level of data access required to perform their role.
• Two-Factor Authentication (2FA): Available to all players to add an additional layer of security to account login.
• Intrusion Detection and Monitoring: gk2w's infrastructure is monitored continuously for anomalous activity, unauthorised access attempts, and potential security incidents.
• Security Audits: The Platform undergoes periodic independent security audits and penetration testing to identify and remediate vulnerabilities.

Despite these measures, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your account has been compromised, please contact gk2w support immediately at [email protected].

---

11 International Data Transfers

gk2w's primary operations and data storage are configured to serve the Bangladesh market. However, certain service providers and technology partners — including cloud infrastructure providers and game studios — may process or store data in jurisdictions outside Bangladesh. In all such cases, gk2w takes appropriate steps to ensure that international data transfers are subject to contractual safeguards that provide a standard of data protection equivalent to that described in this Policy.

By using the Platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to these international processing locations under the safeguards described above.

---

12 Your Data Rights

Subject to applicable law, you have the following rights in relation to the personal data gk2w holds about you:

• Right of Access: You may request a copy of the personal data gk2w holds about you, along with information about the purposes for which it is processed and the third parties with whom it is shared.
• Right to Rectification: You may request that inaccurate or incomplete personal data held by gk2w be corrected or updated.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to gk2w's legal retention obligations described in Section 9.
• Right to Restriction of Processing: You may request that gk2w restrict the processing of your data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to Data Portability: You may request a copy of the personal data you have provided to gk2w in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on gk2w's legitimate interests, including profiling for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact the gk2w Data Protection team at [email protected]. gk2w will respond to all valid requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days with prior notice to you.

---

13 Children and Minors

gk2w is strictly an adult platform. No person under the age of 21 is permitted to register an account or use any real-money service on gk2w. We do not knowingly collect personal data from individuals under 21 years of age. If we become aware that a minor has provided personal data to us, we will take immediate steps to delete that data and close the associated account.

If you believe that a person under the age of 21 has registered an account on gk2w, please notify us immediately at [email protected] so that we can investigate and take appropriate action. 21+ Only

---

14 Third-Party Links

The gk2w Platform does not contain links to external third-party websites for commercial or referral purposes. If for any reason a third-party URL is referenced in informational content on the Platform, please be aware that gk2w has no control over the privacy practices of third-party websites and accepts no responsibility for their content or privacy policies. You should review the privacy policy of any third-party site you visit independently of gk2w.

---

15 Marketing Communications

gk2w may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, seasonal promotions, and platform news, provided you have given explicit consent to receive such communications during registration or at a later point through your account settings.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link at the bottom of any marketing email sent by gk2w;
• Updating your communication preferences in your account dashboard; or
• Contacting gk2w support at [email protected] and requesting removal from marketing lists.

Opting out of marketing communications will not affect transactional notifications related to your account activity, such as deposit confirmations, withdrawal status updates, and security alerts. These communications are necessary for account operation and will continue regardless of your marketing preferences.

---

16 Amendments to This Privacy Policy

gk2w reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. Material changes will be communicated to registered players via the email address on file and/or through a prominent notice on the Platform, with a minimum of seven (7) days' notice before the updated Policy takes effect.

We encourage you to review this Privacy Policy periodically to stay informed about how gk2w protects your personal data. The "Effective Date" and "Version" shown at the top of this document will be updated whenever a new version is published. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

---

17 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or gk2w's handling of your personal data, please contact our Data Protection team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please include "Privacy Policy Query" or "Data Request" in the subject line of your email for prompt routing to the appropriate team member.
• Live Chat: Available 24/7 through the Platform interface after login
• Response Time: All privacy-related enquiries are acknowledged within 48 hours BST and fully responded to within 30 calendar days of receipt.

gk2w is committed to resolving all privacy concerns promptly and transparently. If you are not satisfied with the outcome of your enquiry, you may escalate the matter through any applicable dispute resolution mechanism available in your jurisdiction.