gv22 Privacy Policy

1. Introduction

1.1 gv22 operates the online betting and casino platform accessible at gv22.io (the "Platform"). We are committed to protecting the privacy and personal data of every player who registers, deposits, or interacts with us. This Privacy Policy sets out in clear terms how we fulfil that commitment.

1.2 This Privacy Policy applies to all personal data gv22 collects through your use of the Platform, including data provided during registration, data generated through your betting and gaming activity, data collected automatically through cookies and server logs, and data received from third-party identity verification and payment partners.

1.3 By creating a gv22 account or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, you must not use the gv22 Platform.

1.4 This Privacy Policy is published in English, which is the sole governing language. gv22 primarily serves players based in Bangladesh and designs its data practices with Bangladeshi players in mind. Where local data protection law applies to your use of the Platform, we are committed to compliance with those obligations.

1.5 This Privacy Policy should be read alongside gv22's Terms & Conditions and Responsible Gaming Policy, all of which form part of the agreement between you and gv22.

2. Data Controller

2.1 For the purposes of this Privacy Policy, gv22 — the entity operating the Platform at gv22.io — is the data controller responsible for the personal data collected through the Platform. References to "gv22", "we", "us", or "our" throughout this policy refer to this controlling entity.

2.2 All data protection queries, access requests, and complaints should be directed to the gv22 support team using the contact channels listed in Section 17 of this policy. gv22 will acknowledge all data-related enquiries within 5 business days.

3. Personal Data We Collect

3.1 Identity Data. When you register a gv22 account, we collect your full legal name, date of birth, gender, and government-issued identification number (National ID Card number, passport number, or equivalent). This information is required to verify your identity, confirm that you meet the 21+ age requirement, and fulfil our Know Your Customer (KYC) obligations.

3.2 Contact Data. We collect your email address, mobile phone number, and general location (city or district, such as Dhaka, Chittagong, Sylhet, or Khulna). This information is used for account communication, security alerts, and support correspondence.

3.3 Financial Data. We collect details of your payment accounts used for deposits and withdrawals, including mobile banking account numbers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), and a record of all transactions processed through your gv22 account. Financial data is used for payment processing, withdrawal verification, and anti-money laundering (AML) compliance.

3.4 Technical Data. We automatically collect technical information when you access the Platform, including your IP address, device type and model, operating system version, browser type and version, time zone, and session duration. This data is used for security monitoring, fraud detection, and platform performance optimisation.

3.5 Usage Data. We collect records of your activity on the Platform, including games played, bets placed, betting markets accessed, odds viewed, pages visited, and session frequency and duration. This data is used to improve our Platform, personalise your experience, and monitor for responsible gaming concerns.

3.6 Communications Data. We retain records of all communications between you and gv22, including live chat transcripts, email correspondence, and support ticket content. These records are kept for quality assurance, dispute resolution, and regulatory compliance purposes.

3.7 Responsible Gaming Data. If you set deposit limits, request a cool-off period, or apply for self-exclusion, gv22 records and stores this information separately from your general account data. This data is used exclusively to protect your wellbeing and comply with our responsible gaming obligations. It is never used for marketing or shared with third parties other than as required by law.

3.8 Data We Do Not Collect. gv22 does not collect or process special category data (such as racial or ethnic origin, health data unrelated to responsible gaming assessments, political opinions, or religious beliefs) unless you voluntarily provide such information in a support communication. We do not collect biometric data.

4. How We Collect Your Data

4.1 Directly from you: Data you provide when completing the account registration form, submitting KYC documents, initiating deposits or withdrawals, contacting our support team, setting responsible gaming limits, or responding to any voluntary surveys or feedback requests on the Platform.

4.2 Automatically: Technical and usage data collected automatically via server logs, cookies, and similar tracking technologies when you browse or interact with any page on the gv22 Platform. See Section 8 for full details on our cookie practices.

4.3 From third parties: Identity verification data received from our KYC compliance partners following document submission. Payment confirmation data received from our payment processing partners (bKash, Nagad, Rocket, Upay, and banking partners) when you complete a deposit or withdrawal transaction. Fraud intelligence data received from security and fraud prevention service providers.

4.4 gv22 does not purchase personal data lists from data brokers or acquire personal data from any source other than those described in clauses 4.1 through 4.3 above.

5. How We Use Your Data

5.1 gv22 uses the personal data we collect for the following specific purposes:

• Account creation and management: To create and maintain your gv22 account, process your registration, and authenticate your identity when you log in.
• Identity and age verification (KYC): To verify that you are a real person, that you are at least 21 years of age, and that you are not on any applicable self-exclusion register.
• Payment processing: To process deposits and withdrawals via your chosen payment method, verify that the payment account belongs to you, and maintain an accurate transaction record.
• Customer support: To respond to your support queries, process complaints, and resolve disputes in a timely and fair manner.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Platform improvement: To analyse usage patterns, diagnose technical issues, and develop new features and improvements to the gv22 Platform.
• Responsible gaming: To monitor your betting and gaming activity for signs of problem gambling behaviour, enforce deposit limits and self-exclusion requests, and provide targeted responsible gaming guidance where appropriate.
• Legal and regulatory compliance: To meet our obligations under applicable law, including anti-money laundering requirements, record-keeping obligations, and responses to lawful requests from competent authorities.
• Marketing communications (with consent): To send you promotional offers, bonus notifications, and product updates where you have opted in to receive such communications. See Section 15 for details on managing your marketing preferences.

5.2 gv22 will not use your personal data for any purpose that is incompatible with the purposes listed in clause 5.1 without first obtaining your explicit consent or where otherwise permitted by applicable law.

6. Legal Basis for Processing

6.1 gv22 processes your personal data on the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: Processing your identity data, contact data, and financial data is necessary to enter into and perform our contract with you — i.e., to operate your gv22 account, accept your bets, and process your payments.
• Legal obligation: Processing for KYC verification, AML compliance, age verification, record retention, and responses to lawful authority requests is necessary to comply with applicable legal obligations.
• Legitimate interests: Processing technical data and usage data for security monitoring, fraud prevention, and platform analytics is carried out on the basis of our legitimate interests in operating a safe and reliable platform. We have assessed that these interests are not overridden by your privacy rights given the proportionate and security-focused nature of such processing.
• Consent: Where we send you optional marketing communications or use non-essential cookies, we do so only on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time — see Section 15 and Section 8 respectively.
• Vital interests: In limited circumstances, such as applying an emergency self-exclusion to protect a player identified as being at serious risk of harm from problem gambling, we may process data on the basis of vital interests.

7. Data Sharing & Disclosure

7.1 gv22 does not sell your personal data to any third party. We do not share your data with advertisers, data brokers, or commercial partners for their own marketing purposes.

7.2 We may share your personal data with the following categories of trusted third parties, strictly to the extent necessary to operate the gv22 Platform and meet our legal obligations:

• KYC and identity verification providers: To process your identity documents and verify your eligibility to hold a gv22 account.
• Payment processing partners: Including mobile financial service providers (bKash, Nagad, Rocket, Upay) and banking partners, to process your financial transactions.
• Fraud and security intelligence providers: To screen account activity against known fraud patterns and to protect the integrity of the Platform.
• IT infrastructure and cloud hosting providers: Who host and maintain the technical infrastructure on which the gv22 Platform operates, under strict data processing agreements.
• Customer support software providers: Who power the live chat and ticketing systems used by our 24/7 support team.
• Game content providers: Including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe, who may receive anonymised session data necessary to deliver their games on our Platform.

7.3 All third parties with whom gv22 shares personal data are required to process that data only for the specific purpose for which it was shared, to maintain appropriate security standards, and to comply with applicable data protection obligations. gv22 enters into formal data processing agreements with all data processors.

7.4 gv22 may disclose personal data to competent government authorities, law enforcement agencies, or courts where required to do so by applicable law, lawful legal process, or court order. In such cases, gv22 will disclose only the minimum data necessary to satisfy the lawful request.

7.5 In the event of a merger, acquisition, or sale of all or substantially all of gv22's assets, your personal data may be transferred to the successor entity, subject to the same privacy protections set out in this policy. You will be notified of any such transfer in advance.

8. Cookies & Tracking Technologies

8.1 gv22 uses cookies and similar technologies (such as local storage) on the Platform to provide a functional and secure user experience. Cookies are small text files stored on your device by your web browser.

8.2 gv22 uses the following categories of cookies:

• Strictly necessary cookies: Required for core platform functionality such as maintaining your login session, remembering your language preference, and securing your account during a session. These cookies cannot be disabled without breaking core Platform features.
• Performance and analytics cookies: Used to collect anonymised information about how players use the Platform, such as which pages are most visited and how long sessions last. This data is used solely to improve the Platform. These cookies require your consent and may be disabled via your browser settings.
• Functional cookies: Used to remember your optional preferences, such as display settings. These cookies require your consent.

8.3 gv22 does not use advertising cookies, cross-site tracking cookies, or third-party marketing pixels of any kind. We do not allow third-party advertising networks to set cookies on the gv22 Platform.

8.4 You can manage and delete cookies at any time through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to use certain Platform features, including maintaining a logged-in session.

9. Data Retention

9.1 gv22 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as a general guide:

• Account data (identity, contact, financial): Retained for the duration of your active account relationship with gv22 and for a period of at least 5 years following account closure, to meet AML record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction in accordance with financial compliance requirements.
• Communications data (support tickets, chat logs): Retained for 3 years from the date of the communication, or longer if the communication relates to an unresolved dispute.
• Technical and usage data: Retained in identifiable form for up to 24 months, after which it is anonymised or deleted.
• Responsible gaming records (self-exclusion, limits): Retained indefinitely for the safety of the player concerned and to prevent circumvention of self-exclusion by re-registration.

9.2 When personal data is no longer required and its retention period has expired, gv22 will securely delete or anonymise the data in accordance with our internal data destruction procedures.

10. Data Security

10.1 gv22 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and gv22 servers.
• Encryption of sensitive data at rest on gv22 servers, including financial data and identity documents.
• Role-based access controls ensuring that only authorised gv22 personnel can access personal data, and only to the extent necessary for their specific role.
• Multi-factor authentication requirements for internal administrative access to systems holding personal data.
• Regular third-party security audits and penetration testing of the gv22 Platform.
• Intrusion detection systems and 24/7 security monitoring of Platform infrastructure.
• Staff training on data protection obligations and secure data handling practices.

10.2 In the event of a personal data breach that poses a risk to your rights and freedoms, gv22 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach. gv22 maintains a formal data breach response procedure for this purpose.

10.3 You also have a role in keeping your data secure. You are responsible for maintaining the confidentiality of your gv22 account login credentials and must not share your username, password, or one-time security codes with any third party.

11. International Data Transfers

11.1 gv22 primarily stores and processes personal data on servers located within or close to the regions it serves. However, some of our third-party service providers — including certain KYC verification and game content providers — may process personal data in jurisdictions outside Bangladesh.

11.2 Where personal data is transferred to a third-party processor located in another jurisdiction, gv22 ensures that appropriate safeguards are in place prior to the transfer. These safeguards include contractual data processing agreements that bind the recipient to data protection standards equivalent to those applied by gv22.

11.3 gv22 does not transfer personal data to jurisdictions with inadequate data protection standards without first implementing the contractual and technical safeguards described in clause 11.2.

12. Your Data Rights

12.1 As a gv22 player, you have the following rights regarding your personal data. To exercise any of these rights, contact the gv22 support team via 24/7 live chat or by email at the address listed in Section 17.

• Right of access: You have the right to request a copy of the personal data gv22 holds about you. We will provide this within 30 days of a verified request.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may also update certain account information directly from your account settings page.
• Right to erasure ("right to be forgotten"): You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis for processing applies. Note that this right does not apply where retention is required by law (e.g., financial records subject to AML retention obligations).
• Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested.
• Right to data portability: You have the right to receive the personal data you provided to us in a structured, commonly used, machine-readable format, and to request that we transmit that data directly to another controller where technically feasible.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling, where you have grounds relating to your particular situation. You have an absolute right to object to processing for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications, non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

12.2 gv22 will respond to all verified data rights requests within 30 days. In complex cases, this may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it.

12.3 gv22 will not charge a fee for handling data rights requests unless a request is manifestly unfounded, excessive, or repetitive, in which case we reserve the right to charge a reasonable administrative fee or refuse the request.

13. Children and Age Restrictions

13.1 The gv22 Platform is strictly intended for adults aged 21 and above. gv22 does not knowingly collect, process, or retain personal data relating to individuals under the age of 21.

13.2 All players are required to verify their age during the account registration and KYC process. If gv22 discovers that personal data has been collected from a player who is under 21 years of age, we will immediately suspend that account, delete the associated personal data, and reverse any transactions where possible.

13.3 If you are a parent or guardian and have reason to believe that a person under 21 has registered a gv22 account using your or their details, please contact our support team immediately using the contact information in Section 17.

14. Third-Party Links

14.1 The gv22 Platform does not contain links to third-party websites or external resources beyond the navigation and operational links required to deliver our service. gv22 is not responsible for the privacy practices or data handling of any third-party website or application that you may access independently of our Platform.

14.2 If you access the gv22 Platform via a referral or affiliate link from a third-party website, please be aware that the referring site operates under its own privacy policy. gv22 is not responsible for the data practices of referral partners.

15. Marketing Communications

15.1 gv22 may send you promotional communications — such as bonus offers, game launch announcements, and seasonal promotions — by email or SMS where you have explicitly opted in to receive such communications during registration or through your account settings.

15.2 You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "unsubscribe" link included in any marketing email from gv22;
• Updating your notification preferences in your gv22 account settings; or
• Contacting our support team via live chat or email and requesting removal from all marketing lists.

15.3 Withdrawal of consent for marketing communications will not affect the delivery of transactional communications that are necessary for the operation of your account, such as deposit confirmations, withdrawal notifications, security alerts, and KYC request notifications.

15.4 gv22 does not engage in unsolicited bulk messaging or SMS spam. All marketing messages will clearly identify gv22 as the sender and will include a straightforward opt-out mechanism.

15.5 gv22 applies responsible marketing practices and will not send promotional materials to any player who has registered a self-exclusion, requested a cool-off period, or indicated through support channels that they are experiencing gambling-related difficulties.

16. Changes to This Privacy Policy

16.1 gv22 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, the introduction of new Platform features, changes in applicable law, or feedback from players and regulators.

16.2 When we make material changes to this Privacy Policy, we will notify active players by email and/or by displaying a prominent notice on the gv22 Platform for a period of at least 14 days prior to the changes taking effect. The "Last Updated" date at the top of this policy will always reflect the date of the most recent revision.

16.3 Your continued use of the gv22 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you must discontinue use of the Platform and may request account closure by contacting our support team.

16.4 Previous versions of this Privacy Policy are available on request by contacting the gv22 support team.

17. Contact Us

17.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the way gv22 handles your personal data, please contact us through any of the following channels:

• Live Chat: Available 24/7 directly on the gv22 Platform — the fastest way to reach our support team.
• Email: support at gv22.io — responses within 1–2 business days.
• WhatsApp: +880 1X00 XXX XXX — available during Bangladesh Standard Time (BST, UTC+6) business hours.

17.2 For formal data rights requests (access, rectification, erasure, portability, restriction, or objection), please include your full account username and the specific right you are seeking to exercise. We will verify your identity before processing any data rights request to protect against unauthorised access.

17.3 gv22 aims to resolve all privacy-related enquiries to the satisfaction of the player. If you feel your concern has not been adequately addressed, you retain the right to escalate your complaint to the relevant data protection authority in your jurisdiction.