gi222 Privacy Policy

For the purposes of this Privacy Policy, the data controller responsible for the personal information collected through the gi222 platform is gi222, accessible at gi222.app. As data controller, gi222 determines the purposes and means by which your personal data is processed.

If you have any questions, requests, or concerns relating to this Privacy Policy or the way in which gi222 handles your personal data, you may contact our Data Privacy team at:

This Privacy Policy applies to all personal data collected through the gi222 website, mobile applications, customer support channels, and any other touchpoints operated by gi222. It applies to all players, visitors, and prospective users located in Bangladesh and elsewhere.

gi222 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual Necessity. Processing that is required to create and manage your account, process deposits and withdrawals, settle bets, and deliver the services you have requested from gi222. Without this processing, gi222 cannot perform its obligations to you as a player.
• Legal Obligation. Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, KYC requirements, fraud prevention duties, and any lawful request from a competent authority in Bangladesh.
• Legitimate Interests. Processing carried out to pursue gi222's legitimate business interests where those interests are not overridden by your rights. This includes platform security monitoring, fraud detection, responsible gaming oversight, internal analytics for service improvement, and direct marketing to existing players (subject to your right to opt out).
• Consent. Where gi222 relies on your consent for a specific processing activity — such as sending you promotional emails or push notifications — we will make this clear at the point of collection and you may withdraw your consent at any time by contacting [email protected] or updating your notification preferences in Account Settings.

gi222 may share your personal data with the following categories of third parties in the circumstances described below:

• Payment Service Providers. We share relevant financial and identity information with payment processors — including bKash, Nagad, Rocket, Upay, and card networks (Visa, Mastercard) — solely to process transactions you have initiated. These providers are contractually bound to use your data only for payment processing purposes.
• Identity Verification Partners. During KYC verification, we may share your identity documents and personal details with specialist identity verification service providers. These partners are subject to strict confidentiality and data protection obligations.
• Game Technology Providers. Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session and game-play data necessary to deliver their games and resolve technical disputes. They do not receive your full identity or financial records.
• Fraud Prevention and Security Services. We may share data with fraud detection and cybersecurity partners to identify and prevent unauthorised access, money laundering, or other illegal activity.
• Legal and Regulatory Authorities. gi222 will disclose personal data to law enforcement agencies, courts, regulatory bodies, or other public authorities in Bangladesh where we are legally required to do so or where disclosure is necessary to protect gi222's rights, property, or safety, or the safety of our players.
• Business Transfers. In the event of a merger, acquisition, or sale of all or part of gi222's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy implications in advance where practically possible.

All third parties with whom gi222 shares personal data are required to respect the security of your information and to process it only in accordance with gi222's instructions and applicable data protection law. gi222 does not permit third-party service providers to use your personal data for their own independent marketing purposes.

gi222 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data. Personal data associated with an active gi222 account is retained for the full duration that the account remains open and active.
• Closed Account Data. Following account closure, gi222 retains identity, financial, and transaction records for a minimum period of 5 years from the date of closure. This retention is necessary to comply with anti-money laundering regulations, respond to any post-closure disputes, and fulfil audit obligations.
• KYC Documents. Identity verification documents are retained for a minimum of 5 years from the date of the most recent transaction or from account closure, whichever is later.
• Support Communications. Records of customer support interactions are retained for a period of 3 years from the date of the interaction.
• Technical and Usage Data. Server logs and anonymised analytics data are typically retained for 12 months before being deleted or fully anonymised.
• Marketing Consent Records. Records of your marketing consent or withdrawal of consent are retained for the duration of your account and for 2 years thereafter, to demonstrate compliance with consent obligations.

When personal data is no longer required, gi222 securely deletes or anonymises it in accordance with industry-standard data destruction practices. Where anonymisation is used, the resulting data cannot be re-linked to you and is no longer subject to this Privacy Policy.

gi222 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• SSL/TLS Encryption. All data transmitted between your device and gi222's servers is encrypted using industry-standard 256-bit SSL/TLS protocols, ensuring that your login credentials, financial details, and personal information cannot be intercepted in transit.
• Encrypted Data Storage. Sensitive personal data — including identity documents, financial records, and passwords — is stored in encrypted form on access-controlled servers. Passwords are hashed using a one-way cryptographic algorithm and are never stored in plain text.
• Access Controls. Access to personal data within gi222's systems is strictly limited to authorised personnel who require it to perform their job functions. All internal access is logged and subject to regular audit.
• Two-Factor Authentication. gi222 offers two-factor authentication (2FA) for player accounts and mandates it for internal staff accounts with access to sensitive player data.
• Penetration Testing and Security Audits. gi222 conducts regular security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses before they can be exploited.
• Incident Response. gi222 maintains a documented data breach response plan. In the event of a data security incident that poses a risk to your rights, gi222 will notify affected players and take all necessary steps to contain the incident and prevent recurrence.

While gi222 takes all reasonable steps to protect your personal data, no system is completely immune to security threats. Players are encouraged to use a strong, unique password for their gi222 account and to enable two-factor authentication in Account Settings to further reduce the risk of unauthorised access.