gitago Privacy Policy

1 Information We Collect

1.1 When you register and use the gitago platform, we collect personal information that is necessary to provide our services, verify your identity, process transactions, and comply with our legal obligations. The categories of personal data we collect are set out below.

1.2 Sensitive Data. gitago does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data. If you voluntarily disclose such information in a support interaction, it will be used only to resolve your query and will not be retained beyond that purpose.

1.3 Minors. The gitago platform is strictly for adults aged 21+. We do not knowingly collect personal data from individuals under the age of 21. If we discover that a minor has provided personal data, we will delete that data and close the associated account immediately.

2 How We Use Your Information

2.1 gitago uses the personal data we collect for the following specific purposes, each of which has a clear legal basis:

• Account creation and management: To register your account, verify your identity, and provide access to the platform's services.
• Processing transactions: To handle deposits, withdrawals, and bonus credits via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank.
• Identity verification (KYC): To confirm that you meet the minimum age requirement of 21 years and to prevent fraudulent or duplicate accounts.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, money laundering, and other prohibited activities.
• Customer support: To respond to your queries, complaints, and requests in a timely and effective manner.
• Platform improvement: To analyse how players interact with games and features, so we can identify issues and improve the overall experience.
• Responsible gaming: To monitor betting patterns and identify players who may be showing signs of problem gambling, enabling us to offer timely support and apply protective tools where appropriate.
• Marketing communications: With your explicit consent, to send you information about promotions, bonuses, and new game releases relevant to your preferences. You may opt out of marketing communications at any time through your account settings or by contacting support.
• Legal compliance: To meet our obligations under applicable law, including responding to lawful requests from regulatory or law enforcement authorities.

2.2 gitago will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a clear legal basis for doing so.

3 Legal Bases for Processing

3.1 Every time gitago processes your personal data, we do so on the basis of at least one of the following lawful grounds:

• Contractual necessity: Processing is necessary to perform the contract between you and gitago — i.e., to operate your account, process bets, and pay out winnings.
• Legal obligation: Processing is required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and fraud prevention obligations.
• Legitimate interests: Processing serves gitago's legitimate business interests — for example, improving platform security, preventing abuse, and analysing gameplay to enhance the user experience — where those interests are not overridden by your rights and freedoms.
• Consent: For optional activities such as receiving marketing emails or push notifications, gitago relies on your freely given, specific, and informed consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

4 Sharing Your Information

4.1 gitago does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We share data only in the limited circumstances set out below:

• Payment providers: We share the minimum necessary financial data with payment partners including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank in order to process your transactions securely.
• Game providers: Third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive technical session data (such as a player token) required to load and operate their games within the gitago platform. These providers are contractually prohibited from using this data for any purpose other than delivering the game service.
• Identity verification services: We may use third-party KYC service providers to assist in verifying the identity and age of new players. These providers process your document images and biometric data strictly for verification purposes and in accordance with their own privacy policies.
• Analytics providers: Aggregated, anonymised usage data may be shared with analytics partners to help us understand platform performance. No individually identifiable data is shared for this purpose.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, court order, or in connection with the prevention or investigation of fraud or criminal activity.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of gitago's business, your personal data may be transferred to the acquiring entity, provided that the receiving party agrees to treat your data in accordance with this Privacy Policy.

4.2 All third parties with whom gitago shares personal data are required to maintain appropriate technical and organisational security measures and to use the data only for the specified purpose.

5 Cookies and Tracking Technologies

5.1 gitago uses cookies and similar tracking technologies to operate the platform, remember your preferences, and understand how players use the site. A cookie is a small text file placed on your device by your web browser when you visit a website.

5.2 The types of cookies we use are as follows:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit. You cannot opt out of these cookies while using the platform.
• Functional cookies: Used to remember your preferences — for example, your preferred language or the last game category you browsed. These improve your experience but are not essential.
• Analytics cookies: Help us understand how players navigate the platform by collecting anonymised data on page visits, session duration, and feature usage. This data is used to improve platform performance.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and other security threats.

5.3 You can manage or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the gitago platform, including your ability to log in or maintain a session.

5.4 gitago does not currently use cross-site advertising trackers or share cookie data with advertising networks.

6 Data Retention

6.1 gitago retains your personal data for as long as your account remains active and for a reasonable period thereafter, or for as long as is necessary to fulfil the purposes described in this Privacy Policy, whichever is longer.

6.2 The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, to comply with anti-money laundering and fraud prevention obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Retained for three (3) years from the date of the last interaction.
• Technical and usage data: Retained in anonymised or aggregated form indefinitely for platform analytics. Identifiable technical logs are deleted after twelve (12) months.
• Marketing consent records: Retained for the duration of your consent and for two (2) years after withdrawal to demonstrate compliance.

6.3 When personal data is no longer required, gitago will securely delete or anonymise it so that it can no longer be associated with you as an individual.

7 Your Rights Over Your Data

7.1 gitago respects your rights in relation to the personal data we hold about you. Subject to applicable law, you have the following rights:

• Right of access: You may request a copy of the personal data gitago holds about you, along with information about how and why it is processed.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. Note that we may be legally required to retain certain data (e.g., KYC and transaction records) even after your account is closed.
• Right to restrict processing: You may ask gitago to pause processing of your data while a complaint or accuracy dispute is being investigated.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request a machine-readable copy of the personal data you have provided to gitago.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time through your account settings or by contacting support. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to object: You may object to processing based on legitimate interests where you feel that your rights and freedoms outweigh those interests. gitago will review your objection and respond within a reasonable period.

7.2 To exercise any of the above rights, please contact gitago at [email protected]. We will respond to all valid requests within 30 calendar days. We may need to verify your identity before actioning a request to protect the security of your data.

8 Data Security

8.1 gitago implements a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the gitago platform.
• Encrypted storage of passwords and sensitive financial data at rest.
• Role-based access controls ensuring that only authorised staff members can access personal data, and only to the extent necessary for their role.
• Regular security audits and vulnerability assessments of platform infrastructure.
• Audit logging of all access to databases containing personal data.
• Two-factor authentication options available to all players to protect account access.

8.2 While gitago takes every reasonable precaution to safeguard your data, no method of transmission over the internet or electronic storage is 100% secure. In the unlikely event of a data breach that poses a risk to your rights or freedoms, gitago will notify affected players as soon as reasonably practicable and take all necessary steps to contain and remediate the incident.

8.3 You also play an important role in keeping your data secure. You should choose a strong, unique password for your gitago account and never share your login credentials with any other person. gitago will never ask for your password via email, chat, or telephone.

9 International Data Transfers

9.1 The gitago platform serves players across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. Some of our third-party service providers — particularly game studios and technical infrastructure providers — may be located outside Bangladesh.

9.2 When personal data is transferred internationally, gitago takes steps to ensure that an adequate level of protection is maintained. This may involve contractual protections such as standard data protection clauses, or reliance on the recipient country's recognised data protection standards.

9.3 By using the gitago platform, you acknowledge that your personal data may be transferred to and processed in countries outside Bangladesh as described in this section.

10 Third-Party Links and Services

10.1 The gitago platform may contain references to third-party services such as payment providers (bKash, Nagad, Rocket) or game studios. These third parties operate under their own privacy policies, which gitago does not control. We encourage you to review the privacy policy of any third-party service you interact with.

10.2 gitago is not responsible for the privacy practices of third-party services. Our Privacy Policy applies solely to data collected and processed by gitago in connection with your use of the gitago platform.

11 Changes to This Privacy Policy

11.1 gitago reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email or through a notice on the platform.

11.2 Your continued use of the gitago platform after the revised policy takes effect constitutes your acceptance of the updated terms. We recommend reviewing this page periodically to stay informed of how gitago protects your data.

12 Contact and Complaints

12.1 If you have any questions, concerns, or requests regarding this Privacy Policy or the way gitago handles your personal data, please contact our support team:

12.2 If you are not satisfied with gitago's response to your privacy concern, you have the right to escalate the matter through the complaint procedure described in our Terms & Conditions. gitago is committed to resolving all complaints fairly and transparently.