gtc77 Privacy Policy — How We Protect Your Personal Data

1. Introduction

gtc77 ("we", "us", "our", "the Company", "the Platform") is committed to protecting the privacy and personal data of every individual who interacts with the gtc77 website at https://gtc77.io and all associated services. This Privacy Policy ("Policy") sets out a transparent account of the types of personal data we collect, the purposes for which that data is processed, the parties with whom it may be shared, and the rights available to you as a data subject.

This Policy applies to all users of the gtc77 Platform, including registered account holders, visitors who browse the website without registering, and individuals who contact us through any available support channel. It applies regardless of the device or browser used to access the Platform.

gtc77 operates the Platform with a particular focus on players based in Bangladesh. As such, this Policy is written with Bangladeshi players in mind, and all data practices described herein are implemented with the intent of providing a safe, fair, and transparent gaming environment for players in that market.

2. Personal Data We Collect

gtc77 collects only the data that is necessary to provide and improve our services, comply with legal obligations, and protect the integrity of the Platform. The categories of personal data we may collect include:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than where a government ID document contains such data), or health information, unless specifically required for legal compliance purposes and only with your explicit consent.

3. How We Collect Your Data

gtc77 collects personal data through several channels, all of which are transparent and directly related to your use of the Platform:

• Direct Collection: Data you provide voluntarily when registering an account, completing the KYC verification process, making a deposit or withdrawal request, contacting customer support, or participating in promotions and surveys.
• Automated Collection: Technical data collected automatically when you access the Platform, including IP address, browser information, device identifiers, and session activity logs. This data is collected through server logs and cookies (see Section 7 for full details on our cookie practices).
• Third-Party Payment Providers: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a bank transfer, the relevant payment provider may share transaction confirmation data with us for reconciliation purposes.
• Identity Verification Services: Where we use third-party identity verification tools to confirm your identity as part of the KYC process, those providers may supply us with verification status and document authenticity data.
• Game Providers: Game data generated during your sessions with providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi is recorded on both the provider's servers and our own Platform records for audit and dispute resolution purposes.

4. How We Use Your Personal Data

gtc77 processes personal data only for clearly defined and legitimate purposes. We do not use your data for purposes incompatible with those stated below without first seeking your explicit consent. The primary purposes for which we process your personal data are:

• Account Management: To create, verify, manage, and maintain your gtc77 player account, including identity authentication at login and during security reviews.
• Service Delivery: To enable you to access casino games, sports betting markets, and all other features of the Platform, and to record your gaming activity accurately.
• Financial Transactions: To process deposits, withdrawals, bonus credits, and refunds, and to maintain accurate financial records for your account.
• Legal Compliance: To fulfil our obligations under applicable anti-money laundering (AML) regulations, responsible gaming requirements, and any other legal or regulatory duty that requires us to retain or report certain data.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, and other conduct that violates our Terms & Conditions.
• Customer Support: To respond to your enquiries, resolve account issues, process complaints, and provide ongoing assistance through our support channels.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about the Platform where you have opted in to receive such communications. You may unsubscribe from marketing communications at any time through your account settings or by contacting support.
• Platform Improvement: To analyse aggregated usage patterns, identify technical issues, test new features, and improve the overall performance and user experience of the Platform.
• Responsible Gaming: To monitor your gaming activity for signs of problem gambling behaviour, apply deposit limits or cooling-off periods you have requested, and comply with self-exclusion requests.

5. Legal Basis for Processing

gtc77 processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing is necessary to perform our contractual obligations to you under the Terms & Conditions, including account management, payment processing, and service delivery.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory requirements, including AML obligations, age verification duties, and data retention mandates.
• Legitimate Interests: Processing is in the legitimate interests of gtc77 or a third party, provided those interests are not overridden by your fundamental rights. Examples include fraud prevention, platform security, and general business analytics.
• Consent: For marketing communications and certain non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Data Sharing and Disclosure

gtc77 does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard, solely to the extent necessary to process your transactions.
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios, to facilitate the delivery of their games and to enable audit trail maintenance for dispute resolution.
• Identity Verification Services: Third-party KYC and AML compliance partners who assist us in verifying the identity and age of players.
• Technology Service Providers: Cloud hosting providers, cybersecurity firms, and IT infrastructure partners who support the operation of the Platform, all of whom are bound by contractual data protection obligations.
• Legal and Regulatory Authorities: Where we are required by applicable law, court order, or regulatory direction to disclose personal data to government bodies, law enforcement agencies, or financial intelligence units, we will comply with such requirements.
• Professional Advisors: Lawyers, auditors, and other professional advisors engaged by gtc77, where disclosure is strictly necessary for the provision of their services and subject to confidentiality obligations.

7. Cookies and Tracking Technologies

The gtc77 Platform uses cookies and similar tracking technologies to ensure the proper functioning of the website, to remember your preferences, and to gather analytical data that helps us improve our services. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core features such as user authentication, session management, and security controls. These cookies cannot be disabled without significantly impairing your ability to use the Platform.
• Functional Cookies: These cookies allow the Platform to remember your preferences — such as your chosen language or display settings — and deliver a more personalised experience. Disabling functional cookies may affect the quality of certain features.
• Analytical Cookies: We use anonymised analytical data to understand how players navigate and interact with the Platform. This data is used solely to improve the Platform's performance and user experience and is not linked to your personal identity.
• Marketing Cookies: With your prior consent, marketing cookies may be used to show you relevant promotional content. You may withdraw consent for marketing cookies at any time through your browser settings or by contacting our support team.

You can control cookie preferences through your web browser settings. Please note that blocking certain categories of cookies may affect your experience of the Platform. Detailed instructions for managing cookies in commonly used browsers are available on each browser's official support page.

8. Data Retention

gtc77 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to longer retention periods required by applicable law. Our general data retention practices are as follows:

• Active Account Data: Personal data associated with a live, active gtc77 account is retained for the full duration of the account's existence and for a period of at least five (5) years following account closure, in compliance with AML record-keeping obligations.
• Financial Transaction Records: Records of all deposits, withdrawals, and betting transactions are retained for a minimum of five (5) years from the date of the transaction, in line with standard financial record-keeping requirements.
• Identity Verification Documents: KYC documents, including copies of government-issued IDs and proof of address, are retained for a minimum of five (5) years following account closure or the completion of the KYC process, whichever is later.
• Customer Support Communications: Records of support interactions, complaints, and correspondence are retained for a minimum of three (3) years following the closure of the relevant support ticket or complaint.
• Marketing Consent Records: Records of your marketing consent or opt-out preferences are retained for as long as is necessary to demonstrate compliance with applicable data protection obligations.
• Technical and Log Data: Server logs and technical access data are typically retained for no longer than twelve (12) months unless a longer period is required for security investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any identifiable individual.

9. Data Security

gtc77 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures in place include:

• SSL/TLS Encryption: All data transmitted between your device and the gtc77 Platform is encrypted using industry-standard SSL/TLS protocols. This ensures that sensitive information — including login credentials and payment details — cannot be intercepted during transmission.
• Data Encryption at Rest: Sensitive data stored on our servers, including financial records and identity documents, is encrypted using strong encryption standards.
• Access Controls: Access to personal data held by gtc77 is strictly limited to employees and contractors who require it to perform their specific job functions. All access is governed by role-based access control policies and is subject to audit logging.
• Two-Factor Authentication: gtc77 supports two-factor authentication (2FA) for player accounts to provide an additional layer of protection against unauthorised login attempts.
• Regular Security Audits: Our Platform and infrastructure undergo periodic security assessments and penetration testing to identify and remediate potential vulnerabilities.
• Incident Response: In the event of a data security incident that is likely to affect your rights or freedoms, gtc77 will notify affected players promptly and take immediate remedial action.

10. Your Data Rights

As a data subject, you have a number of rights in relation to the personal data that gtc77 holds about you. These rights are summarised below. To exercise any of these rights, please contact our support team in writing at [email protected] with a clear description of your request:

• Right of Access: You have the right to request a copy of the personal data that gtc77 holds about you, together with information about how it is being processed. We will respond to subject access requests within a reasonable timeframe.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update certain information directly through your account settings.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to limitations where we are required to retain data by law (for example, financial transaction records retained for AML compliance).
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests, including profiling for marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing that took place before the withdrawal.

gtc77 will acknowledge all data rights requests within five (5) business days and will endeavour to resolve requests within thirty (30) days. Complex requests may require additional time, in which case we will notify you of the extended timeframe.

11. Children's Privacy

The gtc77 Platform is strictly intended for adults aged 21 years or older. We do not knowingly collect, process, or store personal data relating to individuals under the age of 21. If you are under 21, you must not attempt to register an account or use any feature of the Platform.

In the event that gtc77 becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data, close the associated account, and return any funds deposited (net of any bonuses claimed) to the source payment method, in accordance with our underage gambling prevention procedures.

12. Third-Party Links and Services

The gtc77 Platform may contain references to third-party services, including game providers and payment partners. These third parties operate under their own independent privacy policies, and gtc77 does not exercise control over their data collection or processing practices.

When you interact with a third-party service accessed through or in connection with the gtc77 Platform — for example, when processing a payment via bKash or Nagad — your interaction with that service is governed by that third party's own privacy policy. gtc77 is not responsible for the privacy practices or content of any third-party service.

We recommend that you review the privacy policies of all third-party services you interact with, particularly those relating to payment processing, to understand how your data is handled by those parties.

13. Updates to This Privacy Policy

gtc77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or the services we offer. When material changes are made, we will take reasonable steps to inform you, which may include displaying a prominent notice on the Platform homepage or sending a notification to your registered email address.

The "Last Updated" date displayed at the top of this Policy will be revised each time an update is published. We encourage you to review this Policy periodically to stay informed about how gtc77 protects your personal data.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised Policy, you must discontinue use of the Platform and may request account closure by contacting our support team.

14. Contact Us

If you have any questions, concerns, or requests in relation to this Privacy Policy or the way in which gtc77 handles your personal data, please contact our Data Protection team using the details below. We aim to respond to all privacy-related enquiries within five (5) business days.

Data Protection Contact:

gtc77 Data Protection Team
Email: [email protected]
Subject Line: Privacy Policy Enquiry

Please note that email addresses displayed on this page are provided as plain text for reference purposes only and are not clickable links. When contacting us, please include your registered username and a clear description of your query or request to help us assist you efficiently.

For requests to exercise your data rights as described in Section 10, please include "Data Rights Request" in your subject line and specify which right you wish to exercise.