Privacy Policy
goldebet
At goldebet, your privacy is not an afterthought — it is a core platform commitment. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you have over your information as a player based in Bangladesh.
Our Privacy Commitments
These six principles underpin every data-handling decision made at goldebet. Full legal detail follows in the sections below.
goldebet collects only the personal data that is strictly necessary to operate the platform, verify your identity, process payments, and comply with applicable legal obligations. We do not collect data for the sake of it.
Your data is used exclusively for the purposes stated in this Privacy Policy. goldebet does not sell, rent, or trade your personal information to third-party marketing companies or data brokers under any circumstances.
All personal data stored by goldebet is protected using industry-standard AES-256 encryption at rest and TLS 1.3 in transit. Our infrastructure is hosted in secure, access-controlled data centres with 24/7 monitoring.
You have the right to access, correct, export, and request deletion of your personal data held by goldebet, subject to our legal retention obligations. All requests are processed within 30 days of receipt.
goldebet does not allow third-party advertising networks to place tracking cookies on your browser for profiling or retargeting purposes. Analytics cookies are first-party only and are used solely to improve platform performance.
goldebet adheres to applicable data protection standards, including obligations related to KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements, ensuring your data is handled lawfully and transparently at all times.
Data We Collect
goldebet collects personal data in several ways: information you provide directly during registration and account use, information generated automatically through your interaction with the platform, and information received from trusted third-party service providers involved in payment processing and identity verification.
Registration and account data: When you create a goldebet account, we collect your full legal name (as it appears on your national identity document), mobile phone number registered in Bangladesh, date of birth, chosen username, encrypted password, and division of residence. This information is required to open and maintain your account.
Identity verification (KYC) data: To comply with anti-money laundering obligations and to confirm that you meet the minimum age requirement of 18 years, goldebet collects copies of identity documents such as your National Identity Card (NID), passport, or birth certificate. We may also request proof of address in the form of a utility bill or bank statement, and confirmation that your registered payment method account name matches your goldebet account name.
Financial transaction data: goldebet records details of all deposits and withdrawals made via your account, including transaction amounts in Bangladeshi Taka (৳ BDT), timestamps, payment method identifiers (e.g., bKash or Nagad wallet numbers, masked to the last four digits in display), and transaction reference numbers. Full payment credentials are never stored on goldebet servers; they are handled exclusively by the relevant payment service provider.
Gaming activity data: We record your betting history, game session logs, wager amounts, outcomes, bonus usage, and any responsible gaming tool settings you activate. This data is used for account management, dispute resolution, fraud prevention, and responsible gaming monitoring.
Technical and device data: When you access goldebet, our servers automatically log your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, time on page, and session duration. This data is used for platform analytics, security monitoring, and fraud detection.
Communication data: If you contact goldebet's support team via email or live chat, we retain a record of that correspondence, including your contact details and the content of the exchange, for quality assurance and dispute resolution purposes.
goldebet does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, trade union membership, genetic data, or biometric data for identification purposes (beyond standard NID photo matching during KYC).
Full bKash, Nagad, Rocket, Upay, Visa, and Mastercard credentials are never stored on goldebet infrastructure. All payment data is transmitted directly to the respective payment provider via encrypted channels.
goldebet does not knowingly collect personal data from individuals under 18 years of age. If we discover that a minor has registered, the account will be closed immediately and all data deleted, except where legal retention obligations apply.
| Data Category | Examples | Legal Basis | Required? |
|---|---|---|---|
| Identity & Registration | Name, DOB, mobile number, NID | Contractual necessity; legal obligation (KYC/AML) | Mandatory |
| Financial Transactions | Deposit/withdrawal amounts, payment method refs | Contractual necessity; legal obligation | Mandatory |
| Gaming Activity | Bet history, game sessions, bonus usage | Contractual necessity; legitimate interest | Mandatory |
| Technical & Device | IP address, browser, device type | Legitimate interest (security, analytics) | Automatic |
| Communications | Support emails, chat transcripts | Legitimate interest (quality assurance) | When applicable |
| Marketing Preferences | Opt-in/opt-out status, promotional engagement | Consent | Optional |
How We Use Your Data
goldebet uses your personal data for clearly defined, lawful purposes. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we use your personal data are as follows:
Account creation and management: Your registration data enables us to create, manage, and maintain your goldebet account. This includes authenticating your identity at login, managing your wallet balance, applying responsible gaming settings, and communicating account-related information to your registered mobile number.
Payment processing: Financial data is used to process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard. Transaction records are maintained for accounting, dispute resolution, and regulatory reporting purposes.
Identity verification and regulatory compliance: KYC data is used to verify that you meet the minimum age requirement (18+), confirm your identity, and comply with anti-money laundering (AML) obligations. goldebet is required to retain verified KYC records for a minimum period defined by applicable law.
Fraud prevention and security: Technical and device data, combined with transaction patterns and gaming activity logs, are analysed to detect and prevent fraud, account takeovers, bonus abuse, money laundering, and other prohibited activities. This processing is necessary for the protection of both goldebet and its player community.
Platform improvement and analytics: Anonymised or aggregated technical data is used to monitor platform performance, identify and fix bugs, test new features, and understand how players interact with different parts of goldebet. This analysis informs product development decisions.
Responsible gaming monitoring: Gaming activity data is used to monitor player behaviour for signs of problem gambling, enforce self-imposed limits, apply time-outs and self-exclusions, and send responsible gaming notifications where appropriate.
Marketing communications (with consent only): If you have opted in to receiving promotional communications from goldebet, we will use your registered mobile number and/or email address to send you information about bonuses, promotions, new games, and seasonal offers. You may withdraw your consent and opt out of marketing communications at any time via your account settings or by contacting support@goldebet.
Legal obligations and dispute resolution: In certain circumstances, goldebet may be required to process and disclose personal data to comply with legal obligations, respond to lawful requests from regulatory or law enforcement authorities, or defend the platform's legal rights in the context of a dispute or litigation.
You can stop receiving promotional messages from goldebet at any time by adjusting your notification preferences in account settings or by emailing support@goldebet. Opting out of marketing does not affect transactional communications (e.g., deposit confirmations, KYC requests).
goldebet uses automated systems to flag accounts for fraud review and responsible gaming intervention. Where an automated decision significantly affects your account (e.g., suspension), you have the right to request human review by contacting support.
For platform analytics, goldebet uses aggregated and anonymised data wherever possible, so that individual players cannot be identified from the analytical datasets used for product improvement.
Data Sharing & Disclosure
goldebet does not sell, rent, or trade your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.
Payment service providers: To process your deposits and withdrawals, goldebet shares the minimum necessary transaction data with payment service providers including bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, Visa, and Mastercard. Each of these providers operates under their own privacy policy and is independently responsible for the data they receive and process.
Identity verification partners: goldebet may use third-party KYC and identity verification service providers to assist in verifying your identity documents. These partners are contractually bound to process your data solely for the purpose of identity verification and are prohibited from using it for any other purpose.
Game content providers: When you play a live casino game powered by Evolution Gaming or Ezugi, or a slot game provided by Pragmatic Play, NetEnt, Microgaming, or Spribe, your session data (such as bet amounts and game outcomes) is processed by that studio's servers. goldebet has data processing agreements in place with all game providers.
Legal and regulatory authorities: goldebet may be required to disclose personal data to governmental bodies, law enforcement agencies, financial intelligence units, or courts in response to lawful requests, court orders, or regulatory obligations. Such disclosures are made only to the extent required by law.
Business transfers: In the event that goldebet undergoes a merger, acquisition, or sale of all or a substantial part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such change in data controller via email or a prominent notice on the platform prior to the transfer taking effect.
Professional advisors: goldebet may share personal data with its legal advisors, accountants, and auditors on a strictly need-to-know basis, subject to professional confidentiality obligations.
goldebet has never sold player personal data and will never do so. This commitment applies regardless of any future commercial arrangements the platform may enter into.
Some of goldebet's game provider and technology partners may process data in jurisdictions outside Bangladesh. In all such cases, goldebet ensures that appropriate contractual safeguards are in place to protect your data to a standard equivalent to that applied within Bangladesh.
All third parties that process personal data on goldebet's behalf are engaged under written data processing agreements that strictly define the scope, purpose, and duration of the processing they may carry out.
Cookies & Tracking
goldebet uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, to maintain your logged-in session, and to collect anonymised analytics data that helps us improve the platform. This section explains the types of cookies we use and how you can manage them.
Strictly necessary cookies: These cookies are essential for goldebet to function. They enable core features such as maintaining your login session, remembering your preferred language setting, securing your account against cross-site request forgery (CSRF), and processing transactions. Without these cookies, goldebet cannot function properly. They cannot be disabled without breaking the platform.
Performance and analytics cookies: These first-party cookies collect anonymised data about how you interact with goldebet — which pages you visit, how long you spend on each section, what device and browser you use, and whether you encounter any errors. This data is used solely to improve platform performance and is never linked back to your personal identity.
Functionality cookies: These cookies remember your preferences — such as your preferred deposit method, notification settings, or responsible gaming tool configurations — so that you do not need to re-enter them each time you visit.
No third-party advertising cookies: goldebet does not permit third-party advertising networks, social media platforms, or data brokers to place tracking cookies on your browser. You will not be retargeted across the web based on your goldebet activity.
Managing cookies: You can control and delete cookies through your browser settings. Most browsers allow you to block all cookies, block third-party cookies only, or delete existing cookies. Note that blocking strictly necessary cookies will prevent goldebet from functioning as intended. For detailed instructions on managing cookies in your specific browser, consult your browser's help documentation.
Local storage and session storage: In addition to cookies, goldebet may use browser local storage and session storage to store small amounts of data related to your current session (e.g., unsaved form progress, UI state). This data does not leave your device and is cleared when your session ends or when you clear your browser storage.
- Strictly Necessary — Always active
- Performance — Anonymised analytics
- Functionality — Preference memory
- Advertising — Not used
- Third-Party Tracking — Not permitted
Session cookies are deleted when you close your browser. Persistent cookies remain on your device for a defined period (typically 30–365 days) and are used for functionality and analytics purposes. All goldebet persistent cookies expire within 365 days.
Data Security Measures
goldebet takes the security of your personal data seriously and implements a multi-layered approach to protecting data from unauthorised access, accidental loss, destruction, or disclosure. The following technical and organisational measures are in place at all times.
Encryption: All data transmitted between your device and goldebet is encrypted using TLS 1.3 (Transport Layer Security). Personal data stored on goldebet servers is encrypted at rest using AES-256. Passwords are hashed using a one-way cryptographic algorithm (bcrypt with a minimum cost factor of 12) and are never stored in plain text.
Access controls: Access to personal data within goldebet's internal systems is restricted on a strict need-to-know basis. Staff members are granted the minimum level of access required to perform their role. All internal access is logged and reviewed periodically. Multi-factor authentication (MFA) is mandatory for all goldebet administrative personnel.
Two-factor authentication for players: goldebet applies automatic OTP (One-Time Password) SMS verification whenever a login is detected from a new device or IP address. Players are also strongly encouraged to enable persistent 2FA in their account security settings.
Infrastructure security: goldebet's platform infrastructure is hosted in secure data centres with physical access controls, CCTV monitoring, and redundant power and connectivity. Regular vulnerability assessments and penetration testing are conducted by independent security professionals.
Data breach response: In the event of a personal data breach that poses a risk to your rights and freedoms, goldebet will notify affected players as soon as reasonably practicable and will take immediate steps to contain the breach, assess its scope, and mitigate any harm. goldebet maintains an incident response plan that is reviewed and tested annually.
Employee training: All goldebet staff who handle personal data receive regular training on data protection obligations, security best practices, and the platform's internal data handling policies. Staff are subject to confidentiality obligations as a condition of their engagement.
All data in transit is protected by the latest TLS standard. Your connection to goldebet is always encrypted.
New device logins trigger an automatic SMS OTP check to your registered Bangladesh mobile number, preventing unauthorised access.
Data Retention Policy
goldebet retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce agreements. Retention periods vary by data category as outlined below.
Account and identity data: Registration data and KYC identity documents are retained for the duration of your active account relationship with goldebet, plus a minimum of 5 years following account closure. This retention period is required to comply with anti-money laundering regulations and to address any post-closure disputes or regulatory enquiries.
Financial transaction records: Records of all deposits, withdrawals, and bonus transactions are retained for a minimum of 7 years following the date of each transaction. This period reflects standard accounting and regulatory record-keeping requirements applicable to financial service operations.
Gaming activity logs: Bet history, game session records, and outcome data are retained for 5 years. These records are used for dispute resolution, responsible gaming monitoring, and platform integrity audits.
Technical and device data: Server logs including IP addresses, device identifiers, and session data are retained for up to 2 years. After this period they are deleted or irreversibly anonymised.
Communication records: Support correspondence (email and chat transcripts) is retained for 3 years from the date of the last communication in a given conversation thread.
Marketing preferences: Records of your marketing opt-in or opt-out status are retained for the duration of your account, plus 1 year following closure, to demonstrate compliance with consent requirements.
When personal data is no longer required to be retained, it is securely deleted or irreversibly anonymised using industry-standard data sanitisation procedures. goldebet conducts periodic data audits to ensure that retention schedules are being applied consistently across all data categories.
- Account & KYC data
Active period + 5 years - Financial records
7 years from transaction date - Gaming activity logs
5 years - Server & device logs
Up to 2 years - Support communications
3 years - Marketing preferences
Account duration + 1 year
Your Privacy Rights
As a player on goldebet, you have the following rights in relation to your personal data. goldebet is committed to honouring these rights promptly and without unnecessary obstacles. To exercise any of these rights, contact us at support@goldebet with the subject line "Privacy Rights Request" and a description of the right you wish to exercise. We will respond within 30 days.
-
Right to Access You have the right to request a copy of all personal data that goldebet holds about you. We will provide this in a structured, commonly used, machine-readable format (JSON or CSV) within 30 days of your verified request.
-
Right to Rectification If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details directly from your account settings, or contact support for changes that require manual review.
-
Right to Erasure You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that certain data must be retained to comply with legal obligations even after a deletion request.
-
Right to Restrict Processing You have the right to request that goldebet restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified, or while an objection to processing is being assessed.
-
Right to Data Portability Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a portable format and to transmit it to another controller of your choosing.
-
Right to Object You have the right to object to processing of your personal data where goldebet relies on legitimate interest as the legal basis, including processing for direct marketing purposes. Where you object to marketing, we will stop processing your data for that purpose immediately.
-
Right to Withdraw Consent Where processing is based solely on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
-
Right Against Automated Decisions You have the right not to be subject to a decision based solely on automated processing — including profiling — that produces significant legal or similarly significant effects. Where such automated decisions are made, you may request human review by contacting our support team.
Email support@goldebet with the subject line "Privacy Rights Request". Include your registered username, the right you wish to exercise, and a brief description. We may ask you to verify your identity before processing the request.
goldebet will acknowledge your request within 72 hours and provide a full response within 30 calendar days. In complex cases, we may extend this by a further 30 days, in which case we will notify you of the extension and the reason.
Exercising your privacy rights is free of charge. goldebet may charge a reasonable administrative fee only if requests are manifestly unfounded, excessive, or repetitive in nature.
Policy Updates
goldebet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, we will notify you via a prominent notice on the goldebet platform and, where appropriate, by sending a notification to your registered mobile number.
The "Last Updated" date at the top of this page will be revised each time the Privacy Policy is amended. We encourage you to review this page periodically to stay informed about how goldebet protects your personal data. Your continued use of the platform following notification of changes constitutes your acceptance of the revised Privacy Policy.
If a proposed change materially affects how we process data based on your previously given consent, we will request fresh consent from you before the change takes effect.
Contact Us
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which goldebet handles your personal data, please contact our privacy team using the details below. We take all privacy enquiries seriously and will respond promptly.
- Privacy Enquiries: support@goldebet
- Email Subject Line: "Privacy Policy Enquiry"
- Response Time: Within 72 hours
- Operating Hours: 24/7 Support (Bangladesh Standard Time, UTC+6)
- Support Language: English
Your Privacy is Protected at goldebet
Now that you understand how goldebet handles your data, explore the platform with confidence. Browse our games, check out current promotions, or review our responsible gaming tools — your data is always secure.