gmene Privacy Policy — How We Protect Your Personal Data

gmene ("we", "us", "our") operates the online gaming and sports betting platform accessible at gmene.io. We are committed to protecting the privacy of every player who uses our platform, and we take our responsibilities regarding the collection, use, and safeguarding of personal data seriously.

This Privacy Policy applies to all personal data collected through the gmene website, account registration process, deposit and withdrawal transactions, customer support interactions, and any other touchpoint through which you engage with the gmene platform. It covers data provided by players in Bangladesh and any other jurisdiction from which the platform is lawfully accessed.

This policy is written in plain English to ensure that every player understands exactly how their information is handled. Where legal or technical terminology is unavoidable, we have provided clear explanations. If you have any questions about this policy that are not answered below, please contact us at [email protected].

The effective date of this Privacy Policy is stated at the top of this document. Whenever this policy is updated, the effective date will be revised accordingly. We encourage you to review this page periodically to stay informed about how we protect your data.

gmene collects personal data in the following categories, depending on the nature of your interaction with the platform:

We collect only the minimum data necessary for the specific purpose described. We do not collect sensitive personal data categories such as racial or ethnic origin, religious beliefs, biometric data, or health information unless strictly required by law.

You are not obligated to provide all requested data; however, failure to provide mandatory data (such as identity and financial data) may prevent us from opening or maintaining your account or processing your transactions.

gmene collects personal data through the following mechanisms:

• Direct submission: When you register an account, complete the KYC process, submit a deposit or withdrawal request, or contact our support team, you directly provide us with personal data.
• Automated technical collection: When you visit gmene.io, our servers automatically record certain technical data including your IP address, browser type, device identifier, and session timestamps. This collection is necessary for platform security, fraud prevention, and operational monitoring.
• Payment provider data: When you initiate a deposit or withdrawal using bKash, Nagad, Rocket, or Upay, the respective payment provider confirms the transaction to us. We receive only the data necessary to match the transaction to your account — we do not receive your full mobile banking PIN or password.
• Third-party identity verification: Where we engage a third-party KYC service provider to verify the authenticity of identity documents you submit, that provider may return a verification result to us alongside limited extracted data fields (such as name and date of birth confirmation).
• Cookies and similar technologies: As described in the Cookies section of this policy, we use cookies and similar technologies to collect data about your browsing behaviour on the gmene platform. You can manage cookie preferences through your browser settings.

gmene processes your personal data for the following specific purposes:

• Account creation and management: To open, maintain, and administer your gmene player account, including processing login requests, updating account details, and managing account security settings.
• Transaction processing: To process deposits made via bKash, Nagad, Rocket, or Upay, and to process withdrawal requests to your verified payment account in BDT (৳).
• Identity verification (KYC): To verify that you meet the minimum age requirement of 21 years and that the identity you have presented is genuine, in accordance with our anti-fraud and responsible gaming obligations.
• Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, account takeover, and any other conduct that may harm the platform or other players.
• Responsible gaming compliance: To monitor player activity for signs of problem gambling and to enforce deposit limits, session controls, and self-exclusion arrangements requested by players.
• Customer support: To respond to your support enquiries, investigate complaints, and communicate with you regarding your account status.
• Legal and regulatory compliance: To comply with applicable laws, court orders, and requests from competent authorities where legally required.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the gmene platform's features, performance, and user experience.
• Marketing communications (opt-in only): To send you promotional offers, bonus notifications, and seasonal promotions (such as Eid bonus offers, BPL season promotions, and ICC T20 World Cup specials) where you have explicitly opted in to receive such communications. You may withdraw this consent at any time.

gmene processes personal data on the following legal bases:

• Contractual necessity: Processing your identity data, contact data, and financial data is necessary to perform the contract between you and gmene — specifically, to operate your player account, process transactions, and deliver the gaming and betting services you have requested.
• Legal obligation: Certain processing activities — including KYC identity verification, anti-money laundering checks, and retention of transaction records — are required by applicable law. We process data for these purposes regardless of your preferences, as we are legally obligated to do so.
• Legitimate interests: We process technical data and account activity data on the basis of our legitimate interest in maintaining platform security, preventing fraud, and improving our services. We have assessed that these interests are not overridden by your privacy rights in the context of a regulated online gaming platform.
• Consent: Where we send you optional marketing communications, we do so only on the basis of your freely given, specific, and informed consent obtained during or after registration. You have the right to withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

gmene does not sell your personal data to any third party. We share your data only in the following limited and controlled circumstances:

• Payment service providers: bKash, Nagad, Rocket, and Upay receive only the data necessary to process your deposit or withdrawal transaction. These providers operate under their own privacy policies and are subject to applicable Bangladesh financial data regulations.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, NetEnt, and Spribe may receive a session token and anonymised player identifier to deliver game content. These providers do not receive your full identity or financial data.
• KYC and identity verification services: Where we use a third-party service to verify identity documents, that provider receives only the documents and data necessary to perform the verification and returns a result to gmene. They are contractually prohibited from using your data for any other purpose.
• Fraud detection and risk management providers: We may share limited technical data (such as IP addresses and device fingerprints) with specialist fraud prevention services to identify and block suspicious activity on the platform.
• Legal and regulatory authorities: We will disclose personal data to law enforcement agencies, courts, or regulatory bodies where we are required to do so by applicable law, or where such disclosure is necessary to protect the rights, safety, or property of gmene, our players, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of the gmene business, your personal data may be transferred to the acquiring entity. You will be notified in advance of any such transfer that would materially change how your data is handled.

All third parties with whom gmene shares personal data are required to implement appropriate technical and organisational security measures and to process your data only for the specific purposes authorised by gmene.

gmene retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and dispute resolution requirements. The following general retention periods apply:

• Active account data: Retained for the full duration of your active account relationship with gmene plus a minimum of 5 years following account closure, to comply with anti-money laundering record-keeping obligations.
• KYC and identity documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later, in accordance with applicable legal requirements.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Customer support correspondence: Retained for 3 years from the date of resolution of the relevant support interaction.
• Marketing consent records: Retained for the duration of the consent period plus 1 year following withdrawal of consent, to demonstrate compliance.
• Technical and session data: Typically retained for 12 months in identifiable form, after which it may be aggregated or anonymised for statistical purposes with no retention limit applying.

When personal data is no longer required for any of the above purposes and no legal retention obligation applies, it will be securely deleted or anonymised.

gmene employs a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our key security practices include:

• 256-bit SSL/TLS encryption: All data transmitted between your browser or device and the gmene platform is encrypted in transit using industry-standard TLS protocols.
• Password hashing: Your account password is stored using a one-way cryptographic hash function. gmene staff cannot view or recover your password in plain text. If you forget your password, a reset process will be initiated rather than a recovery of the original.
• Access controls: Access to personal data within the gmene organisation is restricted to staff members who require it to perform specific job functions. All staff with data access are bound by confidentiality obligations and receive regular data protection training.
• Intrusion detection and monitoring: Our servers are monitored continuously for suspicious activity. Automated alerts trigger investigation procedures in the event of any anomalous access patterns or potential breach indicators.
• Secure data centres: Player data is stored on servers located in access-controlled, physically secure data centre environments with redundancy and backup systems in place.
• Periodic security reviews: gmene conducts regular internal reviews of its data handling practices and technical security infrastructure to identify and remediate potential vulnerabilities.

While gmene takes all reasonable precautions to protect your data, no online platform can guarantee absolute security against all threats. You are responsible for maintaining the security of your own account credentials. If you suspect your account has been compromised, contact us immediately at [email protected].

gmene uses cookies and similar tracking technologies on the gmene.io website. A cookie is a small text file placed on your device by a web server when you visit a website. Cookies allow the platform to recognise your device on subsequent visits and to maintain your session state.

The following categories of cookies are used on the gmene platform:

gmene does not place any third-party advertising or behavioural tracking cookies on your device. You will not see gmene advertisements on other websites based on your activity on our platform.

You can manage or delete cookies through your browser settings at any time. Please note that disabling functional or analytical cookies will not prevent you from using the platform but may affect your user experience. Disabling essential or security cookies may impact your ability to log in or use certain platform features.

As a gmene player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and a clear description of your request. We will respond within 30 days.

• Right of Access: You have the right to request a copy of the personal data gmene holds about you, along with information about how it is being processed. We will provide this information free of charge in a structured, commonly used format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain account details (such as email address or phone number) directly through the account settings panel.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. Please note that we may be required to retain certain data for legal compliance purposes even following an erasure request, in which case we will inform you of the specific data that must be retained and the legal basis for retention.
• Right to Restrict Processing: You may request that we temporarily stop processing your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: You have the right to receive the personal data you have provided to us in a structured, machine-readable format and to request that it be transmitted to another service provider where technically feasible.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for fraud prevention purposes. We will consider your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where we process your data on the basis of consent (specifically, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

We will never charge a fee for exercising your data rights unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. We will notify you before applying any such fee.

The gmene platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any individual under the age of 21, and we do not permit persons under 21 to register for or use a gmene account under any circumstances.

During the registration process, all players are required to confirm that they are 21 years of age or older. As part of our KYC verification process, we verify the age declared during registration against government-issued identity documents. Any account found to belong to a person under 21 will be immediately closed, all associated data will be securely deleted, and any funds held in the account will not be returned.

If you are a parent or guardian and you believe that a person under 21 in your care has registered for a gmene account without your knowledge, please contact us immediately at [email protected]. We will investigate the matter promptly and take appropriate action, including account closure and data deletion, within 48 hours of a verified report.

We also recommend that parents and guardians make use of parental control software to restrict access to online gaming and betting websites on devices used by minors.

gmene operates primarily to serve players in Bangladesh. However, certain technical infrastructure components — including server hosting, game content delivery, and fraud detection services — may involve the transfer of data to systems located outside of Bangladesh.

Where personal data is transferred internationally, gmene takes appropriate steps to ensure that such transfers comply with applicable data protection standards and that the receiving party implements adequate security and confidentiality measures equivalent to those applied within the gmene platform. Transfers to game content providers such as Pragmatic Play, Evolution Gaming, and NetEnt are made under the data processing terms of our respective licensing agreements with those providers.

For payment data, transfers to bKash, Nagad, Rocket, and Upay remain within Bangladesh as these are locally regulated mobile financial service providers operating under the Bangladesh Bank framework.

gmene reserves the right to update this Privacy Policy at any time to reflect changes in our data handling practices, applicable law, or platform functionality. When we make material changes to this policy, we will update the effective date at the top of this document and, where appropriate, notify registered players via email or an in-platform notification.

We encourage all players to review this Privacy Policy periodically. The most current version of this policy will always be accessible at gmene.io/privacy-policy. Continued use of the gmene platform following the publication of any update constitutes your acknowledgment of the revised policy. If you do not accept the updated terms, you should cease using the platform and contact [email protected] to close your account.

Previous versions of this Privacy Policy may be requested by contacting [email protected] for reference purposes, though only the current published version governs your relationship with gmene at any given time.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data gmene holds about you, please reach out to our support team using the contact details below:

• Email: [email protected]
• Subject Line for Data Requests: "Data Rights Request"
• Response Language: English
• Support Hours: 24 hours a day, 7 days a week
• Time Zone: Bangladesh Standard Time (BST, UTC+6)
• Response Time: Within 30 days for formal data rights requests; within 24 hours for general privacy enquiries

Please note that the support email address is for written correspondence only. gmene does not operate a telephone support line. Do not send sensitive identity documents (such as National ID scans or passport copies) to this address unless specifically requested by a gmene support agent as part of a verified KYC process.

We are committed to resolving all privacy-related enquiries fairly and transparently. If you are not satisfied with our response to your data enquiry, you may escalate your concern to the relevant data protection authority in your jurisdiction.