Privacy Policy

1. Introduction

This Privacy Policy governs the collection, use, storage, and disclosure of personal information by gw40 ("we", "us", or "our") in connection with your use of the gw40 website and platform, accessible at https://gw40.vu. We are committed to protecting the privacy and security of every user who engages with our online casino and sports betting services.

By registering an account, making a deposit, or otherwise accessing or using any part of the gw40 platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with any term herein, please discontinue use of the platform immediately.

This policy applies to all users of gw40, including players from Bangladesh and other jurisdictions where we provide services. It covers all interactions with our website, mobile platform, customer support channels, and payment processing services.

2. Information We Collect

2.1 Personal Identification Information

When you create an account with gw40, we collect the following personal identification data necessary to verify your identity, comply with Know Your Customer (KYC) requirements, and deliver our services:

• Full legal name, date of birth, and gender
• Residential address, city (e.g., Dhaka, Chittagong, Sylhet), and country
• Email address and mobile phone number
• Government-issued identity document (e.g., National ID, passport)
• Selfie or facial verification image for identity confirmation

2.2 Financial and Transaction Information

To facilitate deposits, withdrawals, and game play, we collect financial data including:

• Payment method details (e.g., bKash mobile account number, Nagad account number, Rocket wallet, Upay details, Visa or Mastercard metadata)
• Transaction history, including deposit and withdrawal amounts in BDT
• Bonus and promotional activity records
• Responsible gaming activity, including deposit limits and self-exclusion requests

2.3 Technical and Usage Data

When you browse or interact with the gw40 platform, we automatically collect certain technical and behavioral data. This includes your IP address, browser type and version, operating system, device identifiers, referring URLs, session timestamps, pages visited, game sessions played, and your approximate geographic location derived from your IP address. This data helps us maintain platform security, detect fraud, personalize your experience, and improve our services.

3. How We Use Your Information

gw40 processes your personal data for specific, clearly defined purposes. We use the information we collect to:

• Create and manage your gw40 account, verify your identity, and fulfill KYC obligations
• Process financial transactions, including deposits via bKash, Nagad, Rocket, and Upay, and withdrawals to your designated account
• Deliver personalized gaming experiences, including cricket betting updates, live casino sessions, slot recommendations, and game promotions
• Detect and prevent fraud, money laundering, underage gambling, and other prohibited activities
• Communicate with you via email or SMS regarding account activity, security alerts, and service updates
• Comply with applicable legal obligations and respond to lawful requests from regulatory or law enforcement authorities

We do not use your personal data for profiling, automated decision-making that produces legal effects, or cross-platform behavioral advertising without your prior explicit consent.

4. Legal Basis for Processing

gw40 relies on the following legal bases for processing personal data:

• Contractual necessity — processing required to perform the services you have registered for and accepted our Terms and Conditions
• Consent — where you have specifically agreed to optional data uses such as marketing communications or promotional analysis
• Legal obligation — processing necessary to comply with anti-money laundering (AML) rules, KYC verification requirements, and other applicable regulations
• Legitimate interests — processing for fraud prevention, platform security, and service improvement, where these interests are not overridden by your fundamental rights

5. Sharing of Your Information

gw40 does not sell, rent, or trade your personal data to any third party for commercial gain. We share your data only in the limited circumstances described below, and only to the extent necessary to fulfill the stated purpose.

5.1 Service Providers

We engage trusted third-party service providers to support our operations. These may include payment processors (such as gateway partners for bKash, Nagad, and card payment networks), identity verification providers, cloud hosting services, anti-fraud technology vendors, and customer support platforms. Each provider is bound by contractual data processing obligations and is strictly prohibited from using your data for any purpose beyond the contracted service.

5.2 Legal and Regulatory Disclosure

We may disclose your personal data when required to do so by applicable law, court order, or regulatory directive. This includes disclosures to financial intelligence units, licensing authorities, or law enforcement agencies where we are legally compelled to cooperate. Any such disclosure will be limited to the minimum information necessary to satisfy the legal requirement.

5.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets involving gw40, your personal data may be transferred to the acquiring or succeeding entity. We will notify you via email or prominent notice on the platform before your data becomes subject to any different privacy policy.

6. Cookies and Tracking Technologies

gw40 uses cookies and similar tracking technologies to operate the platform efficiently, remember your preferences, and analyze usage patterns. By continuing to use the platform, you consent to our use of cookies in accordance with this section.

6.1 Essential Cookies

These cookies are strictly necessary for the platform to function. They enable user authentication, maintain your session state during gameplay, and ensure secure access to your account. These cookies cannot be disabled without disrupting core platform functionality.

6.2 Analytical and Performance Cookies

These cookies collect aggregate, anonymized data about how users interact with the platform — which pages are visited most often, where errors occur, and how quickly pages load. This information helps us continuously improve the platform experience. No personally identifiable information is stored in analytical cookies.

6.3 Preference Cookies

Preference cookies allow the platform to remember your settings and customizations, such as language preference and display configurations, so you do not need to re-enter them on each visit.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the availability or functionality of specific platform features. Clearing cookies will also log you out of any active sessions.

7. Data Retention

gw40 retains your personal data only for as long as it is necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The specific retention periods we apply are as follows:

Once the applicable retention period expires and no further legal obligation requires retention, your data is securely deleted or irreversibly anonymized. The following general retention periods apply:

• Active account data — retained for the duration of your active account, plus a minimum of 5 years following account closure to comply with AML and financial recordkeeping requirements
• KYC documentation — retained for a minimum of 5 years following the last transaction or account closure, whichever is later
• Technical log data and session records — typically retained for up to 12 months for security and fraud investigation purposes

8. Data Security

gw40 implements rigorous technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes 256-bit SSL/TLS encryption for all data in transit, encrypted storage for sensitive personal and financial data at rest, strict role-based access controls limiting data access to authorized personnel only, and regular independent security audits and penetration testing.

Our platform undergoes continuous monitoring for suspicious activity, and our security team is equipped to respond promptly to any detected threats or breaches. In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify affected users and relevant authorities within the timeframe required by applicable law.

9. Your Privacy Rights

gw40 respects your rights over your personal data. Subject to applicable law, you have the following rights with respect to the personal information we hold about you:

• Right of access — you may request a copy of the personal data we hold about you and information about how it is processed
• Right to rectification — you may request correction of inaccurate or incomplete personal data we hold about you
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations
• Right to restrict processing — you may request that we limit how we use your data in certain circumstances, such as while a dispute about accuracy is being resolved
• Right to data portability — where processing is based on your consent or a contract, you may request your data in a structured, machine-readable format
• Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of the above rights, please contact our data privacy team at [email protected]. We will respond to all verified requests within a reasonable timeframe, and no later than 30 calendar days from receipt. We may need to verify your identity before processing certain requests to protect your data from unauthorized access.

10. Payment Data and Financial Security

All financial transactions on gw40, including deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, are processed through secure, encrypted payment channels. We do not store complete card numbers, CVV codes, or full mobile banking PINs on our servers. Payment credentials are tokenized and handled directly by our certified payment processing partners, ensuring that sensitive financial data never passes through gw40 servers in plain text.

Transaction records, including amounts, timestamps, and payment method references, are retained as part of your account history for the statutory period required by financial compliance rules. You can view your transaction history at any time from your gw40 account dashboard.

11. Minors and Age Verification

gw40 is strictly an adult-only platform. Access to our casino and sports betting services is prohibited for individuals under the age of 21. We do not knowingly collect, store, or process personal data belonging to any person under 21 years of age. Our registration and KYC process includes mandatory age verification to screen out underage applicants.

If we become aware that we have inadvertently collected personal data from a user who is under 21, we will take immediate steps to delete that data and close the associated account. Parents or guardians who believe a minor may have registered on the platform are urged to contact us immediately at [email protected]. This is a 21+ only platform.

12. Third-Party Links and Integrations

The gw40 platform may reference or integrate with third-party service providers for payment processing, game delivery, or customer support. gw40 is not responsible for the privacy practices or content of any third-party service. Once you leave the gw40 platform and interact with a third-party service, that service's own privacy policy governs how your data is handled. We recommend reviewing the privacy policy of any third-party service you interact with in connection with your gw40 account.

13. Changes to This Privacy Policy

gw40 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered users via email or a prominent notice on the platform.

Your continued use of the gw40 platform following the posting of any revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how we protect your information.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way gw40 handles your personal data, please reach out to our dedicated data privacy team. We are committed to addressing your privacy concerns promptly and transparently.