goldbit
Privacy Policy
At goldbit, your privacy is a fundamental right, not an afterthought. This Privacy Policy explains precisely what personal information we collect from players in Bangladesh, how we use and store it, who we may share it with, and the controls you have over your own data. We are committed to transparency in every aspect of how we handle personal information.
Data Protection Commitments
How goldbit Protects Your Information
Six core principles that govern every data decision we make — built around transparency, security, and your right to control your own information.
256-Bit SSL Encryption
Every connection between your browser and goldbit is protected by 256-bit SSL encryption. Your personal details, payment data, and login credentials are transmitted securely at all times — the same standard used by major international banks.
No Sale of Personal Data
goldbit does not sell, rent, or trade your personal information to any third-party marketing organisation. Your data is used exclusively to operate your account, process payments, and improve the goldbit platform experience for players in Bangladesh.
Minimal Data Collection
We collect only the information that is strictly necessary to register your account, verify your identity, process BDT transactions via bKash, Nagad, Rocket, and Upay, and comply with responsible gaming obligations. We do not collect data we do not need.
Your Data, Your Controls
Registered goldbit players have the right to access, correct, export, and request deletion of their personal data at any time. These controls are available through your account settings or by contacting the support team directly at any hour.
Transparent Cookie Use
goldbit uses cookies and similar technologies only for session management, security, and site performance analytics. We do not use third-party advertising cookies to build behavioural profiles of our players without clear disclosure and your knowledge.
Defined Retention Periods
Personal data is not held indefinitely. goldbit applies defined retention periods based on the purpose for which data was collected and any applicable legal obligations. When data is no longer needed, it is securely deleted or anonymised.
Data We Collect
goldbit collects personal information about you in three primary ways: information you provide directly when you register or interact with the platform; information generated automatically when you use the platform; and, in limited circumstances, information received from trusted third-party partners who assist us in operating the platform or verifying your identity.
Information You Provide Directly
When you register a goldbit account or subsequently update your account details, we collect the following categories of personal information:
- Identity data: Your full legal name as it appears on your government-issued identity document (National Identity Card, passport, or birth registration certificate issued by the Government of Bangladesh).
- Contact data: Your active Bangladeshi mobile number (used for account authentication and support communications).
- Age and date of birth: Collected to verify that you meet the 18+ eligibility requirement for using the goldbit platform.
- Payment method details: The mobile financial service account number or bank card details associated with your bKash, Nagad, Rocket, Upay, Visa, or Mastercard payment method. Full card numbers are not stored on goldbit servers — payment processing is handled by PCI-DSS-compliant payment partners.
- Account credentials: Your chosen password (stored in hashed form only — goldbit staff cannot view your password in plain text).
- Responsible gaming preferences: Any deposit limits, session time reminders, or self-exclusion requests you submit through your account settings or via the support team.
- Support communications: Records of conversations with the goldbit support team via live chat or email, including the content of your queries and our responses.
Information Collected Automatically
When you access the goldbit platform, certain technical and behavioural data is collected automatically by our systems:
| Data Category | Examples | Purpose |
|---|---|---|
| Device & Technical Data | IP address, device type, operating system, browser type and version, screen resolution | Security monitoring, fraud prevention, platform compatibility |
| Usage Data | Pages visited, games played, time spent per session, betting patterns, deposit and withdrawal history | Responsible gaming monitoring, personalisation, platform improvement |
| Session Data | Login timestamps, session duration, logout method (manual vs. timeout) | Account security, responsible gaming reality checks |
| Geolocation Data | Country and city-level location derived from IP address (e.g., Dhaka, Chittagong, Sylhet) | Eligibility verification, fraud detection, regulatory compliance |
| Cookie & Tracking Data | Session cookies, analytics identifiers, preference cookies | Session continuity, site analytics, security (see Section 4 — Cookies) |
Information from Third Parties
In limited circumstances, goldbit may receive personal data about you from trusted third-party partners, including:
- Identity verification providers: Services that assist goldbit in confirming the authenticity of identity documents submitted during the KYC process.
- Payment processors: Transaction confirmation data from bKash, Nagad, Rocket, Upay, and card payment networks (Visa/Mastercard) to reconcile deposits and withdrawals.
- Fraud prevention services: Risk signals and device fingerprinting data from specialist fraud detection partners used to protect the integrity of the platform and the accounts of legitimate players.
What We Do Not Collect: goldbit does not collect your national tax identification number, religious affiliation, political views, or any special-category sensitive personal data beyond what is strictly required for identity verification and responsible gaming compliance. We do not collect data from your contacts, social media profiles, or device microphone or camera.
How We Use Your Data
goldbit uses the personal data we collect for clearly defined purposes. We do not use your data for purposes beyond those described in this Privacy Policy without first obtaining your explicit consent or notifying you of the change. The primary purposes for which we process personal data are as follows:
Account Management and Platform Operation
- Creating and maintaining your goldbit player account.
- Authenticating your identity at login to prevent unauthorised account access.
- Processing BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard.
- Maintaining your account transaction history and bet records.
- Enabling you to participate in games, sports betting markets (including BPL, IPL, T20 World Cup, and international cricket fixtures), tournaments, and promotional offers.
Identity Verification and Legal Compliance
- Verifying that you are 18 years of age or older in accordance with our age restriction policy.
- Completing Know Your Customer (KYC) checks as required by responsible gaming and anti-money-laundering best practices.
- Complying with any applicable legal obligations, court orders, or regulatory directives.
Security and Fraud Prevention
- Detecting and investigating suspicious account activity, including duplicate accounts, fraudulent chargebacks, and use of prohibited automated software.
- Protecting the integrity of goldbit's game providers and betting markets against collusion, manipulation, and other forms of fraudulent conduct.
- Monitoring for signs of money laundering or other financial crime.
Responsible Gaming
- Monitoring your gaming behaviour to identify patterns that may indicate problem gambling, such as rapidly escalating deposit volumes, extended uninterrupted sessions, or frequent loss-chasing behaviour.
- Applying and enforcing the deposit limits, session reminders, cool-off periods, and self-exclusion arrangements you have requested.
- Contacting you proactively if our responsible gaming monitoring systems flag a concern about your account — all communications are in English.
Platform Improvement and Analytics
- Analysing aggregated, anonymised usage data to improve the performance, design, and content of the goldbit platform.
- Understanding which games, betting markets, and promotional formats are most valued by players in Bangladesh, including in cities such as Dhaka, Chittagong, Sylhet, Khulna, and Rajshahi.
Communications
- Responding to your support requests and live chat enquiries.
- Sending you transactional notifications (deposit confirmations, withdrawal processing updates, KYC request notices) via your registered mobile number.
- Where you have opted in, sending you promotional communications about relevant offers, new game releases, and seasonal promotions (e.g., Eid bonuses, Pohela Boishakh offers, BPL season promotions). You may opt out of promotional communications at any time via your account settings.
No Unsolicited Marketing: goldbit will not send you promotional communications unless you have actively opted in during registration or subsequently through your account settings. Every promotional message we send includes a clear and immediate opt-out mechanism.
Data Sharing & Third Parties
goldbit does not sell your personal data. We share personal information with third parties only where it is strictly necessary to operate the platform, fulfil legal obligations, or protect the security of the platform and its players. All third-party partners who process data on our behalf are required to implement appropriate technical and organisational security measures and to handle your data only in accordance with our instructions and this Privacy Policy.
Categories of Third Parties We Work With
- Payment processors: bKash, Nagad, Rocket, Upay, and Visa/Mastercard network partners receive transaction-level data necessary to process your deposits and withdrawals in BDT. These providers operate under their own privacy frameworks and are independently regulated.
- Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate the game software accessible through goldbit. These providers may receive anonymised session identifiers to facilitate gameplay and track game outcomes for fairness auditing purposes.
- Identity verification partners: Third-party KYC service providers receive copies of the identity documents you submit for verification. These providers are bound by strict data handling agreements and use your documents solely for the purpose of confirming your identity.
- Fraud prevention services: Specialist security partners receive technical data (such as IP addresses and device fingerprints) to help goldbit identify and prevent fraudulent account activity.
- Analytics providers: Aggregated, anonymised platform usage data may be processed by analytics partners to assist goldbit in improving the platform. No personally identifiable information is included in analytics data shared externally.
Legal Disclosure
goldbit may be required to disclose personal data to law enforcement authorities, regulatory bodies, or courts in Bangladesh or other relevant jurisdictions where we receive a lawful and properly issued request to do so. We will notify affected account holders of such disclosures to the extent permitted by law.
No Cross-Border Transfers to High-Risk Jurisdictions
Where personal data is processed by a third-party partner located outside Bangladesh, goldbit requires that partner to implement data protection standards that are at minimum equivalent to those described in this Privacy Policy. We do not knowingly transfer your personal data to jurisdictions with demonstrably inadequate data protection frameworks without implementing appropriate safeguards.
No Advertising Networks: goldbit does not share your personal data with third-party advertising networks, data brokers, or social media platforms for the purpose of targeting you with advertisements on other websites or applications. Your goldbit data stays within the goldbit ecosystem and its directly contracted operational partners.
Cookies & Tracking Technologies
goldbit uses cookies and similar tracking technologies (such as local storage tokens and session identifiers) to operate the platform effectively, maintain your logged-in session, detect security threats, and understand how players interact with the site. This section explains the types of cookies we use and how you can manage them.
Types of Cookies Used by goldbit
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your logged-in session, remember your language and currency preferences, protect against cross-site request forgery (CSRF) attacks. | Session (deleted on logout) |
| Security | Store device fingerprint tokens used to detect suspicious login attempts and flag accounts accessed from unrecognised devices. | 30 days (rolling) |
| Performance & Analytics | Collect anonymised data on page load times, navigation paths, and error rates to help goldbit diagnose technical issues and improve platform performance. | Up to 12 months |
| Responsible Gaming | Track session start time to support the session duration reminder and reality check features available in your account settings. | Session (deleted on logout) |
Managing and Disabling Cookies
You may disable non-essential cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent goldbit from maintaining your logged-in session, which will significantly impair your ability to use the platform. The steps to manage cookies vary by browser — refer to the help section of your specific browser (Chrome, Firefox, Safari, Samsung Internet, or Opera) for detailed instructions.
goldbit does not use advertising cookies or third-party tracking pixels that follow your activity across other websites after you leave the goldbit platform. The cookies described in the table above are limited in scope to the goldbit domain only.
Data Security
goldbit implements a layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration, and destruction. The following security measures are applied across the goldbit platform and its supporting infrastructure:
- Transport encryption: All data transmitted between your device and goldbit servers is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock symbol in your browser address bar confirms that your connection is secure.
- Password hashing: Passwords are stored using bcrypt hashing with a sufficiently high cost factor. goldbit staff cannot view your password in plain text under any circumstances.
- Access controls: Access to personal data within goldbit's internal systems is restricted on a strict need-to-know basis. Staff members are only granted access to the data categories required to perform their specific role.
- Payment data isolation: Full payment card numbers are never stored on goldbit servers. Card transactions are processed by PCI-DSS Level 1 certified payment partners. Mobile financial service transaction records contain only the last four digits of your account number.
- Regular security audits: goldbit conducts periodic independent security assessments of its platform infrastructure, including penetration testing and vulnerability scanning, to identify and remediate potential security weaknesses before they can be exploited.
- Breach response: In the event of a personal data breach that poses a risk to your rights, goldbit will notify affected account holders promptly via their registered mobile number, describing the nature of the breach, the data categories affected, and the steps being taken to contain and remediate the incident.
Your Role in Account Security: While goldbit takes extensive technical measures to protect your data, account security is a shared responsibility. You should use a strong, unique password for your goldbit account that you do not use on any other platform. Do not share your password or OTP codes with anyone — including people claiming to be goldbit support staff. goldbit staff will never ask for your password.
Data Retention
goldbit retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, accounting, or reporting obligations. The following retention periods apply to the main categories of personal data we hold:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal compliance, dispute resolution, re-registration prevention |
| Identity verification documents | Duration of account + 5 years after closure | KYC regulatory obligations, anti-money-laundering record-keeping |
| Transaction records (deposits / withdrawals) | 7 years from date of transaction | Financial record-keeping, dispute resolution, anti-money-laundering |
| Betting and gaming records | Duration of account + 3 years after closure | Fair play auditing, dispute resolution |
| Support communications | 3 years from date of last interaction | Service quality, dispute evidence, responsible gaming monitoring |
| Technical / session logs | 90 days | Security monitoring, fraud investigation |
| Analytics data (anonymised) | Up to 24 months | Platform improvement (no personal identifiers retained) |
| Self-exclusion records | Permanent (or duration of exclusion + 5 years) | Responsible gaming enforcement, re-registration prevention |
When a retention period expires, personal data is securely deleted from goldbit's active systems or irreversibly anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data that cannot be linked back to any individual may be retained indefinitely for statistical and research purposes.
Your Privacy Rights
As a goldbit account holder, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, contact the goldbit support team via live chat (available 24/7 in English) or by emailing support@goldbit — displayed as plain text only. We will respond to all valid data rights requests within 30 calendar days of receipt.
Right of Access
You have the right to request a copy of all personal data that goldbit holds about you. Upon receipt of a valid access request and confirmation of your identity, goldbit will provide you with a structured, readable summary of your personal data in electronic format, free of charge.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update certain account details (such as your registered mobile number) directly through your account settings. For corrections to identity-linked data (such as your legal name or date of birth), you will be required to submit supporting documentation.
Right to Erasure
You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where the data has been unlawfully processed. Please note that goldbit may be legally obliged to retain certain categories of data (such as financial transaction records and KYC documentation) even after you request erasure, in which case we will explain the specific legal obligation that prevents deletion.
Right to Restrict Processing
You have the right to request that goldbit temporarily restrict the processing of your personal data while a dispute about its accuracy or lawfulness is being resolved. During a restriction period, goldbit will store your data but not actively process it for other purposes.
Right to Data Portability
Where data processing is based on your consent or the performance of a contract, you have the right to receive your personal data in a commonly used, machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider if you choose to do so.
Right to Object to Marketing
You have the right to object to goldbit processing your personal data for direct marketing purposes at any time. You can opt out of promotional communications by updating your notification preferences in your account settings, or by replying to any promotional message with an opt-out request. Opting out of marketing does not affect your ability to receive essential transactional notifications (such as deposit and withdrawal confirmations).
How to Exercise Your Rights: To submit a data rights request, contact the goldbit support team via live chat (available 24 hours a day, 7 days a week in English) or send a written request to support@goldbit. Please include your registered mobile number and a brief description of your request. All times are Bangladesh Standard Time (BST, UTC+6). Email displayed as plain text only — not a clickable link.
Policy Updates & Contact
Changes to This Privacy Policy
goldbit reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made, goldbit will provide notice to registered account holders via the mobile number on file or by displaying a prominent notice on the platform for a period of at least 14 days prior to the changes taking effect.
The effective date at the top of this Privacy Policy indicates when it was last reviewed. We encourage all goldbit players to review this Privacy Policy periodically to remain informed of how their personal data is being handled. Continued use of the goldbit platform following publication of a revised Privacy Policy constitutes acceptance of the updated terms.
Questions and Complaints
If you have any questions about this Privacy Policy, concerns about how your personal data is being handled, or a complaint about a specific data practice, please contact the goldbit privacy team. We take all privacy concerns seriously and commit to providing a substantive response within 14 calendar days of receiving a written complaint.
Contact details for privacy enquiries (displayed as plain text — not click able links):
- Email: support@goldbit
- Live Chat: Available on every page of the goldbit platform, 24 hours a day, 7 days a week in English
- WhatsApp: +880 1700 000000
- Response time: Within 14 calendar days for written privacy complaints; within 30 calendar days for formal data rights requests
- Support hours: All times are Bangladesh Standard Time (BST, UTC+6)
Governing Language
This Privacy Policy is written and governed in the English language. In the event of any conflict between this English-language version and any translated or paraphrased summary, the English version shall prevail in all respects.
Effective Date: This Privacy Policy is effective as of 1 January 2026 and supersedes all previous versions. goldbit is committed to maintaining clear, honest, and up-to-date information about how we handle your personal data. Thank you for trusting goldbit as your online casino and sports betting platform in Bangladesh.
Ready to Play at goldbit?
Now that you understand how your data is protected, explore everything goldbit has to offer — from live cricket betting and premium slots to our full casino experience. Your privacy is safeguarded every step of the way.
18+ Only | Play Responsibly | SSL Encrypted | goldbit