How gitago Protects Your Privacy

Information We Collect

When you register for an account, use gitago's betting or gaming services, or contact our support team, we collect certain categories of personal information. The table below summarises what we collect, why we collect it, and the legal basis for doing so.

Information You Provide Directly

The majority of personal data gitago holds is information that you provide voluntarily during the account registration process, when completing identity verification, when making a deposit or withdrawal request, or when contacting our support team. You are not legally obligated to provide this information, but without it gitago cannot create or maintain a registered account for you.

Information Collected Automatically

When you access gitago via a web browser or mobile device, our platform automatically collects certain technical data including your IP address, device identifiers, browser type, and session duration. This information is collected using standard web server logs and, where applicable, cookies and similar tracking technologies. Automatic data collection helps gitago maintain platform security, detect unusual login behaviour, and improve the overall user experience for players in Bangladesh.

How We Use Your Data

gitago uses the personal data it collects for specific, defined purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The primary purposes for which gitago processes personal data are set out below.

Account Management & Service Delivery

The most fundamental use of your personal data is to create and maintain your gitago account, to verify your identity and age, and to deliver the betting and gaming services you have signed up for. This includes processing your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, settling your bets, crediting bonus funds, and providing access to casino games from providers such as Pragmatic Play, Evolution Gaming, and Spribe.

Security & Fraud Prevention

gitago uses technical and transactional data to monitor accounts for signs of fraudulent activity, unauthorised access, money laundering, and other suspicious behaviour. Where our security systems flag an anomaly — such as a login from an unfamiliar IP address, an unusual withdrawal pattern, or a detected attempt to open multiple accounts — we may temporarily restrict account access while we conduct a review. This processing is in the legitimate interest of both gitago and its registered player community.

Responsible Gaming Monitoring

gitago is committed to responsible gaming. We analyse your betting and gaming activity to identify patterns that may indicate problem gambling behaviour — such as rapidly increasing stake sizes, extended uninterrupted sessions, or frequent use of the full deposit limit. Where such patterns are detected, our responsible gaming team may reach out proactively to check in or to offer access to self-management tools. This processing is undertaken in your vital interest and in fulfilment of gitago's responsible gaming obligations.

Communications & Customer Support

gitago uses your contact data to send you essential account communications including deposit confirmations, withdrawal status updates, security alerts, and responses to your support enquiries. These communications are service-related and cannot be opted out of while your account remains active, as they form a necessary part of the platform's operation. Where gitago sends optional marketing communications (such as promotional offer notifications), you will always be given the option to unsubscribe.

Legal & Regulatory Compliance

gitago may be required to process and retain certain personal data in order to comply with applicable anti-money laundering (AML) standards, financial record-keeping obligations, and requests from law enforcement or regulatory authorities. In such cases, data processing is a legal obligation and cannot be refused. gitago will always inform you of any disclosure of your personal data to a third-party authority unless it is legally prohibited from doing so.

Platform Improvement & Analytics

Aggregated and anonymised usage data is used to analyse how players interact with the gitago platform, which games and sports markets are most popular among Bangladesh users, and where technical or user-experience improvements can be made. In this context, your data is processed only in fully anonymised form — individual player behaviour cannot be identified from the analytics output.

Data Sharing & Third Parties

gitago does not sell, rent, or trade your personal data. However, in order to operate the platform and deliver services to Bangladesh players, gitago works with a carefully selected group of third-party service providers and partners. In each case, data sharing is governed by contractual data processing agreements that require the recipient to protect your data in accordance with appropriate security standards.

Payment Processing Partners

To process deposits and withdrawals, gitago shares the minimum necessary financial reference information with your chosen payment provider — bKash, Nagad, Rocket, Upay, Visa, or Mastercard. Each of these payment providers operates under its own privacy policy and is independently responsible for the security of payment transactions conducted through its network. gitago does not receive or store your full mobile banking PIN, card CVV number, or online banking password.

Identity Verification Providers

As part of gitago's Know Your Customer (KYC) process, identity documents such as your National Identity Card (NID) or passport may be processed by a trusted third-party identity verification service. This provider acts as a data processor on behalf of gitago and is contractually prohibited from using your identity data for any purpose other than completing the verification check requested by gitago.

Game Software Providers

Casino games available on gitago are powered by third-party software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers' game engines run on their own certified servers and may receive certain session data — such as your player session token and stake/win amounts — in order to operate the game correctly and record the outcome. They do not receive your full personal profile, payment details, or identity documents.

Legal & Regulatory Disclosures

gitago may be legally required to disclose personal data to law enforcement agencies, regulatory authorities, or courts in response to a valid legal request. gitago will comply with such requests to the extent required by law and will endeavour to notify you of any such disclosure where it is legally permitted to do so.

Cookies & Tracking Technologies

gitago uses cookies and similar browser-based technologies to operate certain essential platform functions and to improve the experience for players visiting the site. This section explains what cookies gitago uses, why, and how you can manage your cookie preferences.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, to remember your preferences, and to maintain your session while you are logged in. Cookies do not contain viruses or malware and cannot access other files on your device.

Types of Cookies Used by gitago

• Strictly Necessary Cookies: These are essential for the gitago platform to function. They include session cookies that keep you logged in while you navigate between pages, and security cookies that help protect your account from cross-site request forgery (CSRF) attacks. You cannot opt out of strictly necessary cookies while using gitago.
• Functional Cookies: These cookies remember your preferences — such as your preferred language setting and display options — so you do not need to re-enter them on each visit. Functional cookies do not track your behaviour across other websites.
• Analytics Cookies: gitago uses anonymised analytics to understand how players use the platform — for example, which pages are visited most frequently and where users encounter difficulties. Analytics data is aggregated and cannot be used to identify individual players.
• Security & Fraud Detection Cookies: These cookies help gitago identify unusual patterns of access that may indicate a security threat, such as an attempt to access your account from multiple locations simultaneously.

Managing Your Cookie Preferences

You may control non-essential cookies through your web browser's settings. Most modern browsers allow you to view, block, or delete cookies stored by individual websites. Please note that disabling certain categories of cookies — particularly functional cookies — may affect your experience on gitago and may prevent some features from working correctly. Strictly necessary cookies cannot be disabled without preventing access to the platform entirely.

Data Security Measures

gitago takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it from unauthorised access, accidental loss, disclosure, or destruction.

Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your device and gitago's servers is encrypted using current SSL/TLS protocols, ensuring that your login credentials, payment references, and personal information cannot be intercepted in transit.
• Password Hashing: Account passwords are stored using a one-way cryptographic hashing algorithm. gitago employees cannot view your password in plain text. If you forget your password, it must be reset — it cannot be retrieved.
• Access Controls: Access to systems that hold personal player data is restricted to authorised gitago staff whose role requires it. All internal access is logged and subject to regular review.
• Infrastructure Security: gitago's platform infrastructure is hosted in data centres with physical security controls, redundant power, and regular third-party security audits.

Organisational Safeguards

gitago staff who handle personal data are trained in data protection responsibilities. Confidentiality obligations are built into employment contracts. gitago conducts periodic internal reviews of its data handling processes and updates its security practices in response to emerging threats.

Your Responsibilities

While gitago takes every reasonable precaution to protect your data, the security of your account also depends on the steps you take. You should use a strong, unique password for your gitago account, never share your login credentials with anyone, log out of your account when using a shared device, and contact gitago support immediately if you suspect any unauthorised access to your account.

Data Retention Policy

gitago retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The table below provides a general guide to the retention periods that apply to different categories of player data.

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual. Where anonymised data is retained for analytics purposes beyond the retention period, it cannot be re-linked to your identity.

Your Privacy Rights

As a registered gitago player, you have a number of rights in relation to the personal data we hold about you. gitago is committed to honouring these rights promptly and without creating unnecessary obstacles.

Right of Access

You have the right to request a copy of the personal data gitago holds about you. This is commonly referred to as a Subject Access Request (SAR). To submit a SAR, contact gitago at [email protected] with the subject line "Data Access Request" and include your registered account email address for verification purposes. gitago will respond within a reasonable timeframe.

Right to Rectification

If you believe that any personal data gitago holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor account details such as your email address or phone number can often be updated directly via your account settings. For corrections to identity data (name, date of birth), please contact support as supporting documentation may be required.

Right to Erasure

You may request that gitago delete your personal data. This right is not absolute — gitago may be required to retain certain data to comply with AML and financial record-keeping obligations even after your account is closed. However, where data is no longer necessary and no legal obligation requires its retention, gitago will action erasure requests promptly.

Right to Restrict Processing

In certain circumstances — for example, where you contest the accuracy of data or have objected to its processing — you may request that gitago restrict the use of your personal data while a review is conducted. During a restriction period, gitago will continue to store the data but will not actively process it for any other purpose.

Right to Object to Marketing

You have the right to object to receiving promotional communications from gitago at any time. You may exercise this right by following the unsubscribe link in any marketing email, by updating your communication preferences in your account settings, or by contacting [email protected]. Opting out of marketing does not affect the delivery of essential service communications related to your account.

Updates to This Policy

gitago reviews this Privacy Policy periodically and may update it to reflect changes in the way we operate, changes to the services we offer Bangladesh players, or changes in applicable legal and regulatory requirements. When this Privacy Policy is updated, the revised version will be published on this page with a new effective date shown at the top of the document.

Where changes to this Privacy Policy are material — for example, where we introduce a new category of data processing or a new third-party sharing arrangement — gitago will notify registered players by sending an alert to the email address associated with their account. The notification will summarise the key changes and link to the updated policy in full.

Your continued use of gitago following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any changes made to this Privacy Policy, you should discontinue use of gitago and may request account closure by contacting [email protected].