goldpari Privacy
Policy

goldpari collects personal data from players in Bangladesh and other eligible jurisdictions through three principal channels: data you provide directly during registration and platform use; data generated automatically through your use of the platform; and data received from trusted third-party service providers who assist in delivering our services. Each category is described in detail below.

1.1 Data You Provide Directly

When you register an account at goldpari or interact with the platform, you may provide the following categories of personal data:

Data Category	Examples	When Collected
Identity Data	Full legal name, date of birth, nationality, gender	Registration, identity verification
Contact Data	Email address, mobile phone number, residential address	Registration, account update
Verification Documents	National ID, passport, proof of address, selfie	KYC verification process
Financial Data	bKash account number, Nagad number, bank account details, card last 4 digits	Deposit, withdrawal requests
Communication Data	Live chat transc ripts, support emails, survey responses	Customer support interactions
Responsible Gaming Data	Deposit limits set, self-exclusion requests, session time preferences	Responsible gaming tool usage

1.2 Data Collected Automatically

When you access and use the goldpari platform, certain technical data is collected automatically by our systems. This data is necessary to deliver a functional, secure, and personalised experience and includes:

• Device & Browser Data: Device type, operating system, browser type and version, screen resolution, and installed language settings.
• Connection Data: IP address, approximate geographic location derived from IP, internet service provider, and connection timestamp.
• Usage & Session Data: Pages visited, games played, bets placed, session duration, click patterns, and navigation paths within the platform.
• Transaction Logs: A full record of all deposits, withdrawals, bonus activations, and wager history associated with your account.
• Cookie & Tracking Data: Data collected through cookies, pixel tags, and similar technologies as described in Section 4 of this Policy.

1.3 Data Received from Third Parties

goldpari may receive personal data relating to you from the following categories of third parties, solely for the purposes of operating the platform and meeting legal obligations:

• Payment Providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing partners may share transaction confirmation data with us to reconcile payments.
• Identity Verification Services: Third-party KYC (Know Your Customer) providers may share the results of identity checks conducted on your submitted documents.
• Fraud Prevention Services: Anti-fraud and anti-money-laundering (AML) screening services may share risk scores or alerts associated with your account activity.
• Game Providers: Studios such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi may share game session data with us for dispute resolution and auditing purposes.

goldpari processes your personal data only where we have a lawful basis for doing so. The primary lawful bases we rely on are: (a) the performance of a contract with you (i.e., operating your account and delivering our services); (b) compliance with legal obligations applicable to us; (c) our legitimate interests in operating a safe, fair, and commercially viable platform; and (d) your consent, where explicitly obtained.

The following table sets out the specific purposes for which goldpari processes personal data and the corresponding lawful basis for each purpose:

Processing Purpose	Lawful Basis
Creating and managing your player account	Contract performance
Processing deposits and withdrawals via bKash, Nagad, Rocket, and other methods	Contract performance
Verifying your identity and age (18+ compliance)	Legal obligation, contract performance
Detecting and preventing fraud, money laundering, and prohibited conduct	Legal obligation, legitimate interests
Administering bonuses, promotions, and loyalty rewards	Contract performance
Providing customer support via live chat and email	Contract performance, legitimate interests
Sending transactional communications (account alerts, withdrawal confirmations)	Contract performance
Sending promotional communications about offers and new games	Consent (you may withdraw at any time)
Analysing platform usage to improve our services and game offering	Legitimate interests
Responsible gaming monitoring and intervention	Legal obligation, legitimate interests
Complying with requests from law enforcement or regulatory authorities	Legal obligation

goldpari does not use your personal data for automated decision-making that produces legal effects or similarly significant consequences without human review, except in the context of real-time fraud screening where an automated flag triggers a manual review process. You have the right to request human review of any automated decision that has materially affected your account.

goldpari does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes under any circumstances. We share your data only in the limited and specific circumstances described below, and only to the extent necessary for each stated purpose.

3.1 Service Providers

We engage carefully selected third-party service providers who process personal data on our behalf under binding contractual obligations of confidentiality and data security. These providers include:

• Payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard acquiring banks) for the processing of deposits and withdrawals.
• Identity verification and KYC providers for the purpose of age and identity checks required under our responsible gaming and anti-fraud obligations.
• Customer support platform providers who host the live chat and email ticketing infrastructure through which we deliver 24/7 English-language support.
• Game studio providers (Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, Ezugi) who require session identifiers to deliver game content and resolve disputes.
• Fraud detection and AML screening services that analyse transaction patterns to identify suspicious activity.
• Cloud hosting and infrastructure providers who store encrypted platform data in secure data centres.

3.2 Legal and Regulatory Disclosure

goldpari may disclose your personal data to law enforcement agencies, regulatory authorities, courts, or other public bodies where we are legally required to do so, where disclosure is necessary to establish, exercise, or defend legal claims, or where disclosure is required to prevent or detect a serious crime. We will notify you of any such disclosure where we are legally permitted to do so.

3.3 Business Transfers

In the event that goldpari undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, we will ensure that the receiving entity is bound by data protection obligations consistent with this Privacy Policy, and we will notify affected players prior to any such transfer taking effect.

goldpari uses cookies and similar tracking technologies to enable core platform functionality, improve your experience, and analyse how the platform is used. A cookie is a small text file placed on your device by a website. Cookies do not contain executable code and cannot access other files on your device.

Cookie Type	Purpose	Duration
Strictly Necessary	Maintain your login session, remember your language preference, enable secure account access after goldpari Login	Session / up to 24 hours
Functional	Remember your preferred game categories, display settings, and responsible gaming tool configurations	Up to 12 months
Analytics	Aggregate data on page visits, session duration, and navigation patterns used to improve platform performance	Up to 24 months
Security	Detect suspicious login attempts, identify bot activity, and protect the integrity of financial transactions	Session / up to 30 days

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair core platform functionality, including the ability to remain logged in to your goldpari account. goldpari does not use third-party advertising cookies or cross-site tracking cookies for the purpose of serving targeted advertisements on other websites.

goldpari implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security programme includes, but is not limited to, the following measures:

• 256-bit SSL/TLS Encryption: All data in transit between your device and goldpari servers is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Encrypted Data Storage: Sensitive personal data, including identity documents and financial records, is stored in encrypted form at rest using AES-256 encryption.
• Access Controls: Access to personal data within goldpari is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of access required to perform their specific job functions.
• Two-Factor Authentication: Player accounts support two-factor authentication (2FA) to provide an additional layer of protection against unauthorised access. We strongly encourage all players to enable 2FA after completing goldpari Login.
• Regular Security Audits: goldpari engages independent security specialists to conduct periodic penetration testing and vulnerability assessments of our platform infrastructure.
• Incident Response: goldpari maintains a documented data breach response procedure. In the event of a security incident that poses a material risk to your personal data, we will notify affected players without undue delay.

While goldpari employs all reasonable and industry-standard security measures, no online platform can guarantee absolute security. You are responsible for keeping your account password confidential and for logging out of your account after each session, particularly when accessing the platform from a shared device.

goldpari retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following retention periods apply to the primary categories of data we hold:

Data Category	Retention Period	Rationale
Account registration data	Duration of account + 5 years after closure	Legal obligation, dispute resolution
Identity verification documents	Duration of account + 5 years after closure	AML/KYC legal obligation
Transaction records (deposits, withdrawals, wagers)	7 years from transaction date	Financial record-keeping obligation
Customer support communications	3 years from last interaction	Dispute resolution, service improvement
Marketing consent records	Until consent is withdrawn + 3 years	Proof of consent
Security and fraud logs	2 years from log date	Fraud detection, legal compliance
Responsible gaming records	Duration of account + 5 years	Player protection, regulatory compliance

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with any individual player. Where data must be retained beyond the standard period due to an ongoing legal dispute or regulatory investigation, we will retain only the data that is directly relevant to that matter and will delete it as soon as the matter is resolved.

As a player whose personal data is processed by goldpari, you hold the following rights with respect to your information. These rights may be exercised by contacting us at the details provided in Section 8 of this Policy. We will respond to all valid requests within 30 calendar days of receipt.

• Right of Access: You have the right to request a copy of the personal data that goldpari holds about you, along with information about how that data is being used and with whom it has been shared. This is sometimes referred to as a Subject Access Request (SAR).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay. Minor contact detail updates (such as a change of email address) can be made directly through your account settings.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to limitations where we are required to retain data to fulfil a legal obligation or to establish, exercise, or defend a legal claim.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in specific circumstances, for example while the accuracy of data you have contested is being verified.
• Right to Object: Where we process your data on the basis of legitimate interests, you have the right to object to that processing. You also have an unconditional right to object to processing for direct marketing purposes, including profiling for marketing. We will honour all such objections promptly.
• Right to Withdraw Consent: Where processing is based on your consent (for example, receiving promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal. To withdraw marketing consent, use the unsubscribe link in any marketing email or contact our support team.
• Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or a contract, you may request that we provide your personal data in a structured, commonly used, and machine-readable format.

goldpari will not charge a fee for processing rights requests in ordinary circumstances. Where requests are manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or decline to act on the request, providing written reasons for that decision.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way goldpari handles your personal data, you may contact us through the following channels. All privacy-related enquiries are handled in English and are responded to within 30 calendar days.

• Email: support@goldpari — please use the subject line "Privacy Enquiry" or "Data Rights Request" so your message is routed to the correct team.
• Live Chat: Our 24/7 English-language live chat support team can handle general privacy questions and direct you to the appropriate process for formal data rights requests.

goldpari takes all privacy complaints seriously. If you are not satisfied with our response to a complaint or data rights request, you have the right to escalate your concern to the relevant supervisory authority in the jurisdiction under whose laws the goldpari platform is registered.

goldpari reserves the right to update this Privacy Policy at any time. When material changes are made, we will update the effective date at the top of this document and, where appropriate, notify registered players by email or via an in-platform notification. Your continued use of goldpari following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.