flowgpt Privacy Policy

1. Who We Are

flowgpt ("flowgpt", "we", "us", "our") operates the online casino and sports betting platform accessible at flowgpt.win. flowgpt is committed to protecting the personal data of all individuals who interact with our platform, including registered players, prospective players who browse our website, and any person who contacts our customer support team.

For the purposes of this Privacy Policy, flowgpt acts as the data controller in respect of all personal data collected through the flowgpt.win website and its associated services. Our primary point of contact for all privacy-related matters is [email protected]. We serve players located primarily in Bangladesh and design our data practices with the Bangladesh market in mind.

2. Scope of This Policy

This Privacy Policy applies to all personal data processed by flowgpt in connection with your use of the flowgpt platform. It covers:

• The flowgpt.win website and all pages accessible through it
• The flowgpt account registration and login process
• All gaming and betting services available to registered players
• Deposit and withdrawal transactions processed through our payment partners
• Communications between you and the flowgpt customer support team
• Marketing communications sent to players who have consented to receive them

This policy does not apply to third-party websites, payment providers, or services that may be linked from or integrated with the flowgpt platform. Those parties operate under their own privacy policies, for which flowgpt accepts no responsibility.

3. Data We Collect

3.1 Registration and Account Data

When you create a flowgpt account, we collect the following information:

• Full legal name
• Date of birth (to verify the 18+ age requirement)
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)
• Mobile telephone number registered in Bangladesh
• Email address (if provided during registration)
• Username and encrypted password

3.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to protect the security of your account, we may collect copies of:

• Government-issued photo identification (National ID card, passport, or driving licence)
• Proof of address documents (utility bills, bank statements dated within three months)
• Payment method verification screenshots (e.g., bKash or Nagad account screens showing your registered mobile number)
• Selfie photographs with photo ID, where requested by our compliance team

3.3 Financial Transaction Data

When you make deposits or withdrawals through the flowgpt platform, we record transaction details including the payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank), transaction amounts in BDT (৳), transaction timestamps, and reference numbers. We do not store full payment account credentials — only the minimum identifiers necessary to process and reconcile transactions.

3.4 Gaming and Betting Activity Data

flowgpt logs your gaming and betting activity on the platform, including game sessions, bet amounts, win and loss records, bonus claims, and wagering history. This data is used to manage your account, resolve disputes, detect fraud, and fulfil our responsible gaming obligations.

3.5 Technical and Device Data

When you access the flowgpt platform, our systems automatically collect certain technical information, including:

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser version
• Pages visited, time spent on pages, and navigation paths
• Session start and end timestamps (Bangladesh Standard Time, UTC+6)
• Referral source (how you arrived at the flowgpt website)

3.6 Communications Data

If you contact our customer support team by email or through any on-platform messaging feature, we retain records of those communications, including the content of messages, timestamps, and any attachments you provide. This allows us to track the resolution of your queries and maintain a consistent support experience.

4. How We Collect Your Data

flowgpt collects personal data through the following channels:

• Directly from you: when you register, complete KYC verification, make transactions, use support services, or update your account settings
• Automatically: through cookies, server logs, and analytics tools when you browse or use the flowgpt platform
• From payment partners: transaction confirmation and status data received from bKash, Nagad, Rocket, Upay, and our banking partners in Bangladesh
• From identity verification services: where we use a third-party KYC provider to verify documents submitted during account verification

5. How We Use Your Data

flowgpt uses the personal data we collect for the following purposes:

Purpose	Description
Account Management	Creating, maintaining, and securing your flowgpt player account, including processing login requests and account updates.
Age Verification	Confirming that all registered players meet the mandatory 18+ age requirement before accessing any real-money gaming services.
Payment Processing	Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banks; reconciling transactions; and resolving payment disputes.
Fraud Prevention	Detecting and investigating suspicious account activity, duplicate accounts, bonus abuse, money laundering, and other prohibited conduct.
Responsible Gaming	Monitoring gaming behaviour to identify signs of problem gambling and applying self-exclusion, deposit limit, or cooling-off tools where necessary.
Customer Support	Responding to your enquiries, complaints, and feedback through our support channels.
Platform Improvement	Analysing aggregated, anonymised usage data to improve the performance, design, and content of the flowgpt platform.
Legal Compliance	Meeting our obligations under applicable law, including responding to lawful requests from courts, regulators, or law enforcement authorities.
Marketing (with consent)	Sending you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications.

6. Legal Basis for Processing

flowgpt processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: processing required to fulfil our obligations under the flowgpt Terms & Conditions, including account management, payment processing, and game operation.
• Legal obligation: processing required to comply with applicable laws, including anti-money laundering obligations, age verification requirements, and responses to lawful regulatory or law enforcement requests.
• Legitimate interests: processing carried out to protect the security and integrity of the flowgpt platform, detect fraud, prevent abuse, and improve our services — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: processing based on your explicit opt-in, particularly in relation to marketing communications. You may withdraw consent at any time by contacting [email protected] or using the unsubscribe link in any marketing email.

7. Sharing Your Data with Third Parties

7.1 Payment Processors

flowgpt shares the minimum necessary transaction data with payment partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank — solely for the purpose of processing your deposit and withdrawal requests. These partners act as independent data controllers for their own services and are subject to their own privacy policies.

7.2 Identity Verification Providers

Where flowgpt uses a third-party service to assist with KYC document verification, your identity documents and associated data may be shared with that provider. All such providers are contractually required to handle your data securely and to use it only for the verification purpose for which it was shared.

7.3 Technology and Infrastructure Partners

flowgpt works with technology partners who provide hosting, cloud infrastructure, analytics, and cybersecurity services. These partners may process personal data on our behalf as data processors, subject to binding data processing agreements that restrict how they handle your information.

7.4 Game Software Providers

Certain game providers (including but not limited to Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) may receive anonymised session data to facilitate game delivery and resolve technical disputes. flowgpt does not share personally identifiable information with game studios beyond what is technically necessary for game operation.

7.5 Legal and Regulatory Disclosure

flowgpt may disclose personal data to courts, regulatory authorities, or law enforcement agencies where required to do so by applicable law, or where we reasonably believe such disclosure is necessary to protect the rights, property, or safety of flowgpt, our players, or the public.

7.6 No Sale of Data

flowgpt does not sell, rent, lease, or otherwise transfer your personal data to any third party for that party's own marketing or commercial purposes. Any data sharing is limited to the specific purposes described in this Section 7.

8. Cookies and Tracking Technologies

flowgpt uses cookies and similar client-side technologies to deliver a functional, personalised, and secure experience on the platform. The table below summarises the categories of cookies we use:

Cookie Category	Purpose	Duration
Strictly Necessary	Keep you logged in during your session, maintain your account state, and protect against cross-site request forgery (CSRF).	Session
Functional	Remember your language and display preferences so you do not need to reset them on each visit.	Up to 12 months
Analytics	Collect anonymised data on page views, navigation paths, and feature usage to help us understand how players interact with the platform.	Up to 24 months
Security	Detect and flag unusual login patterns, multiple concurrent sessions, and potential account takeover attempts.	Session / 30 days

You can control cookie behaviour through your browser settings. Disabling strictly necessary cookies will prevent you from logging into your flowgpt account. Disabling functional or analytics cookies will not affect your ability to play but may reduce the quality of your experience.

9. Data Retention

flowgpt retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following general retention periods apply:

• Account and KYC data: retained for the duration of your active account plus a minimum of five years following account closure, in line with anti-money laundering record-keeping requirements.
• Transaction records: retained for a minimum of five years from the date of the transaction.
• Gaming and betting logs: retained for a minimum of two years from the date of each game session or bet.
• Customer support communications: retained for a minimum of two years from the date of the last interaction.
• Marketing consent records: retained until you withdraw consent, plus a reasonable administrative period thereafter.
• Technical and device data (anonymised): retained in aggregated, anonymised form for up to 36 months for platform analytics purposes.

When personal data is no longer required for its stated purpose and no legal retention obligation applies, flowgpt will securely delete or anonymise it in accordance with our internal data disposal procedures.

10. Security Measures

flowgpt applies a layered security approach to protect the personal data of all players. Key technical and organisational measures in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the flowgpt platform
• Encrypted storage of passwords using industry-standard hashing algorithms — flowgpt staff cannot see your password in plain text
• Role-based access controls limiting which internal staff can access personal data, on a strict need-to-know basis
• Regular security audits and penetration testing of the flowgpt platform infrastructure
• Anomaly detection systems that monitor for unusual login patterns or access attempts
• Two-factor authentication available to all players as an additional layer of account protection

While flowgpt takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your flowgpt login credentials confidential and for notifying us immediately at [email protected] if you suspect unauthorised access to your account.

11. Your Rights

As a flowgpt player, you hold the following rights with respect to your personal data:

• Right of Access: You may request a copy of all personal data flowgpt holds about you at any time.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your flowgpt account.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances, for example while a complaint is being investigated.
• Right to Data Portability: You may request a structured, machine-readable copy of the personal data you have provided to flowgpt, where processing is based on consent or contractual necessity.
• Right to Object: You may object to processing based on our legitimate interests, including the use of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please submit a written request to [email protected], clearly stating which right you wish to exercise and providing sufficient information to identify your account. flowgpt will respond to all valid requests within a reasonable timeframe, typically within 30 days.

12. Children's Privacy

The flowgpt platform is strictly intended for adults aged 18 and above. flowgpt does not knowingly collect, store, or process personal data relating to individuals under the age of 18. If you believe that a minor has registered a flowgpt account or provided us with personal data, please contact us immediately at [email protected]. Upon confirmation, flowgpt will take prompt steps to close the account and delete all associated data.

13. Links to Third-Party Sites

The flowgpt platform may contain references to third-party payment providers and game studios. flowgpt is not responsible for the privacy practices of these external parties. We encourage you to review the privacy policy of any third-party service you interact with in connection with your use of the flowgpt platform. This Privacy Policy applies solely to data collected directly by flowgpt through the flowgpt.win website and its associated services.

14. Changes to This Policy

flowgpt reserves the right to update this Privacy Policy at any time. When changes are made, the revised policy will be published on this page with an updated effective date. Where changes are material — for example, if we introduce a new category of data processing — we will notify registered players by displaying a prominent notice on the platform or by sending a notification to your registered contact details. Your continued use of the flowgpt platform following publication of a revised Privacy Policy constitutes your acceptance of those changes.

We recommend reviewing this page periodically to stay informed about how flowgpt handles your personal data.

15. How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way flowgpt handles your personal data, please contact our privacy team using the details below. We are committed to resolving privacy enquiries fairly, promptly, and transparently.

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Privacy Enquiry — [Your Account Username]
• Response time: We aim to acknowledge all privacy-related contacts within 24 hours and to provide a substantive response within 14 business days.

For formal data access or erasure requests, please include your full registered name, your flowgpt username, and a clear description of the data or action you are requesting. flowgpt may need to verify your identity before processing the request to ensure your data is not disclosed to an unauthorised party.