gd999 Privacy Policy

1 Introduction

gd999 is committed to handling the personal data of all players with the highest degree of care, transparency, and integrity. We understand that players accessing a real-money gaming and betting platform from Bangladesh are placing trust in us not only with their funds, but with their personal and financial information. That trust is something we take seriously.

This Privacy Policy applies to all users of the gd999 platform, including visitors who browse gd999.io without registering, registered players who hold an active or inactive account, and any other individuals who interact with gd999 through our support channels. It governs all personal data collected through the website, mobile-optimised interface, customer support systems, and payment processing flows.

This policy should be read alongside the gd999 Terms and Conditions and Responsible Gaming Policy. Together, these three documents form the complete agreement between gd999 and its players regarding platform use and data governance.

2 Personal Data We Collect

gd999 collects only the personal data that is necessary and proportionate to the services we provide. The categories of data we may collect are set out below.

2.1 Identity and Contact Data

• Full legal name as it appears on your National Identity Card (NID) or passport
• Date of birth (used for mandatory age verification — players must be 21 or older)
• Residential address in Bangladesh (district, city, postal code)
• Mobile phone number (used for account verification and transactional notifications)
• Email address (used for account communications and support correspondence)

2.2 Account and Activity Data

• Username and encrypted password credential
• Account registration date, time, and originating IP address
• Full betting and gaming transaction history, including markets wagered, stake amounts in ৳ BDT, outcomes, and timestamps
• Deposit and withdrawal records, including method used, amounts, and processing timestamps
• Bonus and promotion claims and associated wagering activity
• Customer support interaction logs, including chat transcripts and email correspondence
• Responsible gaming tool usage records, including deposit limit settings, cooling-off periods, and self-exclusion history

2.3 Identity Verification (KYC) Data

• Copies of government-issued identity documents (NID, passport)
• Proof of address documents (utility bill, bank statement)
• Proof of payment method ownership (screenshot or confirmation of bKash, Nagad, or Rocket account registration in the player's name)
• Source of funds documentation where required by anti-money laundering procedures

2.4 Technical and Device Data

• IP address at login and during active sessions
• Device type, operating system, and browser or app version
• Screen resolution and connection type (mobile data, Wi-Fi)
• Session duration, page navigation paths, and feature interaction logs
• Cookies and similar tracking identifiers (see Section 7 for full cookie details)

2.5 Financial Data

• Mobile wallet identifiers associated with bKash, Nagad, Rocket, and Upay accounts used for deposits
• Bank account details where a player requests a bank transfer withdrawal
• Transaction reference numbers issued by payment providers

3 How We Collect Your Data

gd999 collects personal data through the following channels:

3.1 Direct Collection

You provide data directly when you register an account on gd999.io, complete the KYC verification process, make a deposit or withdrawal request, contact the support team via live chat or email, or interact with any form or feature on the platform that requires input.

3.2 Automated Technical Collection

When you visit or use gd999.io, our servers and analytics systems automatically record technical data including your IP address, device identifiers, session activity, and page interaction data. This collection occurs regardless of whether you are logged in to an account. Cookies and similar technologies are used as part of this process — see Section 7 for full details.

3.3 Collection From Third Parties

gd999 may receive personal data about you from third parties in limited circumstances, including:

• Payment providers (bKash, Nagad, Rocket, Upay, and Bangladeshi banks) confirming transaction status and account ownership
• Identity verification and KYC service providers who assist with document authentication
• Fraud prevention and anti-money laundering screening services that check account details against watchlists
• Game providers (such as Evolution Gaming, Pragmatic Play, and Spribe) who may pass session and outcome data back to gd999's platform for account reconciliation

4 How We Use Your Personal Data

gd999 uses the personal data we collect for specific, legitimate purposes. We do not use data for purposes beyond those listed below without obtaining fresh consent or establishing a new lawful basis.

Purpose	Data Used	Basis
Account registration and identity verification	Identity, contact, KYC documents	Contract performance
Processing deposits and withdrawals	Financial data, identity data	Contract performance
Providing betting and casino game services	Account, activity, device data	Contract performance
Customer support and dispute resolution	Identity, account, activity data	Contract performance / legitimate interest
Anti-money laundering and fraud detection	Identity, financial, device data	Legal obligation
Age verification (21+ compliance)	Identity, KYC documents	Legal obligation
Responsible gaming monitoring and intervention	Activity data, responsible gaming records	Legal obligation / legitimate interest
Platform security and fraud prevention	Device, technical, IP data	Legitimate interest
Sending promotional communications (opt-in)	Contact data, activity data	Consent
Platform analytics and performance improvement	Technical, device, activity data	Legitimate interest

5 Legal Basis for Processing

gd999 processes personal data on one or more of the following legal grounds:

• Contract Performance: Processing is necessary to fulfil the agreement between gd999 and the Player — for example, to operate the account, process bets, and handle payments.
• Legal Obligation: Processing is required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and financial reporting obligations.
• Legitimate Interests: Processing serves gd999's legitimate business interests — such as platform security, fraud prevention, and service analytics — provided these interests are not overridden by the Player's privacy rights.
• Consent: Where processing is based on consent (for example, sending marketing communications), gd999 will obtain clear and specific consent before proceeding. Consent can be withdrawn at any time by contacting [email protected].

6 Data Sharing and Disclosure

gd999 does not sell, rent, or trade your personal data. We share personal data with third parties only in the limited circumstances described below.

6.1 Payment Processors

To process deposits and withdrawals, gd999 shares necessary transaction data with bKash, Nagad, Rocket, Upay, and partner banks. Only the data required to complete the transaction is shared. Payment processors operate under their own privacy policies and are bound by contractual obligations to gd999 regarding data handling.

6.2 Identity Verification Providers

Where KYC verification is required, gd999 uses authorised third-party identity verification services to authenticate documents. These providers process identity and document data on gd999's behalf and are subject to strict data processing agreements.

6.3 Game Providers

Casino and game content is delivered via third-party providers including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe. These providers receive session and game-play data necessary to deliver game content and resolve game-related disputes. Game providers are prohibited from using this data for independent marketing purposes.

6.4 Fraud Prevention and AML Services

gd999 uses fraud detection and anti-money laundering screening services that may process player identity and transaction data against risk and watchlist databases. Data processed for these purposes is governed by applicable financial crime prevention requirements.

6.5 Legal and Regulatory Authorities

gd999 will disclose personal data to law enforcement agencies, financial intelligence units, or regulatory authorities where required to do so by law, court order, or binding regulatory request. gd999 will notify affected players of such disclosures where legally permitted to do so.

7 Cookies and Tracking Technologies

gd999 uses cookies and similar technologies on gd999.io to ensure the platform functions correctly, to maintain session security, and to understand how players use the site so we can improve it.

7.1 Types of Cookies Used

• Essential Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in, CSRF protection tokens, and cookies used to remember your language and region preferences. These cannot be disabled without impairing platform functionality.
• Performance and Analytics Cookies: Used to collect anonymised data about how players navigate gd999.io, which pages are visited most frequently, and where technical errors occur. This data helps gd999 improve platform performance and user experience.
• Fraud Detection Cookies: Used to identify unusual session patterns, detect automated bots, and flag potential account takeover attempts. These cookies are a security feature and cannot be disabled.
• Preference Cookies: Used to remember your interface settings across sessions, such as your preferred sports category or casino game filter. These are convenience features and do not affect core functionality if disabled.

7.2 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies will prevent you from logging in to your gd999 account or using core platform features. Browser-level cookie management instructions are available in the help section of all major mobile and desktop browsers used in Bangladesh, including Chrome, Firefox, Samsung Internet, and Opera Mini.

8 Data Retention

gd999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by law. The following retention guidelines apply:

• Active account data: Retained for the full duration of the Player's account and for a minimum of 5 years following account closure, in line with anti-money laundering record-keeping obligations.
• KYC and identity documents: Retained for a minimum of 5 years from the date of submission, or longer if required by applicable financial crime regulations.
• Transaction records: Retained for a minimum of 7 years to satisfy financial record-keeping requirements.
• Customer support records: Retained for 3 years from the date of the last interaction, unless the correspondence relates to an unresolved dispute, in which case it is retained until the dispute is fully resolved.
• Technical and session data: Retained for up to 12 months for security and fraud detection purposes, after which it is aggregated and anonymised.
• Marketing preference records: Retained for the lifetime of the account or until consent is withdrawn and confirmed, whichever is earlier.

When data is no longer required, gd999 securely deletes or irreversibly anonymises it. We do not retain data in identifiable form beyond the periods outlined above.

9 Your Privacy Rights

Players have the following rights in relation to their personal data held by gd999. These rights may be exercised at any time by contacting [email protected] with the subject line "Privacy Rights Request".

9.1 Right to Access

You may request a copy of all personal data gd999 holds about you. We will respond to access requests within 30 days and will provide the data in a structured, readable format.

9.2 Right to Correction

If you believe any personal data we hold is inaccurate or incomplete, you have the right to request that we correct or update it. Please include the specific data you believe to be inaccurate and provide supporting evidence where possible.

9.3 Right to Erasure

In certain circumstances you may request that gd999 delete your personal data. This right is subject to limitations — for example, gd999 cannot delete data that we are legally required to retain under anti-money laundering or financial record-keeping regulations. Where erasure is possible, we will confirm completion within 30 days.

9.4 Right to Restrict Processing

You may request that gd999 restricts how your personal data is used while a correction or objection request is being assessed. During a restriction period, gd999 will store your data but limit active processing to security and legal compliance only.

9.5 Right to Object

Where processing is based on legitimate interests (such as analytics or marketing), you have the right to object to that processing. Upon receipt of a valid objection, gd999 will cease processing for that purpose unless we can demonstrate compelling legitimate grounds that override your interests.

9.6 Right to Withdraw Consent

Where gd999 processes your data on the basis of your consent — such as sending promotional notifications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

10 Security Measures

gd999 maintains a range of technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. Key measures in place include:

• TLS/SSL encryption on all data in transit between the player's device and gd999 servers
• One-way password hashing using industry-standard cryptographic algorithms — stored passwords cannot be reversed or read by staff
• Access controls ensuring only authorised personnel with a documented business need can access specific categories of personal data
• Session timeout mechanisms that automatically log out inactive accounts to reduce the risk of unauthorised session access
• IP monitoring and anomaly detection to flag and investigate unusual login patterns, multi-account activity, or payment method mismatches
• Segregated storage of KYC document data from transactional and game-play data, reducing exposure in the event of a partial breach
• Regular internal security reviews covering infrastructure, access policies, and data handling procedures

While gd999 implements robust security measures, no online platform can guarantee absolute security. Players are responsible for maintaining the security of their own account credentials and should contact [email protected] immediately if they suspect unauthorised account activity.

11 Third-Party Services and Links

The gd999 platform integrates with third-party services to deliver game content, process payments, and support platform operations. These third parties include game studios (Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Spribe), payment processors (bKash, Nagad, Rocket, Upay), and operational technology providers.

Each of these third-party services operates under its own privacy policy and is subject to a data processing agreement with gd999 that sets minimum standards for how player data may be handled. gd999 does not accept liability for privacy practices of third parties beyond the contractual obligations imposed on them by gd999.

gd999.io does not contain links to external websites. Players who independently navigate away from gd999.io to third-party websites do so at their own discretion, and gd999's privacy policy does not apply to those external sites.

12 Minors and Age Restriction

gd999 is strictly an adults-only platform. Players must be aged 21 years or older to register and use the platform. gd999 does not knowingly collect personal data from individuals under the age of 21.

If gd999 becomes aware that personal data has been collected from a person under 21 — whether through a fraudulent registration or any other means — all data associated with that individual will be deleted as promptly as possible, the account will be permanently closed, and any deposits or winnings held in that account will be forfeited in accordance with the Terms and Conditions.

Parents and guardians who believe a minor has registered on gd999 should contact [email protected] immediately with supporting information so that the account can be investigated and closed without delay.

13 Changes to This Privacy Policy

gd999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or platform services. Material changes to the policy will be communicated to registered players via a notice on gd999.io and, where practicable, via the contact details registered on the player's account, at least 7 days before the change takes effect.

The revised policy will state the effective date at the top of the document. Continued use of the gd999 platform after the effective date of a revised policy constitutes acceptance of the updated terms. If you do not agree to the revised policy, you should cease using the platform and request account closure before the effective date.

The current version of the Privacy Policy is always available at gd999.io/privacy-policy. We recommend players review this page periodically, particularly after receiving any notification of a policy update.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to how gd999 handles your personal data, please contact our support team using the details below. All privacy-related enquiries are handled by our dedicated data handling team and will be treated with strict confidentiality.

• Email: [email protected]
• Subject line for privacy requests: "Privacy Rights Request"
• Response time: Acknowledgement within 2 business days; substantive response within 30 calendar days
• Support availability: 24 hours a day, 7 days a week, including Bangladeshi public holidays