gk99 Privacy Policy

1 Overview

This Privacy Policy ("Policy") is issued by gk99 ("we", "us", "our") and applies to all personal data collected from individuals ("you", "Player", "User") who access or use the gk99 platform at gk99.bar, including all casino games, sports betting markets, live dealer tables, account management functions, customer support channels, and marketing communications.

gk99 is committed to handling personal data with care, transparency, and respect. This Policy has been written in plain English so that every player in Bangladesh can understand exactly how their data is used — without needing a legal background to interpret it. We collect only the data that is necessary for the operation of our platform, the processing of your transactions, the verification of your identity, and the protection of your account security.

By registering for a gk99 account, logging in, or using any feature of the gk99 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside the gk99 Terms and Conditions, which govern your use of the platform as a whole.

2 Data We Collect

gk99 collects personal data across several categories. The table below summarises each category, specific data points within it, and the primary reason it is collected. Not all categories apply to every player — for example, financial data is only collected once a player initiates a deposit or withdrawal.

3 How We Collect Your Data

3.1 Directly From You

The majority of personal data held by gk99 is provided directly by you during the course of your interactions with the platform. This includes data submitted during the registration process (name, date of birth, email, mobile number), data provided when completing KYC verification (identity documents, address proof), data entered during payment transactions (mobile banking details, bank account information), and data provided when contacting gk99 customer support (support tickets, live chat transcripts, email correspondence).

3.2 Automatically Collected Data

When you access the gk99 platform, certain technical and usage data is collected automatically via standard web technologies. This includes your IP address and approximate geographic location, your device and browser information, pages visited and features used within the gk99 platform, session start and end times, and error logs generated during your session. This automatic collection is necessary for platform security, fraud prevention, and the delivery of a stable, high-quality experience.

3.3 From Third-Party Sources

gk99 may, in limited circumstances, receive personal data about you from third-party sources. This includes identity verification data returned by KYC service providers during the document verification process, fraud signals and risk scores provided by payment processing partners, and information from public databases used for anti-money laundering screening. Any data received from third-party sources is handled in accordance with this Privacy Policy and the terms agreed with those providers.

4 Purpose of Processing

gk99 processes personal data for the following specific purposes. We do not use your data for any purpose not described in this Policy without first obtaining your explicit consent.

• Account Management: To create, maintain, and manage your gk99 player account, including processing login credentials, storing account preferences, and delivering account-related notifications.
• Identity Verification and KYC: To verify your identity and age in compliance with our Know Your Customer obligations, and to confirm that you meet the minimum age requirement of 21 years.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, and card payment channels, and to maintain accurate transaction records.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, money laundering, and other prohibited activities on the gk99 platform.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling, to enforce deposit and loss limits set by players, and to process self-exclusion requests promptly.
• Customer Support: To respond to support enquiries, resolve disputes, process complaints, and maintain records of communications for quality assurance purposes.
• Platform Improvement: To analyse aggregated usage data in order to improve the design, functionality, game selection, and performance of the gk99 platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have provided explicit consent to receive such communications. You may withdraw marketing consent at any time.
• Legal and Regulatory Compliance: To fulfil obligations under applicable anti-money laundering, data protection, and financial regulation frameworks, and to respond to lawful requests from competent authorities.

5 Legal Basis for Processing

gk99 processes personal data on one or more of the following legal bases, depending on the specific processing activity in question:

• Contractual Necessity: Processing your identity data, contact data, and financial data is necessary to perform the contract between you and gk99 — namely, to operate your player account and to process your deposits and withdrawals.
• Legal Obligation: Processing for KYC verification, anti-money laundering screening, and record-keeping is required by applicable law. gk99 cannot fulfil these legal obligations without processing the relevant data.
• Legitimate Interests: Processing technical and usage data for fraud prevention, platform security, and responsible gaming monitoring is conducted on the basis of gk99's legitimate interests in maintaining a safe and fair platform for all players. These interests are balanced against your privacy rights.
• Consent: Processing your marketing preferences and sending you promotional communications is conducted solely on the basis of your freely given, specific, and informed consent. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.

6 Data Sharing

gk99 does not sell your personal data to third parties. We share personal data with external parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

6.1 Service Providers

gk99 works with a number of trusted third-party service providers who process personal data on our behalf in order to deliver the gk99 platform and its associated services. These include payment processors (bKash, Nagad, Rocket, Upay, bank partners, card networks), identity verification and KYC technology providers, cloud hosting and infrastructure providers, fraud detection and cybersecurity services, and customer support platform operators. All service providers are contractually bound to handle personal data in accordance with our instructions and in compliance with applicable data protection law.

6.2 Game Providers

The third-party game studios whose titles are available on gk99 — including Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, Spribe, and Ezugi — may receive limited technical data (such as a pseudonymised player identifier and session token) necessary to deliver and authenticate game sessions. These providers do not receive your full identity data and are prohibited from using any data received from gk99 for their own marketing or analytical purposes.

6.3 Legal and Regulatory Authorities

gk99 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent regulatory authorities where required to do so by law, court order, or in response to a lawful formal request. In such cases, gk99 will disclose only the minimum data necessary to comply with the specific legal requirement.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of gk99's business, personal data held about players may be transferred to the acquiring or surviving entity as part of that transaction. You will be notified of any such transfer and of any material change to data handling practices that may result from it, in advance of the transfer taking effect.

7 Data Retention

gk99 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal, regulatory, or contractual obligations. The following retention guidelines apply:

Once a retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised, aggregated data (such as platform-level statistics with no individual identifiers) may be retained indefinitely for analytical purposes.

8 Security Measures

gk99 employs a multi-layered security framework to protect personal data against unauthorised access, alteration, disclosure, or destruction. The key technical and organisational measures in place include:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser or mobile device and the gk99 platform is encrypted using current TLS protocols. Connections over unencrypted HTTP are automatically redirected to HTTPS.
• Encrypted Data Storage: Sensitive personal data fields, including identity document references and payment method identifiers, are encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data held in gk99's systems is strictly controlled on a role-based, need-to-know basis. All internal access events are logged and reviewed.
• Two-Factor Authentication: gk99 strongly recommends and supports SMS OTP two-factor authentication for all player accounts. Internal systems requiring access to personal data use mandatory multi-factor authentication for staff.
• Intrusion Detection and Monitoring: The gk99 infrastructure is monitored continuously for anomalous activity, intrusion attempts, and unusual data access patterns.
• Regular Security Assessments: gk99 conducts periodic security reviews of its platform infrastructure, including vulnerability assessments and penetration testing by qualified security professionals.
• Staff Training: All gk99 staff with access to personal data receive data protection and information security training as part of their onboarding and on an ongoing basis.

9 Your Rights

As a player whose personal data is processed by gk99, you hold the following rights in relation to that data. To exercise any of these rights, contact gk99 support at [email protected] with the subject line "Data Rights Request". gk99 will acknowledge your request within two (2) business days and fulfil it within thirty (30) calendar days.

Please note that some rights are subject to limitations. For example, gk99 cannot erase financial transaction records that must be retained under anti-money laundering law, even upon player request. In such cases, gk99 will clearly explain which data must be retained and why.

10 Cookies & Tracking Technologies

The gk99 platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. A cookie is a small text file stored on your device by your browser when you visit a website. gk99 uses the following categories of cookies:

You may manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the gk99 platform. gk99 does not use third-party advertising cookies or tracking pixels that collect data for external advertising networks.

11 Minors

The gk99 platform is strictly intended for adults aged 21 years and over. gk99 does not knowingly collect, process, or store personal data from any individual under the age of 21. If gk99 discovers or is informed that personal data has been collected from a person under 21, all associated data will be deleted immediately and the account will be permanently closed.

If you are a parent or guardian and believe that a minor in your care has registered with or provided personal data to gk99, please contact us immediately at [email protected] so that we can take prompt corrective action. Please include the registered email address or username in your report to help us locate and close the account as quickly as possible.

12 Third-Party Links

The gk99 platform may, on occasion, display references to third-party game studios, payment providers, or sporting organisations. If any such reference includes a hyperlink to an external website, please be aware that gk99 has no control over the privacy practices or content of those external sites. This Privacy Policy applies solely to data processed by gk99 at gk99.bar and does not extend to any third-party website you may navigate to from the gk99 platform.

gk99 recommends that you review the privacy policy of any third-party site you visit before providing personal data on that site. The inclusion of any reference to a third-party brand or service on the gk99 platform does not constitute an endorsement of that party's data handling practices.

13 Changes to This Policy

gk99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, platform functionality, or business operations. When material changes are made, we will notify registered players via email to the address on file, or by displaying a prominent notice on the gk99 platform upon next login, at least fourteen (14) days before the changes take effect.

The "Effective Date" shown at the top of this Policy and in the hero section above indicates when the current version entered into force. We encourage you to review this Policy periodically so that you remain informed about how gk99 handles your personal data. Your continued use of the gk99 platform after a revised Policy takes effect constitutes acceptance of the updated terms.

Previous versions of this Privacy Policy may be requested by contacting gk99 support. We maintain a version archive so that players can review the policy that was in effect at any given time during their account history.

14 Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or would like to raise a concern about how gk99 handles your personal data, please contact our support team using the details below. All data-related enquiries are handled with priority and confidentiality.