gn999 Privacy Policy

1. Introduction

This Privacy Policy is issued by gn999 (referred to throughout as "gn999", "we", "us", or "our") and applies to all personal data collected through the gn999 website at gn999.io, including all associated services such as casino games, sports betting, live dealer games, crash games, payment processing, and customer support interactions.

We are committed to handling your personal data with care, transparency, and respect. This policy sets out in clear terms what data we collect, why we collect it, how long we retain it, with whom we share it, and what rights you hold as a data subject. By registering a gn999 account or continuing to use the platform after this policy has been published, you acknowledge that you have read and understood its contents.

This Privacy Policy should be read alongside gn999's Terms & Conditions and Responsible Gaming Policy, both of which are available on this website and are incorporated by reference.

2. Data Controller

gn999 acts as the data controller in respect of all personal data collected through the gn999 platform. As data controller, gn999 determines the purposes and means by which your personal data is processed. If you have any questions about how your data is handled, or if you wish to exercise any of your rights described in this policy, you may contact the gn999 Data Privacy team via the support contact details provided in Section 15 of this policy.

3. Personal Data We Collect

gn999 collects the following categories of personal data from players and platform visitors. We only collect data that is necessary for the specific purpose identified:

3.1 Registration and Identity Data

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Residential address, including city and postcode
• Mobile phone number
• Email address
• Username chosen during registration

3.2 Identity Verification (KYC) Data

• Copy of government-issued photo identification (National Identity Card, passport, or equivalent)
• Proof of residential address (utility bill, bank statement, or equivalent issued within the last three months)
• Proof of payment method ownership (screenshot or statement confirming the player is the registered account holder of the payment method used)

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction history, including amounts, dates, and payment methods used (bKash, Nagad, Rocket, Upay)
• Account balance history
• Bonus credits, wagering activity, and promotion redemption records

3.4 Gaming Activity Data

• Game session records, including games played, bet amounts, win/loss outcomes, and session durations
• Sports betting selections and settlement records
• Responsible gaming settings configured by the player (deposit limits, session reminders, self-exclusion status)

3.5 Technical and Device Data

• IP address at the time of registration and each login
• Device type, operating system, and browser type
• Pages visited on the gn999 platform and navigation paths
• Session timestamps and duration
• Cookies and similar tracking data (see Section 8)

3.6 Communications Data

• Records of live chat, email, and any other written communications between you and the gn999 support team
• Dispute and complaint records
• Promotional communication preferences (opt-in or opt-out status)

4. How We Collect Your Data

gn999 collects personal data through the following channels:

• Directly from you — when you register a gn999 account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account settings.
• Automatically — through your use of the gn999 platform, via cookies, server logs, and session tracking technologies that record technical and behavioural data as described in Section 3.5.
• From payment providers — when you initiate a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, the relevant payment provider may transmit transactional confirmation data to gn999 to complete the transaction.
• From identity verification services — where gn999 uses a third-party KYC verification service to assist in validating the identity documents you submit, that service provider may return verification results to gn999.
• From fraud prevention services — gn999 may receive risk signals or flagging data from fraud detection partners to assist in identifying potentially fraudulent account activity.

5. How We Use Your Personal Data

gn999 uses your personal data for the following purposes:

Purpose	Data Used
Creating and managing your gn999 account	Registration and identity data
Verifying your age (21+ requirement) and identity (KYC)	Identity verification data, date of birth
Processing deposits and withdrawals	Financial and transaction data, payment method data
Providing and improving casino and sports betting services	Gaming activity data, technical data
Detecting and preventing fraud, money laundering, and bonus abuse	All categories, including IP address and device data
Delivering responsible gaming tools and monitoring for problem gambling indicators	Gaming activity data, responsible gaming settings
Responding to customer support queries and resolving disputes	Communications data, account history
Sending promotional communications (where you have opted in)	Email address, communication preferences
Complying with applicable legal and regulatory obligations	All categories as required by law

6. Legal Basis for Processing

gn999 processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual necessity: Processing is necessary to perform the contract between you and gn999 — i.e., to provide the casino and sports betting services you have registered to use.
• Legal obligation: Processing is necessary to comply with applicable legal requirements, including anti-money laundering obligations, age verification requirements, and record-keeping obligations.
• Legitimate interests: Processing is necessary for gn999's legitimate interests, including fraud prevention, platform security, and responsible gaming monitoring, provided those interests are not overridden by your rights and interests.
• Consent: Where gn999 relies on your consent as a legal basis — for example, to send you promotional communications — you may withdraw that consent at any time by contacting the gn999 support team or adjusting your account communication preferences.

7. Sharing Your Personal Data

7.1 When We Share Data

gn999 does not sell or rent your personal data to third parties. We may share your personal data with the following categories of recipients only where necessary and in accordance with this policy:

• Payment providers (bKash, Nagad, Rocket, Upay) — to process your deposit and withdrawal transactions.
• KYC and identity verification service providers — to assist in verifying the identity documents you submit during the account verification process.
• Fraud prevention and security service providers — to assist in detecting and preventing fraudulent activity on the gn999 platform.
• Game software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) — to the extent necessary to deliver the games you play; these providers operate under strict data processing agreements with gn999.
• IT infrastructure and cloud hosting providers — who store and process platform data on gn999's behalf, under strict confidentiality and data security obligations.
• Legal and regulatory authorities — where gn999 is required to disclose data by applicable law, court order, or a competent regulatory or law enforcement authority.

7.2 International Data Transfers

Some of the third-party service providers used by gn999 may be located outside Bangladesh and may process data in other jurisdictions. Where such transfers occur, gn999 takes appropriate steps to ensure your data is handled with an equivalent level of protection to that described in this policy, including through the use of contractual safeguards with the relevant service providers.

8. Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device when you visit the gn999 platform. They allow the platform to recognise your device, maintain your session, remember your preferences, and collect analytical information about how the platform is used. gn999 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the platform to function correctly. These include session cookies that keep you logged in during a visit. They cannot be disabled without affecting core platform functionality.
• Functional cookies: Remember your preferences, such as language settings or responsible gaming configurations, to provide a more personalised experience on return visits.
• Analytical cookies: Collect anonymised or pseudonymised data about how players navigate and interact with the gn999 platform. This data helps gn999 identify usability issues and improve the platform over time.
• Security cookies: Used to detect and prevent fraudulent activity, including identifying unusual login patterns and device fingerprinting for fraud prevention purposes.

8.2 Managing Cookies

You may control cookie settings through your browser preferences. Most modern browsers allow you to block or delete cookies. Please note that blocking strictly necessary cookies may prevent certain features of the gn999 platform from operating correctly, including the ability to maintain a login session.

9. Data Security

gn999 implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the gn999 platform.
• Encrypted storage of sensitive data fields, including passwords (stored as salted cryptographic hashes) and payment-related information.
• Access controls restricting access to personal data to authorised gn999 personnel and service providers who require access to perform their functions.
• Regular security assessments of the gn999 platform infrastructure and codebase to identify and remediate vulnerabilities.
• Incident response procedures in place to respond promptly to any suspected data breach and to notify affected players as required by applicable law.

While gn999 takes all reasonable measures to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and for notifying gn999 support promptly if you suspect any unauthorised access to your account.

10. Data Retention

gn999 retains personal data for the periods set out below, or for longer if required by applicable law:

• Account and identity data: Retained for the duration of your account and for a minimum of five years following permanent account closure, to comply with anti-money laundering and record-keeping obligations.
• Financial and transaction data: Retained for a minimum of five years from the date of each transaction.
• Gaming activity data: Retained for a minimum of three years from the date of each session or wager.
• KYC verification documents: Retained for a minimum of five years following the completion of the verification process or account closure, whichever is later.
• Customer support communications: Retained for a minimum of two years from the date of the most recent communication in each support thread.
• Technical and device data: Retained for up to 12 months from collection, except where retained longer for fraud prevention or legal compliance purposes.

When personal data is no longer required and the applicable retention period has expired, gn999 will securely delete or irreversibly anonymise the data so that it can no longer be associated with any individual.

11. Your Data Rights

As a player whose personal data is processed by gn999, you hold the following rights in relation to your data. To exercise any of these rights, please contact the gn999 support team using the details in Section 15:

• Right of access: You have the right to request a copy of the personal data gn999 holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by gn999 be corrected or updated.
• Right to erasure: You may request that gn999 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to gn999's legal obligations to retain certain data for defined periods (see Section 10).
• Right to restrict processing: You may request that gn999 restrict the processing of your personal data in certain circumstances, for example while a correction request is being assessed.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that gn999 provide your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where gn999 relies on your consent as the legal basis for a specific processing activity (such as sending marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to gn999's processing of your personal data where that processing is based on legitimate interests, including profiling for fraud prevention purposes, subject to gn999 demonstrating compelling legitimate grounds that override your interests.

gn999 will respond to all data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, this period may be extended by a further 30 days, and gn999 will notify you of any such extension within the initial 30-day period.

12. Children and Minors

The gn999 platform is strictly for individuals aged 21 years and above. gn999 does not knowingly collect personal data from any person under the age of 21. If gn999 discovers or is notified that an account has been registered by or on behalf of a person under 21, that account will be immediately and permanently closed, all personal data associated with the account will be deleted except where retention is required by law, and the matter may be referred to the relevant authorities.

If you are the parent or guardian of a minor and you believe that the minor has accessed or registered on the gn999 platform, please contact our support team immediately using the contact details in Section 15.

13. Third-Party Links

The gn999 platform may contain references to the names and services of third-party payment providers, game studios, and sports organisations for informational purposes. gn999 does not include outbound hyperlinks to third-party websites within its core platform pages. In the event that any such links are present in a specific context, gn999 is not responsible for the privacy practices of those external sites. Each third-party site operates under its own privacy policy, and you should review those policies independently before providing any personal data to third parties.

14. Changes to This Privacy Policy

gn999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. When material changes are made, gn999 will publish the updated policy on this page with a revised "Last Updated" date at the top of the document. For significant changes that materially affect how we use your data, gn999 may also notify registered players directly via the email address associated with their account.

Your continued use of the gn999 platform following the publication of any updated Privacy Policy constitutes your acknowledgment and acceptance of the revised terms. If you do not agree with any changes, you should cease using the platform and may request account closure in accordance with gn999's Terms & Conditions.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way gn999 handles your personal data, please contact the gn999 Privacy and Support team. All privacy-related enquiries are handled in English and are responded to within 24 hours during normal operating hours (Bangladesh Standard Time, UTC+6).