Privacy Policy — How gn999 Protects Your Data
At gn999, your privacy is not an afterthought — it is a foundational commitment. This Privacy Policy explains exactly what personal information we collect from Bangladesh players, how we use it, who we may share it with, and the rights you hold over your own data. We encourage you to read it in full.
Six Privacy Principles We Live By
These six principles summarise gn999's approach to data protection. Full legal details are provided in each numbered section below.
Lawful Collection
gn999 collects personal data only on a lawful basis — primarily to perform our contract with you as a registered player, to comply with legal and regulatory obligations, and to pursue our legitimate business interests where these do not override your rights.
Data Minimisation
We collect only the data that is genuinely necessary for the stated purpose. We do not gather, store, or process personal information beyond what is required to operate your gn999 account safely, process payments, and comply with applicable obligations.
Secure Storage
All personal data held by gn999 is stored on encrypted, access-controlled servers. We employ SSL/TLS encryption for all data in transit, and strict internal access controls ensure that only authorised personnel can view sensitive account information.
Your Control
You retain meaningful rights over your personal data at all times. You may access, correct, or request deletion of your data, withdraw consent for marketing communications, and request a portable copy of your information by contacting our support team.
No Unauthorised Sharing
gn999 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Data is shared only with trusted service providers operating under strict confidentiality obligations, or where required by law.
Limited Retention
We keep your personal data only for as long as is necessary for the original purpose of collection, or as required by applicable legal, regulatory, tax, or anti-money laundering retention obligations. Data no longer required is securely deleted or anonymised.
Information We Collect
When you register for a gn999 account, make a deposit, place a bet, or interact with any feature of the gn999 platform, we may collect and process the following categories of personal information about you:
Identity & Contact Data
This includes your full legal name, date of birth, gender, nationality, residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or elsewhere in Bangladesh), mobile phone number, and email address. This information is collected at the point of registration and is used to verify your identity, maintain your account, and communicate with you.
Financial & Payment Data
We collect data relating to payment transactions you conduct on gn999, including your bKash account number, Nagad account number, Rocket mobile wallet number, Upay account details, or bank account information (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, or other Bangladesh-based institutions). We also record transaction reference numbers, deposit and withdrawal amounts in BDT, timestamps, and payment method types. We do not store your full card number or mobile PIN — payment processing is handled by our payment partners under their own security standards.
Account Activity Data
We record your gaming and betting activity on gn999, including the games you play, the sports markets you bet on, bet amounts, wager outcomes, session duration, login timestamps, and platform navigation history. This data is used for account management, responsible gaming monitoring, fraud detection, and to improve the player experience.
Technical & Device Data
When you access gn999 via a web browser or mobile device, we automatically collect certain technical data including your IP address, device type and model, operating system, browser type and version, screen resolution, preferred language settings, and referring URL. This data helps us maintain platform security, detect unauthorised access, and optimise the gn999 experience across different devices commonly used in Bangladesh.
Identity Verification Documents
As part of our Know Your Customer (KYC) process, we may collect copies of government-issued identification documents (such as your Bangladesh National ID card, passport, or driving licence), proof of address documents, and proof of payment method ownership. These documents are processed for identity verification and anti-money laundering compliance purposes only.
Communications Data
We retain records of communications between you and the gn999 support team, including live chat transcripts, email correspondence, and support ticket content. These records are kept for quality assurance, dispute resolution, and our legitimate interests in maintaining an accurate account history.
How We Use Your Data
gn999 processes your personal data for a range of clearly defined purposes. In each case, we rely on a recognised lawful basis for processing. The table below summarises the key purposes and the corresponding lawful basis.
| Purpose | Lawful Basis |
|---|---|
| Creating and managing your gn999 account | Performance of contract |
| Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer | Performance of contract |
| Verifying your identity and age (18+) at registration and during KYC | Legal obligation / Performance of contract |
| Detecting and preventing fraud, money laundering, and account abuse | Legal obligation / Legitimate interests |
| Responsible gaming monitoring, including detection of problem gambling indicators | Legal obligation / Legitimate interests |
| Sending transactional communications (deposit confirmations, withdrawal notifications, KYC requests) | Performance of contract |
| Sending promotional communications, bonus offers, and seasonal campaigns | Consent (opt-in); Legitimate interests where existing player relationship exists |
| Personalising your experience on the gn999 platform | Legitimate interests / Consent |
| Analysing platform usage to improve gn999's products and services | Legitimate interests |
| Resolving disputes and responding to player complaints | Performance of contract / Legal obligation |
| Compliance with applicable legal, regulatory, and tax obligations | Legal obligation |
Marketing Communications
Where you have provided consent, gn999 may send you promotional emails, SMS notifications, or in-platform messages regarding bonuses, new game launches, cricket betting promotions (BPL, IPL, T20 World Cup), and seasonal campaigns. You may withdraw your consent to marketing communications at any time by contacting the support team at [email protected] or by updating your communication preferences within your account settings. Withdrawal of consent does not affect the lawfulness of processing that took place prior to your withdrawal.
Automated Decision-Making
gn999 uses automated risk-scoring and fraud detection systems that may make automated decisions affecting your account — for example, flagging a withdrawal for additional review, or temporarily restricting account access pending investigation. Where a fully automated decision has a significant effect on you, you have the right to request human review of that decision by contacting [email protected].
Data Sharing & Third Parties
gn999 does not sell your personal data to any third party. We do not share your personal information with advertisers, data brokers, or unaffiliated companies for their own commercial purposes. However, we do work with a number of trusted third-party service providers and partners who process data on our behalf, strictly in accordance with our instructions and under binding confidentiality agreements.
Payment Processing Partners
To process your deposits and withdrawals, gn999 shares your relevant payment details and transaction information with licensed payment service providers operating in Bangladesh. These include mobile financial service operators (bKash, Nagad, Rocket, Upay) and banking partners. These providers access only the data necessary to complete the specific transaction and are contractually prohibited from using it for any other purpose.
Game Software Providers
The casino games available on gn999 are supplied by internationally recognised game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game supplied by a third-party provider, certain technical session data (such as a session token, game result, and bet amount) is transmitted to the provider's systems to enable gameplay and ensure accurate settlement. These providers do not receive your name, payment details, or contact information.
Identity Verification & KYC Providers
gn999 may use third-party identity verification and KYC service providers to assist with the verification of documents submitted by players. These providers process your identification data under strict data processing agreements and are obligated to maintain the confidentiality and security of the information processed.
Analytics & Platform Optimisation
We use privacy-respecting analytics tools to understand how players interact with the gn999 platform. Where such tools involve the processing of personal data (for example, pseudonymised user identifiers or aggregated behavioural data), they are implemented under appropriate data processing agreements. Raw personal data is not shared with analytics providers.
Legal Disclosure
gn999 may be required to disclose your personal data to law enforcement authorities, courts, regulatory bodies, or other government agencies where we are legally obliged to do so — for example, in response to a valid court order, a lawful request from a financial intelligence unit, or as part of a regulatory investigation into suspected money laundering or fraud. In all such cases, gn999 will disclose only the minimum data necessary to satisfy the legal obligation.
Business Transfers
In the event that gn999 undergoes a merger, acquisition, or sale of all or a substantial part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, gn999 will notify affected players via their registered email address and will ensure that the acquiring entity is bound by privacy obligations no less stringent than those set out in this Policy.
Data Security & Storage
gn999 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure.
Technical Security Measures
- SSL/TLS Encryption: All data transmitted between your device and gn999's servers is protected by industry-standard SSL/TLS encryption, ensuring that your personal and financial information cannot be intercepted in transit.
- Encrypted Data Storage: Sensitive personal data, including identity documents and payment details, is stored in encrypted form within access-controlled server environments.
- Firewalls & Intrusion Detection: gn999's infrastructure is protected by enterprise-grade firewalls and continuous intrusion detection systems that monitor for unusual access patterns or potential security threats in real time.
- Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their gn999 accounts to add an additional layer of protection against unauthorised access.
- Penetration Testing: gn999's platform undergoes periodic security assessments and penetration testing by qualified information security professionals to identify and remediate vulnerabilities before they can be exploited.
Organisational Security Measures
- Access to personal data is restricted to gn999 personnel who have a genuine operational need to process that data. Access rights are reviewed regularly and revoked when no longer required.
- All gn999 staff and contractors who handle personal data are subject to strict confidentiality obligations and receive regular data protection training.
- Third-party service providers who process personal data on gn999's behalf are required to demonstrate adequate security standards and to operate under binding data processing agreements.
Data Breach Response
In the event of a personal data breach that poses a risk to your rights and freedoms, gn999 will notify affected players without undue delay via their registered email address. Our incident response team operates 24 hours a day to detect, contain, and assess the impact of any security incident. We are committed to transparency in the rare event that a breach occurs.
Your Role in Security
While gn999 implements robust technical and organisational security measures, the security of your account also depends on your own actions. You are responsible for maintaining the confidentiality of your account credentials, for using a strong and unique password, and for logging out of your gn999 account when accessing the platform from a shared device. gn999 will never contact you to request your password via any channel.
Your Privacy Rights
As a gn999 player, you hold a number of rights in relation to the personal data we hold about you. We are committed to facilitating the exercise of these rights promptly and transparently. The following rights are available to you:
- Right of Access: You have the right to request a copy of the personal data gn999 holds about you, along with information about how it is being used and with whom it has been shared. We will respond to access requests within 30 days of receipt.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Minor corrections (such as an updated mobile number or email address) can be made directly within your account settings.
- Right to Erasure: In certain circumstances, you have the right to request that gn999 delete the personal data we hold about you. This right is not absolute — we may be required to retain certain data to comply with legal obligations (for example, financial records required under anti-money laundering regulations). We will explain any limitations clearly when responding to your request.
- Right to Restrict Processing: You have the right to request that gn999 limit the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing based on legitimate interests.
- Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to have that data transferred directly to another service provider where technically feasible.
- Right to Object: You have the right to object to gn999 processing your personal data where the basis for processing is our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
- Right to Withdraw Consent: Where processing is based on your consent (for example, consent to receive marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.
- Rights Relating to Automated Decision-Making: Where a fully automated decision produces a significant effect on you, you have the right to request human review of that decision and to contest the outcome.
How to Exercise Your Rights
To exercise any of the rights described above, please submit a written request to gn999's support team at [email protected]. To protect your privacy, we will need to verify your identity before processing your request. We aim to respond to all rights requests within 30 calendar days. Where a request is complex or we are dealing with a high volume of requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.
Data Retention Policy
gn999 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data (name, date of birth, contact details) | Duration of account + 5 years after closure | Legal obligation (AML / KYC compliance) |
| KYC identity documents (national ID, passport, proof of address) | Duration of account + 5 years after closure | Legal obligation |
| Financial transaction records (deposits, withdrawals, bet history) | 7 years from date of transaction | Legal obligation (financial record-keeping) |
| Customer support communications | 3 years from date of last interaction | Legitimate interests (dispute resolution) |
| Marketing consent records | Until consent is withdrawn + 1 year | Legal obligation (consent management) |
| Technical and device data (IP logs, session logs) | 12 months from collection date | Legitimate interests (security, fraud prevention) |
| Analytics data (anonymised/aggregated) | 24 months (anonymised data may be retained indefinitely) | Legitimate interests (product improvement) |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is used, the resulting data no longer constitutes personal data and may be retained for statistical and analytical purposes without time limit.
Retention After Self-Exclusion or Account Closure
If you request self-exclusion or voluntary account closure, your account will be deactivated and you will no longer be able to access the platform. However, gn999 is required to retain certain personal data for the periods specified above, primarily to comply with anti-money laundering regulations and to protect against the fraudulent re-registration of previously excluded players. This retained data will not be used for any purpose other than compliance with these legal obligations.
Contact & Complaints
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have concerns about how gn999 has handled your personal data, please contact us using the details below. All privacy-related enquiries are handled by our dedicated data protection team and will be treated with strict confidentiality.
How to Contact Us
You can reach gn999's data protection team by emailing [email protected]. Please include your registered username, the nature of your enquiry, and any relevant reference numbers in your message. We aim to acknowledge all privacy enquiries within 2 business days and to provide a substantive response within 30 calendar days.
Changes to This Privacy Policy
gn999 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance. When we make material changes to this Policy, we will notify registered players via their registered email address and display a prominent notice on the gn999 platform for a minimum of 30 days before the changes take effect. The "Effective Date" at the top of this Policy will be updated to reflect the date on which the revised Policy comes into force.
We encourage you to review this Privacy Policy periodically to stay informed about how gn999 is protecting your personal data. Your continued use of the gn999 platform following the effective date of any updated Policy constitutes your acknowledgement of the revised terms.
Governing Language
This Privacy Policy is written in English, which is the governing language for all contractual and legal purposes. Where any translation is provided for convenience, the English text shall prevail in the event of any inconsistency or dispute.
Ready to Explore gn999?
Now that you understand how gn999 protects your data, dive into Bangladesh's most trusted online casino and sportsbook. From cricket betting to live casino and slots — your next game is waiting.