gf999 Privacy Policy — How We Collect, Use, and Protect Your Data

1. Introduction

gf999 ("gf999", "we", "us", "our") operates the online betting and casino platform accessible at https://gf999.io. This Privacy Policy describes how gf999 collects, processes, stores, and protects the personal data of individuals ("Player", "User", "you") who access or use our platform, with particular reference to players based in Bangladesh.

We are committed to handling your personal data with integrity, transparency, and in a manner consistent with our obligations under applicable data protection principles. This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

This policy applies to all personal data collected through the gf999 website, mobile-optimised site, customer support channels, and any other service offered under the gf999 brand. It does not apply to third-party websites or services that may be linked from our platform — those entities operate under their own privacy policies for which gf999 bears no responsibility.

2. Data Controller

For the purposes of this Privacy Policy, gf999 acts as the data controller with respect to the personal data of its registered players. As data controller, gf999 determines the purposes for which personal data is collected and the means by which it is processed. All data protection enquiries should be directed to our support team using the contact details set out in Section 14 of this policy.

3. Information We Collect

3.1 Registration and Identity Data

When you create a gf999 account, we collect the following information: full legal name, date of birth, residential address (including city — for example, Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or Barisal), email address, and mobile phone number. This information is required to create your account and cannot be omitted.

3.2 Identity Verification Data

To comply with age verification and anti-money-laundering obligations, gf999 may collect copies of government-issued identification documents, including your National Identity Card (NID), passport, or driver's licence. We may also collect proof of address documents such as utility bills or bank statements dated within the last three months.

3.3 Financial and Transaction Data

gf999 collects data relating to deposits, withdrawals, and betting activity. This includes payment method details (such as your bKash, Nagad, Rocket, or Upay mobile wallet identifiers, or bank account references), transaction amounts, transaction timestamps, and transaction reference numbers. Full payment card numbers are never stored on gf999 servers — card processing is handled by certified third-party payment processors.

3.4 Gameplay and Betting Data

We collect records of all bets placed, games played, bonus offers accepted, and wagering activity on the gf999 platform. This data is used for account management, dispute resolution, responsible gaming monitoring, and fraud prevention purposes.

3.5 Technical and Device Data

When you access gf999, our systems automatically collect certain technical data, including your IP address, device type, operating system, browser type and version, screen resolution, session duration, pages visited, and referring URL. This data helps us optimise the platform experience and identify suspicious access patterns.

3.6 Communications Data

We retain records of communications between you and gf999, including live chat transcripts, support emails, and any feedback or complaints you submit. These records are kept for quality assurance, dispute resolution, and legal compliance purposes.

4. How We Collect Your Data

gf999 collects personal data through the following channels:

• Direct collection: Information you provide when registering, completing your profile, verifying your identity, making deposits or withdrawals, contacting support, or participating in promotions
• Automated collection: Technical data collected automatically when you access the gf999 platform via cookies, web beacons, server logs, and similar tracking technologies (see Section 8)
• Third-party sources: Identity and fraud-verification data received from third-party verification service providers engaged by gf999 to assist with Know Your Customer (KYC) compliance checks
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other integrated payment partners to verify deposit and withdrawal status

5. How We Use Your Data

gf999 uses your personal data for the following purposes:

Purpose	Data Used
Account registration and management	Name, date of birth, email, mobile number, address
Identity and age verification (KYC)	Government ID documents, proof of address
Processing deposits and withdrawals	Payment method identifiers, transaction data
Delivering betting and gaming services	Gameplay data, bet records, account balance
Fraud prevention and security monitoring	IP address, device data, transaction patterns
Responsible gaming monitoring	Betting frequency, deposit amounts, session data
Customer support and dispute resolution	Communications data, account history
Promotional communications (opt-in only)	Email address, mobile number, game preferences
Platform analytics and improvement	Technical data, anonymised usage statistics
Legal and regulatory compliance	All categories as required by applicable law

6. Legal Basis for Processing

gf999 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our contractual obligations to you under the Terms & Conditions, including account management, payment processing, and delivery of gaming services
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money-laundering obligations, age verification requirements, and tax record-keeping
• Legitimate interests: Processing carried out in pursuit of gf999's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where these interests are not overridden by your fundamental rights
• Consent: Processing based on your freely given consent, including the sending of marketing communications — you may withdraw this consent at any time without affecting the lawfulness of prior processing

7. Sharing Your Personal Data

7.1 Service Providers

gf999 shares personal data with carefully selected third-party service providers who assist us in operating the platform. These include payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard), identity verification providers, game software suppliers (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi), cloud hosting providers, and customer support software vendors. All service providers are contractually bound to process data only on gf999's instructions and to maintain appropriate security standards.

7.2 Legal and Regulatory Disclosure

gf999 may disclose personal data to law enforcement agencies, regulatory authorities, or other public bodies where we are legally required to do so, or where disclosure is necessary to prevent fraud, money laundering, or other criminal activity. Such disclosures will be made only to the extent required by applicable legal obligation.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of gf999's business assets, personal data held by gf999 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and any material change to how their data is processed as a result.

7.4 No Sale of Data

gf999 does not sell, rent, or otherwise transfer personal data to unaffiliated third parties for their own marketing or commercial purposes. Any sharing of data is limited to the categories described in this Section 7.

8. Cookies and Tracking Technologies

gf999 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you visit gf999. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the platform to function correctly, including maintaining your logged-in session and storing your language and currency preferences. These cannot be disabled.
• Analytical cookies: Used to collect anonymous statistical information about how players use the gf999 platform, helping us identify areas for improvement. These are activated only with your consent.
• Functional cookies: Used to remember your preferences and personalise your experience, such as recalling your preferred game lobby view or recently played games.
• Security cookies: Used to detect and prevent fraudulent login attempts, protect against cross-site request forgery, and maintain platform integrity.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the gf999 platform.

9. Data Retention

gf999 retains personal data for the following periods, after which data is securely deleted or irreversibly anonymised:

• Account and identity data: Retained for the duration of the account relationship and for a period of five (5) years following permanent account closure, in line with standard financial record-keeping obligations
• Transaction and financial data: Retained for a minimum of seven (7) years from the date of each transaction to satisfy applicable accounting and anti-money-laundering record-keeping requirements
• Communications and support records: Retained for three (3) years from the date of the communication, unless the record relates to an ongoing dispute or legal matter, in which case it is retained until resolution
• Technical and device data: Retained for up to twelve (12) months from collection, after which it is aggregated and anonymised
• Marketing consent records: Retained for the duration of the marketing relationship and for two (2) years after consent is withdrawn, as evidence of prior consent

10. Your Data Rights

As a gf999 player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team using the contact details in Section 14. We will respond to all valid requests within 30 days:

• Right of access: You have the right to request a copy of the personal data gf999 holds about you and to receive information about how it is being used
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to any overriding legal retention obligations
• Right to restrict processing: You have the right to request that we limit the processing of your personal data in certain circumstances, for example while a rectification request is being assessed
• Right to object: You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis, and to object at any time to processing for direct marketing purposes
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal

11. Data Security

gf999 employs a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and gf999 servers
• Secure, access-controlled data storage infrastructure with regular security auditing
• Role-based access controls ensuring that only authorised personnel can access sensitive player data
• Regular penetration testing and vulnerability assessments of the gf999 platform
• Comprehensive staff training on data protection obligations and security best practices
• Incident response procedures to detect, contain, and report any personal data breaches in a timely manner

While gf999 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You also have a responsibility to keep your gf999 login credentials confidential and to notify us immediately if you suspect any unauthorised access to your account.

12. Children and Minors

gf999 services are strictly intended for adults aged 21 years and above. gf999 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered a gf999 account, please contact our support team immediately.

gf999 employs age verification procedures during the registration process and may request supporting identity documents at any point to confirm that a player meets the minimum age requirement. Any account found to belong to a player under 21 will be permanently closed and all associated balances will be forfeited in accordance with our Terms & Conditions.

13. Changes to This Privacy Policy

gf999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify registered players by email or by displaying a prominent notice on the gf999 platform. The revised policy will display an updated "Last Updated" date at the top of this page.

Your continued use of the gf999 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should cease using gf999 services and may request account closure by contacting our support team.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way gf999 handles your personal data, please contact our support team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the gf999 platform after logging in
• Email: [email protected] (plain text — not a clickable link)
• Response Time: Live chat within 2 minutes; email within 24 hours
• Operating Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)

All privacy-related requests will be handled with strict confidentiality by our data protection team. We aim to acknowledge all requests within 5 business days and to resolve them fully within 30 calendar days. Where a request is particularly complex or involves a large volume of data, we may extend this period by a further 30 days and will notify you accordingly.