gx999 Privacy Policy

1 Introduction

gx999 is an online casino and sports betting platform serving players across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. We are committed to handling the personal data of every player with transparency, integrity, and care. This Privacy Policy sets out our practices with respect to the collection, use, disclosure, and protection of personal information in connection with your use of gx999.io.

This Privacy Policy should be read alongside the gx999 Terms & Conditions, which govern your overall use of the platform. Defined terms used but not defined in this Privacy Policy have the meanings given to them in the Terms & Conditions. If you do not agree with the practices described in this Privacy Policy, you must not use gx999.

2 Personal Data We Collect

gx999 collects the following categories of personal data from players. We collect only what is strictly necessary for the purposes described in this policy.

Data Category	Specific Data Points
Registration Data	Full name, email address, date of birth, username, password (stored as a salted hash — never in plain text), preferred language, account creation date and time.
Identity Verification (KYC)	Government-issued National ID card or passport number, facial photograph or selfie (for liveness checks where applicable), proof of address documentation.
Financial Data	Deposit and withdrawal transaction records, payment channel identifiers (e.g., registered bKash or Nagad mobile number, bank account reference), transaction amounts in BDT, timestamps.
Technical Data	IP address, device type, operating system, browser type and version, screen resolution, session duration, referring URL, platform language and timezone settings.
Behavioural / Usage Data	Games played, bets placed, wagering amounts, win/loss records, bonus usage history, pages visited within gx999.io, click patterns, and session logs.
Communications Data	Contents of support chat conversations, emails sent to [email protected], feedback submitted through in-platform forms, and any documents you voluntarily attach to support requests.

3 How We Collect Personal Data

gx999 collects personal data through the following channels:

• Direct collection: Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion.
• Automated collection: Technical and behavioural data collected automatically through cookies, server logs, and platform analytics tools as you interact with gx999.io. See Clause 10 for full details on our cookie practices.
• Third-party collection: Data received from payment providers (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank) confirming transaction status; data received from identity verification partners during KYC checks; data received from game providers relating to game session activity for fraud-detection purposes.
• Inferred data: Behavioural profiles and risk scores derived by gx999's internal systems from your usage data, used solely for responsible gaming monitoring, fraud prevention, and personalisation of in-platform communications.

4 Purposes of Processing Your Data

gx999 processes your personal data for the following defined purposes only:

• Account management: Creating, maintaining, and securing your gx999 player account, including password recovery and two-factor authentication.
• Identity verification (KYC): Confirming that you are who you say you are, that you are at least 21 years of age, and that your payment credentials belong to you — as required to prevent fraud and underage gambling.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported channels in Bangladeshi Taka (BDT).
• Platform operations and customer support: Providing, maintaining, and improving the gx999 platform, resolving technical issues, and responding to your support enquiries.
• Responsible gaming: Monitoring wagering patterns to identify potentially problematic gambling behaviour and to enforce self-exclusion, deposit limits, and cooling-off periods that you have set.
• Fraud and security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, money laundering, collusion, and other prohibited activities as described in the Terms & Conditions.
• Legal and regulatory compliance: Retaining records as required by applicable anti-money laundering (AML) obligations and cooperating with lawful requests from competent authorities.
• Personalisation and marketing (with consent): Sending you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may withdraw this consent at any time.

5 Legal Basis for Processing

gx999 processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and gx999 (i.e., to operate your account, process payments, and deliver gaming services).
• Legal obligation: Processing required to comply with applicable laws and regulations, including identity verification, anti-money laundering record-keeping, and responding to lawful authority requests.
• Legitimate interests: Processing carried out for gx999's legitimate business interests — such as fraud prevention, platform security, and responsible gaming monitoring — where those interests are not overridden by your fundamental privacy rights.
• Consent: Processing for optional purposes such as promotional communications, where your express prior consent has been obtained. You may withdraw this consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

6 Sharing Your Personal Data

gx999 does not sell, rent, or trade your personal data to third parties. We share personal data only in the following limited circumstances, and only to the minimum extent necessary:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely to process your deposit and withdrawal transactions.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe, and other licensed studio providers — solely to facilitate game session delivery and fraud detection within games.
• Identity verification partners: Third-party KYC service providers who verify your government-issued ID documents. These providers are contractually bound to process your data only for identity verification and to delete it within defined retention windows.
• Technology infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers who process data on our behalf under strict data processing agreements.
• Legal and regulatory authorities: Where gx999 is required by law, court order, or regulatory mandate to disclose personal data to competent authorities. We will notify you of such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of gx999's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy commitments described in this policy.

7 International Data Transfers

Some of gx999's third-party service providers — particularly game studio providers such as Pragmatic Play, Evolution Gaming, and others — operate servers outside of Bangladesh. Where your personal data is transferred to a country that does not have data protection laws equivalent to those applicable in Bangladesh, gx999 ensures that appropriate contractual safeguards are in place, including standard data protection clauses in contracts with those providers, to protect your data to a standard at least equivalent to that described in this Privacy Policy.

By using gx999, you acknowledge and consent to the transfer of your personal data to the jurisdictions in which our service providers operate, subject to the safeguards described above.

8 Data Retention

gx999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Data Category	Retention Period
Account registration data	Duration of account plus 5 years after account closure, to meet AML record-keeping obligations.
KYC identity documents	5 years from the date of verification, or longer if required by applicable law.
Financial transaction records	7 years from the date of the transaction, in line with standard financial record-keeping requirements.
Technical / session logs	13 months from the date of collection, then anonymised or deleted.
Customer support records	3 years from the date of the last interaction, or longer where a dispute remains unresolved.
Marketing consent records	Until you withdraw consent, plus 2 years thereafter as proof of lawful processing.

When personal data is no longer required and no legal retention obligation applies, gx999 securely deletes or anonymises it so that it can no longer be linked to any individual player.

9 Security Measures

gx999 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Key security controls include:

• All data transmitted between your browser or device and gx999.io is encrypted in transit using TLS 1.3 with 256-bit AES encryption.
• Passwords are never stored in plain text. gx999 uses industry-standard salted hashing algorithms to store password credentials securely.
• KYC documents and sensitive financial records stored at rest are encrypted using AES-256 encryption on access-controlled storage infrastructure.
• Access to personal data within gx999's internal systems is restricted on a strict need-to-know basis and requires multi-factor authentication.
• gx999 operates continuous network monitoring and intrusion detection systems to identify and respond to security events in real time.
• Regular internal security reviews and vulnerability assessments are conducted to identify and remediate weaknesses in the platform's data protection posture.

Despite these measures, no internet-based platform can guarantee absolute security. In the unlikely event of a data security incident that affects your personal data, gx999 will notify you promptly in accordance with applicable legal requirements and will take immediate steps to contain and remediate the incident.

10 Cookies and Similar Technologies

gx999 uses cookies and similar browser-based technologies on gx999.io. Cookies are small text files placed on your device by your browser when you visit the platform. The following types of cookies are used:

Cookie Type	Purpose	Can Be Disabled?
Strictly Necessary	Maintain your login session, store session security tokens, remember your language preference, and enable core platform functionality. Without these cookies, gx999 cannot function.	No — these are essential.
Analytical / Performance	Collect anonymised data on how players navigate gx999.io — which pages are visited most, where players encounter errors, and how long sessions last. Used to improve platform performance and user experience.	Yes — via browser settings.
Functional	Remember optional preferences such as your last selected game category or display settings to personalise your experience on subsequent visits.	Yes — via browser settings.

gx999 does not use third-party advertising cookies, retargeting pixels, or cross-site tracking technologies of any kind. You can manage or delete cookies at any time through your browser's privacy or settings menu. Disabling strictly necessary cookies will prevent gx999 from functioning correctly.

11 Your Privacy Rights

As a gx999 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Rights Request — [your username]".

• Right of Access: You have the right to request a copy of all personal data gx999 holds about you, free of charge, within 30 days of your request.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data be corrected. You may update basic account details directly from your account dashboard.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to gx999's legal retention obligations (see Clause 8). Note that financial and KYC records are subject to mandatory retention periods that supersede erasure requests.
• Right to Restrict Processing: You have the right to request that gx999 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its use.
• Right to Data Portability: You have the right to receive a copy of the personal data you provided to gx999 in a structured, machine-readable format, where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time by contacting [email protected] or by unsubscribing from communications directly. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests where you believe your privacy rights outweigh gx999's interests in that processing.

12 Children's Privacy

gx999 is strictly an adult platform. Access is limited to individuals who are 21 years of age or older. gx999 does not knowingly collect personal data from any individual under the age of 21. If we become aware that a player account belongs to an individual under the age of 21, that account will be immediately suspended, any deposited funds will be returned net of bonuses, and all personal data associated with the account will be securely deleted in accordance with our KYC and AML obligations.

If you are a parent or guardian and believe that your child has registered an account on gx999.io, please contact us immediately at [email protected]. We will investigate and take appropriate action as quickly as possible.

13 Updates to This Privacy Policy

gx999 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, platform features, applicable law, or regulatory guidance. All updates become effective immediately upon publication on gx999.io. The effective date displayed at the top of this page will be updated to reflect the date of the most recent revision.

Where a change to this Privacy Policy is material — meaning it significantly affects how we use your data or reduces your privacy rights — gx999 will notify registered players via the email address associated with their account prior to the change taking effect. Your continued use of gx999 following the publication of any update constitutes your acceptance of the revised Privacy Policy.

14 Contact and Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data gx999 holds about you, please contact our data protection team using the details below. All communications must be in English to ensure accurate and timely handling.

gx999 support operates 24 hours a day, 7 days a week, including Bangladeshi public holidays. All privacy-related requests are handled by trained staff with access to our data protection procedures. We are committed to resolving your enquiry promptly, fairly, and in full compliance with the commitments made in this Privacy Policy.