Privacy Policy — 999gk Online Casino

Privacy Policy Overview

This Privacy Policy ("Policy") describes how 999gk ("the Platform", "we", "us", "our") collects, processes, stores, shares, and protects the personal data of individuals ("you", "your", "the Player") who register an account on, visit, or interact with the 999gk platform accessible at https://999gk.io.

999gk operates as an international online gaming platform serving players in Bangladesh and other permitted jurisdictions. We are committed to handling your personal data with the highest standards of care, transparency, and security. This Policy is designed to give you a clear and complete understanding of our data practices so that you can make informed decisions about your use of the 999gk platform.

This Policy applies to all personal data collected through the 999gk website, mobile-optimised platform, customer support communications, and any other touchpoint through which you interact with 999gk. It applies to all registered players, prospective players who have begun but not completed registration, and anonymous visitors to the 999gk website.

By creating an account or continuing to use the 999gk platform, you confirm that you have read and accepted this Privacy Policy. This Policy should be read alongside the 999gk Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference.

Personal Data We Collect

999gk collects the following categories of personal data from players and platform visitors. The specific data points collected in each category depend on your level of interaction with the platform — for example, a visitor who does not register an account will have less data collected than a fully verified player who has made deposits and withdrawals.

2.1 Identity and Contact Data

• Full legal name (first name, last name)
• Date of birth (used for age verification — you must be 21 or older to use 999gk)
• Gender (optional, collected during registration)
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar) and country
• Email address
• Mobile phone number
• Username and encrypted password

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (National Identity Card, passport, or driving licence)
• Proof of residential address documents (utility bills, bank statements dated within 90 days)
• Selfie or liveness verification image (where required for enhanced KYC)
• Payment method ownership documentation (screenshots of bKash, Nagad, or bank account details)

2.3 Financial and Transaction Data

• Deposit and withdrawal transaction records including amounts, timestamps, and payment method references
• Payment method identifiers (bKash account number, Nagad account number, Rocket number, Upay reference, or bank account number — stored in truncated/masked format)
• Bonus and promotional credit transaction history
• Account balance history

2.4 Gameplay and Betting Data

• Game session records including game title, session start and end times, stakes, and outcomes
• Sports betting records including markets selected, odds, stake amounts, and settlement results
• Total wagering history used for responsible gaming monitoring and bonus wagering requirement tracking

2.5 Technical and Device Data

• IP address at time of registration and subsequent logins
• Device type (desktop, mobile, tablet), operating system, and browser type/version
• Unique device identifiers where applicable
• Session logs including login timestamps, logout timestamps, and session duration
• Pages visited on the 999gk platform and navigation path data

2.6 Communication Data

• Records of live chat support conversations
• Email correspondence with the 999gk support team
• Records of any formal complaints submitted to 999gk
• Survey responses and player feedback submissions

How We Collect Your Data

999gk collects personal data through the following channels and mechanisms:

3.1 Direct Collection

The majority of personal data we hold about you is provided directly by you during the course of your interaction with the 999gk platform. This includes data entered during account registration, KYC document uploads, deposit and withdrawal requests, bonus claim forms, and customer support communications.

3.2 Automated Collection

Certain technical and device data is collected automatically when you access the 999gk platform. This includes your IP address, browser type, device identifiers, session data, and page interaction logs. This data is collected through server logs, cookies, and similar technologies as described in Section 9 of this Policy.

3.3 Third-Party Sources

In specific circumstances, 999gk may receive data about you from third-party sources, including:

• KYC and identity verification service providers (used to verify documents submitted during the verification process)
• Payment processing partners (bKash, Nagad, Rocket, Upay, and Bangladeshi banking partners) — limited to transaction confirmation data only
• Fraud detection and anti-money laundering screening services — used to cross-reference account activity against known risk indicators
• Publicly available data sources — where necessary for legal compliance purposes

Purpose of Data Processing

999gk processes your personal data only for clearly defined and legitimate purposes. The table below summarises the main processing activities and their corresponding purposes:

999gk does not use your personal data for automated decision-making that produces significant legal effects without human oversight. If automated processing is used to flag an account for review (for example, in the context of fraud detection), a member of the 999gk compliance team will conduct a manual review before any material account action is taken.

Legal Basis for Processing

Every data processing activity conducted by 999gk rests on one of the following recognised legal bases:

• Contractual necessity: Processing required to fulfil our contractual obligations to you under the 999gk Terms & Conditions — for example, operating your account, processing deposits and withdrawals, and delivering gaming services.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and financial record-keeping obligations.
• Legitimate interests: Processing carried out for 999gk's legitimate business interests where those interests do not override your fundamental rights — for example, fraud detection, platform security, anonymised analytics, and customer support improvement.
• Consent: Processing based on your freely given, specific, and informed consent — for example, where you opt in to receive promotional communications from 999gk. You may withdraw this consent at any time by contacting [email protected].

Data Sharing

999gk does not sell, rent, or trade your personal data to any third party. We share your data only with the categories of trusted third parties listed below, and only to the extent strictly necessary for the purposes described in this Policy:

6.1 Payment Processing Partners

To process your deposits and withdrawals, 999gk shares necessary transaction data with our payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. Data shared is limited to what is required to complete and verify the transaction and is handled in accordance with each partner's own data protection obligations.

6.2 Identity Verification Providers

For KYC verification, 999gk works with specialist identity verification service providers. These providers process copies of your identity documents and return a verification result to 999gk. They are contractually bound to process your data only for this specific purpose and to maintain appropriate security standards.

6.3 Game Software Providers

Game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data necessary to deliver their games within the 999gk platform. These providers do not receive your name, contact details, or financial information.

6.4 Fraud Prevention and AML Services

To protect the integrity of the platform, 999gk shares relevant account activity data with fraud detection and anti-money laundering screening services. These services help us identify suspicious patterns and comply with applicable financial crime prevention obligations.

6.5 Legal and Regulatory Authorities

999gk may be required by law, court order, or regulatory authority to disclose your personal data to relevant governmental or law enforcement bodies. We will notify you of any such disclosure where we are legally permitted to do so. Where we are prohibited from notifying you, we will ensure the disclosure is limited to what is strictly required.

Data Retention

999gk retains your personal data for as long as your account remains active and for a defined period following account closure, as set out below. Retention periods are determined by the nature of the data and applicable legal requirements.

When the applicable retention period expires, 999gk will securely delete or irreversibly anonymise your personal data so that it can no longer be linked back to you. Anonymised, aggregated data (which cannot identify individual players) may be retained indefinitely for statistical analysis and platform improvement purposes.

Security Measures

999gk implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security: All data transmitted between your device and the 999gk platform is protected by TLS 1.2 or higher with 256-bit encryption. The 999gk platform enforces HTTPS exclusively — no unencrypted HTTP connections are permitted.
• Encrypted data at rest: Personal data and financial records stored on 999gk servers are encrypted using AES-256 encryption. Financial data is stored in isolated, encrypted vaults separate from general gameplay data.
• Access controls: Access to personal data within the 999gk organisation is strictly limited on a need-to-know basis. Role-based access permissions ensure that staff members can only access data relevant to their specific job function.
• Two-factor authentication: Internal 999gk systems that access personal data require two-factor authentication for all staff logins. Players are also offered optional two-factor authentication for their own 999gk accounts.
• Intrusion detection and monitoring: 999gk operates continuous monitoring of platform infrastructure for unusual activity, intrusion attempts, and data access anomalies, with automated alerting and incident response procedures.
• Regular security audits: The 999gk platform undergoes periodic third-party security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Staff training: All 999gk staff who handle personal data receive regular training on data protection obligations, security best practices, and incident response procedures.

While 999gk takes all reasonable and practicable steps to secure your personal data, no system connected to the internet can be guaranteed to be entirely free from security risk. In the event of a data breach that poses a significant risk to your rights and freedoms, 999gk will notify affected players and relevant authorities in accordance with applicable legal requirements.

Cookies & Similar Technologies

999gk uses cookies and similar technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. The following categories of cookies are used on the 999gk platform:

999gk does not use third-party advertising cookies, remarketing pixels, or cross-site tracking technologies. You can manage optional cookies through your browser settings. Disabling strictly necessary cookies will prevent the 999gk platform from functioning correctly and may result in your inability to access your account.

Your Data Rights

As a player on the 999gk platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request — [Your Username]".

• Right of Access: You have the right to request a copy of the personal data 999gk holds about you, along with information on how that data is processed. We will provide this within 30 days of a verified request .
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account information directly through your 999gk account settings, or contact support for data that cannot be self-corrected.
• Right to Erasure: You may request that 999gk delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing and there are no overriding legitimate grounds. Note that certain data must be retained to comply with legal obligations even after an erasure request.
• Right to Restriction: You may request that 999gk restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved, or where you have objected to processing and we are assessing whether our legitimate grounds override your rights.
• Right to Data Portability: You have the right to receive a copy of the personal data you provided to 999gk in a structured, commonly used, and machine-readable format, and to request that this data be transmitted directly to another service provider where technically feasible.
• Right to Object: You may object at any time to the processing of your personal data where 999gk relies on legitimate interests as the legal basis. You also have an unconditional right to object to processing of your data for direct marketing purposes, which will be honoured immediately upon receipt of your request.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before the withdrawal.

Protection of Minors

The 999gk platform is strictly intended for adults aged 21 years or older. 999gk does not knowingly collect personal data from individuals under the age of 21. All account registrations require the player to confirm that they are aged 21 or above, and identity verification procedures are applied to verify this declaration.

If 999gk becomes aware that a player account has been created by or on behalf of an individual under the age of 21, we will immediately suspend the account, reverse all transactions to the extent possible, securely delete all associated personal data, and report the matter to relevant authorities where required by law.

If you believe that a minor has registered on the 999gk platform or that your personal data has been collected in error, please contact our support team immediately at [email protected]. We take the protection of minors extremely seriously and will act swiftly on any credible report. For additional information on protecting minors from online gambling, please review our Responsible Gaming Policy.

International Data Transfers

As an international online gaming platform, 999gk may process and store your personal data on servers and systems located outside of Bangladesh. Where personal data is transferred to a country that does not provide a level of data protection equivalent to applicable international standards, 999gk ensures that appropriate safeguards are in place to protect your data, including:

• Standard contractual clauses incorporated into agreements with data recipients in third countries
• Binding corporate rules where applicable within the 999gk group of companies
• Adequacy decisions or equivalent transfer mechanisms recognised under applicable data protection frameworks

By using the 999gk platform, you acknowledge and consent to the transfer of your personal data to servers and processing facilities that may be located outside Bangladesh, subject to the safeguards described above. If you wish to obtain more information about the specific mechanisms used to protect your data during international transfers, please contact us at [email protected].

Changes to This Privacy Policy

999gk reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, we will notify registered players by email at least 7 days before the changes take effect, and will display a prominent notice on the platform. Minor clarifications that do not affect the substance of our data practices may be applied without advance notice.

The effective date at the top of this Privacy Policy indicates when the current version came into force. Your continued use of the 999gk platform after any updated version of this Policy takes effect constitutes your acceptance of the revised terms. If you do not agree with the revised Policy, you must cease using the platform and may close your account by contacting [email protected].

We recommend that you review this Privacy Policy periodically to stay informed of how 999gk handles your personal data. Previous versions of this Policy are available upon written request to [email protected].

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way 999gk handles your personal data, please contact our Data Protection team through any of the following channels:

• Email: [email protected] — for data rights requests, privacy queries, KYC document submissions, and formal complaints. Use the subject line "Privacy Enquiry — [Your Username]" for fastest routing.
• Live Chat: Available 24 hours a day, 7 days a week via the live chat feature on the 999gk platform — for immediate assistance with account and privacy-related queries.
• Response Hours: All communications are handled on Bangladesh Standard Time (BST, UTC+6). Email responses to data rights and privacy requests are provided within 5 business days of acknowledgement and a full resolution within 30 calendar days.

For responsible gaming support, self-exclusion requests, or urgent account restriction requests, please use the live chat feature for the fastest possible response. Our team is specifically trained to handle sensitive account matters with the care and discretion they require.