gf99 Privacy Policy

gf99 does not collect full payment card numbers, CVV codes or bank account login credentials. Where card payments are processed, they are handled exclusively by PCI-DSS compliant payment processors and gf99 receives only a tokenised reference, not the raw card data. Similarly, gf99 does not store bKash, Nagad or Rocket PINs — these are processed entirely within the respective payment provider's secure environment.

gf99 processes your personal data for the following primary purposes, each of which has a lawful basis rooted in contractual necessity, legal obligation or legitimate interest:

• Account creation and management: processing registration information, verifying your identity via KYC, and maintaining your account record throughout your time on the platform.
• Payment processing: facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard and other supported methods, and maintaining transaction records for account and regulatory purposes.
• Fraud prevention and anti-money laundering: monitoring account activity to detect and prevent fraud, account takeover, bonus abuse, money laundering and other prohibited conduct in compliance with applicable standards.
• Responsible gaming: using usage data to identify behavioural patterns that may indicate problem gambling, enabling gf99 to fulfil its duty-of-care obligations and proactively offer support tools.
• Customer support: using your contact and communications data to respond to queries, resolve disputes and maintain support records.
• Platform improvement: analysing aggregated and anonymised usage data to improve game performance, navigation, payment reliability and the overall player experience across our Bangladesh market.

Where you have given explicit consent, gf99 may contact you with personalised promotional offers, bonus notifications and platform news. You may withdraw consent for marketing communications at any time by:

• Updating your notification preferences in your account settings panel.
• Clicking the unsubscribe link present in any marketing email sent by gf99.
• Contacting gf99 support directly at [email protected] and requesting removal from marketing lists.

gf99 does not sell, rent or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of third parties, strictly for the purposes stated:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard and their processing partners): solely for the purpose of completing deposit and withdrawal transactions on your behalf.
• Identity and age verification providers: solely for the purpose of confirming that you meet gf99's eligibility requirements, including the 21+ age restriction and KYC obligations.
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi and others): limited technical session data required for game delivery, RNG certification and game integrity purposes only.
• Law enforcement and regulatory authorities: where gf99 is legally required to disclose data in response to a lawful request, court order or applicable regulatory obligation.

Any third party that receives your data from gf99 is contractually required to handle it in accordance with applicable data protection standards and to use it only for the specific purpose for which it was shared. gf99 does not permit third-party recipients to use your data for their own marketing, profiling or commercial purposes.

gf99 uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, remember your preferences and analyse usage patterns. The cookies we use fall into three categories:

• Essential cookies: required for the platform to function. These include session authentication tokens, security cookies and load-balancing cookies. They cannot be disabled without breaking core platform functionality.
• Functional cookies: used to remember your settings and preferences, such as your language preference, last visited game category, and session timeout configuration.
• Analytical cookies: used to collect aggregated, anonymised data about how players navigate and use gf99, helping us identify areas for improvement. This data is not linked to your individual account.

You may manage cookie preferences through your device's browser settings. Disabling non-essential cookies will not prevent you from using gf99, but some functional preferences may not be retained between sessions.

gf99 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include industry-standard SSL/TLS encryption for all data transmitted between your device and our servers, encrypted storage for sensitive personal data fields, access controls that restrict staff access to personal data on a strict need-to-know basis, and regular security testing of platform infrastructure.

While gf99 takes reasonable steps to protect your data, no internet transmission or electronic storage system is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and interests, gf99 will notify affected players in accordance with applicable obligations, and will take prompt remedial action to contain the breach and minimise harm.

gf99 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting or reporting obligations. Account data is generally retained for the duration of your active account plus a minimum of 5 years following account closure, in order to meet anti-money laundering record-keeping requirements. Transaction records are retained for a minimum of 5 years from the date of each transaction. Data that is no longer required for any legitimate purpose is securely deleted or anonymised. You may request earlier deletion of your data subject to the conditions described in the Your Rights section below.

The gf99 platform may display links or integrate content from third-party providers such as game studios, payment gateways and analytics tools. gf99 is not responsible for the privacy practices of third-party services. Where you interact directly with a third-party service embedded within or linked from gf99, that party's own privacy policy governs the data collected during that interaction. We encourage you to review the privacy policies of any third-party services you use in connection with gf99.

gf99 operates internationally and some of your personal data may be processed in countries outside Bangladesh. Where such transfers occur, gf99 ensures that appropriate safeguards are in place — such as data processing agreements with receiving parties — so that your data receives a level of protection consistent with this Privacy Policy. By using gf99, you acknowledge that your data may be transferred to and processed in jurisdictions outside Bangladesh in connection with the purposes described in this policy.

gf99 does not knowingly collect, process or store personal data relating to individuals under the age of 21. If gf99 becomes aware that personal data has been collected from a person under 21 without the legally required consent, we will take immediate steps to delete that data and close the associated account. If you believe that gf99 may have collected data from an individual under 21, please contact us immediately at [email protected].

gf99 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features or applicable legal requirements. The current version of this policy is always available on this page, identified by the effective date shown at the top. Where changes are material, we will make reasonable efforts to notify active players via the platform's announcement channels prior to the changes taking effect. Your continued use of gf99 following any update constitutes acceptance of the revised Privacy Policy.