gc99 Privacy Policy

§ Introduction

This Privacy Policy ("Policy") describes how gc99 ("we", "us", "our") collects, stores, uses and shares personal data about you when you access or use the gc99 platform available at gc99.vu ("Platform"). This Policy forms part of the gc99 Terms and Conditions and should be read alongside them.

By registering an account on gc99, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.

1 Data We Collect

gc99 collects personal data that is necessary to operate the Platform, verify player identity, process financial transactions, and comply with applicable legal obligations. The categories of data we collect include:

• Identity data: your name, date of birth, and any government-issued identification document you provide during KYC verification (e.g. National ID, passport).
• Contact data: your registered Bangladeshi mobile number and, where provided, an email address.
• Financial data: records of deposits, withdrawals, transaction amounts and the reference IDs generated by bKash, Nagad or Rocket for each transaction. gc99 does not store your mobile financial service PIN or full payment card numbers.
• Usage data: your device type, operating system, browser or app version, IP address, session timestamps, pages visited within the Platform, games played, bets placed and game outcomes.
• Communications data: records of any messages, emails or support tickets exchanged between you and the gc99 support team.

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or political opinions. We do not collect biometric data.

2 How We Collect Your Data

gc99 collects your personal data through the following channels:

• Directly from you: when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a promotion.
• Automatically: through cookies, server logs and analytics tools that record your device information, IP address, session data and Platform interaction patterns when you use the Platform.
• From payment processors: transaction reference data passed back to gc99 by bKash, Nagad or Rocket upon confirmation of a deposit or withdrawal. No PIN or full account credentials are ever transmitted to gc99.
• From game providers: gameplay data, RNG outcomes and session logs provided by licensed game studios such as Pragmatic Play and Evolution Gaming for the purpose of dispute resolution and audit.

3 How We Use Your Data

gc99 uses the personal data it collects for the following purposes, each supported by a lawful basis described in Section 4:

• Account creation and authentication: verifying your identity at registration and on subsequent logins to protect your account from unauthorised access.
• KYC and age verification: confirming that you meet the minimum age requirement of 21 years and that the identity and payment details you provide are genuine.
• Processing financial transactions: handling deposits and withdrawals via bKash, Nagad and Rocket, reconciling transaction records, and investigating disputed payments.
• Fraud prevention and security: detecting and preventing fraudulent activity, money laundering, bonus abuse and other prohibited conduct outlined in the gc99 Terms and Conditions.
• Platform personalisation and improvement: analysing gameplay patterns and Platform usage to improve the user experience, optimise game recommendations, and develop new features for Bangladeshi players.
• Responsible gaming compliance: monitoring your account activity to identify signs of problem gambling behaviour and, where appropriate, applying the responsible gaming tools described in the gc99 Terms and Conditions.

gc99 does not use your personal data for unsolicited third-party marketing without your explicit prior consent. If you have opted into promotional communications, you may opt out at any time by contacting support at [email protected].

4 Legal Basis for Processing

gc99 processes your personal data under the following lawful bases:

• Contractual necessity: processing required to perform the contract between you and gc99, including account management, gameplay, and financial transactions.
• Legal obligation: processing required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, know-your-customer (KYC) obligations and law enforcement requests.
• Legitimate interests: processing necessary for gc99's legitimate business interests, including fraud prevention, Platform security, responsible gaming monitoring and business analytics — provided these interests are not overridden by your fundamental rights.
• Consent: where gc99 relies on your consent as the lawful basis — for example, sending promotional communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

5 Data Sharing

gc99 does not sell your personal data to any third party. We share personal data only in the limited circumstances listed below:

• Service providers and technology partners: third-party vendors who provide services to gc99 under contract, including game studios, payment processing infrastructure, cloud hosting, fraud detection and customer support tools. These vendors process data only on gc99's instructions.
• Payment processors: transaction reference data is exchanged with bKash, Nagad and Rocket solely to confirm and reconcile deposits and withdrawals. gc99 never receives your mobile financial service login credentials or PIN.
• Legal and regulatory authorities: where gc99 is required by law, court order or regulatory direction to disclose personal data, we will do so. Where legally permitted, gc99 will notify you of such a request.
• Business transfers: in the event that gc99 undergoes a merger, acquisition or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

6 Payment Data and Mobile Financial Services

All deposit and withdrawal transactions on gc99 are conducted via mobile financial services available in Bangladesh: bKash, Nagad and Rocket. When you initiate a transaction, you are redirected to or interact with the respective provider's own application or USSD flow. Your mobile financial service credentials — including your bKash PIN, Nagad PIN and Rocket PIN — are entered exclusively within the provider's own system and are never transmitted to, stored by, or accessible to gc99.

gc99 receives only a transaction reference ID and confirmation status from the payment provider once a transaction is complete. This reference data is retained in gc99's transaction logs for a minimum of five years for accounting, audit and dispute resolution purposes. No full mobile number associated with a payment account is stored beyond the truncated reference provided by the payment provider.

7 Data Retention

gc99 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account data: retained for the duration of your account plus a minimum of five years following account closure, to comply with legal and audit obligations.
• Transaction records: retained for a minimum of five years in line with financial record-keeping requirements applicable to our operations.
• Support communications: retained for two years from the date of the last message in the conversation thread, unless the communication relates to an ongoing dispute, investigation or legal matter.

When personal data is no longer required and no legal obligation requires its retention, gc99 will securely delete or anonymise the data so that it can no longer be associated with you.

8 Cookies and Tracking Technologies

gc99 uses cookies and similar tracking technologies to operate the Platform, remember your session, detect fraud, and analyse usage patterns. The types of cookies we use include:

• Essential cookies: strictly necessary for the Platform to function. These include session authentication tokens, CSRF protection tokens and load-balancing cookies. They cannot be disabled without breaking Platform functionality.
• Analytics cookies: used to collect aggregated, anonymised data about how players interact with the Platform, which pages are visited most, and where errors occur. This data helps gc99 improve the Platform experience for Bangladesh players.
• Fraud-detection cookies: used by gc99's security systems and third-party fraud prevention partners to identify suspicious device fingerprints, unusual session behaviour, and patterns consistent with bonus abuse or multi-accounting.

Most mobile browsers and Android or iOS devices allow you to manage cookie preferences through the device or browser settings. Disabling essential cookies will impair your ability to log in and use the Platform. Disabling analytics or fraud-detection cookies may affect gc99's ability to protect your account.

9 Your Privacy Rights

Subject to applicable law and gc99's legal obligations, you have the following rights in relation to your personal data:

• Right of access: you may request a copy of the personal data gc99 holds about you, free of charge, by contacting support at [email protected].
• Right to rectification: if you believe that personal data gc99 holds about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to erasure: you may request that gc99 delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to gc99's legal retention obligations.
• Right to restrict processing: you may request that gc99 restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to object: where gc99 processes your data on the basis of legitimate interests, you have the right to object to that processing. gc99 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.

To exercise any of these rights, please contact gc99 support at [email protected]. gc99 will respond to all valid requests within 30 days. gc99 may need to verify your identity before processing a data rights request.

10 Data Security

gc99 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These measures include SSL/TLS encryption on all data transmissions between your device and the Platform, restricted access controls limiting data access to authorised personnel only, regular security assessments of the Platform infrastructure, and secure data storage practices with access logging and anomaly detection.

While gc99 takes all reasonable precautions to secure your data, no platform can guarantee absolute security. If gc99 becomes aware of a data breach that is likely to result in a high risk to your rights and freedoms, gc99 will notify affected players as soon as reasonably practicable.

11 Children's Privacy

gc99 is strictly an adults-only platform. The minimum age to register and use gc99 is 21 years. gc99 does not knowingly collect or process personal data from any person under the age of 21. Age verification checks are performed at registration and may be repeated at any point during the account lifecycle.

12 Changes to This Privacy Policy

gc99 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Platform features. The date at the top of this page indicates when the Policy was last revised. Where changes are material — meaning they significantly affect how we process your personal data — gc99 will provide notice via the Platform or to your registered mobile number before the change takes effect.

Your continued use of the gc99 Platform after any update to this Policy constitutes your acceptance of the revised terms. The most current version of this Policy is always available at gc99.vu/privacy-policy.

13 Contact Us About Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or the way gc99 handles your personal data, our support team is available 24 hours a day, 7 days a week, including all Bangladeshi public holidays.

Please email us at: [email protected]