gx99 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how gx99 ("gx99", "we", "us", "our") collects, uses, stores, and discloses personal information about individuals ("you", "your", "User") who access or use the gx99 platform available at https://gx99.io (the "Platform").

By registering an account on gx99, making a deposit, placing a bet, or otherwise interacting with the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you should stop using the Platform immediately.

gx99 is committed to handling your personal data with transparency, integrity, and care. We treat privacy not as a compliance checkbox but as a core part of building a trustworthy platform for our Bangladesh player community.

2 Who We Are

gx99 is an online betting and casino platform operating at https://gx99.io, offering cricket betting, live casino games, slots, bingo, and specialty games to players in Bangladesh and other permitted markets. The platform supports deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, all denominated in Bangladeshi Taka (BDT / ৳).

For all privacy-related enquiries, you may contact us directly through our 24/7 live chat support or via the email address listed in Section 15 of this Policy.

3 Personal Data We Collect

3.1 Data You Provide Directly

When you register for a gx99 account or use Platform services, you may provide us with the following categories of personal data:

• Identity data: Full legal name, date of birth, gender, National ID number or passport number
• Contact data: Mobile phone number, email address, residential address (including district, division, and postal code)
• Account credentials: Username and encrypted password
• KYC documentation: Scanned copies or photographs of government-issued ID, proof of address, and payment method ownership confirmation
• Financial data: bKash/Nagad/Rocket/Upay mobile wallet number, Visa/Mastercard card details (processed via PCI-DSS compliant payment partners — gx99 does not store full card numbers), deposit amounts, withdrawal requests, and transaction history
• Communications: Messages sent to our support team via live chat or email

3.2 Data Collected Automatically

When you visit or use the gx99 Platform, we automatically collect certain technical and behavioural data, including:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution
• Usage data: Pages visited, features used, games played, betting history, session duration, click-stream data, and search queries within the Platform
• Location data: Approximate geolocation derived from your IP address (not precise GPS location)
• Log data: Server logs recording access times, error events, and API interactions
• Cookie data: Information gathered via cookies and similar tracking technologies (see Section 6)

3.3 Data From Third Parties

We may receive personal data about you from third-party sources in the following circumstances:

• Identity verification providers that confirm your identity against government ID databases
• Payment processing partners (bKash, Nagad, Rocket, Upay) who confirm transaction status and account ownership
• Fraud prevention and anti-money-laundering screening services
• Game content providers (such as Pragmatic Play, Evolution Gaming, Spribe, and NetEnt) who provide session result data necessary for settling bets and crediting winnings

4 How We Use Your Personal Data

gx99 uses the personal data we collect for the following specific purposes:

• Account management: Creating and maintaining your gx99 account, authenticating your identity on login, and providing account-related support
• Service delivery: Processing deposits and withdrawals, settling bets, crediting winnings, and delivering the full range of betting and casino products available on the Platform
• Identity verification (KYC): Verifying that you meet the 21+ age requirement and that your identity matches the payment methods registered on your account
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, match-fixing, bonus abuse, and other prohibited conduct described in our Terms & Conditions
• Legal compliance: Meeting our obligations under applicable laws and regulations, including responding to lawful requests from government or law enforcement authorities
• Customer support: Responding to your queries, resolving disputes, and processing complaints
• Promotions and personalisation: Sending you information about bonuses, VIP offers, and platform updates relevant to your activity — only where you have opted in to receive such communications
• Responsible gaming: Monitoring account activity to identify potential problem gambling behaviours and to enforce self-exclusion, deposit limit, or cool-off requests
• Platform improvement: Analysing aggregated and anonymised usage data to improve the performance, features, and user experience of the gx99 Platform

5 Legal Bases for Processing

We process your personal data only where we have a lawful basis to do so. The primary bases on which gx99 relies are:

• Contractual necessity: Processing required to perform our contract with you — including account creation, transaction processing, and bet settlement
• Legal obligation: Processing required to comply with applicable laws, including KYC/AML obligations and responding to lawful governmental requests
• Legitimate interests: Processing necessary for our legitimate business interests — including fraud prevention, platform security, and improving our services — provided such interests are not overridden by your privacy rights
• Consent: Where we rely on your consent (for example, to send promotional communications), you may withdraw that consent at any time by contacting our support team or adjusting your account notification preferences

6 Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device when you visit the gx99 Platform. They allow the Platform to recognise your device, remember your preferences, and provide a more consistent user experience across sessions.

6.2 Types of Cookies We Use

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your gx99 account. They cannot be disabled without breaking core functionality.
• Performance and analytics cookies: Used to collect anonymised data about how users interact with the Platform — such as which pages are visited most often and where errors occur. This data is used solely to improve Platform performance.
• Functional cookies: Used to remember your preferences, such as your preferred language, display settings, and responsible gaming limits you have set.
• Security cookies: Used to detect fraudulent activity and protect your account from unauthorised access attempts.

6.3 Managing Cookies

You can control cookie settings through your browser preferences. Note that disabling strictly necessary cookies will impair your ability to use the gx99 Platform, including the ability to log in and place bets. Disabling other cookie categories will not affect core functionality.

7 Data Sharing & Disclosure

gx99 does not sell or rent your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis and for the stated purposes only:

• Payment processors: bKash, Nagad, Rocket, Upay, and card network partners (Visa, Mastercard) — to process deposits and withdrawals on your behalf
• Identity verification providers: Third-party KYC services that verify your identity documents and confirm age eligibility
• Fraud and AML screening services: Providers that screen transactions and account activity against watch lists and fraud databases to protect the integrity of the Platform
• Game content providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — who receive the minimum session data necessary to operate the games and return results
• IT and infrastructure providers: Cloud hosting, database, and content delivery partners who process data on our behalf under strict data processing agreements
• Legal and regulatory authorities: Where required by law, court order, or legitimate request from a government authority with jurisdiction over gx99's operations

8 Payment Data & Financial Information

gx99 takes the security of your financial data with the utmost seriousness. When you make a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, your mobile wallet credentials are entered directly into the relevant payment provider's secure interface — gx99 does not have visibility of your mobile banking PIN or full wallet password.

For card transactions processed via Visa or Mastercard, payment details are handled exclusively by PCI-DSS Level 1 compliant payment processors. gx99 does not store full card numbers on its own servers. Only tokenised references are retained to facilitate withdrawal routing to the correct card.

All financial transaction data is encrypted in transit and at rest. Transaction histories visible within your gx99 account Wallet are accessible only to you and authorised gx99 compliance staff.

9 Data Retention

gx99 retains personal data for the duration of your account's active status and for such additional period as is required by applicable legal or regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the lifetime of your account plus a minimum of 5 years following account closure, in accordance with anti-money-laundering record-keeping requirements
• Transaction and betting records: Retained for a minimum of 5 years from the date of each transaction
• KYC documentation: Retained for the lifetime of the account plus 5 years post-closure
• Support communications: Retained for 3 years from the date of the most recent communication in a given support thread
• Technical and log data: Retained for 12 months, after which it is aggregated and anonymised or deleted
• Marketing consent records: Retained until you withdraw consent, plus 1 year as evidence of consent

Upon expiry of the applicable retention period, personal data is securely deleted from gx99 systems using industry-standard data destruction methods, or irreversibly anonymised such that it can no longer be linked to any individual.

10 Your Privacy Rights

As a gx99 user, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team via live chat or the email address in Section 15:

• Right of access: You may request a copy of all personal data gx99 holds about you. We will respond to verified access requests within 30 days.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our overriding legal retention obligations.
• Right to restrict processing: In certain circumstances, you may request that we limit how we process your data while a dispute or investigation is ongoing.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to object: You may object to processing based on our legitimate interests where you feel your privacy rights outweigh those interests.

11 Children's Privacy

The gx99 Platform is intended exclusively for adults aged 21 years or older. We do not knowingly collect or process personal data belonging to individuals under 21. If we become aware that personal data has been submitted by or on behalf of an individual under 21, we will immediately suspend the associated account and delete the data in question.

If you are a parent or guardian and believe that a minor has registered on gx99 using your details or their own, please contact our support team immediately so that we can investigate and take appropriate action without delay.

12 Security Measures

gx99 implements a layered security framework to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and gx99 servers
• AES-256 encryption for sensitive data stored at rest in our databases
• Multi-factor authentication (MFA) support for account login
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular independent penetration testing and vulnerability assessments
• Real-time intrusion detection and automated alerting systems
• Secure, geographically redundant data centres with physical access controls
• PCI-DSS compliant payment processing infrastructure

While gx99 takes all reasonable and industry-standard precautions to protect your data, no system is completely immune to risk. In the unlikely event of a data breach that affects your personal information, we will notify you promptly and take all necessary remediation steps.

13 Third-Party Links

The gx99 Platform may, from time to time, contain references or links to third-party game providers' content interfaces. Once you navigate away from gx99.io to a third-party environment, this Privacy Policy no longer applies. We are not responsible for the privacy practices or content of any third-party platform or service.

We recommend that you read the privacy policy of any third-party service you engage with through or alongside the gx99 Platform.

14 Updates to This Privacy Policy

gx99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will notify registered users via email and display a prominent notice on the Platform at least 7 days before the updated Policy takes effect.

The effective date displayed at the top of this document indicates when the current version of the Policy came into force. We encourage you to review this Policy periodically to stay informed about how gx99 is protecting your data. Your continued use of the Platform following notification of changes constitutes your acceptance of the updated Policy.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way gx99 handles your personal data, please contact us through any of the following channels:

• Live Chat: Available 24/7 directly through the gx99 Platform — average response time under 2 minutes
• Email: [email protected]
• Response time for email enquiries: Within 24 hours on business days (Bangladesh Standard Time, UTC+6)

Our support team handles all privacy-related requests with strict confidentiality. Identity verification will be required before we can process any data access, rectification, or erasure request.