gy999 Privacy Policy

Introduction

gy999 ("we", "us", "our") is committed to protecting the privacy and personal data of every person who visits or registers on the gy999.app platform ("Platform"). This Privacy Policy ("Policy") describes what personal data we collect, why we collect it, how we use it, who we may share it with, how long we keep it, and what rights you have in relation to it.

By accessing the Platform, registering an account, or making use of any gy999 service, you confirm that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy forms part of gy999's broader legal framework alongside the Terms and Conditions and Responsible Gaming Policy.

1. Information We Collect

gy999 collects personal data in two broad categories: information you provide directly to us, and information collected automatically when you use the Platform. We do not collect more data than is necessary for the purposes described in this Policy.

Information You Provide Directly

Information Collected Automatically

When you use the gy999 Platform, our systems automatically collect the following technical data to operate the service, maintain security, and detect fraud:

• IP address and approximate geolocation (country and region, derived from IP — not GPS-level precision).
• Device type, operating system version, and browser or app client used to access the Platform.
• Session logs, including login timestamps, pages visited, games played, bet amounts, and session durations.
• Cookie data and similar tracking technologies (see Section 7 — Cookies for full details).

2. How We Use Your Information

gy999 uses the personal data we collect exclusively for the following purposes. We do not use your data for purposes beyond those listed here without obtaining your prior consent or as required by law:

• Account creation and management — registering your account, verifying your identity, maintaining your account settings and preferences.
• Payment processing — facilitating deposits and withdrawals via bKash, Nagad, Rocket, and supported bank transfers; verifying that payments originate from an account registered in your name.
• Regulatory compliance — meeting our anti-money laundering (AML) obligations, age verification requirements, and any other legal obligations applicable to the operation of an online gaming platform.
• Fraud prevention and security — detecting suspicious activity, investigating potential fraud or abuse, and protecting the integrity of the Platform and the accounts of legitimate players.
• Customer support — responding to your queries, complaints, and account-related requests submitted through the platform's support channel.
• Responsible gaming — monitoring account activity for indicators of problem gambling, applying deposit limits and self-exclusion tools, and reaching out where required by our responsible gaming framework.
• Service improvement — analysing aggregated, anonymised usage data to improve the Platform's performance, content, and user experience. This analysis does not identify you individually.

3. Legal Basis for Processing Your Data

gy999 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

4. Payment Data and Mobile Wallet Information

gy999 processes deposit and withdrawal transactions via bKash, Nagad, Rocket, and selected bank transfers. To facilitate these transactions, gy999 records the mobile wallet number or bank account number associated with each transaction, alongside the transaction reference number issued by the payment provider.

gy999 does not store your full bKash PIN, Nagad PIN, bank card numbers, or any payment authentication credentials. These are entered directly into the respective payment provider's interface. gy999 only receives the transaction confirmation reference that indicates whether a transaction was successfully completed.

5. Sharing Your Information

gy999 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only with parties who are contractually obligated to handle it in accordance with applicable data protection standards:

• Payment service providers — bKash, Nagad, Rocket, Dutch-Bangla Bank, and other payment processors receive only the transaction data required to process your deposits and withdrawals. They do not receive your full account profile or gaming history.
• Game content providers — studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming receive a player session token and game configuration data necessary to load and run games. They do not receive your full registration details, payment data, or NID information.
• Fraud prevention and KYC verification services — third-party providers who assist gy999 in verifying player identities and detecting fraudulent activity. These providers process only the minimum data required for the specific verification or fraud check being conducted.
• Regulatory and law enforcement authorities — gy999 will disclose your personal data to competent authorities where required to do so by law, court order, or regulatory directive. gy999 will not notify you of such disclosures where prohibited from doing so by the relevant authority.
• Business successors — in the event of a merger, acquisition, or sale of gy999's business or assets, player data may be transferred to the successor entity, subject to that entity agreeing to honour this Privacy Policy or provide equivalent protections.

All third parties who receive personal data from gy999 are required to process it only for the specific purpose for which it was shared, maintain appropriate technical and organisational security measures, and not further disclose it without gy999's authorisation.

6. Cookies and Tracking Technologies

gy999 uses cookies and similar browser-based storage technologies to operate the Platform and improve your experience. Cookies are small text files stored on your device by your web browser when you access a website. They do not give gy999 access to your device beyond the data they themselves contain.

Types of Cookies Used

• Essential cookies — required for the Platform to function. These include session authentication cookies that keep you logged in during your visit, and security cookies that help protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Functional cookies — store your preferences such as language settings, notification preferences, and deposit limit configurations so you do not need to reconfigure them on each visit.
• Analytics cookies — collect anonymised data about how players use the Platform (pages visited, time spent, features used) to help gy999 identify areas for improvement. This data cannot identify you personally.

You can control cookie behaviour through your browser settings. Blocking essential cookies will prevent you from logging in to your gy999 account. Blocking functional or analytics cookies may reduce the quality of your experience but will not prevent you from accessing the Platform.

7. Data Retention

gy999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. The following retention periods apply:

• Active account data — retained for the lifetime of your account plus a minimum of 5 years following account closure, to satisfy AML and financial record-keeping requirements.
• KYC and identity documents — retained for a minimum of 5 years from the date of verification or account closure, whichever is later, in accordance with applicable AML obligations.
• Support communications — retained for 2 years from the date of the last communication in a support thread, to enable resolution of any follow-up disputes or complaints.

When your data reaches the end of its retention period, gy999 will either securely delete it or anonymise it so that it can no longer be associated with you. Anonymised data may be retained indefinitely for aggregate analytics purposes.

8. Your Data Rights

As a user of the gy999 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact gy999 support via the platform's internal support channel. We will respond to all valid requests within 30 days.

To exercise any of the above rights, contact gy999 support through the platform. Please include your registered mobile number and a clear description of the right you wish to exercise. gy999 may need to verify your identity before processing your request. We will not charge a fee for handling valid data rights requests.

9. Security Measures

gy999 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include SSL/TLS encryption for all data in transit, encrypted storage for data at rest, access controls that restrict staff access to personal data on a need-to-know basis, regular security audits and penetration testing of platform infrastructure, and automated fraud detection systems that monitor for suspicious activity in real time.

While gy999 uses industry-standard security practices, no online platform can guarantee absolute security. You also play a role in keeping your account secure — please use a strong, unique password for your gy999 account, do not share your login credentials with anyone, and contact support immediately if you suspect unauthorised access to your account.

10. Minors and Age Restriction

The gy999 platform is strictly for adults aged 21 years or older. gy999 does not knowingly collect personal data from persons under 21. If we discover that a registered account belongs to a person under 21, we will immediately close the account, forfeit any balance, and securely delete the personal data associated with that account to the extent permitted by our legal retention obligations. If you believe a person under 21 has registered on gy999, please notify us immediately via the platform's support channel.

11. Third-Party Links and Integrated Services

The gy999 Platform integrates third-party game content from licensed studios. When you launch a game, your session interacts with that studio's servers. The game studio's own privacy practices govern the handling of data within the game environment. gy999 is not responsible for the privacy practices of third-party game studios, and we encourage you to review the privacy policies of any third-party services you interact with. gy999 does not include external links to unrelated third-party websites.

12. Changes to This Privacy Policy

gy999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made, we will notify registered players via a prominent notice within the Platform at least 7 days before the revised policy takes effect.

The revised policy will display the updated effective date at the top of the document. Your continued use of the gy999 Platform after the effective date of any revised policy constitutes acceptance of that revised policy. If you do not accept the changes, you must stop using the Platform and request account closure before the effective date.

13. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or to gy999's handling of your personal data, please contact our support team through the platform's internal support channel. Our team is available 24/7 and will acknowledge all privacy-related requests within 48 hours.

You may also reach us by email at: [email protected] (plain text — not a clickable link). Please include your registered mobile number and specify that your query relates to a privacy or data protection matter so that it can be routed to the appropriate team promptly.