gh999 Privacy Policy
At gh999, your privacy is a core commitment — not an afterthought. This policy explains exactly what personal data we collect from Bangladesh players, how we use it, who we share it with, and the rights you hold over your information at every stage of your account lifecycle.
Six Privacy Principles We Live By
Before reading the full policy, here are the six foundational privacy commitments that shape how gh999 handles every piece of data belonging to our Bangladesh players.
Introduction
This Privacy Policy describes how gh999 collects, uses, stores, shares, and protects personal data relating to registered players and visitors to the gh999 platform, accessible at gh999.io (the "Platform"). It applies to all individuals who interact with the Platform, including prospective players who browse without registering, registered account holders, and former account holders whose data is retained in accordance with this policy.
By registering an account with gh999, making a deposit, or continuing to use the Platform after this policy has been brought to your attention, you acknowledge that you have read and understood how gh999 processes your personal data as described herein.
gh999 is committed to handling all personal data with care, transparency, and integrity. This policy is written in plain English to ensure that every player in Bangladesh can understand exactly what happens to their information when they use our casino and sports betting services.
Data Controller
gh999 acts as the data controller in respect of all personal data collected through the Platform. As data controller, gh999 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to contact gh999 in its capacity as data controller, please use the contact details provided in Section 15 of this document.
Data We Collect
gh999 collects personal data across several categories depending on how you interact with the Platform. The table below summarises the main categories of personal data we process:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, National ID number, passport number, photograph | Account registration, KYC verification, age verification |
| Contact Data | Email address, phone number, residential address (Dhaka, Chittagong, Sylhet, etc.) | Account communication, support, notifications, KYC address verification |
| Financial Data | bKash account number, Nagad account number, Rocket account number, bank account details, transaction history | Processing deposits and withdrawals, fraud prevention, AML compliance |
| Account Activity Data | Login timestamps, game history, betting records, bonus usage, session duration, responsible gaming settings | Platform operation, fraud detection, responsible gaming monitoring, dispute resolution |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, time zone (BST/UTC+6) | Platform security, fraud prevention, technical performance, geographic verification |
| Communications Data | Support chat transcripts, email correspondence, formal dispute records | Customer support, dispute resolution, regulatory compliance |
| Marketing Preferences | Opt-in/opt-out status for promotional emails, push notifications, and SMS alerts | Sending relevant offers, seasonal promotions (Eid, BPL, IPL, T20 events), and platform updates |
3.1 Sensitive Data
gh999 does not intentionally collect sensitive personal data (sometimes called special category data) such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, health data, or biometric data for identification purposes, except where the collection of such data is strictly required by applicable law or at the explicit request of a regulatory or law enforcement authority.
How We Collect Data
gh999 collects personal data through the following channels and mechanisms:
4.1 Direct Collection
The majority of your personal data is provided directly by you when you interact with the Platform. This includes information you submit during account registration, documents uploaded for KYC verification, payment details provided when making a deposit or requesting a withdrawal, preferences set in your account settings panel, and messages sent to the gh999 support team.
4.2 Automated Collection
When you access the gh999 Platform, certain technical data is collected automatically by our systems. This includes your IP address, device identifier, browser characteristics, pages visited, time spent on each page, game sessions initiated, bets placed, and click-path data. This automated collection is necessary for the secure operation of the Platform and cannot be disabled without preventing access to core features.
4.3 Third-Party Sources
gh999 may receive personal data about you from trusted third-party sources in limited circumstances, including:
- KYC and identity verification providers who confirm the authenticity of documents you have submitted
- Payment processors including bKash, Nagad, Rocket, and affiliated banking partners who provide transaction confirmation data
- Fraud prevention and risk-scoring services that provide signals based on device fingerprinting or known fraud patterns
- Publicly available sources such as sanctions lists, politically exposed persons (PEP) databases, and adverse media monitoring services used for anti-money-laundering (AML) compliance
How We Use Your Data
gh999 uses your personal data for the following purposes. Each purpose is tied to a specific legal basis, which is detailed in Section 6.
5.1 Account Management and Platform Operation
Your identity and contact data is used to create and maintain your gh999 account, authenticate your login, personalise your platform experience, process your gaming sessions, and manage your account settings and responsible gaming preferences. Without this processing, gh999 cannot provide you with a functional account.
5.2 Payment Processing
Your financial data is used to process deposits received from your bKash, Nagad, Rocket, or bank account and to process withdrawal requests back to your verified payment method. gh999 retains transaction records as required for financial compliance and audit purposes.
5.3 Identity Verification and KYC Compliance
gh999 is obligated to verify the identity of all players as part of its Know Your Customer (KYC) and anti-money-laundering (AML) compliance obligations. Your identity documents, proof of address, and payment method ownership evidence are processed solely for this purpose and retained for the period required by applicable compliance standards.
5.4 Fraud Prevention and Security
Technical data, account activity data, and financial data are analysed to detect and prevent fraudulent activity on the Platform, including duplicate account detection, bonus abuse identification, automated bot detection, and money-laundering pattern recognition. gh999 may use automated decision-making tools as part of its fraud prevention processes.
5.5 Customer Support and Dispute Resolution
Communications data is used to respond to your support enquiries, investigate formal disputes, and maintain records of support interactions. gh999 may review game logs, transaction records, and account activity history when investigating a dispute raised by you or relating to your account.
5.6 Responsible Gaming
Account activity data — including session duration, betting frequency, deposit amounts, and use of responsible gaming tools — is monitored to identify patterns that may indicate problem gambling behaviour. This processing is carried out in the interests of player welfare and may result in gh999 proactively contacting you to offer support or apply responsible gaming interventions.
5.7 Marketing and Promotions
With your consent, gh999 may use your contact data and account activity profile to send you personalised promotional communications, including bonus offers, seasonal promotions tied to events such as Eid, Pohela Boishakh, BPL, T20 World Cup, and IPL, and information about new games and features. You may withdraw your consent to marketing communications at any time by updating your notification preferences in the account settings panel or by contacting support.
5.8 Legal and Regulatory Compliance
gh999 processes personal data as required to comply with applicable legal and regulatory obligations, including responding to lawful requests from competent authorities, fulfilling record-keeping requirements, and cooperating with investigations by financial crime or law enforcement authorities.
Legal Basis for Processing
gh999 processes your personal data under the following legal bases:
- Contractual Necessity: Processing required to fulfil the contract between you and gh999, including account operation, payment processing, and game delivery.
- Legal Obligation: Processing required to comply with applicable laws, including KYC/AML obligations, record-keeping requirements, and responses to lawful authority requests.
- Legitimate Interests: Processing carried out for gh999's legitimate business interests where those interests are not overridden by your fundamental rights and freedoms. This includes fraud prevention, platform security, responsible gaming monitoring, and improving the Platform's performance and features.
- Consent: Processing for which you have given specific, informed, and freely given consent — most notably, the sending of marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
Data Retention
gh999 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to protect gh999's legitimate interests in the event of a dispute.
8.1 Active Accounts
For active gh999 accounts, personal data is retained for the full duration of the account relationship. Account activity data, transaction records, and KYC documentation are retained throughout the active account period and for a minimum period following account closure as required by applicable financial compliance standards.
8.2 Closed Accounts
Following the closure or termination of a gh999 account — whether at your request or by gh999 — certain categories of personal data will be retained for a defined period for legal compliance, dispute resolution, and audit purposes. After this retention period has elapsed and no legal hold applies, gh999 will securely delete or anonymise the retained data.
8.3 Marketing Data
Where you have given consent to receive marketing communications from gh999, your marketing preferences and contact data will be retained until you withdraw consent. Following withdrawal of consent, your contact details will be added to gh999's suppression list to ensure you are not contacted again for marketing purposes.
Data Security
gh999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:
- SSL/TLS Encryption: All data transmitted between your device and the gh999 Platform is encrypted using industry-standard SSL/TLS protocols. The padlock indicator visible in your browser confirms this encryption is active during every session.
- Encrypted Data Storage: Sensitive personal data stored in gh999's systems — including identity documents, payment details, and account credentials — is stored in encrypted form using modern encryption standards.
- Access Controls: Access to personal data within gh999's organisation is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
- Intrusion Detection: gh999 operates continuous network monitoring and intrusion detection systems to identify and respond to potential security threats in real time.
- Penetration Testing: The gh999 Platform undergoes regular security assessments including penetration testing by qualified independent security professionals.
- Incident Response: gh999 maintains a documented data breach response procedure. In the event of a security incident that affects your personal data, gh999 will notify affected players without undue delay and take all necessary steps to contain and remediate the breach.
While gh999 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. If you suspect that your gh999 account has been compromised, please contact [email protected] immediately.
Cookies & Tracking
The gh999 Platform uses cookies and similar tracking technologies to enable core platform functionality, improve performance, and — with your consent — deliver a personalised experience. The categories of cookies used on the Platform are described below.
10.1 Strictly Necessary Cookies
These cookies are required for the Platform to function and cannot be disabled. They include session management cookies that keep you logged in during an active session, security cookies that protect against cross-site request forgery (CSRF), and cookies that remember your responsible gaming settings. No consent is required for strictly necessary cookies.
10.2 Performance and Analytics Cookies
These cookies collect anonymised data about how players use the gh999 Platform — such as which pages are visited most frequently, how long players spend on each section, and where users encounter errors. This data is used to improve Platform performance and user experience. These cookies are activated only with your consent.
10.3 Functional Cookies
Functional cookies remember your preferences such as language settings and display options to provide a more personalised experience on your return visits. These cookies do not track your activity across other websites. They are activated only with your consent.
10.4 Managing Cookies
You can control and manage cookies through your browser settings. Most modern browsers allow you to block all or specific categories of cookies, delete existing cookies, or receive a notification before a cookie is stored. Please be aware that disabling strictly necessary cookies will prevent you from logging into your gh999 account and using core platform features.
Your Rights
As a gh999 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request — [Right You Wish to Exercise]".
- Right of Access: You have the right to request a copy of the personal data gh999 holds about you, along with information about how it is being processed.
- Right to Rectification: If you believe any personal data gh999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
- Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to the data retention obligations described in Section 8.
- Right to Restriction of Processing: You have the right to request that gh999 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to processing based on legitimate interests.
- Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
- Right to Object: You have the right to object to processing of your personal data carried out on the basis of gh999's legitimate interests, including profiling for fraud prevention purposes. gh999 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
- Rights in Relation to Automated Decision-Making: Where gh999 makes automated decisions that significantly affect your account, you have the right to request human review of that decision as described in Section 6.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
gh999 will respond to all data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case gh999 will notify you of the extension and the reason for it within the initial 30-day window.
Minors
The gh999 Platform is strictly intended for adults aged 21 and above. gh999 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. Age verification is a mandatory step in the gh999 account registration and KYC process, and accounts are not activated until age eligibility has been confirmed.
If gh999 becomes aware that personal data belonging to a person under the age of 21 has been collected — whether through a misrepresentation by the individual or through a failure in the age verification process — gh999 will immediately suspend the relevant account, delete all associated personal data to the extent permitted by law, and retain only the minimum information necessary to document the incident and prevent re-registration.
Parents or guardians who believe that a minor may have registered an account on the gh999 Platform should contact [email protected] immediately so that the account can be investigated and closed without delay. For further information about our commitment to protecting minors, please visit our Responsible Gaming page.
International Transfers
In the course of operating the gh999 Platform and delivering services to players in Bangladesh, some of your personal data may be transferred to and processed in countries outside Bangladesh. This may occur when gh999 uses cloud infrastructure providers, game content delivery networks, or specialist service providers whose systems are located outside the country.
Where such international transfers occur, gh999 takes appropriate steps to ensure that your personal data receives a level of protection equivalent to that described in this Privacy Policy. These steps may include entering into data processing agreements with international service providers that incorporate appropriate data protection clauses, and assessing the legal environment in the destination country to ensure adequate protection is in place.
gh999 does not transfer personal data to parties in countries that do not provide adequate data protection standards without implementing additional safeguards. If you have questions about the specific safeguards applied to any international transfer of your personal data, please contact [email protected].
Policy Changes
gh999 reserves the right to update or amend this Privacy Policy at any time. Updates may be made to reflect changes in applicable law, changes in gh999's data processing practices, the introduction of new platform features, or feedback received from players and regulatory bodies.
Where changes to this Privacy Policy are material — meaning they significantly affect how gh999 processes your personal data or the rights available to you — gh999 will provide advance notice of those changes by sending an email to your registered email address and/or displaying a prominent notice on the Platform. The effective date of any updated policy will be clearly displayed at the top of this document.
Your continued use of the gh999 Platform following the effective date of a revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with the changes, you should cease using the Platform and may request closure of your account by contacting [email protected].
gh999 encourages all players to review this Privacy Policy periodically to stay informed about how their personal data is being protected. The date at the top of this document indicates when the policy was most recently updated.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or gh999's data processing practices, please contact the gh999 Privacy team using the details below. All privacy-related communications are handled in English.
- Email: [email protected] (plain text — not a clickable link)
- Subject Line Format: "Privacy Request — [Your Username] — [Nature of Request]"
- Response Time: gh999 aims to acknowledge all privacy requests within 3 business days and to provide a substantive response within 30 days of receipt.
- Language: All support communications are conducted in English.
Play with Confidence at gh999
Now that you understand how gh999 protects your personal data, enjoy Bangladesh's most trusted online casino and sports betting platform — from live cricket markets and BPL betting to 500+ slots and live dealer tables.