gx999 Privacy Policy
Your privacy is a responsibility gx999 takes seriously. This Privacy Policy explains what personal data we collect when you use the gx999 platform, why we collect it, how we use and protect it, and what rights you have over your own information. We encourage every player to read this document in full before creating an account.
What gx999 Promises You
End-to-End Encryption
All data transmitted between your device and gx999 servers is protected by industry-standard SSL/TLS encryption. Your personal details and payment information travel through a fully secured channel at every step.
No Hidden Data Practices
gx999 does not collect data beyond what is necessary to operate the platform, verify your identity, process payments, and comply with applicable law. We document every data category clearly in this policy.
You Control Your Data
Registered players may request access to, correction of, or deletion of their personal data at any time by contacting [email protected]. We respond to all verified data requests within 30 calendar days.
We Never Sell Your Data
gx999 does not sell, rent, or trade your personal information to any third-party marketing company, data broker, or advertiser. Your data is used exclusively for the purposes described in this Privacy Policy.
Bangladesh-First Approach
gx999 serves players in Bangladesh. Our data practices are designed with the Bangladeshi player in mind — including support for bKash, Nagad, and Rocket transactions handled with the same privacy protections as all other payment data.
Responsible Gaming Data Use
Data relating to your gaming activity — including session length, bet history, and deposit patterns — may be used internally to identify signs of problem gambling and to offer appropriate responsible gaming tools. This data is never shared externally.
Data We Collect
When you interact with the gx999 platform — whether by visiting our website, creating an account, making a deposit, placing a wager, or contacting our support team — we collect certain categories of personal data. The specific data we collect depends on how you use gx999 and at what stage of the player journey you are. We collect data through three primary means: information you provide directly, information generated automatically by your use of the platform, and information received from trusted third-party partners (such as payment processors and identity verification services).
Data you provide directly: When registering a gx999 account, you are required to provide your full legal name, date of birth, Bangladeshi mobile phone number, and a valid email address. During the Know Your Customer (KYC) verification process, you may also be asked to submit copies of identity documents such as your National Identity Card (NID), passport, or birth certificate, along with proof of address. Payment registration requires linking a mobile banking account (bKash, Nagad, Rocket, or Upay) or a debit/credit card (Visa, Mastercard), which generates a reference token — gx999 does not store full payment credentials on its own servers.
Data generated by your activity: Each time you use the gx999 platform, we automatically record certain technical and behavioural data. This includes your IP address, device type, operating system, browser type and version, session start and end timestamps, pages visited, games played, wager amounts, deposit and withdrawal history, bonus usage, and any in-platform chat or support messages. This data is used to deliver the platform, ensure fair play, detect fraud, and improve the overall user experience.
Data from third parties: gx999 may receive data about you from payment processors (to confirm transaction status), identity verification partners (to confirm age and identity), and fraud-detection services (to flag suspicious patterns). Any data received from third parties is handled under the same protections as data you provide directly.
| Data Category | Examples | Source |
|---|---|---|
| Identity Data | Full name, date of birth, NID number | You / KYC partner |
| Contact Data | Mobile number, email address | You |
| Financial Data | Payment method reference, transaction history | You / Payment processor |
| Technical Data | IP address, device ID, browser type | Automatically collected |
| Usage Data | Games played, wager amounts, session length | Automatically collected |
| Communications Data | Support chat logs, email correspondence | You |
| KYC Documents | NID scan, passport copy, proof of address | You |
gx999 applies the principle of data minimisation — we only collect what is genuinely necessary for the stated purpose. If you believe we hold data about you that is not listed above, contact [email protected] for a full data disclosure request.
How We Use Your Data
gx999 uses your personal data only for lawful, clearly defined purposes. The primary legal bases on which we process your data are: (a) performance of a contract — processing data that is necessary to deliver the gx999 service to you as a registered player; (b) legal obligation — processing data required to comply with applicable anti-money laundering, fraud prevention, and age verification regulations; (c) legitimate interests — processing data for internal security monitoring, platform improvement, and responsible gaming oversight, where those interests are not overridden by your privacy rights; and (d) consent — processing data for optional marketing communications, where you have explicitly opted in.
The following table summarises each specific use of your data and the legal basis that applies:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and authentication | Identity data, contact data | Contract performance |
| Age and identity verification (KYC) | Identity data, KYC documents | Legal obligation |
| Processing deposits and withdrawals | Financial data, identity data | Contract performance |
| Fraud detection and prevention | Technical data, financial data, usage data | Legitimate interests / Legal obligation |
| Game delivery and platform functionality | Usage data, technical data | Contract performance |
| Responsible gaming monitoring | Usage data, financial data | Legitimate interests / Legal obligation |
| Customer support | Communications data, identity data | Contract performance |
| Bonus and promotion administration | Usage data, financial data, identity data | Contract performance |
| Platform analytics and improvement | Technical data, usage data (aggregated) | Legitimate interests |
| Marketing communications (opt-in only) | Contact data, usage data | Consent |
| Legal and regulatory compliance | All categories as required | Legal obligation |
Marketing opt-out: If you have opted in to marketing communications from gx999 and wish to opt out, you may do so at any time by emailing [email protected] with the subject line "Unsubscribe". Opting out of marketing does not affect our ability to send you transactional communications about your account (e.g., deposit confirmations, withdrawal notifications, account security alerts).
Data Sharing & Third Parties
gx999 does not sell, rent, trade, or otherwise transfer your personal data to third parties for their own commercial purposes. We share your data only in the limited circumstances described below, and only with parties that are contractually required to handle your data securely and in accordance with this Privacy Policy.
Payment processors: To facilitate deposits and withdrawals, gx999 shares relevant transaction data with our payment partners — bKash, Nagad, Rocket, Upay, SureCash, and card network processors (Visa, Mastercard). These partners receive only the minimum data necessary to complete the requested transaction and are not permitted to use that data for any other purpose.
Identity verification services: To comply with age verification and KYC obligations, gx999 may share identity data with accredited third-party verification providers. These providers process your data solely for the purpose of returning a verification result to gx999 and do not retain your documents beyond the period required to complete the check.
Game studio providers: Games supplied by Pragmatic Play, Evolution Gaming, NetEnt, Play'n GO, Hacksaw Gaming, Spribe, and Ezugi may involve your device connecting directly to the studio's game servers. In such cases, the game studio may collect limited technical data (such as IP address and session ID) for game delivery and fairness purposes. Each studio operates under its own privacy policy, which governs that data collection.
Legal and regulatory authorities: gx999 may be required by applicable law, court order, or regulatory instruction to disclose certain player data to relevant authorities. In such cases, we will disclose only the minimum data required to satisfy the legal obligation and will notify the affected player where we are lawfully permitted to do so.
Corporate transactions: In the event of a merger, acquisition, or sale of assets involving gx999, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material change to how their data is processed as a result.
Third-party data processing agreements: Every third party that processes personal data on behalf of gx999 is required to enter into a data processing agreement that: (a) restricts their use of your data to the specific purpose for which it was shared; (b) requires them to implement appropriate technical and organisational security measures; and (c) prohibits them from subcontracting data processing without gx999's prior written approval.
International data transfers: Some of our third-party service providers (particularly game studio infrastructure and fraud-detection services) may operate servers outside Bangladesh. Where your data is transferred internationally, gx999 ensures that appropriate safeguards are in place — including standard contractual clauses or equivalent protections — before any transfer takes place.
We will NEVER share your data with:
Third-party advertisers or data brokers · Social media platforms for targeting purposes · Other gambling operators · Any party that has not signed a data processing agreement with gx999 · Any party for purposes beyond those described in this Privacy Policy
Cookies & Tracking Technologies
The gx999 website uses cookies and similar tracking technologies (including local storage and session storage) to operate the platform, remember your preferences, maintain your login session, and understand how players use the site so we can improve it. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies do not contain executable code and cannot carry viruses or malware.
gx999 uses the following categories of cookies:
| Cookie Type | Purpose | Duration | Can Be Disabled? |
|---|---|---|---|
| Strictly Necessary | Login session management, security tokens, load balancing, CSRF protection | Session | No — required for the platform to function |
| Functional | Language preference, game volume settings, last-visited category | Up to 12 months | Yes — disabling may affect user experience |
| Analytics | Page views, session duration, click paths (aggregated, not linked to individual profiles) | Up to 12 months | Yes |
| Fraud Detection | Device fingerprinting, unusual login pattern detection | Up to 6 months | No — required for account security |
Managing cookies: You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies via the browser's privacy or settings menu. Please note that disabling functional cookies may affect your ability to use certain features of the gx999 platform, and disabling fraud-detection cookies is not supported as doing so would compromise account security. For guidance on managing cookies in your specific browser, refer to your browser's official support documentation.
gx999 does not use third-party advertising cookies. No advertising network, social media pixel, or retargeting technology is loaded on the gx999 platform.
Data Security & Retention
gx999 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include, but are not limited to:
- SSL/TLS encryption for all data in transit between your browser and gx999 servers
- AES-256 encryption for sensitive data stored at rest, including identity documents and payment references
- Role-based access controls limiting internal staff access to player data on a strict need-to-know basis
- Regular third-party security audits and penetration testing of the gx999 platform infrastructure
- Multi-factor authentication requirements for staff accounts with access to player data systems
- Automated anomaly detection systems that flag unusual access patterns for immediate human review
- Physical security controls at all data processing facilities used by gx999 and its contracted partners
Despite these measures, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. gx999 cannot guarantee absolute security but commits to maintaining industry-standard protections and responding promptly to any identified security incidents.
Data breach notification: In the event of a data breach that is likely to result in a risk to your rights and freedoms, gx999 will notify affected players by email within 72 hours of becoming aware of the breach, to the extent that this is reasonably practicable. The notification will describe the nature of the breach, the categories of data affected, and the steps gx999 is taking to address it.
Data Retention Periods
-
1Active account data Retained for the full duration your account is active on the gx999 platform.
-
2Financial records Retained for a minimum of 5 years after account closure to satisfy legal and regulatory record-keeping obligations.
-
3KYC documents Retained for 5 years after account closure or the conclusion of any regulatory investigation, whichever is later.
-
4Support communications Retained for 3 years after the final interaction to support dispute resolution and quality assurance.
-
5Analytics data Aggregated and anonymised after 12 months; individual-level data deleted at that point.
Your Privacy Rights
As a gx999 player, you have the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". gx999 will verify your identity before processing any data rights request and will respond within 30 calendar days. In complex cases, this period may be extended by up to a further 30 days, in which case we will notify you of the extension and the reason for it.
Right of Access
You have the right to request a copy of all personal data gx999 holds about you, together with information about how it is being used. This is sometimes called a "Subject Access Request" (SAR).
Right to Rectification
If any personal data gx999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations (e.g., financial record-keeping requirements).
Right to Object
You have the right to object to our processing of your personal data where that processing is based on legitimate interests or is for marketing purposes. Objections to marketing will always be honoured immediately.
Right to Data Portability
Where processing is based on your consent or on contract performance, you may request that we provide your personal data in a structured, machine-readable format so that you can transfer it to another service provider.
Right to Restriction
You may request that gx999 temporarily restrict processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold about you or the lawfulness of our processing.
Exercising certain rights — particularly erasure and restriction of processing — may affect your ability to continue using the gx999 platform. Where this is the case, gx999 will clearly explain the practical consequences before acting on your request. Data erasure requests submitted during an open investigation, active bonus period, or pending withdrawal may be deferred until those matters are resolved.
Children's Privacy
gx999 operates an 18+ only platform. We do not knowingly collect, process, or store personal data from any person under the age of 18. Registration on the gx999 platform requires you to confirm that you are aged 18 or above, and we conduct age verification checks as part of our KYC process to enforce this requirement.
If gx999 becomes aware that personal data belonging to a person under the age of 18 has been submitted to our platform — whether through a misrepresentation during registration or any other means — we will immediately suspend the relevant account, delete all associated personal data to the extent permitted by applicable law, void any wagers placed, and return any deposits via the original payment method following an investigation.
If you are a parent or guardian and believe that a person under the age of 18 in your care has created a gx999 account or submitted personal data to our platform, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will prioritise your inquiry and take immediate action.
We strongly encourage parents and guardians to use parental control software to prevent minors from accessing online gambling platforms. Resources for parental controls include your internet service provider's family safety tools and dedicated parental control applications available for mobile and desktop devices.
Strictly 18+ Only
The gx999 platform is intended exclusively for adults aged 18 and above. Age verification is mandatory for all players. Underage gambling is illegal and harmful.
Policy Updates & amp; Contact
gx999 reviews this Privacy Policy on a regular basis to ensure it remains accurate, complete, and reflective of our current data practices. We reserve the right to update or modify this Privacy Policy at any time. When we make material changes — meaning changes that significantly affect how we collect, use, or share your personal data — we will notify registered players by email at least 14 days before the updated policy takes effect. The effective date at the top of this page will always reflect the date of the most recent revision.
Your continued use of the gx999 platform after the effective date of a revised Privacy Policy constitutes your acceptance of that revised policy. If you do not agree with any material changes, you have the right to close your account and request deletion of your personal data by contacting us before the revised policy takes effect. We will process such requests in accordance with the rights described in Section 6 above and subject to any applicable legal retention obligations.
For any questions, concerns, or requests relating to this Privacy Policy or to the personal data gx999 holds about you, please contact our dedicated privacy support team using the details below. We aim to respond to all privacy-related enquiries within 5 business days and to fully resolve them within 30 calendar days.
This Privacy Policy is governed by and should be read in conjunction with our Terms & Conditions and our Responsible Gaming Policy, both of which are available on the gx999 website.
Contact Our Privacy Team
-
Privacy Enquiries Email: [email protected]
Subject line: "Privacy Policy Enquiry" -
Data Rights Requests Email: [email protected]
Subject line: "Data Rights Request" -
Underage Account Reports Email: [email protected]
Subject line: "Underage Account Report" -
Response Times Initial response within 5 business days. Full resolution within 30 calendar days. Bangladesh Standard Time (BST, UTC+6).
Current policy version: v2.1
Effective date: 1 January 2026
Previous version archived: 1 July 2025
All previous versions of this Privacy Policy are available on request by emailing [email protected].
Ready to Start Playing at gx999?
Now that you understand how gx999 protects your privacy, explore our full range of casino games, sports betting, and instant-win titles — all secured and available in Bangladesh via bKash, Nagad, and Rocket.
18+ only. Play responsibly. Gambling involves financial risk. If gambling is affecting your life, visit our Responsible Gaming page.