gv999 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

Introduction

gv999 is an online betting and casino platform serving players across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh. We take the privacy and security of our players' personal information seriously. This Privacy Policy has been prepared to be clear, honest, and easy to understand while maintaining the formal standards expected of a legal data protection document.

This policy applies to all data collected through the gv999 website at gv999.io, any associated mobile applications, and any communications between you and gv999 — including support conversations, email correspondence, and promotional notifications. It applies regardless of the device or network you use to access the platform.

This policy should be read in conjunction with the gv999 Terms & Conditions and Responsible Gaming Policy, both of which are available via the links in the footer of every page on this site. Together, these documents form the complete framework governing your relationship with gv999.

Personal Data We Collect

gv999 collects personal data in the following categories. We collect only what is necessary for the stated purpose — no more.

We do not collect data from third-party sources for marketing or profiling purposes. All data held by gv999 originates directly from your interactions with the platform.

How We Use Your Personal Data

gv999 uses the personal data described in Section 2 for the following specific purposes:

• Account creation and management: To register your account, verify your identity, maintain your account profile, and communicate essential account updates to you.
• Transaction processing: To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, and Upay, and to maintain accurate financial records for each account.
• Age and identity verification: To confirm that all players are 21 years of age or older, as required by our platform policies, and to verify that payment methods are registered in the account holder's legal name.
• Platform security and fraud prevention: To detect, investigate, and prevent fraudulent activity, account takeover, money laundering, multi-accounting, and other prohibited conduct as defined in the Terms & Conditions.
• Responsible gaming compliance: To monitor betting patterns that may indicate problem gambling behaviour, to apply player-requested deposit limits and self-exclusion settings, and to fulfil our responsible gaming obligations.
• Customer support: To respond to your queries, process complaints, investigate disputed transactions, and resolve account issues efficiently.
• Service improvement: To analyse aggregated, anonymised usage data in order to improve platform performance, optimise user experience, and develop new features. Individual player data is not used for this purpose without anonymisation.
• Marketing communications (consent-based only): To send you promotional offers, bonus notifications, and event updates via your registered mobile number or email address — but only where you have given explicit consent to receive such communications. You may withdraw consent at any time.
• Legal compliance: To fulfil recordkeeping, reporting, or disclosure obligations that may arise under applicable laws.

gv999 does not use personal data for automated decision-making that produces legal effects or significantly affects you without human review. Responsible gaming interventions (such as automatic application of a self-requested deposit limit) are an operational function, not an automated decision in the legal sense.

Legal Basis for Processing Personal Data

gv999 processes personal data under one or more of the following lawful bases for each processing activity:

• Contractual necessity: Processing required to perform the contract between you and gv999 — including account creation, bet settlement, and payment processing — is carried out on the basis that it is necessary to deliver the service you have requested.
• Legitimate interests: Certain processing activities, such as fraud detection, platform security monitoring, and anonymised usage analytics, are carried out on the basis of gv999's legitimate interest in operating a secure and reliable platform. We apply a proportionality test to ensure our legitimate interests do not override your privacy rights.
• Legal obligation: Where applicable law requires gv999 to retain, process, or disclose certain data — such as financial transaction records or identity verification records — we process that data to fulfil the legal obligation.
• Consent: Where processing is not required by contract or law, and is not justified by a legitimate interest, gv999 obtains your explicit consent before processing. This applies primarily to marketing communications. Consent may be withdrawn at any time without affecting your access to the platform.

Data Sharing and Disclosure

gv999 does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

• Payment service providers: Your mobile wallet number and transaction amounts are shared with bKash, Nagad, Rocket, and Upay solely to process deposits and withdrawals you initiate. These providers operate their own privacy policies and are independently responsible for their data handling.
• Game content providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe may receive technical session data (such as player session tokens and bet amounts) to facilitate game play. They do not receive your name, NID, or payment details.
• Identity verification services: Where automated document verification tools are used during the KYC process, identity documents submitted by you may be processed by a third-party verification provider. These providers are contractually bound to process data solely for identity verification and to delete documents after the verification decision is made.
• Legal and regulatory disclosure: gv999 may disclose personal data if required to do so by a court order, legal process, or law enforcement authority with appropriate jurisdiction. In such cases, we will disclose only the minimum data required to comply with the order.
• Business continuity: In the event that gv999 undergoes a merger, acquisition, or asset transfer, personal data held by the platform may be transferred to the successor entity. Players will be notified of any such transfer and will retain their rights over their data as described in this policy.

Cookies and Tracking Technologies

gv999 uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session when you are logged in, and to gather anonymised analytics about platform usage. The following cookie categories are used on gv999.io:

• Strictly necessary cookies: These cookies are required for the platform to function. They maintain your login session, remember your language preference, and ensure security tokens work correctly. These cookies cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: These cookies collect anonymised data about how players navigate the platform — which pages are visited most frequently, how long sessions last, and where technical errors occur. The data is used in aggregate form only and cannot be linked back to individual players.
• Functional cookies: These cookies remember your display preferences and any customisations you apply to your account interface so that you do not have to re-enter them on each visit.

gv999 does not use third-party advertising cookies, retargeting cookies, or social media tracking pixels on any page of gv999.io. No data collected through cookies on gv999 is shared with external advertising networks.

You may control cookie settings through your browser. Disabling strictly necessary cookies will impair or prevent your ability to log in to gv999. Disabling performance or functional cookies will not prevent you from using the platform but may affect user experience.

Data Security Measures

gv999 applies a layered technical and organisational security framework to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. The following security measures are in place:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and gv999 servers is encrypted using TLS 1.3 with 256-bit AES cipher suites. HTTPS is enforced on every page and endpoint of gv999.io without exception.
• Encrypted data storage: Personal data stored in gv999 databases is encrypted at rest. Encryption keys are managed separately from the data they protect and are rotated on a regular schedule.
• Access controls: Access to personal data within gv999's internal systems is restricted on a strict need-to-know basis. Staff members who do not require access to personal data for their specific role are not granted access. Access permissions are reviewed quarterly.
• Multi-factor authentication: Internal system access by gv999 personnel requires multi-factor authentication. Players are also encouraged to enable OTP-based account verification from their account settings.
• Security monitoring: gv999 operates continuous server monitoring and intrusion detection systems. Anomalous activity patterns are flagged for review within defined response time windows.
• Data breach response: In the event of a confirmed personal data breach that poses a risk to affected players, gv999 will notify affected users as promptly as practicable and will take all reasonable steps to contain and remediate the breach.

While gv999 applies industry-standard security practices, no online platform can guarantee absolute security against all possible threats. Players are advised to use strong, unique passwords for their gv999 account and to avoid accessing the platform from shared or public devices.

Data Retention Periods

gv999 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or to meet a defined legal retention obligation. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is either securely deleted from all gv999 systems or irreversibly anonymised so that it can no longer be linked to any individual. Anonymised data may be retained indefinitely for aggregated analytics purposes.

Your Rights Over Your Personal Data

As a gv999 player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact us at the email address listed in Section 13. We will acknowledge your request within 2 business days and respond substantively within 10 business days.

• Right of access: You may request a copy of all personal data gv999 holds about you, along with information about how that data is used and stored.
• Right to rectification: If any personal data gv999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain account details directly through your account settings.
• Right to erasure: You may request that gv999 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other lawful basis applies), or where the data has been processed unlawfully. Note that erasure requests cannot be fulfilled where data is subject to a legal retention obligation, as described in Section 8.
• Right to restriction of processing: You may request that gv999 restrict the processing of your personal data in certain circumstances — for example, while you dispute the accuracy of data we hold.
• Right to data portability: You may request a structured, machine-readable copy of the personal data you provided to gv999 for transfer to another service, where technically feasible.
• Right to object: You may object to processing carried out on the basis of legitimate interests. gv999 will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

Children and Minors

gv999 is strictly an adult platform. Our services are not directed at, and are not intended for use by, persons under the age of 21. We do not knowingly collect personal data from any individual under the age of 21.

If gv999 becomes aware that personal data has been collected from a person under the age of 21 — whether through a falsified registration or any other means — that data will be deleted immediately, the account will be closed, and any real-money balance (net of any promotional credits) will be returned to the originating payment method.

Parents and guardians who believe a minor may have used gv999 are encouraged to contact our support team immediately at [email protected]. We treat all such reports as high priority and respond within 24 hours.

Third-Party Links and External Platforms

The gv999 platform does not contain links to external third-party websites other than those strictly necessary for payment processing (bKash, Nagad, Rocket, Upay) and game delivery (licensed studio providers). In the ordinary course of platform use, you will not encounter outbound links to external marketing sites, social media platforms, or unrelated commercial services.

This Privacy Policy applies solely to gv999.io and data collected through it. gv999 is not responsible for the privacy practices of any third-party service you access independently — including mobile wallet applications, your internet service provider, or any other platform you use in conjunction with gv999. We recommend reviewing the privacy policies of any third-party service you interact with.

Updates to This Privacy Policy

gv999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, platform features, applicable law, or industry standards. When material changes are made, we will update the "Effective Date" at the top of this page and notify registered players via their registered email address or mobile number where reasonably practicable.

Your continued use of gv999 after the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We recommend reviewing this page each time you access gv999 following a notification of changes. The current version of this policy is always the version published at gv999.io/privacy-policy.

If a proposed change materially reduces your privacy rights, gv999 will provide at least 14 days' advance notice before the change takes effect, allowing you time to review and, if you wish, close your account before the new terms apply.

Contact Information — Privacy Enquiries

For any questions, concerns, or requests related to this Privacy Policy or the personal data gv999 holds about you, please contact our data protection team using the details below. All privacy-related correspondence is treated with strict confidentiality and is handled separately from general customer support queries.

• Privacy Contact Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please include the subject line "Privacy Request — [your registered mobile number]" to ensure your query is routed to the data protection team promptly.
• Response Time: Acknowledgement within 2 business days; substantive response within 10 business days of identity verification.
• Platform Address: gv999.io
• Policy Effective Date: 01 January 2026