gct99 Privacy Policy
At gct99, we take the privacy and security of your personal data seriously. This Privacy Policy explains exactly what information we collect when you use our platform, how that information is used, who it may be shared with, and what rights you have over your own data. We are committed to handling all player information with transparency, integrity, and in full accordance with applicable data protection principles.
How gct99 Protects Your Privacy
These are the core privacy principles gct99 follows across every part of our platform. Full details are provided in the sections below — all players are encouraged to read the complete policy.
SSL Encryption on All Sessions
Every connection between your browser and the gct99 platform is protected by industry-standard SSL/TLS encryption. Your login credentials, payment details, and personal information are never transmitted in plain text.
Minimal Data Collection
gct99 collects only the data that is genuinely necessary to deliver a safe, personalised, and compliant service. We do not collect data speculatively or sell your information to third-party marketing brokers.
Transparent Data Usage
Every category of data gct99 collects is used for a clearly stated purpose — account management, payment processing, fraud prevention, regulatory compliance, or platform improvement. Nothing more.
Your Right to Access and Deletion
You can request a full export of the personal data gct99 holds about you, or ask for your account and associated data to be deleted, at any time by contacting our support team in English via live chat or email.
No Sale of Personal Data
gct99 does not sell, rent, or trade your personal information to third-party advertisers or data brokers under any circumstances. Data shared with third parties is limited strictly to service delivery and compliance obligations.
Marketing Opt-Out Available
If you do not wish to receive promotional emails, SMS notifications, or bonus offers from gct99, you may opt out at any time through your account preferences or by contacting the support team directly.
Information We Collect
When you interact with the gct99 platform — whether by registering an account, making a deposit, placing a wager, or contacting our support team — we collect certain categories of personal information. The specific data collected depends on how you engage with the platform. Below is a comprehensive overview of the data categories gct99 may collect.
| Data Category | Examples | Collected When |
|---|---|---|
| Identity Data | Full name, date of birth, national ID number, passport number | Account registration and KYC verification |
| Contact Data | Email address, mobile phone number, residential address | Account registration and KYC verification |
| Financial Data | bKash/Nagad/Rocket/Upay account number, card last four digits, transaction history | Deposit and withdrawal processing |
| Technical Data | IP address, browser type and version, device type, operating system, time zone | Automatically on every platform session |
| Usage Data | Pages visited, games played, bet history, session duration, click patterns | Automatically during platform use |
| Communications Data | Live chat transcripts, support emails, feedback submissions | When you contact gct99 support |
| Verification Documents | Scanned ID, utility bills, bank statements, selfies submitted for KYC | Identity verification process |
Data You Provide Voluntarily
The majority of personal data gct99 holds about you is data you provide directly — such as the information you enter during account registration, the documents you submit for KYC verification, or the details you share when contacting our support team. This data is necessary for us to provide you with a functional, secure, and compliant service.
Data Collected Automatically
When you visit or use the gct99 platform, we automatically collect certain technical and usage data through cookies, server logs, and similar tracking technologies. This includes your IP address, device identifiers, browser characteristics, and information about how you navigate the platform. This data helps us detect fraud, optimise platform performance, and understand how players use our services.
Sensitive Data
gct99 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data. If any sensitive data is inadvertently included in documents you submit for KYC purposes (for example, a national ID card that includes religion), it is processed solely for identity verification and is not stored or used for any other purpose.
How We Use Your Data
gct99 uses the personal data we collect strictly for the purposes set out in this section. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected without first informing you and, where required, obtaining your consent.
- Account Creation and Management: We use your identity and contact data to create and maintain your gct99 player account, verify your eligibility, and ensure the account is associated with a real, uniquely identifiable individual.
- Identity Verification (KYC): We use identity and verification document data to confirm that you meet the minimum age requirement of 18 years and that the payment methods linked to your account are registered in your name. This is a regulatory compliance obligation.
- Payment Processing: We use financial data to facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard. Transaction records are retained to resolve payment disputes and for financial audit purposes.
- Fraud and Security: Technical and usage data is analysed by our risk team to detect, prevent, and investigate suspicious activity including multi-accounting, money laundering, chargebacks, and unauthorised account access.
- Responsible Gaming: Usage and betting history data is monitored to identify patterns that may indicate problem gambling behaviour, in accordance with our obligations under the gct99 Responsible Gaming Policy.
- Platform Improvement: Aggregated and anonymised usage data is used to analyse platform performance, identify areas for improvement, and test new features before they are released to all players.
- Customer Support: Communications data from live chat sessions and support emails is used to resolve player queries, investigate complaints, and improve the quality of our support service.
- Marketing Communications: Where you have opted in to receive marketing communications, we use your contact data to send you promotional offers, bonus notifications, and platform updates. You may opt out of these communications at any time.
- Legal and Regulatory Compliance: We may use any category of data to comply with applicable laws, respond to lawful requests from authorities, enforce our Terms & Conditions, or defend against legal claims.
Lawful Basis for Processing
gct99 processes your personal data on the following lawful bases: (a) contract performance — where processing is necessary to fulfil our obligations to you as a registered player; (b) legal obligation — where processing is required to comply with applicable laws and regulations; (c) legitimate interests — where we have a genuine operational need that is not overridden by your data protection rights; and (d) consent — where you have expressly agreed to a specific use of your data such as marketing communications.
Data Sharing and Disclosure
gct99 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. However, in order to operate the platform and meet our legal obligations, we do share certain categories of data with carefully selected third-party service providers and, where required by law, with regulatory or law enforcement authorities.
Third-Party Service Providers
gct99 works with a limited number of third-party organisations that process personal data on our behalf as data processors. These organisations are contractually bound to handle your data only in accordance with our instructions, to maintain appropriate security standards, and not to use your data for any purpose beyond the specific service they provide to gct99. Categories of third-party processors include:
- Payment Processors: bKash, Nagad, Rocket, Upay, and card payment networks (Visa, Mastercard) process financial transaction data solely to facilitate deposits and withdrawals.
- Identity Verification Providers: Third-party KYC service providers process identity document images and biometric data to verify player identity on our behalf.
- Game Content Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified game studios receive session data necessary to deliver their game content within the gct99 platform.
- Cloud Hosting and Infrastructure: gct99 uses secure cloud infrastructure providers to host platform data. All hosting partners are required to meet stringent security and data residency requirements.
- Fraud Detection and Risk Management: Specialist risk management platforms receive technical and behavioural data to assist with real-time fraud detection and responsible gaming monitoring.
- Customer Support Tools: Our live chat and email support systems are operated via third-party software platforms. Support communications are processed by these providers solely to facilitate the delivery of customer support.
Legal and Regulatory Disclosure
gct99 may be required to disclose personal data to government authorities, law enforcement agencies, financial intelligence units, or regulatory bodies where we are required to do so by applicable law, court order, or legitimate legal process. We will notify affected players of such disclosures to the extent permitted by law.
International Data Transfers
Some of the third-party service providers used by gct99 may be located outside Bangladesh. Where personal data is transferred internationally, gct99 ensures that appropriate safeguards are in place — such as contractual data protection clauses — to maintain a level of protection equivalent to that provided under this Privacy Policy.
Data Retention
gct99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of data we hold:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and Identity Data | Duration of account plus 5 years after closure | Legal compliance, fraud prevention, dispute resolution |
| Financial Transaction Records | 7 years from the date of the transaction | Anti-money-laundering regulations, financial audit requirements |
| KYC Verification Documents | Duration of account plus 5 years after closure | Regulatory compliance and age verification obligations |
| Betting and Game History | Duration of account plus 3 years after closure | Dispute resolution, responsible gaming monitoring |
| Support Communications | 3 years from the date of the communication | Quality assurance, complaint handling, staff training |
| Technical and Usage Logs | Up to 13 months on a rolling basis | Fraud detection, security monitoring, platform analytics |
| Marketing Preferences | Until opt-out or account closure, plus 1 year | Proof of consent for marketing communications |
At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Where anonymisation is not technically feasible, data is archived in a secure, access-restricted environment until it can be permanently deleted.
Requests for early deletion of personal data are assessed on a case-by-case basis. Where a legal or regulatory obligation requires us to retain data for a specified minimum period, early deletion requests may not be able to be fulfilled in full. In such cases, gct99 will inform you of the specific data that must be retained, the reason for retention, and the expected date of deletion.
Your Data Rights
As a player on the gct99 platform, you have a number of rights in relation to the personal data we hold about you. gct99 is committed to upholding these rights and to responding to all legitimate data rights requests promptly and without undue delay. The following rights are available to all registered players:
Right of Access
You have the right to request a copy of all personal data gct99 holds about you. We will provide this in a structured, commonly used format within 30 days of your verified request.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Contact support with the specific details you wish to update.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to any overriding legal or regulatory retention obligations.
Right to Restrict Processing
You may request that we limit how we use your data in certain circumstances — for example, while the accuracy of the data is being contested or a complaint is under review.
Right to Data Portability
Where processing is based on your consent or on contract performance, you have the right to receive your personal data in a portable format so that it can be transferred to another service provider.
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you have grounds specific to your situation.
Rights Related to Automated Decisions
Where gct99 makes decisions about your account based solely on automated processing that produce significant effects, you have the right to request human review of that decision.
How to Exercise Your Rights
Submit all data rights requests to the gct99 support team via live chat or by emailing [email protected]. We will verify your identity before processing any request.
Response Timeframe
gct99 aims to respond to all data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it within the initial 30-day window. All responses are provided free of charge unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.
Data Security
gct99 implements a comprehensive set of technical and organisational security measures designed to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. Our security programme is reviewed and updated regularly to address emerging threats and evolving industry best practice.
Technical Security Measures
- SSL/TLS Encryption: All data in transit between your device and the gct99 platform is encrypted using industry-standard SSL/TLS protocols. This applies to all platform pages, payment flows, and API communications.
- Encryption at Rest: Sensitive personal data stored on gct99 servers — including identity documents and financial records — is encrypted at rest using AES-256 encryption.
- Access Controls: Access to personal data within the gct99 organisation is restricted on a strict need-to-know basis. Team members who do not require access to player personal data to perform their role are denied access at the system level.
- Two-Factor Authentication: Administrative access to gct99 internal systems that process personal data requires multi-factor authentication.
- Intrusion Detection: gct99 operates continuous intrusion detection and monitoring systems that alert the security team to anomalous activity on the platform in real time.
- Regular Security Audits: The gct99 platform and its underlying infrastructure undergo periodic security assessments and penetration testing by qualified security professionals.
Organisational Security Measures
- All gct99 staff and contractors who have access to personal data are subject to confidentiality obligations and receive data protection and security training appropriate to their role.
- gct99 maintains a documented incident response plan. In the event of a data breach that is likely to result in a risk to affected individuals, gct99 will notify the affected players and relevant authorities as required by applicable law.
- Third-party service providers who process personal data on behalf of gct99 are contractually required to maintain security standards equivalent to or exceeding those applied by gct99 directly.
Your Role in Account Security
While gct99 takes every reasonable measure to protect your data at the platform level, the security of your account also depends on you. Choose a strong, unique password for your gct99 account, never share your login credentials with anyone, and contact gct99 support immediately if you suspect that your account has been accessed without your authorisation.
Contact and Policy Updates
If you have any questions, concerns, or requests relating to this Privacy Policy or the way gct99 handles your personal data, please contact our support team. We are committed to addressing all privacy-related enquiries promptly and transparently.
How to Contact Us
The gct99 privacy and data protection team can be reached through the following channels. All privacy-related correspondence should clearly state your registered username and the nature of your enquiry so that we can route your request to the appropriate team member without delay.
- Live Chat: Available 24 hours a day, 7 days a week directly on the gct99 platform. This is the fastest way to reach our support team for general privacy queries.
- Email: [email protected] — for formal data rights requests, complaints, or detailed privacy enquiries. We aim to acknowledge all emails within 24 hours and provide a substantive response within 5 business days.
Updates to This Privacy Policy
gct99 reviews and updates this Privacy Policy periodically to reflect changes to our data practices, changes in applicable law, or improvements to the platform that affect how personal data is processed. When we make material changes to this policy, we will notify registered players by email and by displaying a prominent notice on the gct99 platform for a minimum of 14 days prior to the changes taking effect.
The current version of this Privacy Policy is always available at gct99.app/privacy-policy. The effective date of the current version is stated at the top of the page. Your continued use of the gct99 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the updated terms.
If you do not agree with any material change to this Privacy Policy, you have the right to close your account and request deletion of your personal data, subject to any overriding legal retention obligations as described in Section 5 of this policy. To close your account, please contact our support team via live chat or email.
Our Commitment to Your Privacy
gct99 is committed to maintaining the trust of every player on our platform. Privacy is not an afterthought — it is built into the way we design our systems, train our staff, and choose our partners. If you ever feel that we have not met the standards set out in this Privacy Policy, please tell us. Your feedback helps us improve, and every privacy complaint is taken seriously and investigated thoroughly.
Ready to Play at gct99?
Now that you have reviewed the gct99 Privacy Policy, you can explore the platform with confidence. From live cricket betting and premium slots to an immersive live casino experience — all backed by fast bKash and Nagad payments, 24/7 English support, and a secure environment for players aged 18 and above.