gte99 Privacy Policy

Introduction

gte99 ("we", "us", "our", "the Platform") is committed to protecting the privacy of every member who registers and plays on our platform. This Privacy Policy describes in full how we collect, use, store, share, and protect personal information provided by users ("you", "your", "Member") when accessing or using gte99, including through our website, mobile platform, and all associated services. This policy applies to all users based in Bangladesh and is written in compliance with applicable data protection principles.

By registering an account or using any feature of gte99, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your information as described herein. If you do not agree with any aspect of this policy, you should not use the platform. We reserve the right to update this policy at any time; the "Last updated" date at the top of this page reflects the most recent revision.

1. Information We Collect

gte99 collects personal information through several channels: directly from you when you register and use the platform, automatically as you interact with the site and services, and occasionally from third-party service providers involved in delivering our platform (for example, payment processors and identity verification providers). The specific categories of data we collect are described below.

Information You Provide Directly

• Registration data: your mobile phone number, chosen username, and password (stored in hashed form — we never store plain-text passwords). You may also provide a preferred display name.
• Identity verification documents: where required for KYC compliance, copies of your national identity card (NID), passport, or other government-issued identification, and may include a photograph or selfie for liveness verification.
• Payment information: mobile wallet account numbers (bKash, Nagad, Rocket, Upay) or card details (Visa, Mastercard) used for deposits and withdrawals. Full card numbers are never stored by gte99 — they are processed directly through our PCI-compliant payment partners.
• Support communications: records of your interactions with our customer support team via live chat, including the content of messages, timestamps, and resolutions. These records are retained for quality assurance and dispute resolution purposes.
• Responsible gaming declarations: if you set deposit limits, session reminders, or activate self-exclusion, we store a record of these preferences and when they were activated. This data is used to honour your responsible gaming settings.

Information Collected Automatically

• Device and connection data: device type, operating system and version, browser type, mobile carrier, IP address, and general geographic location derived from IP (city/district level — not precise GPS location).
• Usage data: pages visited, features used, games played, session duration, wager history, deposit and withdrawal history, and navigation patterns within the platform.
• Cookie and local storage data: session identifiers, preference settings, and analytics tokens stored in your browser or device. See Section 6 (Cookies) for full details.
• Transaction metadata: timestamps, transaction reference numbers, processing status, and the payment method type used for each transaction. We do not store full payment credential details beyond what is needed for reconciliation.

Information from Third Parties

• Identity verification providers: if you submit a KYC verification request, our third-party identity verification partner may share the outcome (verified / not verified) and associated metadata with us. We do not receive raw copies of your documents from the provider; they are processed within the provider's own secure environment.
• Payment processors: our payment partners (including mobile wallet providers and card networks) may share transaction status and fraud-signal data with us as part of the payment processing flow. This is limited to information necessary to confirm or dispute a transaction.
• Fraud prevention databases: in connection with our anti-money laundering (AML) and fraud prevention obligations, we may check account details against industry fraud-prevention databases. We do not share your full profile with these databases; we perform targeted lookups only.

2. How We Use Your Information

gte99 uses the personal information we collect for specific, legitimate purposes directly related to operating a safe and reliable online gaming platform for players in Bangladesh. We do not use your data for purposes beyond what is described in this policy without first obtaining your explicit consent.

• Account creation and management: to create, verify, and maintain your gte99 account, process your login, and enable the use of all platform features available to registered members.
• Processing financial transactions: to process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; to maintain accurate account balance records; and to reconcile any disputed transactions.
• Identity and age verification: to confirm that you meet the 21+ age eligibility requirement and that the identity information provided at registration is accurate. This includes KYC verification procedures where applicable.
• Fraud prevention and security: to detect and prevent fraudulent activity, money laundering, bonus abuse, and unauthorised account access. This includes automated pattern analysis and manual review of flagged accounts.
• Responsible gaming compliance: to enforce deposit limits, session time reminders, and self-exclusion settings that you have activated; to identify patterns of play that may indicate problem gambling; and to fulfil our responsible gaming obligations.
• Customer support: to respond to your queries, resolve account issues, investigate complaints, and maintain records of support interactions for quality assurance and audit purposes.
• Platform improvement and analytics: to understand how members use the platform, identify technical issues, and improve the overall gaming experience. Analytics data used for this purpose is aggregated and anonymised wherever possible.

3. Legal Basis for Processing Your Data

gte99 processes your personal data on the following legal bases, depending on the specific purpose for which data is being used:

• Contractual necessity: processing your registration data, payment data, and account activity records is necessary to fulfil the contract between you and gte99 — i.e., to provide you with an operational gaming account and process your financial transactions.
• Legal obligation: identity verification (KYC), age checks, anti-money laundering (AML) record-keeping, and fraud reporting are processing activities we are required to carry out under applicable laws and regulations. Consent is not required for these activities; they are mandatory.
• Legitimate interests: platform security monitoring, fraud detection, responsible gaming oversight, and aggregated analytics are carried out on the basis of gte99's legitimate interest in operating a safe, compliant, and well-functioning platform. These interests are balanced against your privacy rights — we do not carry out intrusive profiling or sell behavioural data.
• Consent: for promotional communications (bonus offers, new game alerts, seasonal promotions), we rely on your consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

4. Sharing Your Information

gte99 does not sell, rent, or trade your personal information to any third party. We share data only in the limited circumstances described below, and only to the extent necessary to fulfil the stated purpose.

When We Share Data

• Payment processors: we share the minimum payment data necessary (transaction amount, your registered mobile number or masked card reference, and transaction ID) with our payment partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard processors) to complete your deposit and withdrawal transactions.
• Identity verification providers: where KYC checks are required, your submitted identification documents are processed by our verified identity partner. The partner returns only a pass/fail status to gte99; it does not share raw document images beyond its own secure processing environment.
• Legal and regulatory authorities: if required by law, court order, or a legitimate request from a competent regulatory, financial crime, or law enforcement authority, we will disclose the personal data necessary to comply with that requirement. We will notify you of such disclosures where we are legally permitted to do so.
• Technology service providers: we use a small number of carefully vetted third-party technology providers to help operate the platform (for example, cloud hosting infrastructure, SMS verification services). These providers act strictly as data processors under our instruction and are contractually prohibited from using your data for their own purposes.

5. Payment Data and Financial Information

Given the financial nature of gte99 as a betting and gaming platform, payment data receives a heightened level of protection. The following specific rules apply to how financial information is handled on the platform:

• gte99 does not store full card numbers, CVV codes, or card expiry dates. Card payments are processed directly through PCI DSS-compliant payment processors. gte99 only retains a masked card reference (last 4 digits) and the payment method type for transaction history purposes.
• Mobile wallet numbers (bKash, Nagad, Rocket, Upay) are stored in encrypted form and are used only to process transactions you initiate. They are never shared with third parties except the specific wallet operator needed to complete your transaction.
• All financial transaction records — including deposit amounts, withdrawal amounts, dates, and payment method references — are retained for a minimum of 5 years to satisfy applicable financial record-keeping and AML compliance requirements.
• Withdrawal requests are verified against the identity on file before processing. This means your withdrawal destination must match a payment account registered in your own name. Third-party withdrawal destinations are not permitted under any circumstances.

6. Cookies and Tracking Technologies

gte99 uses cookies and similar local storage technologies to operate core platform functionality, remember your session and preferences, and understand aggregate usage patterns. We do not use third-party advertising or cross-site tracking cookies.

Types of Cookies We Use

• Essential cookies: required for the platform to function. These include your login session token, security tokens (CSRF protection), and account preference settings. Without these cookies, core features such as logging in, depositing, and withdrawing cannot work. These cookies cannot be disabled.
• Functional cookies: used to remember your language preference, display settings, and responsible gaming configurations. These improve your experience but are not strictly required for the platform to operate. You may clear these via your browser settings.
• Analytics cookies: aggregated and anonymised data about which pages are visited most frequently and how users navigate through the platform. This data helps us identify usability issues and improve the platform. No personally identifiable information is included in analytics reports.
• Security cookies: short-lived tokens used to protect against session hijacking, CSRF attacks, and other common web security threats. These are strictly necessary and are automatically cleared when you close your browser session.

You can manage or delete cookies at any time through your browser or device settings. Please note that disabling essential cookies will prevent you from logging into your gte99 account and using the platform's core features. Clearing functional cookies will reset your display preferences and you may need to re-enter certain settings on your next visit.

7. Data Retention

gte99 retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data (registration details, login records, gaming history, responsible gaming settings): retained for the full duration of your account's active status and for a period of 2 years following permanent account closure, subject to any longer mandatory retention periods imposed by AML regulations.
• Financial transaction records: retained for a minimum of 5 years from the date of the transaction to comply with financial record-keeping obligations. After this period, transaction records are anonymised and retained only in aggregated statistical form.
• Support interaction logs: retained for 3 years from the date of the interaction to support dispute resolution, quality assurance, and audit processes. After 3 years, detailed logs are deleted and only summary records (date, subject, resolution status) are kept for a further 2 years.

8. Data Security Measures

gte99 implements a multi-layered approach to data security to protect your personal information against unauthorised access, loss, alteration, or disclosure. While no online system can guarantee absolute security, the measures we have in place reflect current best practices in the online gaming industry.

• SSL/TLS encryption: all data transmitted between your device and gte99's servers is encrypted using industry-standard SSL/TLS protocols. This applies to all pages of the platform — not only payment pages.
• Password security: member passwords are stored using a one-way cryptographic hash function with salting. Plain-text passwords are never stored or logged. Our system enforces minimum password complexity requirements at registration.
• Access controls: access to member personal data within gte99's internal systems is restricted on a strict need-to-know basis. Customer support agents can access only the account data necessary to resolve the specific issue raised. Full financial records are accessible only to a limited number of authorised personnel.
• Security monitoring: gte99 operates continuous automated monitoring for unusual account activity, failed login attempts, abnormal transaction patterns, and other security indicators. Suspicious activity triggers an immediate internal alert and review process.

9. Your Privacy Rights

As a gte99 member, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact our support team via live chat. We will respond to all valid requests within 30 days.

• Right of access: you may request a copy of all personal data gte99 holds about you. We will provide this in a structured, readable format within 30 days of the request.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct it. We will update the record within 14 days of a verified correction request.
• Right to erasure: you may request that gte99 delete your personal data. This right is subject to legal retention requirements — for example, financial transaction records cannot be deleted before their mandatory retention period expires. Where deletion is possible, it will be carried out within 30 days.
• Right to restrict processing: you may request that we temporarily restrict the processing of your data while a correction or deletion request is under review, or where you contest the accuracy of the data we hold.
• Right to data portability: you may request a copy of the personal data you provided to us in a machine-readable format (JSON or CSV), covering account registration data and gaming history. This does not include derived or inferred data.
• Right to withdraw consent: where processing is based on your consent (primarily promotional communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

To exercise any of the above rights, contact us via live chat and provide your registered mobile number and a brief description of your request. We may need to verify your identity before processing sensitive data requests. There is no charge for exercising these rights, and we will not treat you differently as a result of a rights request.

10. Children's Privacy

gte99 is strictly an adult-only platform. Access is permitted only to individuals aged 21 and above. We do not knowingly collect personal data from anyone under the age of 21. If a member is found to be under 21, their account will be closed immediately, all balances will be forfeited, and any personal data collected will be deleted in accordance with our data retention policy, subject only to mandatory legal retention obligations where applicable.

11. Third-Party Links and Services

The gte99 platform may reference or integrate with third-party services such as game providers (Pragmatic Play, Evolution Gaming, Spribe, and others) and payment processors. These third parties operate their own systems and are subject to their own privacy policies. gte99 is not responsible for the privacy practices of third-party game providers or payment processors. When you interact with a game or payment service, the relevant provider's own terms and privacy policy apply to that interaction. We encourage you to review the privacy policies of any third-party service you use in connection with gte99.

12. Changes to This Privacy Policy

gte99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will update the "Last updated" date at the top of this page. We may also notify you of significant changes via your registered mobile number where practicable.

Your continued use of gte99 after any update to this policy constitutes acceptance of the revised Privacy Policy. If you do not agree with a material change, you should stop using the platform and may request account closure by contacting support via live chat.

13. Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to report a privacy concern, please contact our support team. We are available 24 hours a day, 7 days a week via live chat on the platform. For formal written privacy requests, please use the email address below.

For written privacy requests and data rights enquiries, email us at: [email protected]