Privacy Policy
At gy99, protecting your personal data is a responsibility we take seriously. This Privacy Policy explains what information we collect when you use our platform, how we use it, who we share it with, and how we keep it secure. We are committed to handling your data with full transparency and integrity across every interaction you have with gy99.
Who This Policy Applies To: This Privacy Policy applies to all individuals who visit the gy99 website at gy99.app, register a player account, place bets, participate in promotions, or contact gy99 customer support. By using any part of the gy99 platform, you acknowledge that you have read and understood this policy. If you do not agree with how we handle personal data, please discontinue use of the platform.
Identity Data
We collect your name, date of birth, and national ID details during registration and KYC verification to confirm your identity and ensure only eligible, verified players access real-money features on gy99.
Secure Storage
All personal data stored by gy99 is encrypted at rest using industry-standard protocols. Access to player data is restricted to authorised personnel only, and all internal data access is logged and audited regularly.
Payment Data
Financial transaction data — including bKash, Nagad, Rocket, and bank transfer records — is stored solely for the purposes of processing deposits, withdrawals, fraud prevention, and regulatory compliance. We do not store full card numbers.
Location & Device Data
We collect approximate location data and device identifiers (IP address, browser type, operating system) to enforce responsible gaming controls, detect fraud, and ensure the platform is displayed correctly for players across Dhaka, Chittagong, Sylhet, and beyond.
No Third-Party Selling
gy99 does not sell, rent, or trade your personal data to any third party for marketing purposes. Data shared with our licensed game providers and payment processors is limited strictly to what is necessary for service delivery.
Your Control
You have the right to access, correct, and request deletion of your personal data held by gy99. Submit a data request at any time by contacting our support team at [email protected] and we will respond within a reasonable timeframe.
Information We Collect
gy99 collects personal data through several channels: directly from you when you register, deposit, wager, or contact support; automatically when you interact with our platform; and from trusted third-party service providers such as payment processors and identity verification agencies. The categories of data we collect are described below.
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full name, date of birth, national ID number, passport number, photograph | Registration form, KYC document upload |
| Contact Data | Mobile phone number, email address, residential address in Bangladesh | Registration form, account settings |
| Financial Data | bKash wallet number, Nagad account, Rocket number, bank account details, transaction history | Deposit and withdrawal requests |
| Technical Data | IP address, device type, operating system, browser type, session duration, cookie identifiers | Automatic collection via platform analytics |
| Gameplay Data | Bet history, game preferences, wagering patterns, win/loss records, bonus usage | Automatic collection during platform use |
| Communications Data | Support ticket content, chat transcripts, email correspondence with gy99 support staff | Customer support interactions |
| Marketing Preferences | Opt-in or opt-out status for promotional communications, preferred contact channel | Account settings, marketing consent forms |
We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless this is strictly required by a legal obligation (for example, evidence of a self-exclusion reason provided voluntarily by a player). Where sensitive data is provided, it is handled with the highest level of care.
Minors: gy99 does not knowingly collect personal data from individuals under the age of 18. If we discover that a minor has provided personal data during registration, the account will be immediately closed and all associated data deleted. 18+ Only
How We Use Your Data
gy99 uses your personal data only for the purposes for which it was collected, or for closely related purposes that you would reasonably expect. We do not use your data for any purpose that is incompatible with the original reason for collection without first obtaining your consent or establishing an appropriate legal basis. The primary purposes for which we use your data are as follows.
- Account Registration and Management: We use your identity and contact data to create and maintain your gy99 account, verify your eligibility to play, and allow you to log in securely.
- Identity Verification (KYC): We process your identity documents and financial data to comply with Know Your Customer obligations, prevent underage gambling, and confirm that you are the rightful owner of the payment methods linked to your account.
- Payment Processing: We use your financial data to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfers, Visa, and Mastercard. All transaction records are retained for audit and dispute resolution purposes.
- Platform Delivery: Technical and gameplay data enables us to present the gy99 platform correctly on your device, personalise your game recommendations, and ensure the sportsbook, live casino, slots, and crash games function as expected.
- Responsible Gaming: We analyse gameplay and wagering patterns to identify signs of problem gambling behaviour, enforce deposit limits and session controls, and support self-exclusion requests promptly and effectively.
- Fraud Prevention and Security: Technical data such as IP addresses, device identifiers, and login records are used to detect and prevent fraudulent activity, account takeovers, bonus abuse, and money laundering.
- Customer Support: Communications data from support interactions is used to resolve queries, investigate disputes, and improve the quality of our service team's responses.
- Legal and Regulatory Compliance: We are obligated to retain certain data for compliance with applicable laws, including anti-money laundering regulations. Retained records may be disclosed to law enforcement authorities when legally required.
- Promotional Communications: With your consent, we may use your contact data to send promotional offers, bonus updates, BPL/IPL season campaigns, and Eid or Pohela Boishakh specials. You may withdraw this consent at any time via your account settings or by contacting [email protected].
- Platform Improvement: Aggregated, anonymised technical and gameplay data is used to improve platform performance, develop new features, and enhance the overall user experience for players across Bangladesh.
Data Sharing & Disclosure
gy99 does not sell or rent your personal data to third parties. We share data only where it is necessary to deliver our services, fulfil legal obligations, or protect the integrity of the platform. All third parties with whom we share data are contractually required to handle it in accordance with applicable data protection standards.
- Payment Processors: To facilitate deposits and withdrawals, we share relevant financial and identity data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Each provider operates under its own privacy policy and security standards.
- Game Providers: When you play games powered by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, certain technical data (session tokens, stake amounts, RNG seeds) is shared with those providers solely for game delivery and integrity purposes.
- Identity Verification Agencies: For KYC purposes, we may share identity document data with accredited third-party verification services to confirm your age, identity, and address.
- Analytics Providers: Anonymised and aggregated technical data may be processed by analytics partners to help us understand platform performance and user behaviour. Individual players are not identifiable from this data.
- Law Enforcement and Regulatory Authorities: We will disclose personal data to law enforcement agencies, courts, or regulatory bodies when required to do so by applicable law, or when we reasonably believe that disclosure is necessary to prevent financial crime or protect the safety of our players.
- Business Transfers: In the event of a merger, acquisition, or sale of gy99 as a business, your personal data may be transferred to the acquiring entity as part of that transaction, subject to the same privacy protections described in this policy.
No Marketing Third-Party Sharing: gy99 does not share your personal data with any third-party advertisers or marketing agencies for the purpose of targeting you with third-party advertisements. All promotional communications you receive come directly from gy99, and only if you have opted in.
Cookies & Tracking Technologies
gy99 uses cookies and similar tracking technologies to keep the platform functioning correctly, remember your preferences, and understand how players interact with our site. A cookie is a small text file stored on your device by your browser when you visit gy99.app. The types of cookies we use are described below.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Required for the platform to function. Includes session authentication, login state, security tokens, and shopping cart equivalents for bet slip management. | No — platform will not function without these |
| Functional | Remembers your language preference, display settings, and previously visited game categories to improve your browsing experience. | Yes — via browser settings |
| Analytics | Collects anonymised data on page views, session durations, and navigation paths to help gy99 improve platform usability and content relevance. | Yes — via browser settings or opt-out |
| Security | Detects suspicious login attempts, unusual betting patterns, and potential fraud signals by tracking device fingerprints and session anomalies. | No — required for account security |
You can manage or delete cookies through your browser settings at any time. Disabling non-essential cookies will not prevent you from using the core gy99 platform, though some preferences may not be saved between sessions. For detailed instructions on managing cookies in your specific browser, please refer to your browser's help documentation.
Data Retention
gy99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.
- Active Account Data: Identity, contact, financial, and gameplay data is retained for the full duration of your active account relationship with gy99. This data is necessary to deliver services, process transactions, and support responsible gaming controls.
- Post-Closure Retention: Following voluntary account closure or gy99-initiated account termination, we retain identity and transaction records for a minimum period in accordance with applicable anti-money laundering and financial record-keeping obligations. This period is typically five years from the date of last transaction.
- Self-Exclusion Records: If you request self-exclusion, your self-exclusion record is retained for the full duration of the exclusion period plus an additional period afterwards to prevent re-registration. This protects players who have identified a gambling problem and chosen to step away.
- Support Communications: Customer support correspondence is retained for a period of two years from the date of the last interaction, after which it is deleted unless subject to an active dispute or legal hold.
- Marketing Data: If you have opted in to promotional communications, your marketing preference data is retained until you withdraw consent. Upon opt-out, your details are suppressed from marketing lists promptly.
- Technical and Analytics Data: Anonymised analytics data may be retained indefinitely as it cannot be traced back to any individual player. Identifiable technical logs such as IP address records are deleted after 90 days.
Your Privacy Rights
As a player on the gy99 platform, you have a number of rights in relation to the personal data we hold about you. gy99 is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact us at [email protected] with the subject line "Data Privacy Request" and include your registered mobile number so we can verify your identity before processing your request.
Right to Access
Request a copy of all personal data gy99 holds about you. We will provide this within a reasonable timeframe at no charge.
Right to Rectification
Request correction of any inaccurate or incomplete personal data in your gy99 account profile or records.
Right to Erasure
Request deletion of your personal data where it is no longer necessary, subject to legal retention requirements that may override this right.
Right to Restriction
Request that we temporarily restrict processing of your data while a dispute or accuracy challenge is being resolved.
Right to Portability
Request a structured, machine-readable export of personal data you have provided to gy99, for transfer to another service provider.
Right to Object
Object to processing of your personal data for direct marketing purposes. Your objection will be honoured immediately upon receipt.
Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Right to Complain
If you believe gy99 has mishandled your data, you have the right to raise a complaint directly with us at [email protected].
Please note that certain rights may be limited where gy99 has a legitimate legal basis for retaining or processing your data that overrides your individual request — for example, where anti-money laundering law requires us to retain transaction records for a statutory period. In such cases, we will explain the limitation clearly in our response to your request.
Data Security Measures
gy99 employs a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme is reviewed regularly and updated to address emerging threats. Key measures include:
- SSL/TLS Encryption: All data transmitted between your browser and the gy99 platform is encrypted using SSL/TLS protocols. You can verify this by the padlock icon and HTTPS prefix in your browser's address bar when visiting gy99.app.
- Encryption at Rest: Personal data stored in gy99's databases is encrypted at rest. Encryption keys are managed separately from the data they protect and are rotated on a regular schedule.
- Access Controls: Access to player data within gy99's internal systems is restricted to staff whose roles specifically require it. All access is authenticated, logged, and subject to periodic review.
- Two-Factor Authentication: Player accounts support additional authentication layers to protect against unauthorised logins. gy99 strongly recommends that all players enable two-factor authentication on their accounts.
- Fraud Detection Systems: Automated monitoring systems scan for unusual account activity, irregular betting patterns, and suspicious login behaviour in real time, triggering security alerts when anomalies are detected.
- Third-Party Security Audits: gy99 engages independent security professionals to conduct periodic penetration testing and vulnerability assessments of the platform infrastructure.
- Staff Training: All gy99 team members who handle personal data receive regular data protection and security awareness training to ensure they understand their obligations and the importance of handling player data responsibly.
- Incident Response: gy99 maintains a data breach response plan. In the event of a security incident that affects your personal data, we will notify affected players promptly with information on the nature of the breach and the steps being taken to address it.
Your Responsibility: While gy99 takes extensive steps to secure your data, the security of your account also depends on you. Never share your gy99 password with anyone, never access your account from shared or public devices without logging out, and contact [email protected] immediately if you suspect unauthorised access to your account.
Contact & Data Queries
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to raise a concern about how gy99 has handled your personal data, please reach out to our support team using the contact details below. We are committed to responding to all data-related queries within a reasonable timeframe.
- Email: [email protected] — use the subject line "Data Privacy Request" for all privacy-related queries so our team can prioritise and route your message correctly.
- Response Time: gy99 aims to acknowledge all privacy requests within 3 business days and to provide a substantive response within 30 calendar days. Complex requests may require additional time, in which case we will inform you of the extended timeline.
- Identity Verification: To protect your privacy, we will verify your identity before processing any data access, rectification, or deletion request. Please include your registered mobile number or account username in your request.
- Platform: gy99.app — all privacy-related requests must be submitted in writing via email. We are unable to process verbal requests over live chat for data protection reasons.
Policy Updates
gy99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, service offering, or applicable law. When material changes are made, we will post a prominent notice on the gy99 platform and, where reasonably practicable, notify registered players via their registered email address. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. Your continued use of the gy99 platform after any update constitutes acceptance of the revised Privacy Policy.
Your Data Is Safe. Now Enjoy the Game.
With your privacy protected by SSL encryption and strict data handling standards, you can focus on what matters — cricket betting, live casino, slots, and more, all on Bangladesh's trusted gy99 platform.
18+ Gambling involves risk. Play responsibly. For adults aged 18 and above only. gy99 is a safe and reliable platform using SSL encryption and fair play certified games.