ge99 Privacy
Policy

1 Who We Are

ge99 operates the online casino and sports betting platform accessible at ge99.io. In the context of this Privacy Policy, "ge99", "we", "us", and "our" refer to the entity that owns and operates the ge99 platform. ge99.io is a platform designed for adult players (aged 21 and above) based in Bangladesh and provides access to casino games, live dealer tables, sports betting markets, and related services denominated in Bangladeshi Taka (BDT).

For all privacy-related enquiries, data access requests, or complaints, please contact our dedicated support team at [email protected]. We aim to respond to all privacy-related correspondence within 5 business days.

2 Scope of This Policy

This Privacy Policy applies to all personal data collected by ge99 through the following channels:

• The ge99 website and mobile web application at ge99.io
• The account registration and verification process
• Deposit and withdrawal transactions conducted via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and local bank transfers
• Customer support interactions via email at [email protected]
• Promotional and marketing communications (where you have opted in)
• Technical data collected automatically during your use of the platform

This policy does not apply to third-party websites, game providers, or payment processors that you may interact with in connection with your use of ge99. Those parties operate under their own independent privacy policies, and ge99 is not responsible for their data practices.

3 Data We Collect

ge99 collects personal data in three principal categories: information you provide directly, information generated by your use of the platform, and information received from third-party verification services.

3.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, residential address, email address, and mobile phone number provided when creating your ge99 account.
• Identity verification documents: National Identity Card (NID), passport, or driving licence image submitted for age and identity verification purposes.
• Payment data: Mobile banking account numbers (bKash, Nagad, Rocket, Upay), card details (processed via PCI-DSS compliant payment gateways), and bank account information used for deposits and withdrawals. ge99 does not store full card numbers on its own servers.
• Support communications: Content of emails, chat messages, or other correspondence you send to ge99 support.
• Responsible gaming self-declarations: Information provided when setting deposit limits, cooling-off periods, or self-exclusion requests.

3.2 Data Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device model, screen resolution, and time zone (Bangladesh Standard Time, UTC+6).
• Usage data: Pages visited on ge99.io, session duration, game titles accessed, betting activity logs, login timestamps, and navigation paths.
• Transaction logs: Records of all deposits, withdrawals, bets placed, game rounds played, bonus activations, and account balance changes.
• Cookie data: Session identifiers, preference settings, and analytics data collected via cookies as described in Section 7.

3.3 Data from Third Parties

• Identity verification services: Confirmation data returned by third-party identity verification providers used to validate the authenticity of documents submitted by players.
• Payment processors: Transaction status confirmations, reference numbers, and fraud risk signals received from payment gateway partners including bKash, Nagad, and card processing networks.
• Fraud and risk screening: Risk scores and flagging information from third-party fraud detection services used to protect the integrity of the platform.

4 How We Use Your Data

ge99 uses the personal data described in Section 3 for the following specific purposes:

Purpose	Data Used	Legal Basis
Account creation and management	Registration data, identity documents	Contract performance
Age and identity verification	Date of birth, NID / passport	Legal obligation
Processing deposits and withdrawals	Payment data, transaction logs	Contract performance
Fraud prevention and security	IP address, device data, transaction logs	Legitimate interest
Customer support	Support communications, account data	Contract performance
Responsible gaming compliance	Betting activity, self-declaration data	Legal obligation
Platform analytics and improvement	Usage data, cookie data	Legitimate interest
Promotional communications (opt-in)	Email address, name	Consent
Anti-money-laundering checks	Identity documents, transaction records	Legal obligation

5 Legal Basis for Processing

ge99 processes personal data on one or more of the following legal bases:

• Contract performance: Processing is necessary to fulfil the contractual relationship between you and ge99, including operating your account, executing transactions, and providing access to games and betting markets.
• Legal obligation: Processing is required by applicable law, including age verification, anti-money-laundering (AML) procedures, and record-keeping requirements.
• Legitimate interest: Processing is necessary for ge99's legitimate business interests, including fraud prevention, platform security, and service improvement, provided those interests are not overridden by your rights and interests.
• Consent: Where processing is based on your consent — such as receiving promotional emails — you may withdraw that consent at any time by contacting [email protected] or updating your account communication preferences. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

6 Data Sharing and Disclosure

ge99 does not sell personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for each specific purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, and card payment networks receive the payment data necessary to process your transactions. These partners are subject to their own privacy policies and regulatory requirements.
• Identity verification providers: Third-party KYC (Know Your Customer) service providers receive copies of identity documents solely for the purpose of verifying player identity and age.
• Game content providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session tokens and anonymised usage data as part of the technical integration required to deliver their games. These studios operate under their own data processing agreements with ge99.
• Fraud detection services: Risk management and fraud screening partners receive technical data (IP address, device fingerprint, transaction metadata) to assess fraud risk signals.
• Legal and regulatory disclosure: ge99 may disclose personal data to competent authorities, law enforcement agencies, or courts where required by applicable law or in response to a valid legal order.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of ge99's business, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

7 Cookies and Tracking

ge99.io uses cookies and similar technologies to operate the platform, remember your preferences, and analyse aggregate usage patterns. The following categories of cookies are used:

• Essential cookies: Required for core platform functionality including session management, ge99 login authentication, and security token validation. These cookies cannot be disabled without preventing access to the platform.
• Functional cookies: Store your preferences such as language settings, display preferences, and responsible gaming tool configurations so these are preserved across sessions.
• Analytical cookies: Collect anonymised data about how players navigate and use ge99.io to help us identify and resolve usability issues and improve the platform. Analytical data is aggregated and not linked to individual identity.

ge99 does not use advertising cookies, retargeting pixels, or third-party social media tracking scripts. You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will prevent you from logging in and using the platform.

8 Data Retention

ge99 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, and contractual obligations. The following general retention periods apply:

• Account registration data: Retained for the duration of your active account plus 5 years following account closure, to satisfy record-keeping and legal compliance requirements.
• Identity verification documents: Retained for the period required by applicable AML regulations, typically 5 years from the date of verification or account closure, whichever is later.
• Transaction records: All deposit, withdrawal, and betting transaction logs are retained for a minimum of 5 years from the date of each transaction.
• Support communications: Retained for 2 years from the date of the interaction, unless the matter relates to an ongoing dispute or legal proceedings, in which case records are retained until final resolution.
• Analytical and technical data: Aggregated usage analytics are retained for up to 24 months. Raw session logs are deleted within 90 days.
• Marketing preference records: Records of consent or opt-out are retained for as long as they remain relevant to the player's account status plus 1 year following account closure.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an individual player.

9 Data Security

ge99 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key security controls in place include:

• Transport encryption: All data transmitted between your device and ge99.io is encrypted using TLS 1.2 or higher. The platform operates exclusively over HTTPS.
• Encryption at rest: Sensitive personal data stored in ge99's databases is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to systems holding personal data is restricted to authorised personnel only, on a strict need-to-know basis, and is enforced by multi-factor authentication and role-based access controls.
• Payment data security: ge99 does not store full card numbers or CVV codes on its own servers. Card payment data is handled exclusively by PCI-DSS compliant payment processors.
• Security monitoring: ge99's systems are subject to continuous security monitoring, intrusion detection, and regular vulnerability assessments.
• Incident response: ge99 maintains a data breach response procedure. In the event of a breach that poses a significant risk to player data, affected players will be notified without undue delay.

While ge99 takes all reasonable and commercially practicable steps to protect your data, no online system can be guaranteed to be 100% secure. Players should also take responsibility for their own account security, including using strong and unique passwords and keeping their ge99 login credentials confidential.

10 Your Rights

As a ge99 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a verified request.

• Right of access: You have the right to request a copy of the personal data ge99 holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. You may also update certain account details directly from your account settings dashboard.
• Right to erasure: You have the right to request deletion of your personal data in certain circumstances, such as where the data is no longer necessary for the purpose it was collected. This right is subject to ge99's legal retention obligations — we cannot delete data that we are legally required to retain.
• Right to restriction of processing: You have the right to request that ge99 restrict the processing of your data in certain circumstances, such as while the accuracy of data is being contested.
• Right to data portability: You have the right to receive a copy of personal data you have provided to ge99 in a structured, commonly used, and machine-readable format where processing is based on contract or consent.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You have the right to object to processing of your personal data carried out on the basis of legitimate interest, including for direct marketing purposes.

11 Children and Minors

ge99 is strictly intended for adults aged 21 years and above. ge99 does not knowingly collect personal data from individuals under the age of 21 under any circumstances. The platform applies age verification procedures at registration and may require additional documentary proof of age at any stage of the account lifecycle.

If ge99 discovers or is notified that personal data has been collected from an individual who is under 21 years of age, we will immediately close the associated account, securely delete all data collected from that individual, and return any funds in accordance with our Terms and Conditions. Parents or guardians who believe a minor may have registered on ge99 should contact [email protected] immediately.

12 International Data Transfers

ge99 primarily serves players in Bangladesh and holds data on infrastructure located in Asia-Pacific regions. In the course of delivering the platform — particularly in connection with game content providers, payment processors, and fraud detection services — certain personal data may be transferred to or accessed from servers located outside Bangladesh.

Where such transfers occur, ge99 takes steps to ensure that equivalent levels of data protection are maintained, including by:

• Entering into data processing agreements with third-party service providers that require them to handle personal data in accordance with appropriate security and confidentiality standards.
• Working only with established, reputable service providers that maintain internationally recognised security certifications where available.
• Limiting the scope of data shared with international service providers to the minimum necessary for the specific service being provided.

13 Third-Party Links

ge99.io does not contain links to external third-party websites in its navigational structure. However, game content delivered by third-party studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) is rendered within embedded game frames that are hosted or partly served by those providers' own infrastructure.

ge99 is not responsible for the privacy practices of game studios or payment providers in relation to data processing that occurs within their own systems or infrastructure. Players are encouraged to review the privacy policies of third-party game providers and payment processors to understand how those parties handle data.

14 Changes to This Policy

ge99 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players via the email address on file or via a prominent notice on ge99.io, at least 7 days before the updated policy takes effect. The "Last Updated" date at the top of this page will reflect the most recent revision date.

Your continued use of the ge99 platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with the revised policy, you must cease using the platform and may request account closure by contacting [email protected].

15 Contact and Data Requests

For all privacy-related enquiries, data subject rights requests, or concerns about how ge99 handles your personal data, please use the following contact details. All communications must be made in writing via email.

• Privacy Enquiries Email: [email protected]
• Subject Line for Data Rights Requests: "Data Rights Request — [Your Registered Email]"
• Subject Line for Privacy Complaints: "Privacy Complaint — [Your Registered Email]"
• Response Time: Within 5 business days for general enquiries; within 30 days for formal data rights requests
• Availability: 24 hours a day, 7 days a week — Bangladesh Standard Time (BST, UTC+6)