ge999 Privacy
Policy

This Privacy Policy ("Policy") describes the data controller practices of ge999 ("ge999", "we", "us", "our") in relation to the personal data of registered and unregistered users ("you", "your") of the ge999 online casino and sports betting platform accessible at ge999.vip. It sets out the categories of personal data we collect, the legal basis and purpose for processing that data, the circumstances under which it may be shared, the security measures we apply to protect it, and the rights you hold over your own information.

This Policy should be read alongside the ge999 Terms & Conditions and Responsible Gaming Policy. Where any conflict arises between this Policy and a separate data-specific notice (for example, a notice presented at the point of collecting sensitive information), the more specific notice shall take precedence for that particular processing activity.

01 Data We Collect

ge999 collects personal data from you in several ways: directly when you provide it to us during registration or through your use of the platform, automatically when you interact with the site, and occasionally from trusted third-party sources as part of identity verification and fraud prevention processes.

Information You Provide Directly

• Registration data: Full legal name, date of birth, email address, mobile phone number, residential address (including city and district in Bangladesh — e.g., Dhaka, Chittagong, Sylhet, Khulna), and chosen username.
• Identity verification documents: Government-issued National ID card, passport, or driving licence image; proof of address documentation (utility bill, bank statement); selfie photograph where required for liveness verification.
• Payment information: bKash mobile wallet number, Nagad account number, Rocket account number, Upay number, or bank account details for deposits and withdrawals. ge999 does not store full card numbers; all payment data is tokenised by the relevant payment processor.
• Communications data: Messages, emails, and chat transcripts exchanged with ge999 support staff, including the content of queries and any attachments provided.
• Responsible gaming declarations: Self-exclusion requests, deposit limit settings, session time preferences, and any problem gambling self-assessments you complete voluntarily.

Information Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device identifiers, screen resolution, and time zone settings.
• Usage and behavioural data: Pages visited on ge999.vip, game sessions played, bets placed, stake amounts, session start/end timestamps, in-game actions, and navigation paths through the site.
• Cookie and tracking data: Session cookies, preference cookies, analytics identifiers, and marketing attribution tokens. See the Cookies section below for full detail.
• Geolocation data: Country and approximate region-level location derived from IP address, used to apply jurisdiction-appropriate access controls.

Information From Third Parties

• KYC and identity verification providers: Document authenticity scores, age verification flags, and sanctions screening results from our identity verification partners.
• Payment processors: Transaction confirmation data, fraud risk scores, and chargeback notifications from bKash, Nagad, Rocket, Upay, and banking partners.
• Anti-fraud and AML services: Risk flags from third-party anti-money laundering screening databases where we are required to consult them under applicable compliance obligations.

02 How We Use Your Data

ge999 processes your personal data for a number of distinct purposes. Each purpose is grounded in a lawful basis for processing, as set out in the table below.

Marketing Communications

Where you have provided consent, ge999 may contact you by email or SMS to notify you of promotions, bonuses, seasonal offers (such as BPL season specials or Eid promotions), and platform updates. You may withdraw your marketing consent at any time by contacting [email protected] or by updating your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing that took place prior to the withdrawal.

03 Data Sharing & Third Parties

ge999 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the relevant purpose.

Service Providers and Data Processors

ge999 engages carefully selected third-party service providers who process personal data strictly on our behalf and under our written instructions. These include:

• Identity verification providers: To carry out KYC document checks, age verification, and liveness detection.
• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank process payment transaction data to facilitate deposits and withdrawals.
• Cloud hosting and infrastructure providers: ge999's platform is hosted on secure cloud infrastructure. Hosting providers process technical and usage data solely to deliver platform services.
• Analytics providers: Aggregated, anonymised usage data may be processed by web analytics platforms to help ge999 understand player behaviour and improve the site experience.
• AML and fraud screening services: Transaction and identity data may be passed to third-party compliance screening databases to meet anti-money laundering obligations.

All ge999 service providers are contractually bound to process data only as instructed, to apply appropriate technical and organisational security measures, and to notify ge999 promptly in the event of any data security incident.

Legal and Regulatory Disclosures

ge999 may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where we are under a legal obligation to do so, or where disclosure is necessary to protect the rights, property, or safety of ge999, its players, or third parties. ge999 will notify affected players of such disclosures where legally permitted to do so.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving ge999, player personal data may be transferred to the acquiring or surviving entity. In such circumstances, ge999 will ensure that the receiving entity is bound by privacy obligations at least equivalent to those set out in this Policy, and will notify players of any material change to the data controller relationship.

04 Cookies & Tracking

ge999 uses cookies and similar tracking technologies on the ge999.vip website to provide essential platform functionality, remember your preferences, analyse site usage, and — where you have given consent — deliver relevant promotional content. A cookie is a small text file stored on your device by your browser when you visit a website.

Types of Cookies We Use

Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings at any time. Most browsers allow you to refuse new cookies, delete existing cookies, or be notified when a new cookie is set. Please note that disabling strictly necessary cookies will impair your ability to log in to and use the ge999 platform. Disabling functional cookies may remove personalisation features. Disabling analytics and marketing cookies will not affect your core platform access.

ge999 does not use cookies to track your activity across third-party websites outside of ge999.vip. We do not engage in cross-site behavioural advertising.

05 Data Security & Retention

ge999 takes the security of your personal data seriously and applies technical and organisational measures proportionate to the sensitivity of the data processed and the risks presented by our platform environment.

Security Measures

• 256-bit SSL/TLS encryption is applied to all data in transit between your browser and ge999 servers.
• Encryption at rest is applied to sensitive data fields including identity documents, payment credentials, and password hashes.
• Access controls: Personal data is accessible only to ge999 staff who have a legitimate operational need, and only for the minimum time necessary to fulfil that need.
• Two-factor authentication is available for player accounts and is enforced internally for all staff with access to personal data systems.
• Regular security audits and penetration testing are conducted to identify and remediate vulnerabilities in the ge999 platform.
• Incident response procedures are in place to contain, assess, and notify in the event of a data security incident within an appropriate timeframe.

Data Retention

ge999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and transaction records: Retained for a minimum of five years following account closure to comply with anti-money laundering record-keeping obligations.
• Identity verification documents: Retained for five years from the date of verification or account closure, whichever is later.
• Support communications: Retained for three years from the date of the last communication in a case thread.
• Marketing data (where consent-based): Retained until consent is withdrawn, and then deleted within 30 days of withdrawal.
• Analytics data: Aggregated anonymised analytics data may be retained indefinitely as it no longer constitutes personal data.

06 Your Privacy Rights

As a ge999 player and data subject, you hold a number of rights in relation to your personal data. ge999 is committed to facilitating the exercise of these rights in a timely, straightforward manner. To exercise any of the rights listed below, contact the ge999 privacy team at [email protected] with the subject line "Privacy Rights Request".

Rights Available to You

• Right of access: You may request a copy of the personal data ge999 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data in certain circumstances, for example where the data is no longer necessary for the purpose for which it was collected. Note that this right may be limited where retention is required by law (e.g., AML record-keeping obligations).
• Right to restriction of processing: You may ask ge999 to restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of legitimate grounds.
• Right to data portability: Where processing is based on your consent or a contract, you may request that ge999 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to ge999's processing of your personal data where that processing is based on legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

ge999 will respond to all verified privacy rights requests within 30 days of receipt. Where a request is complex or involves a high volume of data, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reasons for it within the initial 30-day window.

07 Children's Privacy

The ge999 platform is strictly intended for adults aged 18 years and above. ge999 does not knowingly collect, process, or retain personal data from individuals under the age of 18. If ge999 becomes aware that personal data belonging to a person under 18 has been collected — whether through registration, payment activity, or any other interaction — that account will be closed immediately, all associated funds returned to the depositing payment source, and all personal data of the minor deleted from our systems without delay.

If you are a parent or guardian and you believe that your child has created a ge999 account or provided personal data to ge999 without your knowledge or consent, please contact us immediately at [email protected]. ge999 will investigate and take appropriate action as a matter of priority.

ge999 applies robust age verification controls at the point of registration and at the point of first withdrawal request. These controls are designed specifically to prevent individuals under the age of 18 from accessing real-money gambling services on the ge999 platform. ge999 takes its obligations in respect of underage gambling prevention extremely seriously and cooperates fully with any investigation involving potential underage account activity.

08 Policy Updates & Contact

ge999 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, platform features, applicable law, or regulatory guidance. The effective date at the top of this page reflects the date of the most recent revision. Where changes are material — meaning they affect the way in which your data is processed or your rights as a data subject — ge999 will notify registered players via email at least 14 days before the revised Policy takes effect.

Your continued use of the ge999 platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any material change, you should discontinue use of the platform and contact [email protected] to request account closure and data deletion where applicable.

How to Contact ge999 About Privacy

For all privacy-related queries, data subject rights requests, or concerns about how ge999 handles your personal data, please contact the ge999 privacy team using the following details:

• Email: [email protected] (subject line: "Privacy Enquiry" or "Privacy Rights Request")
• Response time target: Acknowledgement within 2 business days; substantive response within 30 days
• Support hours: 24 hours a day, 7 days a week