gh99 Privacy Policy

Last Updated: 1 January 2026. This Privacy Policy supersedes all prior versions. gh99 reserves the right to revise this policy at any time. Registered players will be notified of material changes via email to their registered address.

1. Data We Collect

gh99 collects personal data through multiple touchpoints during your use of gh99.app. The categories of personal data we collect, and the context in which they are collected, are described in detail below.

1.1 Registration Data

When you create a gh99 account, we collect the information you provide directly, which includes: your full legal name as it appears on your official identification document, your date of birth, your Bangladesh mobile phone number, your email address (where provided), and the username and password you choose for your account. This data is essential for creating and managing your account and cannot be omitted during registration.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, gh99 may request copies of official identity documents including your National Identity Card (NID), passport, or driving licence issued by a competent Bangladesh authority. We may also collect a selfie photograph for facial verification purposes. KYC documents are stored securely and used exclusively for the purpose of verifying your identity and age in accordance with our Terms & Conditions.

1.3 Payment Data

When you make a deposit or request a withdrawal, we collect transaction-related data including your bKash, Nagad, Rocket, or Upay mobile number, the transaction reference number generated by the payment provider, the amount and currency of each transaction, and the date and time of the transaction. For card payments via Visa or Mastercard, we collect the card type, the last four digits of the card number, and the card expiry date. Full card numbers and mobile banking PINs are never stored by gh99; they are processed directly by our certified payment partners.

1.4 Gameplay & Activity Data

gh99 records data about your activity on the platform, including the games you play, the stakes you place, the outcomes of your sessions, your account balance history, the bonuses you claim and redeem, and the time and duration of your gameplay sessions. This data is used to operate your account accurately, detect fraud, enforce responsible gaming limits, and improve our service offering.

1.5 Technical & Device Data

When you access gh99.app, our servers automatically collect certain technical information, including your IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, referring URL, pages visited on gh99.app, and session duration. This technical data helps us maintain the security and performance of the platform and investigate any suspicious access patterns.

1.6 Communications Data

If you contact gh99 through our customer support channels — including live chat, email to [email protected], or any other support mechanism — we retain a record of your communications and our responses. This helps us maintain service quality and resolve any recurring issues or disputes effectively.

2. How We Use Your Data

gh99 processes your personal data on the basis of contractual necessity (to deliver the service you signed up for), legitimate interests (to protect the platform from fraud and abuse), legal obligation (to comply with applicable laws), and where required, explicit consent (for optional marketing communications).

2.1 Service Delivery

The primary purpose of collecting your personal data is to operate your gh99 account and deliver the full range of platform services, including processing your deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; providing access to our games library of over 1,000 titles from studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi; applying bonuses and promotions to your account; and providing English-language customer support around the clock.

2.2 Identity Verification & Fraud Prevention

gh99 uses the personal data you provide, together with automated risk-assessment tools, to verify your identity, confirm your age as 18 or above, detect and prevent fraudulent activity (including duplicate accounts, stolen payment methods, and money laundering), and comply with our anti-money laundering (AML) obligations. Where we detect suspicious activity, we may suspend an account pending investigation and, where legally required, report the activity to relevant Bangladesh authorities.

2.3 Responsible Gaming

Your gameplay data — including session frequency, session duration, stake sizes, and deposit patterns — is analysed by gh99's responsible gaming systems to identify signs of potentially harmful gambling behaviour. Where such patterns are detected, our team may reach out to you proactively to offer support, suggest self-imposed limits, or recommend the self-exclusion tools available in your account settings. This processing is conducted in your interest and in accordance with our commitment to responsible gaming.

2.4 Platform Improvement

Aggregated and anonymised technical and gameplay data is used by gh99's product and engineering teams to improve the performance, reliability, and user experience of gh99.app. This analysis does not involve identifying or singling out individual players; it operates at an aggregate level to understand platform-wide usage patterns, most-played game categories, peak usage periods, and common support enquiry themes.

2.5 Marketing Communications

With your explicit consent, gh99 may send you promotional communications about new games, seasonal offers (such as Eid bonuses, BPL cricket promotions, and Pohela Boishakh specials), and platform updates via SMS to your registered Bangladesh mobile number or via email. You may withdraw your consent to marketing communications at any time by updating your account notification preferences or by contacting [email protected]. Withdrawal of marketing consent does not affect your ability to use gh99's core services.

3. Data Sharing & Disclosure

gh99 does not sell, rent, barter, or otherwise transfer your personal data to third parties for their own commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

3.1 Payment Processing Partners

To process your deposits and withdrawals, gh99 shares relevant transaction data with our certified payment processing partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and the card networks Visa and Mastercard. Each of these partners operates under their own privacy and data security frameworks, which comply with applicable financial regulations in Bangladesh.

3.2 Game Providers

To facilitate access to third-party hosted games, a minimal set of session data (such as a player token, account currency, and session stake limit) is shared with game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers do not receive your full personal profile; they receive only the data required to initialise and operate a game session securely.

3.3 Legal & Regulatory Disclosure

gh99 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other government authorities in Bangladesh where we are legally required to do so, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of gh99, its players, or the public. We will notify affected players of any such disclosure where we are legally permitted to do so.

3.4 Business Transfers

In the event that gh99 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, personal data held by gh99 may be transferred to the acquiring entity as part of that transaction. Affected players will be notified prior to any such transfer, and the acquiring entity will be required to honour the terms of this Privacy Policy with respect to previously collected personal data.

4. Cookies & Tracking

gh99.app uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience. A cookie is a small text file stored on your device by your web browser when you visit a website. Cookies do not contain executable code and cannot access other files on your device.

4.1 Essential Cookies

These cookies are strictly necessary for the operation of gh99.app and cannot be disabled without breaking core platform functionality. They include your session authentication token (which keeps you logged in across pages), your account region and language preference (English / Bangladesh), and security tokens that protect your session against cross-site request forgery (CSRF) attacks. No consent is required for essential cookies as they are necessary to deliver the service you have requested.

4.2 Analytics Cookies

gh99 uses first-party analytics cookies to collect anonymised data about how players navigate and interact with gh99.app. This data helps us understand which pages and game categories are most popular, where players encounter difficulties, and how to improve the overall experience. Analytics cookies do not identify you personally; they track behaviour at the session level using a randomised identifier.

4.3 Preference Cookies

Preference cookies remember choices you have made on gh99.app — such as your preferred deposit method or your responsible gaming limit settings — so that you do not need to re-enter them on every visit. These cookies improve convenience but are not essential to core platform operation.

4.4 Managing Cookies

You can manage or delete cookies at any time through your web browser's settings. Instructions for managing cookies in major browsers (Chrome, Firefox, Safari, Edge, Opera) are available in each browser's help documentation. Please be aware that disabling essential cookies will prevent you from logging in to your gh99 account and will significantly impair your ability to use the platform.

5. Data Security

gh99 implements a layered set of technical and organisational security measures designed to protect your personal data from unauthorised access, disclosure, alteration, and destruction. These measures are reviewed and updated on a regular basis in line with industry best practice.

5.1 Technical Safeguards

All data in transit between your device and gh99's servers is protected by TLS 1.3 encryption. Personal data stored on gh99's servers is encrypted at rest using AES-256 encryption. Access to production databases containing player personal data is restricted to authorised gh99 personnel on a strict need-to-know basis and is protected by multi-factor authentication. gh99's infrastructure is hosted in data centres with physical security controls including 24/7 monitoring, access control systems, and environmental protections.

5.2 Organisational Safeguards

gh99 team members who handle personal data receive training on data protection best practices and are bound by confidentiality obligations. gh99 maintains an internal data breach response procedure. In the unlikely event of a data breach that poses a risk to your rights, gh99 will notify affected players without undue delay and provide guidance on the steps you can take to protect yourself.

5.3 Your Role in Security

While gh99 takes extensive steps to protect your data, the security of your account also depends on the strength and confidentiality of your login credentials. You are responsible for choosing a strong, unique password for your gh99 account and for not sharing it with anyone. If you suspect your account has been compromised, contact [email protected] immediately.

6. Data Retention

gh99 retains your personal data for as long as your account remains active and for a defined period thereafter, in accordance with our legal and regulatory obligations. The retention periods applicable to each category of data are set out below.

6.1 Active Account Data

While your gh99 account is active, all registration data, gameplay data, transaction records, and communications data associated with your account are retained in full. This is necessary to operate your account, comply with AML regulations, and resolve any disputes that may arise.

6.2 Post-Closure Retention

Following the closure of your gh99 account — whether at your own request or by gh99 — we retain your personal data for a minimum period of five years from the date of closure. This retention period reflects our obligations under applicable financial regulations, including the requirement to maintain transaction and identity records for AML audit and law enforcement purposes. After the five-year retention period, personal data is securely deleted or anonymised.

6.3 KYC Document Retention

Identity verification documents (NID copies, passport copies, selfie photographs) are retained for a minimum of five years from the date of verification or from the date of account closure, whichever is later. This retention is required to demonstrate compliance with age verification and AML obligations in the event of a regulatory audit or law enforcement request.

7. Your Privacy Rights

As a registered gh99 player based in Bangladesh, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with your registered account name and the specific right you wish to exercise. gh99 will respond to all valid data rights requests within a reasonable timeframe.

• Right of Access: You may request a copy of all personal data gh99 holds about you. We will provide this in a clear, structured, and readable format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. This right is subject to our legal obligations to retain certain data (as described in Section 6) and to our legitimate interests in preventing fraud and resolving disputes.
• Right to Restrict Processing: You may request that gh99 restrict the processing of your personal data in specific circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where technically feasible, you may request that gh99 provide your personal data in a structured, machine-readable format so that you can transfer it to another service provider.
• Right to Withdraw Consent: Where gh99 processes your data on the basis of your consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Right to Object: You may object to gh99's processing of your personal data where that processing is based on our legitimate interests, unless gh99 can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

Please note that exercising certain rights may affect your ability to use some or all features of gh99.app. For example, requesting deletion of your account data will necessitate the permanent closure of your gh99 account.

8. Policy Updates & Contact

gh99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When we make material changes to this policy, we will notify registered players by sending an email to the address associated with their gh99 account and by displaying a prominent notice on gh99.app for a period of at least 14 days following the change.

The effective date at the top of this page will always reflect the date on which the most recent version of this Privacy Policy came into force. We encourage you to review this page periodically so that you remain informed about how gh99 protects your personal data. Your continued use of gh99.app following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

8.1 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to gh99's handling of your personal data, please contact our English-language support team. We are available 24 hours a day, 7 days a week, and will respond to all privacy-related enquiries as promptly as possible.

Email (plain text, not a link): [email protected]

Our support team operates in Bangladesh Standard Time (BST, UTC+6). For complex data rights requests, please allow up to 10 BST business days for a full response.