g2999 Privacy Policy

g2999 operates the online casino and sports betting platform available at g2999.io (the "Platform"), which is designed and targeted exclusively for players in Bangladesh aged 21 years and above. As the operator of the Platform, g2999 acts as the data controller in respect of all personal information collected from users of the Platform.

We recognise that privacy is a fundamental right. This Privacy Policy has been prepared to ensure that all players and visitors to the Platform have a clear, honest, and comprehensive understanding of how their personal information is handled from the moment they first visit the Platform to the point at which their account may be closed.

This Policy should be read in conjunction with the g2999 Terms and Conditions, which are incorporated herein by reference. In the event of any conflict between this Policy and a specific provision of the Terms and Conditions, the Terms and Conditions shall prevail with respect to account-level obligations, and this Policy shall prevail with respect to data protection matters.

We may update this Policy periodically. Where a material change is made, we will notify active players by email and display a prominent notice on the Platform. Your continued use of the Platform after the stated effective date of any revision constitutes your acceptance of the updated Policy.

g2999 collects personal data in three primary ways: information you provide directly to us, information generated automatically through your use of the Platform, and information we receive from trusted third-party partners. We collect only the data that is necessary and proportionate to the purposes described in this Policy.

2.1 Information You Provide Directly

2.2 Information Collected Automatically

When you access and use the Platform, certain technical and behavioural data is collected automatically by our systems. This includes:

• IP address, device type, operating system, and browser version.
• Login timestamps, session duration, and page navigation paths.
• Game activity data including bets placed, games launched, wins and losses recorded, and bonus usage patterns.
• Cookie identifiers and similar tracking technology data (see Section 6 for full details).

2.3 Information Received from Third Parties

We may receive supplementary information about you from the following trusted partners where necessary to fulfill our obligations:

• Payment Processors: Transaction confirmation data from bKash, Nagad, Rocket, Upay, and approved Bangladeshi bank partners to verify deposits and process withdrawals.
• KYC Verification Providers: Identity validation results from certified third-party KYC agencies used to confirm the authenticity of documents submitted during verification.
• Fraud Prevention Services: Risk scoring and device fingerprinting data from fraud detection services used to protect the integrity of the Platform.

g2999 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your explicit consent or as required by applicable law.

• Account Administration: To create and manage your player account, authenticate your identity at login, and maintain the accuracy of your account records throughout your relationship with g2999.
• KYC and Age Verification: To verify that you meet the minimum age requirement of 21 years and to comply with our obligations to prevent underage gambling on the Platform.
• Transaction Processing: To process deposits, verify payment sources, execute withdrawal requests to your verified payment accounts, and maintain accurate financial records of all account activity.
• Responsible Gaming Compliance: To monitor your gaming activity for indicators of problem gambling behaviour, to apply and enforce deposit limits, loss limits, session time reminders, and self-exclusion restrictions that you have requested.
• Fraud and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account sharing, bonus abuse, and any other prohibited conduct described in our Terms and Conditions.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance with account-related matters through our 24/7 English-language support service.
• Legal Obligations: To comply with applicable legal requirements including record-keeping obligations, responses to lawful requests from competent authorities, and the enforcement of our Terms and Conditions.
• Platform Improvement: To analyse aggregated, anonymised usage patterns on the Platform in order to improve game selection, user interface design, payment processing speed, and overall service quality.
• Communications: To send you transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts. Where you have opted in, we may also send promotional communications about bonuses, tournaments, and seasonal offers relevant to the Bangladesh market.

g2999 processes your personal data on one or more of the following legal grounds, depending on the specific purpose for which the data is being processed:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and g2999 — specifically, to operate and maintain your player account, process transactions, and deliver the gaming services you have requested.
• Legal Obligation: Processing is necessary for g2999 to comply with applicable legal and regulatory obligations, including age verification requirements, anti-money laundering procedures, and the retention of financial records.
• Legitimate Interests: Processing is necessary for g2999's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving service quality, provided that these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where g2999 relies on your consent as the legal basis for processing — for example, for sending you optional marketing communications — you may withdraw that consent at any time by contacting our support team or updating your communication preferences within your account settings.

g2999 may share your personal data with the following categories of recipients where it is necessary to deliver our services, comply with our obligations, or protect the integrity of the Platform:

• Payment Processing Partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank — solely for the purpose of processing your financial transactions. These partners receive only the minimum data required to execute and verify each transaction.
• KYC and Identity Verification Providers: Licensed third-party agencies that assist us in verifying the authenticity of identity documents submitted during the account verification process.
• Fraud Detection and Security Services: Specialist providers that help us identify suspicious activity, prevent unauthorised account access, and protect the Platform from exploitation.
• Game Software Providers: Suppliers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi whose game software is integrated into the Platform. These providers may receive anonymised session and game activity data necessary for game delivery and technical support.
• Legal and Regulatory Authorities: Where g2999 is required by law, court order, or other lawful authority to disclose personal data, we will comply with such requirements after applying appropriate legal scrutiny.
• Professional Advisors: Legal counsel, auditors, and compliance consultants who are bound by professional confidentiality obligations and assist g2999 in maintaining legal and operational compliance.

g2999 uses cookies and similar technologies on the Platform to ensure it functions correctly, to protect session security, and to understand how players use the site so we can make improvements. Below is a clear breakdown of the cookie categories we use.

g2999 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You can manage cookie preferences through your browser settings at any time; however, disabling essential or security cookies may impair your ability to log in or use certain features of the Platform.

g2999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and contractual obligations. The following retention periods apply as a general guide:

• Active Account Data: Retained for the full duration of your account relationship with g2999 and for a minimum of 5 years following permanent account closure, in order to meet our record-keeping obligations.
• KYC and Identity Documents: Retained for a minimum of 5 years from the date of verification or from the date of account closure, whichever is later, in accordance with financial compliance requirements.
• Transaction Records: Full records of all deposits, withdrawals, wagers, and bonus transactions are retained for a minimum of 5 years from the date of each transaction.
• Customer Support Communications: Correspondence related to disputes, complaints, or responsible gaming requests is retained for 3 years from the date of resolution. General support chat transcripts are retained for 12 months.
• Marketing Consent Records: Records of your consent to receive marketing communications are retained for as long as you remain opted in, plus 3 years following any opt-out, to demonstrate compliance with your preferences.
• Self-Exclusion Records: Records relating to self-exclusion applications are retained permanently to prevent the inadvertent re-opening of an Account during an active exclusion period.

Upon the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual.

g2999 employs a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes the following protections:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the g2999 Platform is encrypted in transit using industry-standard TLS protocols, ensuring that your login credentials, personal details, and financial information cannot be intercepted in transmission.
• Encrypted Data Storage: Sensitive data stored on our servers, including identity documents, KYC records, and financial account references, is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within g2999's systems is restricted on a strict need-to-know basis. All internal staff with access to player data are subject to confidentiality obligations and undergo regular data protection training.
• Two-Factor Authentication: Players are strongly encouraged to enable two-factor authentication on their accounts. Our internal systems also employ multi-factor authentication for all staff accessing production data environments.
• Intrusion Detection and Monitoring: Our Platform is monitored around the clock for suspicious activity, attempted breaches, and anomalous access patterns. Automated alerts are in place to trigger immediate investigation of potential security incidents.
• Regular Security Audits: g2999 conducts periodic internal security reviews and works with independent security specialists to assess and strengthen our data protection infrastructure.

Despite these measures, no method of data transmission or storage is entirely immune from risk. In the event of a personal data breach that is likely to result in a risk to your rights and interests, g2999 will notify affected players promptly and take all appropriate remedial action.

• Right of Access: You have the right to request confirmation of whether g2999 holds personal data about you and, if so, to receive a copy of that data together with information about how it is being processed. This is sometimes referred to as a Subject Access Request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain account details directly through your player account settings.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of personal data we hold about you. This right is subject to our legal obligations to retain certain data — for example, transaction records and KYC documentation — for the periods described in Section 7.
• Right to Restrict Processing: You may request that g2999 temporarily suspend the processing of your personal data in certain circumstances, for example where you have contested the accuracy of the data or have objected to our processing on the basis of legitimate interests.
• Right to Data Portability: Where processing is based on your consent or on a contractual relationship, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where it is carried out on the basis of our legitimate interests. Upon receipt of a valid objection, g2999 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent — for example, for optional marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

g2999 employs mandatory age verification at the point of account registration and as part of our KYC process. Any individual who provides false information about their age in order to access the Platform will have their Account permanently closed, any balance held will be forfeited, and the matter may be referred to the appropriate authorities.

If you believe that a minor has registered an Account on the g2999 Platform using false information, please contact our support team immediately so that we may take prompt action.

The g2999 Platform may contain references to game providers, payment partners, or other services whose names appear in content on the Platform. This Privacy Policy applies solely to personal data collected and processed by g2999 in the operation of the Platform at g2999.io.

g2999 is not responsible for the privacy practices of third-party game software providers or payment processors whose services are integrated into the Platform. We recommend that you review the privacy policies of any third-party service providers with whom you interact, particularly payment partners such as bKash and Nagad, whose own privacy terms govern the processing of data submitted directly to their platforms and applications.

g2999 reserves the right to revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the services we offer. When a material amendment is made, we will notify active players via the email address registered to their account and by displaying a prominent notice on the Platform for a minimum of 14 days prior to the change taking effect.

The version number and effective date at the top of this document will be updated each time a revision is published. We encourage you to review this Policy periodically to remain informed about how we protect your personal data. Archived versions of previous Policy editions are available upon request from our support team.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which g2999 handles your personal data, please contact our dedicated support team. We are committed to resolving all data protection enquiries promptly and fairly.

Email: support at g2999.io

Our support team is available 24 hours a day, 7 days a week, and operates in English. When submitting a data-related enquiry, please clearly state the nature of your request — for example, whether you are requesting access to your data, raising a concern about data accuracy, or lodging a formal complaint.

g2999 aims to acknowledge all data protection enquiries within 48 hours and to provide a substantive response within 30 calendar days of receiving a verified request. If your concern relates to a data breach or urgent security matter, please mark your message as urgent and our security team will prioritise your request accordingly.