gct99 Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") applies to gct99 ("we", "us", "our") and governs the collection, processing, storage, and disclosure of personal data relating to users ("you", "your") of the gct99 website and associated services accessible at gct99.io. By creating a gct99 account, depositing funds, placing bets, or otherwise engaging with our platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy covers all personal data processing activities conducted by gct99 in connection with our sports betting markets, casino gaming products, live dealer services, customer support interactions, promotional communications, and payment processing operations. It applies to all registered users located in Bangladesh and any other jurisdiction from which we lawfully accept registrations.

We may update this Policy from time to time to reflect changes in our data practices, applicable legal requirements, or the services we offer. Significant changes will be communicated to you via the email address registered to your account. We encourage you to review this Policy periodically. Your continued use of gct99 services after any modification constitutes acceptance of the revised Policy.

2. Personal Data We Collect

We collect personal data from you through several channels including account registration forms, payment processing flows, identity verification procedures, customer support interactions, and automatic technical data collection during your use of our platform. Below is a comprehensive breakdown of the categories of personal data we process.

2.1 Registration & Identity Data

When you create a gct99 account, we collect your full legal name, date of birth, gender, residential address (including district, division, and postcode within Bangladesh), email address, and mobile phone number. This information forms the core of your user profile and is required for account creation, identity verification, and communications with you throughout your membership.

2.2 Identity Verification Documents

To comply with anti -money laundering regulations and responsible gaming obligations, we collect copies of government-issued identification documents including Bangladesh National ID card, passport, or driving license. We may also request proof of address documentation such as recent utility bills, bank statements, or rental agreements. For payment method verification, we may collect screenshots or photos of the cards or mobile wallet accounts used for deposits. All identity documents are stored in encrypted format and accessed only by authorized verification personnel.

2.3 Financial & Transaction Data

We process payment method details including bKash, Nagad, Rocket, or Upay account numbers, bank account details (account holder name, account number, bank name, branch), and transaction histories showing deposits, withdrawals, bets placed, and account balance movements. We do not store full credit or debit card numbers or CVV codes; such data is tokenized by our payment processors. Financial records are maintained to facilitate transactions, detect fraud, comply with accounting requirements, and support dispute resolution.

2.4 Betting & Gaming Activity

We record comprehensive logs of your betting activities including sports markets viewed, odds checked, bet slips created, stakes placed, bets settled, winnings paid out, casino games played, game sessions (start time, end time, game rounds), bonus activations, wagering requirement progress, and promotional offer participation. This data enables us to calculate winnings, enforce betting rules, personalize your experience, detect patterns consistent with problem gambling, and investigate potential terms violations.

2.5 Device & Technical Data

When you access gct99, we automatically collect technical information including IP address, device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, language preferences, time zone setting, and referring website URL. We deploy cookies and similar tracking technologies to maintain login sessions, remember preferences, analyze site usage patterns, and deliver relevant content. You can control cookie preferences through your browser settings, though disabling certain cookies may limit platform functionality.

2.6 Communications & Support Data

Customer support interactions via live chat, email, or phone are recorded and stored for quality assurance, training purposes, and dispute resolution. This includes the content of your messages, attached files or screenshots, issue category, resolution status, and support agent notes. We may also log promotional emails sent to you and track open rates and click-through behavior to optimize our marketing communications.

3. How We Use Your Personal Data

gct99 processes your personal data for specific, explicit, and legitimate purposes directly related to providing betting and gaming services, fulfilling our contractual obligations to you, complying with legal requirements, and protecting our business interests. We do not use your data for purposes incompatible with those for which it was originally collected without obtaining your additional consent.

3.1 Account Administration

We use your registration data to create and maintain your gct99 account, authenticate your identity during login, manage your account settings and preferences, process password resets and security questions, enable two-factor authentication, and enforce our single account policy by detecting duplicate registrations through matching of personal details, payment methods, and device fingerprints.

3.2 Transaction Processing

Financial data is processed to accept deposits from your chosen payment methods, credit your account balance, process bet stakes, calculate winnings, handle withdrawal requests, verify destination accounts match registered details, apply bonus funds and wagering requirements, generate financial statements and transaction histories, and provide tax documentation where legally required. We work with third-party payment processors who may receive limited data necessary to complete transactions.

3.3 Service Delivery & Personalization

Betting and gaming activity data enables us to display your bet history, show real-time odds on markets you follow, recommend games based on your preferences, customize homepage content to highlight relevant sports or promotions, enforce betting limits and responsible gaming thresholds, settle bets according to official results, credit winnings to your account, and provide seamless experience across devices by synchronizing your session state.

3.4 Compliance & Fraud Prevention

We are legally obligated to verify your identity to prevent underage gambling, money laundering, terrorist financing, and fraud. Your verification documents and transaction patterns are analyzed using automated systems and manual review to detect suspicious activity such as multiple account creation, collusion between players, betting patterns consistent with match-fixing, use of stolen payment methods, bonus abuse schemes, and arbitrage exploitation. Flagged accounts may be restricted or reported to Bangladesh authorities as required by law.

3.5 Communications & Marketing

With your consent, we send promotional emails featuring bonus offers, free bets, tournament announcements, and exclusive VIP rewards. We also send transactional emails (account verification, deposit confirmations, withdrawal notifications, security alerts) which are necessary for account operation regardless of marketing preferences. You can opt out of promotional communications at any time via unsubscribe links in emails or your account settings, but transactional emails cannot be disabled as they are essential to service delivery.

3.6 Analytics & Platform Improvement

Technical and activity data is aggregated and analyzed to understand user behavior patterns, identify popular betting markets, optimize website performance, detect technical errors, improve mobile responsiveness, test new features through A/B experiments, measure marketing campaign effectiveness, and inform product development decisions. Where possible, we anonymize or pseudonymize data for analytics purposes to minimize privacy impact.

4. Data Sharing & Third-Party Disclosure

gct99 does not sell your personal data to third parties. We share data only with carefully selected service providers and partners who assist us in operating the platform, subject to strict contractual data protection obligations. All third parties are required to implement appropriate security measures and process your data only for specified purposes in accordance with our instructions.

4.1 Essential Service Providers

We share limited data with payment processors (bKash, Nagad, Rocket, Upay, banks) to execute deposits and withdrawals; identity verification services to validate documents and perform sanctions screening; hosting providers and cloud infrastructure partners (servers, databases, content delivery networks) to store and deliver platform content; customer support software vendors to manage tickets and live chat; and email service providers to deliver transactional and promotional communications.

4.2 Gaming & Odds Providers

Casino games, live dealer experiences, and sports betting odds are supplied by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. These partners may process technical data (session IDs, bet amounts, game outcomes) necessary to deliver gameplay but do not receive identifying personal information beyond what is technically required for service integration.

4.3 Legal & Regulatory Disclosure

We may disclose personal data to Bangladesh law enforcement agencies, courts, regulatory authorities, or government bodies when legally required by subpoena, court order, or applicable statute. This includes cooperation with anti-money laundering investigations, responses to lawful data requests, compliance with tax reporting obligations, and support for criminal investigations related to fraud or match-fixing. We will notify you of such disclosure unless prohibited by law or court order.

4.4 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets involving gct99, your personal data may be transferred to the acquiring entity. We will provide notice via email and website announcement prior to any such transfer, and the acquiring party will be bound to honor the commitments made in this Privacy Policy unless you consent to revised terms.

5. Data Security Measures

gct99 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or destruction. Our security framework follows industry best practices and is regularly audited and updated to address emerging threats.

All data transmission between your device and our servers uses TLS 1.2 or higher encryption. Sensitive data at rest (identity documents, financial records) is encrypted using AES-256 standard. Database access is restricted to authorized personnel through role-based permissions and multi-factor authentication. Our infrastructure employs firewalls, intrusion detection systems, regular vulnerability scanning, and penetration testing. Employee access to personal data is granted on a need-to-know basis and logged for audit purposes. Staff receive regular data protection and security awareness training.

Despite our best efforts, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and must notify us immediately at [email protected] if you suspect unauthorized account access.

6. Your Privacy Rights

As a gct99 user, you hold specific rights over your personal data. We provide mechanisms to exercise these rights through your account dashboard or by contacting our Data Protection team. We aim to respond to all privacy requests within 30 days.

To exercise any of these rights, please email [email protected] with "Privacy Rights Request" in the subject line. We may require identity verification before processing requests to prevent unauthorized access to personal data. Note that certain requests may be subject to legal limitations; for example, we cannot delete transaction records required for tax or anti-money laundering compliance purposes.

7. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable laws. Retention periods vary by data type based on legal, operational, and business needs.

Active account data (profile, betting history, financial records) is retained for the duration of your membership plus 5 years after account closure to comply with Bangladesh financial record-keeping requirements and to handle potential disputes or chargebacks. Identity verification documents are retained for 5 years post-closure as mandated by anti-money laundering regulations. Marketing consent records are kept for 2 years after last interaction. Technical logs and cookies expire according to their specified lifespan, typically ranging from session-based to 2 years.

Upon expiration of the relevant retention period, personal data is securely deleted or anonymized such that it can no longer be associated with you. You may request early deletion of data not subject to mandatory retention by contacting our Data Protection team.

8. Cookies & Tracking Technologies

gct99 uses cookies (small text files stored on your device) and similar technologies including web beacons, pixel tags, and local storage to enhance your experience, maintain login sessions, remember preferences, analyze site usage, and deliver relevant advertising. Cookies are categorized as strictly necessary (essential for site operation), functional (enhance convenience), performance (analytics), and targeting (personalized marketing).

Strictly necessary cookies cannot be disabled as they are required for login, security, and core functionality. For all other cookie categories, you provide consent through the cookie banner displayed on your first visit. You can manage cookie preferences at any time via your account settings or browser controls. Note that disabling certain cookies may impair platform functionality such as bet slip persistence across sessions or personalized odds recommendations.

We use Google Analytics to understand aggregate user behavior. Analytics data is anonymized to the extent technically feasible. Third-party advertising partners may place tracking pixels to measure campaign effectiveness; these operate under their own privacy policies which we encourage you to review.