ga99 Privacy Policy — How We Collect, Use, and Protect Your Personal Data
ga99 is committed to protecting the privacy of every player on the platform. This Privacy Policy explains exactly what personal information we collect from Bangladesh players, why we collect it, how we use it, and the rights you hold over your own data.
Key Principles of the ga99 Privacy Policy
A plain-English summary of the most important points. The complete legal text of the ga99 Privacy Policy follows in the sections below.
ga99 collects personal information you provide during registration (name, date of birth, address, mobile number), payment transaction data, device and browser information, and game activity logs. We collect only what is necessary for account administration, security, and legal compliance.
Your data is used to operate your ga99 account, process BDT deposits and withdrawals via bKash, Nagad, Rocket, and Upay, verify your identity through KYC checks, prevent fraud, and — where you have given consent — send promotional communications about ga99 offers.
ga99 does not sell your personal data to third parties. We share data only with payment processors (bKash, Nagad, Rocket, Upay), identity verification providers, game studios for technical purposes, and law enforcement agencies when legally required to do so.
All personal data transmitted between your device and ga99 is protected by 256-bit SSL encryption. Account passwords are stored using industry-standard one-way hashing. ga99 conducts regular security audits and penetration tests to identify and remediate vulnerabilities.
As a ga99 player, you have the right to access, correct, and request deletion of your personal data. You may also withdraw marketing consent at any time, request data portability, and object to certain processing activities. Submit all data rights requests to [email protected].
ga99 retains your personal data for as long as your account remains active and for a minimum of five (5) years after account closure to meet legal and regulatory obligations. Financial transaction records are retained for seven (7) years in line with standard accounting requirements.
Table of Contents
- Introduction
- Data Controller
- Data We Collect
- How We Collect Data
- Legal Basis for Processing
- How We Use Your Data
- Data Sharing & Disclosure
- Cookies & Tracking
- Data Security
- Data Retention
- Your Rights
- Marketing Communications
- Children & Minors
- Policy Amendments
- Contact & Complaints
1 Introduction
ga99 ("we", "us", "our") operates the online casino and sports betting platform available at ga99.io (the "Platform"). We are committed to safeguarding the privacy of every individual who visits, registers on, or uses the Platform. This Privacy Policy explains in clear, formal terms how ga99 collects, processes, stores, and protects your personal data.
This Privacy Policy applies to all users of the Platform, including registered players, prospective players who browse the site without completing registration, and individuals who contact ga99 through any support channel. It should be read alongside the ga99 Terms & Conditions and Responsible Gaming Policy.
By accessing the Platform or creating a ga99 account, you acknowledge that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform.
2 Data Controller
For the purposes of applicable data protection law, ga99 is the data controller in respect of all personal data collected through the Platform. As data controller, ga99 determines the purposes for which, and the means by which, your personal data is processed.
ga99 processes personal data in accordance with this Privacy Policy and all applicable data protection legislation. Where ga99 engages third-party processors to handle personal data on its behalf, it does so under written data processing agreements that require those processors to apply equivalent standards of protection.
All data rights requests, privacy concerns, and complaints should be directed to the ga99 Data Protection contact at [email protected]. Contact details are displayed as plain text only and are not clickable links.
3 Data We Collect
ga99 collects the following categories of personal data in connection with your use of the Platform:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, National ID or passport number | Account registration, KYC verification, age verification (21+) |
| Contact Data | Mobile number, email address, residential address (Dhaka, Chittagong, Sylhet, or other Bangladesh location) | Account communication, support, regulatory correspondence |
| Financial Data | bKash, Nagad, Rocket, or Upay account identifiers; transaction history; deposit and withdrawal amounts in BDT | Payment processing, fraud prevention, AML compliance |
| Technical Data | IP address, device type, browser type and version, operating system, session tokens | Platform security, fraud detection, user experience optimisation |
| Usage Data | Games played, wagers placed, bet history, session duration, pages visited | Account administration, responsible gaming monitoring, product improvement |
| Communications Data | Support chat transcripts, emails sent to ga99, complaint records | Dispute resolution, quality assurance, regulatory record-keeping |
| Marketing Preferences | Opt-in or opt-out status for promotional emails and SMS notifications | Sending relevant promotional communications where consent is given |
ga99 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (other than self-reported responsible gaming disclosures), or biometric data, unless explicitly required by law.
4 How We Collect Data
ga99 collects personal data through the following means:
- Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a survey or promotion.
- Automated collection: Technical and usage data collected automatically when you browse or interact with the Platform, via server logs, cookies, and similar tracking technologies.
- Third-party sources: Identity and address verification data received from KYC providers; fraud risk scores from anti-money laundering (AML) screening services; payment confirmation data from bKash, Nagad, Rocket, and Upay.
- Publicly available sources: In limited circumstances, ga99 may verify information you have provided against publicly accessible records for fraud prevention and compliance purposes.
5 Legal Basis for Processing
ga99 processes your personal data only where it has a lawful basis to do so. The applicable legal bases are as follows:
- Contractual necessity: Processing required to create and administer your ga99 account, process deposits and withdrawals, and fulfil the obligations set out in the Terms & Conditions.
- Legal obligation: Processing required to comply with applicable anti-money laundering (AML) laws, know-your-customer (KYC) requirements, fraud prevention regulations, and financial record-keeping obligations.
- Legitimate interests: Processing for fraud detection and prevention, platform security, responsible gaming monitoring, and improving the quality of ga99 services — provided such interests are not overridden by your rights and freedoms.
- Consent: Processing for direct marketing communications, optional analytics cookies, and any other processing activities for which ga99 seeks and obtains your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
6 How We Use Your Data
ga99 uses your personal data for the following purposes:
- Creating and maintaining your ga99 player account and verifying your identity (21+ age check and KYC).
- Processing BDT deposits and withdrawals via bKash, Nagad, Rocket, and Upay.
- Administering bonuses, promotions, and loyalty rewards in accordance with the applicable promotional terms.
- Monitoring gameplay for responsible gaming indicators and applying account restrictions or self-exclusion measures where required.
- Detecting, investigating, and preventing fraudulent transactions, collusion, money laundering, and other prohibited activities.
- Providing customer support and resolving disputes or complaints via email at [email protected].
- Sending transactional communications such as deposit confirmations, withdrawal notifications, and security alerts.
- Sending marketing communications about ga99 promotions, seasonal offers (including Eid, Pohela Boishakh, BPL season), and new game launches — only where you have given consent.
- Analysing Platform usage in aggregate, anonymised form to improve user experience and game offerings.
- Complying with applicable legal and regulatory obligations.
ga99 will not use your personal data for any purpose that is incompatible with the purposes described in this Privacy Policy without first notifying you and, where required, obtaining your consent.
7 Data Sharing & Disclosure
ga99 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Personal data is shared only in the following circumstances and only to the extent necessary:
- Payment processors: bKash, Nagad, Rocket, and Upay receive the transaction data necessary to process your deposits and withdrawals. Each payment partner operates under its own privacy policy and applicable Bangladesh financial regulations.
- Identity verification providers: KYC and AML screening vendors receive the minimum identity data required to verify your age, identity, and source of funds.
- Game studios and content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified game providers receive anonymised or pseudonymised session tokens required for game delivery. They do not receive your full name, address, or payment details.
- IT and security providers: Hosting, cloud infrastructure, and cybersecurity vendors who process data on behalf of ga99 under strict data processing agreements.
- Legal and regulatory authorities: ga99 will disclose personal data to law enforcement, financial intelligence units, or other regulatory bodies when required to do so by applicable law, court order, or regulatory directive.
- Business transfers: In the event of a merger, acquisition, or sale of all or part of ga99's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.
8 Cookies & Tracking Technologies
ga99 uses cookies and similar tracking technologies to operate the Platform, maintain your session, and improve your experience. The main categories of cookies used are:
- Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without breaking core Platform functionality.
- Functional cookies: Remember your preferences such as language, currency display, and game view settings to provide a more personalised experience on return visits.
- Analytics cookies: Collect anonymised data about how players interact with the Platform — pages visited, time on site, game categories browsed. This data is used only in aggregate form to improve the Platform. Analytics cookies are enabled only with your consent.
- Security cookies: Used to detect and prevent fraudulent login attempts, bot traffic, and other malicious activity.
You can manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform. Disabling functional or analytics cookies will not affect your access to core features.
9 Data Security
ga99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:
- Encryption in transit: All data exchanged between your device and the ga99 Platform is encrypted using 256-bit SSL/TLS protocols.
- Encryption at rest: Sensitive personal data and financial records stored in ga99 databases are encrypted at the storage level.
- Password security: Account passwords are stored as salted, one-way cryptographic hashes. ga99 staff cannot retrieve or view your plain-text password at any time.
- Access controls: Access to systems containing personal data is restricted on a need-to-know basis, enforced through role-based access controls and multi-factor authentication for internal staff.
- Regular audits: ga99 conducts periodic internal security reviews and engages third-party security specialists to perform penetration testing and vulnerability assessments.
- Incident response: ga99 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, ga99 will notify affected players without undue delay.
While ga99 takes all reasonable precautions, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own login credentials and for promptly reporting any suspected unauthorised access to [email protected].
10 Data Retention
ga99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:
- Active account data: Retained for the full duration of your account's active status plus a minimum of five (5) years following account closure.
- Financial transaction records: Retained for a minimum of seven (7) years from the date of the transaction to comply with financial record-keeping and AML obligations.
- KYC and identity documents: Retained for a minimum of five (5) years after the conclusion of the customer relationship.
- Support communications: Retained for a minimum of three (3) years from the date of the last interaction.
- Marketing preference records: Retained for as long as necessary to demonstrate compliance with consent obligations, typically three (3) years from the last recorded interaction.
Once the applicable retention period has elapsed and there is no ongoing legal obligation to retain the data, ga99 will securely delete or anonymise your personal data in a manner that prevents reconstruction.
11 Your Rights
Subject to applicable law, you hold the following rights in relation to your personal data held by ga99. To exercise any of these rights, contact [email protected] with sufficient information to verify your identity.
- Right of access: You may request a copy of the personal data ga99 holds about you, together with information about how it is processed.
- Right to rectification: You may request correction of inaccurate or incomplete personal data. You may also update certain account details directly through your ga99 account dashboard.
- Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent. Note that ga99 may be required to retain certain data to comply with legal obligations, which takes precedence over erasure requests.
- Right to restrict processing: You may request that ga99 limit the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its processing.
- Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a machine-readable copy of your personal data for transfer to another service.
- Right to object: You may object to processing of your personal data that is based on legitimate interests, including profiling for responsible gaming purposes, subject to ga99's overriding legitimate grounds.
- Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
ga99 will respond to all verified data rights requests within 30 days of receipt. Where a request is complex or numerous, ga99 may extend this period by a further 60 days and will notify you accordingly.
12 Marketing Communications
ga99 may send you promotional communications about platform bonuses, seasonal promotions (BPL season, Eid, Pohela Boishakh, T20 World Cup offers), new game releases, and other ga99 news via email or SMS, but only where you have given prior consent to receive such communications at the time of registration or thereafter.
You may withdraw your marketing consent at any time by contacting [email protected] or by following the unsubscribe instructions included in every promotional message. Withdrawal of marketing consent will not affect your ability to use your ga99 account or receive essential transactional communications such as deposit confirmations and security alerts.
ga99 does not engage in unsolicited cold-calling or WhatsApp marketing. If you receive a communication purportedly from ga99 that you did not consent to receive, please report it to [email protected] immediately so that ga99 can investigate.
13 Children & Minors
The ga99 Platform is strictly intended for adults aged 21 years and over. ga99 does not knowingly collect personal data from individuals under the age of 21. If ga99 discovers or has reasonable grounds to believe that a user is under 21, the account will be suspended immediately, all deposits will be refunded to the original payment method, and all associated personal data will be deleted as soon as legally permissible.
If you are a parent or guardian and believe that a minor in your care has created a ga99 account, please contact [email protected] immediately. ga99 will investigate and take appropriate action within 48 hours of a verified report.
14 Policy Amendments
ga99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or ga99's data processing practices. Material changes will be communicated to registered players via email or through a prominent notice on the Platform at least 7 days before the revised Policy takes effect.
The date of the most recent revision is stated at the top of this document. Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you should close your account before the effective date.
ga99 recommends that you review this Privacy Policy periodically to stay informed about how your personal data is being protected.
15 Contact & Complaints
If you have any questions, concerns, or complaints regarding this Privacy Policy or ga99's handling of your personal data, please contact us using the details below. All privacy-related communications must be submitted in English.
- Data Protection Contact: [email protected]
- Business Enquiries: [email protected]
- Response Time: ga99 aims to acknowledge all privacy enquiries within 24 hours and provide a substantive response within 30 days.
- Operating Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (BST, UTC+6)
If you are not satisfied with ga99's response to a privacy complaint, you may have the right to lodge a complaint with a competent data protection supervisory authority in your jurisdiction. ga99 will cooperate fully with any such investigation.
Questions About Your Privacy at ga99?
Our support team is available around the clock to address any data protection concern. You can also review our FAQ or explore all that ga99 has to offer. 21+ only.