gtt99 Privacy Policy — How We Handle Your Personal Data
At gtt99, protecting the personal data of every Bangladesh player is a fundamental responsibility, not an afterthought. This Privacy Policy explains exactly what data we collect, why we collect it, how it is used and stored, who it may be shared with, and what rights you hold over your own information.
Our Privacy Commitments
Six Ways gtt99 Protects Your Privacy
256-bit SSL Encryption
Every piece of data transmitted between your device and gtt99 is protected by 256-bit SSL encryption. This includes registration details, login credentials, payment information, and all in-session account activity.
No Sale of Personal Data
gtt99 does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Your information is used exclusively for account management, payment processing, fraud prevention, and platform improvement.
Purpose-Limited Data Collection
gtt99 collects only the personal data that is genuinely necessary for the specific purpose for which it is collected. We do not gather data speculatively or hold information beyond the period required to fulfil the original collection purpose.
Secure Data Storage
All personal data held by gtt99 is stored on secured servers with access controls restricted to authorised personnel only. Storage systems are subject to regular security audits, and access logs are maintained and reviewed to detect any unauthorised access attempts.
Player Control Over Data
gtt99 players hold meaningful rights over their personal data. You may request access to the data held about you, request corrections to inaccurate information, and in certain circumstances request the deletion of your data — all via the support channels described in this policy.
Breach Notification
In the unlikely event of a data security breach that affects your personal information, gtt99 will notify affected players promptly — within 72 hours of discovery where technically feasible — providing clear information about what occurred, what data was affected, and what steps are being taken.
Summary: gtt99 collects personal data to operate your account, process payments, prevent fraud, and comply with platform policy. We do not sell your data. You have the right to access, correct, and in certain cases delete your data. Read the full policy below for complete details.
Introduction
This Privacy Policy applies to all personal data collected, processed, and stored by gtt99 in connection with the gtt99 platform accessible at gtt99.io and all associated account, payment, and gaming services. It applies to all registered Players and to any individual who visits the gtt99 platform without registering an account.
By accessing or using the gtt99 platform, or by completing the account registration process, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. Where gtt99 processes personal data on the basis of your consent, you retain the right to withdraw that consent at any time, subject to the limitations described in Section 11 of this policy.
This Privacy Policy should be read alongside the gtt99 Terms and Conditions, which govern your use of the platform as a whole. Together, these two documents form the complete agreement between you and gtt99 regarding your rights and obligations as a registered Player.
If you have any questions about this Privacy Policy or about how gtt99 handles your personal data, you may contact the gtt99 Data Support team at any time using the contact details provided in Section 15 below. All contact details in this policy are provided as plain text only and are not clickable links.
Data Controller
For the purposes of this Privacy Policy, gtt99 acts as the data controller in respect of all personal data collected from Players and platform visitors. As data controller, gtt99 is responsible for determining the purposes for which, and the manner in which, personal data is collected and processed.
Where gtt99 engages third-party service providers to process personal data on its behalf — such as payment processing companies, identity verification service providers, or analytics platforms — those third parties act as data processors. gtt99 enters into written data processing agreements with all third-party processors to ensure that your personal data is handled in accordance with the standards described in this policy.
All enquiries, data access requests, correction requests, deletion requests, and complaints relating to the processing of personal data by gtt99 should be directed to the Data Support team using the contact details in Section 15.
Data We Collect
The following table sets out the categories of personal data that gtt99 collects from Players and platform visitors, together with examples of the specific data items within each category.
| Data Category | Examples of Data Items Collected | Collection Stage |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government-issued ID number, passport or national ID scan | Registration, KYC verification |
| Contact Data | Email address, mobile number, residential address (including city, district, postal code, Bangladesh) | Registration, account updates |
| Financial Data | bKash / Nagad / Rocket / Upay account numbers, bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), Visa/Mastercard partial card numbers, deposit and withdrawal transaction history | Payment processing, KYC |
| Account Activity Data | Login timestamps, session durations, game history (titles played, stakes, outcomes), betting history, bonus redemption records, balance history | Ongoing platform use |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, time zone (Bangladesh Standard Time, UTC+6) | Platform access, security monitoring |
| Communications Data | Support chat transcripts, email correspondence, WhatsApp message records (where applicable), feedback and complaint records | Customer support interactions |
| Responsible Gaming Data | Deposit limit settings, loss limit settings, session time limits, self-exclusion status, cooling-off period records | Responsible gaming tool usage |
gtt99 does not collect or process special categories of sensitive personal data (such as health data, biometric data for identification purposes, racial or ethnic origin, religious or philosophical beliefs, or political opinions) except where strictly required to fulfil a legal obligation or to protect the vital interests of a Player.
How We Collect Data
gtt99 collects personal data through the following channels and mechanisms:
- Direct submission by you: Data provided voluntarily during account registration, KYC document upload, payment method addition, support contact, and any other interaction in which you provide information directly to gtt99.
- Automated technical collection: Data generated automatically during your use of the platform, including IP address, device identifiers, session logs, game interaction data, and cookies or similar tracking technologies as described in Section 8 of this policy.
- Third-party identity verification: Where KYC verification requires cross-referencing your submitted data against third-party identity databases, gtt99 may receive confirmation data from those services indicating whether your identity documents are valid. gtt99 does not receive raw data directly from government databases; it receives only verification confirmation results.
- Payment processors: gtt99 receives transaction confirmation data from payment processors such as bKash, Nagad, Rocket, and Upay, and from card processing networks where Visa or Mastercard is used. This includes transaction reference numbers, amounts, timestamps, and status confirmations.
- Fraud prevention services: gtt99 works with third-party fraud detection providers who may share risk-scoring data or flagged transaction indicators to assist in the detection and prevention of fraudulent activity on the platform.
Lawful Basis for Processing
gtt99 processes personal data only where it has a lawful basis for doing so. The following lawful bases apply to the different categories of processing carried out by gtt99:
- Contractual necessity: Processing that is necessary to perform the gtt99 Terms and Conditions contract with you — including account creation, payment processing, game access, and bonus administration — is carried out on the basis of contractual necessity. Without this processing, gtt99 cannot provide the services you have contracted for.
- Legal obligation: Processing required to comply with applicable legal obligations, including KYC identity verification, age verification (21+ requirement), anti-money-laundering checks, and financial record-keeping, is carried out on the basis of legal obligation.
- Legitimate interests: Processing carried out to protect the platform against fraud, to ensure fair play, to maintain technical security, to conduct analytics for platform improvement, and to enforce the gtt99 Terms and Conditions is carried out on the basis of gtt99's legitimate interests. gtt99 has assessed that these legitimate interests are not overridden by your interests or fundamental rights and freedoms.
- Consent: Processing for optional purposes such as marketing communications and non-essential cookies is carried out only where you have provided explicit, informed, and freely given consent. You may withdraw consent for these optional processing activities at any time without affecting the lawfulness of prior processing.
How We Use Your Data
gtt99 uses personal data collected from Players for the following specific purposes:
- Account creation and management: To establish and maintain your gtt99 Player Account, including authentication, account settings management, and communication of account-related updates.
- Identity and age verification: To verify that you are at least 21 years of age and to confirm your identity as part of the gtt99 KYC process. This is a mandatory requirement that applies to all registered Players.
- Payment processing: To facilitate deposits and withdrawals via your registered payment methods, including bKash, Nagad, Rocket, Upay, and Bangladesh bank accounts, and to maintain accurate financial records of all Account transactions.
- Game and betting services: To allow you to access and use casino games, sports betting markets, live dealer tables, and all other gtt99 platform features. Game and betting activity data is also used to calculate winnings, apply wagering requirements, and administer VIP programme benefits.
- Bonus and promotion administration: To process bonus claims, track wagering requirement completion, and apply and expire promotional credits in accordance with the terms of each individual gtt99 promotion.
- Customer support: To respond to your enquiries, process complaints, and provide assistance via live chat, email, and WhatsApp. Support communications may be recorded and retained in accordance with the data retention schedule in Section 9.
- Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, multi-accounting, and other prohibited conduct as defined in the gtt99 Terms and Conditions.
- Responsible gaming: To apply and monitor responsible gaming tools including deposit limits, loss limits, session controls, and self-exclusion settings, and to detect and act on patterns of play that may indicate a player is experiencing gambling-related harm.
- Platform analytics and improvement: To analyse aggregate and anonymised player behaviour data in order to improve platform performance, game selection, user experience design, and customer service quality. Analytics data is processed in anonymised form wherever possible.
- Marketing communications (consent-based): Where you have provided explicit consent to receive marketing communications, gtt99 may send promotional messages about new games, bonuses, seasonal promotions (including Eid, Pohela Boishakh, BPL season offers), and VIP programme updates via email or SMS. You may withdraw consent at any time by contacting support.
Data Sharing & Third Parties
gtt99 does not sell, rent, or trade your personal data with third parties for their own marketing or commercial purposes. Personal data is shared with third parties only in the following limited and controlled circumstances:
- Payment processors: Your financial data is shared with relevant payment service providers — including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and your nominated Bangladeshi bank — to the extent necessary to process your deposits and withdrawals. Each payment provider operates under its own data protection obligations.
- KYC and identity verification providers: Your identity documents and personal details may be transmitted to third-party identity verification service providers engaged by gtt99 to conduct KYC checks. These providers are bound by data processing agreements and are authorised to use your data only for the specific verification purpose.
- Fraud prevention and risk services: gtt99 may share relevant account and transaction data with fraud detection platforms to assess risk scores and identify potentially fraudulent activity. Data shared with these services is used only for fraud prevention purposes.
- Game content providers: Game providers including Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, and Microgaming may receive technical session data (such as Player ID and session token) necessary to deliver game content. These providers do not receive your full personal profile.
- Legal and regulatory authorities: gtt99 will disclose personal data to relevant legal or regulatory authorities where required to do so by applicable law, court order, or lawful regulatory request. gtt99 will notify you of any such disclosure where legally permitted to do so.
- Business successors: In the event of a merger, acquisition, or transfer of gtt99's business or assets, personal data held about Players may be transferred to the acquiring entity. Players will be notified prior to such a transfer and will retain all rights described in this policy.
Your data is never sold. Under no circumstances does gtt99 exchange personal data for commercial consideration with data brokers, advertising networks, or any third party for marketing purposes unrelated to your gtt99 account.
Cookies & Tracking Technologies
The gtt99 platform uses cookies and similar tracking technologies to enable core platform functionality, maintain session security, and — where you have consented — to support analytics and personalisation features. The following categories of cookies are used on the gtt99 platform:
- Strictly necessary cookies: These cookies are essential for the gtt99 platform to function correctly. They enable session management (keeping you logged in), security token management, and the application of your account settings. These cookies cannot be disabled without preventing the platform from functioning. No consent is required for strictly necessary cookies.
- Functional cookies: These cookies remember your preferences, such as your preferred language, display settings, and responsible gaming tool configurations, so that you do not need to re-enter them on each visit. Functional cookies may be disabled, but doing so may affect the usability of certain platform features.
- Analytics cookies (consent required): With your consent, gtt99 uses analytics cookies to collect aggregated data about how players navigate and use the platform. This data is used in anonymised form to improve platform design and game offering. Analytics cookies may be declined without affecting core platform functionality.
- Marketing and personalisation cookies (consent required): With your explicit consent, gtt99 may use cookies to deliver personalised promotional content and track the effectiveness of marketing communications. You may withdraw consent for marketing cookies at any time by contacting support.
Most web browsers allow you to control cookie settings through your browser preferences. Deleting or blocking cookies may affect your experience on the gtt99 platform. Please refer to your browser's help documentation for guidance on managing cookies.
Data Retention
gtt99 retains personal data for only as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:
- Account and identity data: Retained for the duration of the active Account relationship and for a period of five (5) years following Account closure, in order to satisfy anti-money-laundering record-keeping obligations and to respond to any post-closure disputes or regulatory enquiries.
- Financial transaction data: Retained for a minimum of five (5) years following each transaction, in accordance with financial record-keeping requirements applicable to online payment processing platforms serving the Bangladesh market.
- Game and betting history: Retained for the duration of the active Account and for three (3) years following Account closure, to support dispute resolution and to fulfil any applicable regulatory reporting obligations.
- Customer support communications: Retained for two (2) years from the date of the interaction, to support the investigation of any subsequent complaints or disputes arising from the same interaction.
- Technical and device data: Retained for up to twelve (12) months from the date of collection, unless a security incident investigation requires retention for a longer period.
- Marketing consent records: Retained for the duration of the consent and for one (1) year following withdrawal of consent, as evidence that marketing communications were sent on a valid legal basis.
At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an individual Player. Anonymised aggregate data may be retained indefinitely for analytical purposes.
Data Security
gtt99 applies a multi-layered approach to data security, combining technical, organisational, and procedural safeguards to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the gtt99 platform.
- Encrypted storage of all personal data and financial records at rest, using industry-standard encryption protocols.
- Role-based access controls restricting access to personal data to only those personnel who require it to perform their authorised duties.
- Regular internal security audits and third-party penetration testing to identify and remediate vulnerabilities before they can be exploited.
- Mandatory two-factor authentication for all internal staff access to systems containing personal data.
- Comprehensive security incident response procedures, including a 72-hour breach notification protocol for material data security incidents.
Despite these measures, no electronic system can be guaranteed to be completely free from risk. The security of your personal data also depends on you maintaining the confidentiality of your Account credentials. If you believe your Account security has been compromised, please contact gtt99 support immediately at [email protected]. This contact detail is provided as plain text only and is not a clickable link.
Your Rights
As a registered gtt99 Player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact the Data Support team using the details provided in Section 15.
Right of Access
You have the right to request a copy of all personal data held about you by gtt99, together with information about how it is being used and who it has been shared with. gtt99 will respond to access requests within 30 days of receipt.
Right to Rectification
You have the right to request correction of any personal data held by gtt99 that is inaccurate or incomplete. Correction requests relating to identity data may require supporting documentation.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent. This right is subject to legal retention obligations — data required by applicable law cannot be deleted on request.
Right to Restrict Processing
You may request that gtt99 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of data held, while a rectification request is being assessed.
Right to Data Portability
Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
Right to Object
You have the right to object to processing of your personal data that is carried out on the basis of gtt99's legitimate interests, including profiling carried out for fraud prevention or marketing analytics purposes.
Children & Minors
Strict 21+ Policy: The gtt99 platform is exclusively for adults aged 21 years and above. gtt99 does not knowingly collect personal data from any person under the age of 21.
If gtt99 discovers or is notified that personal data has been collected from a person under 21 years of age, that data will be deleted immediately, the associated Account will be closed, and any funds held within the Account will be handled in accordance with the gtt99 Terms and Conditions and applicable platform policy.
Parents and guardians who believe that a person under 21 in their care has registered on the gtt99 platform are encouraged to contact the Data Support team immediately at [email protected] so that the matter can be resolved promptly. This contact detail is plain text only and is not a clickable link.
International Data Transfers
Where gtt99 engages third-party service providers that operate outside Bangladesh — such as international game content providers (Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, Microgaming) or global fraud prevention platforms — personal data may be transferred to and processed in jurisdictions outside Bangladesh.
gtt99 takes all reasonable steps to ensure that international data transfers are conducted with appropriate safeguards in place. These safeguards may include standard contractual clauses, data processing agreements requiring the recipient to apply equivalent data protection standards, or transfers to countries that have been assessed as providing an adequate level of data protection relative to the standards applied by gtt99.
Where you would like further information about the specific safeguards applied to any particular international data transfer, please contact the Data Support team using the details in Section 15.
Changes to This Policy
gtt99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, platform operations, data processing practices, or the introduction of new services. Where material changes are made to this policy — meaning changes that significantly affect your privacy rights or the way in which your data is used — gtt99 will notify registered Players via the email address held on their Account prior to the changes taking effect.
Non-material changes (such as corrections to typographical errors, clarifications of existing practices, or administrative updates) may be made without individual notification. The "Last Updated" date displayed in the hero section at the top of this page reflects the date of the most recent revision, whether material or non-material.
Your continued use of the gtt99 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the changes, you should cease using the platform and may request Account closure by contacting the support team.
Contact & Data Requests
All requests relating to your personal data rights under this Privacy Policy — including access requests, rectification requests, erasure requests, objection notices, and marketing opt-out requests — should be submitted to the gtt99 Data Support team using the contact details below.
gtt99 will acknowledge all data-related requests within 5 business days and will respond substantively within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it prior to the expiry of the initial 30-day period.
Email: [email protected]
WhatsApp: +880 1700 000000
Live Chat: Available within the gtt99 platform dashboard, 24 hours a day, 7 days a week.
All contact details above are plain text only and are not clickable links. When submitting a data request, please include your registered Account username and email address so that your identity can be verified before any personal data is disclosed or actioned.
Questions About Your Privacy on gtt99?
Our support team is available 24/7. You can also review our Terms & Conditions, explore Responsible Gaming tools, or head back to the casino.