gv99 Privacy Policy
How We Protect Your Data

This Privacy Policy is published by gv99 ("gv99", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at https://gv99.vu. gv99 operates as an internationally licensed offshore gaming platform providing casino games, live dealer products, and sports betting services — with a primary focus on players based in Bangladesh.

For the purposes of this Privacy Policy, gv99 acts as the data controller in respect of personal data collected from registered players and website visitors. As data controller, gv99 determines the purposes and means of processing your personal data and is responsible for ensuring that processing activities comply with applicable data protection standards.

References to the "platform" in this document include the gv99 website, any associated mobile-optimised pages, and all services, features, and communications made available through those channels.

gv99 collects personal data in the following categories, depending on how you interact with our platform:

2.1 Identity and Registration Data

When you create a gv99 account, we collect your full legal name, date of birth, gender (optional), nationality, and a copy of your government-issued identification document (such as a Bangladesh National ID Card, Passport, or Driver's License). This data is used to verify your identity and confirm your eligibility to use the platform.

2.2 Contact Data

We collect your email address, mobile phone number, and residential address (including city, district, and postcode). This data is used to communicate with you about your account, send transaction confirmations, and (where you have consented) deliver promotional communications.

2.3 Financial Data

We collect data related to your payment transactions on the gv99 platform, including mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers), bank account details where applicable, deposit and withdrawal amounts, transaction timestamps, and transaction reference numbers. We do not store full card numbers; any card payment data is handled directly by our PCI-DSS compliant payment processors.

2.4 Gaming and Betting Activity Data

We maintain records of your activity on the gv99 platform, including games played, bets placed, wager amounts, win/loss outcomes, session durations, login timestamps, and responsible gaming settings you have configured. This data is used to deliver gaming services, resolve disputes, detect fraud, and fulfil regulatory record-keeping obligations.

2.5 Technical and Device Data

We automatically collect certain technical data when you visit or use the gv99 platform, including your IP address, device type and model, operating system, browser type and version, screen resolution, referring URL, pages visited, and session duration. This data is used for platform security, fraud detection, and performance optimisation.

2.6 Communications Data

If you contact gv99 customer support via email or live chat, we retain records of those communications — including the content of messages, timestamps, and any files or screenshots submitted — for a period of five years. This data is used to resolve your enquiry, train support staff, and maintain an audit trail of player-platform interactions.

gv99 collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your profile settings.
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies when you browse or use the gv99 platform. See Section 7 (Cookies and Tracking Technologies) for further detail.
• From payment providers — when you initiate a transaction via bKash, Nagad, Rocket, Upay, or a bank transfer, your payment provider may share transaction metadata with gv99 necessary to match and credit your deposit or process your withdrawal.
• From identity verification services — where gv99 uses a third-party KYC or identity verification provider to check the authenticity of documents you submit, that provider may return verification results and risk signals to gv99.
• From fraud and security partners — gv99 may receive risk scores, device fingerprint data, and IP reputation data from third-party security vendors to assist with detecting fraudulent account activity.

gv99 uses the personal data it collects for the following specific purposes:

gv99 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a new lawful basis for processing.

gv99 processes your personal data on one or more of the following legal bases:

• Contract Performance: Processing is necessary to fulfil our contractual obligations to you under the gv99 Terms and Conditions — for example, to create your account, process your deposits, pay out winnings, and provide gaming services.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including anti-money-laundering obligations, identity verification requirements, and regulatory record-keeping mandates.
• Legitimate Interest: Processing is necessary for the purposes of gv99's legitimate business interests, where those interests are not overridden by your rights and freedoms. This includes fraud detection, platform security, responsible gaming monitoring, and service improvement analytics.
• Consent: For certain processing activities — specifically, the sending of direct marketing communications — gv99 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time through your account settings or by contacting support.

gv99 does not sell your personal data. We share personal data with third parties only in the following limited circumstances:

6.1 Payment Processors

To process deposits and withdrawals, gv99 shares the minimum necessary financial and identity data with our payment processing partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These partners process your data under their own privacy policies and are contractually bound to use your data only to fulfil the payment transaction.

6.2 Game Providers

To deliver third-party casino games and live dealer products from providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, gv99 shares a pseudonymous player session token with the relevant game provider. This token allows the provider to run your game session without receiving your full identity data. Game providers are contractually prohibited from using this token to identify you or contact you directly.

6.3 Identity Verification Services

Where gv99 uses a third-party KYC or identity verification provider to validate documents you submit, we share the relevant identity documents and associated data with that provider under strict data processing agreements. Verification results are returned to gv99; the provider does not retain your documents beyond the period required to complete the verification check.

6.4 Fraud and Security Partners

gv99 shares technical data (IP addresses, device identifiers, browser fingerprints) with third-party fraud detection and security vendors. These vendors process data on our behalf and are contractually restricted from using it for their own purposes or sharing it further.

6.5 Legal and Regulatory Disclosure

gv99 may disclose personal data to law enforcement agencies, regulatory bodies, or other public authorities where required by applicable law, court order, or lawful request. In such cases, gv99 will disclose only the minimum data necessary to satisfy the legal requirement and will, where legally permissible, notify the affected player that their data has been disclosed.

gv99 uses cookies and similar tracking technologies to operate the platform, enhance your user experience, and gather analytical data. The following categories of cookies may be set when you visit gv99:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as user authentication, session management, and security checks. These cookies cannot be disabled without materially impairing your ability to use gv99.
• Functional Cookies: These cookies remember your preferences (such as language settings and responsible gaming configurations) so you do not need to re-enter them on each visit. They enhance your experience but are not essential to core platform operation.
• Analytical Cookies: We use anonymised analytics cookies to understand how players navigate the gv99 platform — which pages are visited most frequently, where users exit, and how long sessions last. This data is used in aggregate form to improve platform performance and usability. No individual player is identified through analytical data.
• Security and Fraud Detection Cookies: These cookies collect device fingerprint data and behavioural signals used to detect suspicious activity and prevent unauthorised account access. They are a key component of our fraud prevention infrastructure.

Most browsers allow you to manage cookie preferences through browser settings. You can choose to block or delete cookies; however, disabling strictly necessary cookies may prevent you from logging in or using key platform features. Disabling fraud detection cookies may affect the security of your account.

gv99 implements a layered security architecture to protect personal data against unauthorised access, accidental loss, disclosure, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and our servers.
• AES-256 encryption at rest for all personal data stored in our databases.
• Role-based access controls ensuring that gv99 staff can only access personal data relevant to their specific job function.
• Two-factor authentication (2FA) required for all gv99 internal system access, and available to all players for their personal accounts.
• Regular penetration testing and vulnerability assessments conducted by independent third-party security specialists.
• Intrusion detection and automated threat monitoring active 24 hours a day, 7 days a week.
• Incident response procedures that ensure any confirmed personal data breach is assessed, contained, and communicated to affected players within 72 hours of discovery where legally required.

Despite these measures, no data transmission over the internet or storage system can be guaranteed to be completely secure. You are also responsible for the security of your own gv99 account credentials. If you believe your account has been compromised, contact support at [email protected] immediately.

gv99 retains personal data only for as long as it is required to fulfil the purpose for which it was collected, or for as long as is required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to any individual. Where anonymisation is not technically feasible, data is securely destroyed using industry-standard methods.

Subject to applicable law, you hold the following rights in respect of the personal data that gv99 holds about you. To exercise any of these rights, contact us at [email protected] with "Privacy Request" in the subject line. We will respond within 30 calendar days.

The gv99 platform is strictly for adults aged 21 and above. gv99 does not knowingly collect personal data from anyone under the age of 21. Registration by minors is a direct breach of our Terms and Conditions and is prohibited.

If gv99 discovers or is informed that a registered player was under 21 at the time of registration, the account will be immediately and permanently closed, all Real Funds will be returned following verification, and all Bonus Funds and winnings will be voided. Any personal data collected from a confirmed minor will be securely deleted as soon as the account closure process is complete, except where retention is required by applicable law.

If you are a parent or guardian and believe that your child has created a gv99 account, please contact us immediately at [email protected] so we can investigate and take appropriate action without delay.

gv99 operates as an internationally licensed offshore gaming platform. As a result, personal data collected from players in Bangladesh may be transferred to, stored, and processed in countries outside Bangladesh. These transfers may involve countries whose data protection laws differ from those applicable in Bangladesh.

Where personal data is transferred internationally, gv99 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Privacy Policy. Safeguards used by gv99 for international transfers include:

• Contractual clauses — data processing agreements with international partners that incorporate binding data protection obligations equivalent to those gv99 applies internally.
• Security standards — technical and organisational security measures (as described in Section 8) that apply regardless of where data is processed or stored.
• Minimisation at transfer — only the minimum personal data necessary to fulfil the transfer purpose is shared with international partners; full player profiles are not transmitted unless strictly required.

By registering and using the gv99 platform, you acknowledge that your personal data may be processed in the jurisdictions where gv99 and its service partners operate, under the safeguards described above.

gv99 may send you promotional communications — including bonus offers, tournament announcements, game launch notifications, and seasonal promotions tied to events such as the Bangladesh Premier League (BPL), IPL, T20 World Cup, Eid, or Pohela Boishakh — where you have provided explicit consent to receive such communications.

13.1 How We Obtain Consent

Marketing consent is obtained during the registration process via a clearly labelled, unticked opt-in checkbox. Consent is never bundled with the general Terms and Conditions acceptance. You must affirmatively tick the marketing opt-in to receive promotional communications. Registering an account without ticking the opt-in means you will not receive marketing messages from gv99.

13.2 Withdrawing Consent

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "Unsubscribe" link present in every marketing email sent by gv99;
• Updating your communication preferences in your gv99 account settings; or
• Contacting our support team at [email protected] and requesting removal from all marketing lists.

Withdrawal of marketing consent will be processed within 5 business days. Please note that withdrawing marketing consent does not affect the sending of transactional communications such as deposit confirmations, withdrawal notifications, account security alerts, and mandatory regulatory notices — these are sent on the basis of contract performance and legal obligation and cannot be opted out of while your account remains active.

13.3 Personalisation

Where you have opted in to marketing, gv99 may use your gaming activity data (game types played, typical wager range, preferred deposit method) to tailor promotional offers to your interests. This personalisation is based on your activity profile on the gv99 platform only; we do not use third-party behavioural data from other websites to inform our marketing. You may object to personalised marketing at any time by contacting support.

gv99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform services. The "Last Updated" date at the top of this document will be revised whenever a change is made.

For material changes — those that significantly affect your rights or the way we use your personal data — gv99 will provide at least 7 days' advance notice by:

• Sending a notification to your registered email address;
• Displaying a prominent notice on the gv99 platform homepage and account dashboard; and
• Where required, requesting your renewed consent before the updated policy takes effect.

Minor changes — such as clarifications, grammatical corrections, or updates to contact details — may be made without advance notice and will be effective immediately upon publication. Your continued use of the gv99 platform after a policy update constitutes your acknowledgement of the revised Privacy Policy. If you do not agree with a material change, you must stop using the platform and may request account closure by contacting support.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights described in Section 10, or want to raise a concern about how gv99 handles your personal data, please contact our data team using the details below. All data-related enquiries are handled with strict confidentiality.

• Email: [email protected] — use subject line "Privacy Request" for fastest routing
• Response Time: Initial acknowledgement within 48 hours; full response within 30 calendar days
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
• Languages: English

When submitting a data rights request, please provide your registered gv99 username, the email address associated with your account, a clear description of your request, and — where identity verification is required — a copy of a valid government-issued ID. This information allows us to locate your records accurately and process your request without delay.

gv99 does not charge a fee for processing data rights requests unless a request is manifestly unfounded, repetitive, or excessive. In such cases, we will notify you of any applicable fee before proceeding.