Your Privacy Matters at gat99

1 Who We Are

This Privacy Policy is issued by gat99 ("gat99", "we", "us", "our"), the operator of the online betting and casino platform accessible at gat99.io. gat99 is the data controller responsible for your personal data collected through our website, mobile platform, and related services.

gat99 is a platform designed for the Bangladesh market, offering sports betting, live cricket markets, crash games, slots, and live casino products to eligible adult players aged 21 and above. We take our obligations as a responsible data controller seriously and are committed to protecting the privacy of every player who uses our services.

If you have any questions about how your personal data is handled, you can contact our dedicated privacy support team at any time. Our contact details are provided in Section 14 of this Policy.

2 Information We Collect

gat99 collects personal data from you through several channels: directly when you register an account or interact with our platform, automatically through your use of our website, and from third parties involved in payment processing and identity verification. The categories of personal data we collect are described below.

2.1 Registration and Account Data

When you create a gat99 account, we collect the following information:

• Full legal name as it appears on your official identity document
• Date of birth (used to verify that you meet the 21+ age requirement)
• Bangladesh mobile phone number
• Email address
• Residential address in Bangladesh (city, district, postal code)
• Username and encrypted password
• Preferred language and communication preferences

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer obligations, we may collect:

• Copies of your Bangladesh National Identity Card (NID), passport, or driving licence
• Proof of address documents such as utility bills or bank statements
• Selfie or photographic verification images where required to confirm identity
• Payment method verification documentation (e.g., bKash or Nagad transaction screenshots)

2.3 Transaction and Financial Data

• Deposit and withdrawal amounts, dates, and payment method identifiers
• Mobile banking account references (bKash, Nagad, Rocket, Upay numbers — stored as partial masked references only)
• Bank card partial numbers (last four digits only) for Visa and Mastercard transactions
• Transaction history and account balance records

2.4 Gaming and Betting Activity Data

• Bets placed, game sessions, wager amounts, and outcomes
• Sports markets accessed, including cricket BPL, T20, IPL, and football outright markets
• Casino game preferences, session duration, and responsible gaming tool usage
• Bonus claims, wagering progress, and promotional interactions

2.5 Technical and Usage Data

• IP address and approximate geographic location (country and region level)
• Device type, operating system, browser type and version
• Pages visited, session duration, click paths, and feature interactions
• Referring website or source of your visit to gat99.io
• Error logs and crash reports used for platform debugging and improvement

2.6 Communications Data

• Customer support conversations via email and live chat
• Feedback and complaints submitted through our support channels
• Survey responses and player satisfaction ratings

3 How We Use Your Information

gat99 uses the personal data we collect for the following purposes. We process your data only where we have a lawful basis to do so, as set out in Section 4 of this Policy.

4 Legal Basis for Processing

gat99 processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing activity:

• Contractual Necessity: Processing required to perform our contract with you — that is, to operate your gat99 account, process your deposits and withdrawals, settle your bets, and provide access to casino and sports betting products.
• Legal Obligation: Processing required to comply with our legal obligations, including age verification (21+ minimum), identity verification under anti-money laundering requirements, and retention of transaction records.
• Legitimate Interests: Processing carried out for the legitimate interests of gat99, including fraud prevention, platform security, abuse detection, and improving our products and services — where these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for the sending of marketing and promotional communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Vital Interests: Processing necessary to protect your vital interests, specifically in the context of responsible gaming interventions where we have identified indicators of gambling-related harm.

5 Sharing Your Information

gat99 does not sell your personal data to third parties. We share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

5.1 Payment Service Providers

To process your deposits and withdrawals, we share relevant transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and international card schemes (Visa, Mastercard). These providers act as data processors and are contractually bound to handle your data securely and only for the purposes of processing your transactions.

5.2 Identity Verification and KYC Providers

We may use third-party identity verification services to assist with KYC document checks and age verification. These providers process your identity documents solely for verification purposes and are not permitted to retain or use them for any other purpose.

5.3 Game and Technology Providers

Casino game providers including Evolution Gaming, Pragmatic Play Live, NetEnt, Microgaming, Ezugi, and Spribe may receive limited technical data (such as a pseudonymous player identifier and session token) necessary to deliver their games to your device. These providers do not receive your full personal profile or financial data.

5.4 Legal and Regulatory Authorities

gat99 will disclose your personal data to law enforcement agencies, regulatory bodies, or other public authorities when required to do so by applicable law, court order, or where we believe disclosure is necessary to prevent fraud, money laundering, or other criminal activity.

5.5 Business Transfers

In the event that gat99 undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will provide reasonable notice before your data is transferred and becomes subject to a different privacy policy.

6 Payment Data and Financial Information

gat99 treats all financial data with the highest level of care. We do not store complete card numbers, full bKash or Nagad account numbers, or banking credentials on our own systems. Financial transactions are processed through secure, encrypted payment channels provided by our licensed payment partners.

All transactions on gat99 are denominated in Bangladeshi Taka (BDT). Our payment partners are responsible for the security of payment credentials during the transaction process and maintain their own security certifications and compliance standards. gat99 retains only the minimum transactional metadata required to reconcile your account balance, resolve disputes, and comply with record-keeping obligations.

Withdrawal requests are subject to our standard verification process. For large or unusual withdrawals, additional documentation may be requested before processing. This is a standard fraud prevention measure and is not indicative of any adverse finding against your account.

7 Cookies and Tracking Technologies

gat99 uses cookies and similar tracking technologies to operate and improve our platform. Cookies are small text files placed on your device when you visit gat99.io. They serve the following purposes:

You can control cookie settings through your web browser preferences. Most modern browsers allow you to view, manage, and delete cookies stored on your device. Disabling analytics or personalisation cookies will not prevent you from using the core features of gat99.io, but may affect the quality of your personalised experience.

8 Data Retention

gat99 retains your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by our legal and regulatory obligations. The following general retention periods apply:

• Account and registration data: Retained for the duration of your active account relationship with gat99, plus a minimum period of five (5) years following account closure, to satisfy our record-keeping and anti-money laundering obligations.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, in accordance with applicable anti-money laundering regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction to support audit, dispute resolution, and regulatory compliance.
• Gaming activity logs: Retained for a minimum of three (3) years to support responsible gaming monitoring, dispute resolution, and platform integrity reviews.
• Customer support communications: Retained for three (3) years from the date of the last interaction to support ongoing dispute resolution and quality assurance.
• Marketing consent records: Retained for the duration of your consent plus two (2) years following withdrawal of consent, to demonstrate compliance with consent obligations.

When personal data is no longer required to be retained, it is securely deleted or anonymised so that it can no longer be attributed to you as an individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

9 Data Security

gat99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and gat99.io is encrypted using industry-standard Transport Layer Security protocols.
• Secure Server Infrastructure: gat99's servers are hosted in access-controlled, monitored data centre environments with physical and logical security controls.
• Access Controls: Access to personal data within gat99's internal systems is restricted on a strict need-to-know basis. All staff members with data access undergo security training and are subject to confidentiality obligations.
• Two-Factor Authentication: OTP-based two-factor authentication is available for all gat99 player accounts to provide an additional layer of login security.
• Vulnerability Management: gat99 conducts regular security assessments and vulnerability scans of our platform infrastructure to identify and remediate security risks proactively.
• Incident Response: In the event of a data security incident that may affect your personal data, gat99 will notify affected players promptly and take immediate steps to contain and remediate the incident.

10 Your Privacy Rights

As a gat99 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request" and provide your registered username and a description of your request.

• Right of Access: You have the right to request a copy of the personal data that gat99 holds about you, along with information about how it is being used.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by gat99 be corrected or updated.
• Right to Erasure: You have the right to request that gat99 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that data subject to mandatory retention requirements cannot be deleted on request.
• Right to Restrict Processing: You have the right to request that gat99 restrict the processing of your personal data in certain circumstances, such as while a dispute about data accuracy is being resolved.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on gat99's legitimate interests. You also have an unconditional right to object to the use of your personal data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

gat99 will respond to all privacy rights requests within thirty (30) days of receipt. In cases of complexity or high volume of requests, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reasons for it.

11 Children and Minors

gat99 is strictly an adults-only platform. We do not knowingly collect personal data from any individual under the age of 21. Our platform is not designed for, directed at, or intended to be used by minors.

Age verification is a mandatory step in our account registration and KYC process. Any account found to belong to a person under the age of 21 will be immediately suspended, all data associated with that account will be handled in accordance with our child protection obligations, and the matter will be escalated appropriately.

If you are a parent or guardian and you believe that a minor under your care has registered an account on gat99.io, please contact us immediately at [email protected] so that we can take prompt action to close the account and delete the associated data.

12 Marketing Communications

With your consent, gat99 may send you promotional communications about bonuses, new games, sports betting offers, seasonal promotions tied to events such as BPL, T20 World Cup, Eid, and Pohela Boishakh, and other platform news. Marketing communications may be sent via email or SMS to your registered mobile number.

You can opt out of marketing communications at any time by:

• Clicking the unsubscribe link at the bottom of any marketing email from gat99
• Updating your communication preferences within your gat99 account settings
• Contacting our support team at [email protected] with a request to be removed from marketing communications

Opting out of marketing communications will not affect the delivery of transactional communications related to your account, such as deposit confirmations, withdrawal notifications, KYC requests, and security alerts. These communications are sent as a necessary part of operating your account and cannot be disabled.

13 Changes to This Policy

gat99 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, platform functionality, or applicable law. When we make material changes to this Policy, we will notify registered players by email to their registered address and by posting a prominent notice on gat 99.io, at least fourteen (14) days before the changes take effect.

The "Last Updated" date at the top of this Privacy Policy reflects the date on which the most recent version came into effect. We encourage you to review this Policy periodically to stay informed about how gat99 protects your personal data. Your continued use of the gat99 platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

Previous versions of this Privacy Policy are available upon request by contacting our support team. If you have concerns about any changes to this Policy, you are entitled to exercise your privacy rights as described in Section 10, including the right to close your account and request deletion of your data, subject to our mandatory retention obligations.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way gat99 handles your personal data, please contact our privacy support team using the details below:

• Email: [email protected]
• Subject Line: Please use "Privacy Policy Enquiry" or "Privacy Rights Request" for faster routing
• Support Hours: 24 hours a day, 7 days a week, 365 days a year
• Response Target: Within 24 hours for general enquiries; within 30 days for formal privacy rights requests
• Language: English

When contacting us regarding a specific account or data matter, please include your registered username and a clear description of your request to enable us to assist you as efficiently as possible. For formal data rights requests, we may need to verify your identity before processing the request to ensure we are disclosing or acting on data belonging to you.

By using the gat99 platform, you confirm that you are aged 21 or above and that you have read and understood this Privacy Policy in full. © 2026 gat99. All rights reserved.