Privacy Policy — How gk9pg Collects, Uses, and Protects Your Data

gk9pg collects personal data through several channels in the ordinary course of operating the platform. The categories of data we collect, and the specific points at which collection occurs, are set out below.

Registration Data: When you create a gk9pg account, we collect your chosen username, email address, date of birth, and the mobile banking number associated with your preferred payment method (bKash, Nagad, Rocket, or Upay). This data is required to establish your account and verify your eligibility to use the platform.

Identity Verification (KYC) Data: To comply with our anti-money-laundering obligations and to confirm that players meet the 18+ age requirement, we may ask you to provide a copy of a government-issued photo ID (National ID card, passport, or driving licence) and a selfie or proof-of-payment-method document. This information is collected and stored securely, with access limited to authorised compliance personnel.

Transaction Data: Every deposit and withdrawal processed through the platform generates a transaction record. We retain details including the transaction amount in BDT, the payment method used, the date and time, and the transaction reference number provided by the mobile banking provider.

Gameplay and Betting Data: We record all bets placed, games played, session durations, wagering amounts, wins, losses, and bonus activity. This data is used for account management, responsible gaming monitoring, fraud detection, and platform improvement.

Technical and Device Data: Our systems automatically collect certain technical information when you access the platform, including your IP address, browser type and version, device type (mobile or desktop), operating system, referring URL, and pages visited during each session.

Communications Data: If you contact our support team via email, live chat, or WhatsApp, we retain a record of the correspondence, including the content of messages and the date and time of each interaction. This is used for quality assurance and for resolving any ongoing queries or disputes.

gk9pg processes your personal data only for specific, documented purposes. We do not use your data in ways that would be incompatible with the purposes for which it was originally collected. The principal purposes for which we use your data are as follows:

• Account Administration: To create, maintain, and secure your player account, process login requests, and enforce the one-account-per-player rule outlined in our Terms & Conditions.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, and Upay, to verify that payment methods belong to the registered account holder, and to maintain accurate transaction records in BDT.
• Identity and Age Verification: To confirm that all players are aged 18 or above and to comply with our Know Your Customer (KYC) obligations, which form part of our anti-money-laundering programme.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling behaviour, to apply deposit limits and self-exclusion requests, and to provide support to players who may be experiencing gambling-related difficulties. See our Responsible Gaming page for full details.
• Fraud Prevention and Security: To detect and investigate suspicious account activity, to flag potential duplicate accounts, and to share relevant data with payment providers and fraud prevention services where there are reasonable grounds to suspect financial crime.
• Customer Support: To respond to queries, resolve disputes, and maintain a record of communications to support ongoing account management and quality assurance.
• Platform Improvement and Analytics: To analyse how players interact with the platform — which games are most popular, where friction points occur in the deposit journey, and how navigation can be improved — using aggregated and anonymised data wherever possible.
• Legal Compliance: To retain records as required by applicable laws, and to respond to valid legal requests from regulatory bodies, courts, or law enforcement agencies operating in relevant jurisdictions.
• Promotional Communications: Where you have not opted out, to send you notifications about bonuses, seasonal promotions (such as Eid and BPL cricket season offers), and platform updates via your registered email address or in-platform notifications.

gk9pg does not sell or rent your personal data to any third party. However, in the ordinary course of operating a regulated online gaming and payment platform, we do share certain data with a limited set of trusted third-party service providers and, where required by law, with relevant authorities. All third-party data sharing is governed by strict contractual data-processing agreements.

The categories of third parties with whom data may be shared include:

• Mobile Banking Payment Providers: Transaction data — including your mobile number, transaction amount, and reference ID — is shared with bKash, Nagad, Rocket, and Upay as necessary to process your deposits and withdrawals. These providers operate under their own privacy policies, which you are encouraged to review.
• Game Content Providers: When you play a game on the gk9pg platform, your session data (account ID, bet amounts, game outcomes) is transmitted to the relevant game provider — such as Pragmatic Play, NetEnt, Microgaming, Ezugi, or Spribe — for game resolution and RNG certification purposes. Providers do not receive your full identity or payment data.
• Identity Verification Services: KYC document checks may be processed through third-party identity verification platforms. These services receive only the data necessary to confirm your identity and age, and are bound by strict data-handling obligations.
• Fraud Prevention and AML Services: Where suspicious activity is detected, relevant account and transaction data may be shared with third-party fraud monitoring services and, where legally required, with financial intelligence units or law enforcement bodies.
• Customer Support Infrastructure: Our live chat and email support systems are provided by third-party platforms. Support conversation data is processed on these platforms under data-processing agreements that prohibit secondary use.
• Analytics Providers: Anonymised and aggregated platform usage data may be processed by analytics services to support performance monitoring and UX improvement. Individual player data is not used for this purpose without anonymisation.

gk9pg does not transfer your personal data to parties outside of those listed above, and does not permit any third party to use your data for their own independent marketing or profiling purposes.

gk9pg uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your session preferences, and to gather anonymised data about how the platform is used. This section explains the types of cookies we use and your options for managing them.

What Are Cookies? Cookies are small text files placed on your device by a website when you visit it. They allow the site to recognise your device on subsequent visits, retain session state, and collect information about your browsing behaviour on the platform.

gk9pg does not use third-party advertising or retargeting cookies. No cookie data is sold or shared with advertising networks.

Managing Cookies: Most modern browsers allow you to control cookie settings through the browser's privacy or settings menu. You may block or delete cookies at any time; however, disabling strictly necessary cookies will impair or prevent your ability to log in and use the platform's core features. Functional cookies may be cleared without affecting platform access, though some preferences will revert to defaults.

gk9pg retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention guidelines apply:

• Active Account Data: Registration data, gameplay records, and transaction history are retained for the full duration of your account's active status and for a minimum of five (5) years following permanent account closure, in accordance with standard financial record-keeping obligations.
• KYC and Identity Documents: Identity verification documents are retained for a minimum of five (5) years after the closure of your account, or longer if required by a specific legal obligation or ongoing investigation.
• Transaction Records: All financial transaction records, including deposit and withdrawal histories in BDT via bKash, Nagad, Rocket, and Upay, are retained for a minimum of five (5) years to support AML compliance and dispute resolution.
• Customer Support Communications: Support correspondence is retained for three (3) years following the resolution of the relevant query or the closure of the associated account, whichever is later.
• Analytics Data: Anonymised analytics data — which cannot be linked back to any individual player — may be retained indefinitely for platform improvement purposes.
• Dormant Accounts: Accounts that have been inactive for 12 or more consecutive months are subject to a dormancy review process. Where an account is closed following a dormancy review, data is retained for the periods described above from the date of closure.

All personal data held by gk9pg is stored on servers protected by encryption at rest and in transit. Access to stored data is restricted to authorised personnel on a need-to-know basis and is subject to internal access-control policies and audit logging.

As a user of the gk9pg platform, you hold a number of rights with respect to the personal data we hold about you. We are committed to facilitating the exercise of these rights in a timely and transparent manner. Requests are typically processed within 30 calendar days of receipt.

To exercise any of the above rights, please contact our support team directly at [email protected]. Please include your registered username and a brief description of your request. We may ask you to verify your identity before processing the request to protect your account from unauthorised access.

gk9pg implements a layered approach to data security, combining technical controls, operational procedures, and staff training to protect your personal data against unauthorised access, loss, alteration, or disclosure.

The principal security measures we maintain include:

• Transport Layer Security (TLS): All data transmitted between your browser or mobile device and gk9pg servers is encrypted using TLS 1.2 or higher. Login pages, the cashier, and account management areas all operate exclusively over HTTPS.
• Encryption at Rest: Sensitive data fields — including identity document files and payment reference data — are encrypted in the database using AES-256 encryption. Encryption keys are stored separately from the data they protect and are rotated on a scheduled basis.
• Access Controls: Access to production systems and player data is restricted to authorised personnel on a role-based, need-to-know basis. All access is subject to multi-factor authentication and is logged for audit purposes.
• Penetration Testing: gk9pg's platform undergoes periodic security assessments, including vulnerability scans and penetration tests carried out by independent security professionals, to identify and remediate potential weaknesses before they can be exploited.
• Incident Response: gk9pg maintains a documented data breach response procedure. In the event of a confirmed breach that poses a risk to player data, affected players will be notified promptly with details of what occurred, what data was involved, and what steps are being taken to address the situation.
• Employee Training: All staff members who handle personal data receive regular privacy and data security training. Handling of sensitive data such as KYC documents is restricted to compliance-trained personnel only.

While gk9pg takes all reasonable and proportionate steps to secure your data, no digital system can guarantee absolute security. You also play a role in protecting your account — please ensure your password is strong and unique, enable two-factor authentication where offered, and contact us immediately at [email protected] if you suspect unauthorised access to your account.

gk9pg reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. When material changes are made, we will notify registered players via their registered email address and/or through a prominent in-platform notification prior to the changes taking effect.

The effective date at the top of this policy indicates when the current version was last revised. We encourage you to review this page periodically to stay informed about how your data is being handled. Continued use of the gk9pg platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the handling of your personal data by gk9pg, please contact our dedicated privacy support team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Response Time: We aim to acknowledge all privacy-related enquiries within 3 business days and to provide a full response within 30 calendar days.
• Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (BST, UTC+6)

For a broader overview of your rights and obligations as a gk9pg player, please also review our Terms & Conditions and our FAQ page, which covers common questions about account management, deposits, and platform security.