cgt999 Privacy Policy

Registration Data

When you create a cgt999 account, we collect the following information to establish and maintain your player profile:

• Full legal name as it appears on your national identity document
• Date of birth (used to verify that you meet the 21+ age requirement)
• Registered mobile phone number in Bangladesh
• Preferred payment method identifier (e.g., bKash wallet number, Nagad number, Rocket number)
• Account username and hashed password
• City or division of residence (e.g., Dhaka, Chittagong, Sylhet)

Transaction Data

Every financial transaction you conduct on cgt999 generates a transaction record. This includes deposit amounts in BDT (৳), withdrawal requests, bonus credits, wager history, game outcomes, and any adjustments made by cgt999 support staff. Transaction records are retained for a minimum of five years for audit and compliance purposes.

Technical & Device Data

When you access cgt999 via a mobile browser or web application, we automatically receive the following technical data:

• IP address and approximate geolocation derived from it
• Device type, operating system version, and browser type
• Session start and end timestamps (Bangladesh Standard Time, UTC+6)
• Pages visited and features interacted with during each session
• Referral source (if you arrived via a tracked link)

This technical data is used primarily to detect fraudulent login attempts, prevent account takeover, and improve site performance for players across Bangladesh.

Communications Data

If you contact cgt999 support via email at [email protected], the content of your messages, your contact details, and the history of our correspondence will be recorded and stored. This data is used to resolve your enquiry, train support staff, and maintain a service quality record.

Verification Documents

To comply with know-your-customer (KYC) procedures and to process withdrawals, cgt999 may request copies of identity documents such as your National Identity Card (NID), passport, or driving licence. These documents are stored in an encrypted environment and are accessed only by authorised personnel when processing verification requests.

Strictly Necessary Cookies

cgt999 uses strictly necessary cookies to maintain the security and functionality of your active session. These cookies store your session token, authentication state, and preferred language settings. They are essential to the operation of the Site and cannot be disabled without breaking core account functionality. No personal data stored in strictly necessary cookies is shared with third parties.

Analytics Cookies

With your consent, cgt999 may place analytics cookies to measure aggregate page traffic, feature usage patterns, and session durations. This data is collected in anonymised, aggregated form and is used solely to improve the cgt999 platform experience for players in Bangladesh. You may withdraw consent for analytics cookies at any time by adjusting your browser settings. Withdrawing analytics cookie consent does not affect your ability to use your cgt999 account.

Managing Cookies

You can manage, restrict, or delete cookies at any time through your browser's privacy settings. Instructions for the most common mobile browsers used in Bangladesh are widely available from each browser's support documentation. Please note that disabling strictly necessary cookies will prevent cgt999 from maintaining your login session, which means you will need to log in on every page visit.

Payment Processing Partners

To process your deposits and withdrawals in BDT (৳), cgt999 shares the minimum necessary transaction data with our payment processing partners, which include the network operators behind bKash, Nagad, Rocket, and Upay. This data sharing is strictly limited to what is required to execute the payment. These partners operate under their own privacy policies and are independently responsible for the data they process on their end.

Game Content Providers

cgt999 integrates games from third-party studios including Pragmatic Play, Microgaming, Spribe, Ezugi, and Evolution Gaming. When you launch a game, your session token and anonymised player identifier may be passed to the relevant studio's game server to initialise the game session. No additional personal data beyond what is technically necessary for the game session is shared with game studios.

Legal Disclosures

cgt999 may disclose personal data to law enforcement agencies, regulatory bodies, or other authorised public authorities when required to do so by a valid legal obligation, court order, or lawful governmental request. In such cases, cgt999 will disclose only the minimum information necessary to satisfy the legal requirement and will notify the affected player where permitted by law.

No Sale of Personal Data

cgt999 does not sell, rent, lease, or trade your personal data to any third party for commercial or marketing purposes. Any data sharing arrangement with a third party exists solely to support the delivery of cgt999 services to you as described in this Policy.

Active Account Data

For as long as your cgt999 account remains active, we retain all registration data, transaction records, and account activity logs necessary to provide you with a safe, functional gaming experience. This data is reviewed periodically and data that is no longer needed for operational purposes is deleted or anonymised.

Post-Closure Retention

Following the closure of a cgt999 account — whether requested by the player or actioned by cgt999 — we retain the following categories of data for the periods stated:

• Transaction records and financial data: retained for five years from the date of the last transaction
• Identity verification documents (KYC): retained for five years from the account closure date
• Communications and support tickets: retained for three years from the date of the last interaction
• Technical and session logs: retained for twelve months from the date of closure
• Self-exclusion records: retained for the duration of the exclusion period plus two years

After the applicable retention period, data is securely and permanently deleted or fully anonymised so that it can no longer be attributed to you as an individual.

Right of Access

You have the right to request a copy of the personal data cgt999 holds about you. Submit a written subject access request to [email protected] with your registered username and a brief description of the data you wish to access. We will respond within 30 days of receiving your request.

Right to Rectification

If any personal data cgt999 holds about you is inaccurate or incomplete, you have the right to request its correction. You can update basic profile details directly from your cgt999 account settings. For corrections requiring identity re-verification (such as a name change), contact [email protected] with supporting documentation.

Right to Erasure

You may request that cgt999 permanently delete your personal data. We will action erasure requests where no overriding legal obligation requires us to retain the data. Please note that transaction records and KYC documents are subject to mandatory retention periods under applicable financial regulations and cannot be deleted before those periods expire, even on request.

Right to Data Portability

Where technically feasible, you may request that cgt999 provides your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that you may transfer it to another service provider. Submit a portability request to [email protected] specifying which categories of data you require.

Right to Restrict Processing

In certain circumstances — for example, while the accuracy of your data is being verified or a complaint is being investigated — you may request that cgt999 temporarily restricts its processing of your personal data. During a restriction period, we will continue to store your data but will not actively use it except to defend against legal claims or with your explicit consent.

Technical Safeguards

cgt999 implements a range of technical measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data at rest, secure hashed storage of passwords (never stored in plain text), and automated intrusion detection systems that monitor for anomalous access patterns around the clock.

Organisational Safeguards

Access to player personal data within cgt999 is governed by a strict need-to-know policy. Only staff members whose job function requires access to specific data categories are granted that access, and all such access is logged and audited. Staff with access to personal data receive regular training on data protection obligations and security best practices.

Data Breach Response

In the unlikely event of a data breach that is likely to result in risk to your rights and freedoms, cgt999 will notify affected players without undue delay and will take all reasonable steps to contain the breach and mitigate its impact. cgt999 maintains an incident response plan that is reviewed and tested regularly.