Privacy Policy — gt98 Platform

1. Introduction

1.1. This Privacy Policy governs how gt98 ("we", "us", "our") collects, processes, stores, and protects personal data provided by individuals ("you", "your", "Member") who access or use the gt98 online betting and casino platform, available at gt98.io.

1.2. gt98 is dedicated to maintaining a transparent and accountable approach to data privacy. We recognise that the trust of our members — particularly those in the Bangladesh market — is fundamental to our platform's integrity, and we are committed to handling all personal data with the utmost care and in accordance with applicable data protection principles.

1.3. This Policy should be read alongside the gt98 Terms & Conditions, which together form the complete legal framework governing your relationship with gt98. Capitalised terms used but not defined in this Policy carry the meanings given to them in the Terms & Conditions.

2. Data Controller

2.1. For the purposes of this Privacy Policy, gt98 acts as the data controller in respect of the personal data you provide when registering for and using the platform. As data controller, gt98 determines the purposes and means by which your personal data is processed.

2.2. If you have any questions or concerns regarding how your personal data is processed, or if you wish to exercise any of your data rights described in Section 10 of this Policy, you may contact the gt98 Data Protection team at [email protected].

3. Data We Collect

3.1. gt98 collects personal data across several categories, depending on how you interact with our platform. The categories of data we collect are set out in the table below:

Category	Examples	When Collected
Identity Data	Full name, date of birth, gender, National ID number, passport details	During registration and KYC verification
Contact Data	Email address, mobile phone number, residential address (city, division, Bangladesh)	During registration and account updates
Financial Data	bKash / Nagad / Rocket account numbers, DBBL / BRAC Bank account references, transaction history	During deposit and withdrawal processing
Technical Data	IP address, browser type, operating system, device identifiers, session timestamps	Automatically upon platform access
Behavioural Data	Pages visited, games played, bets placed, bet amounts, win/loss records, session duration	Continuously during platform use
Communications Data	Records of live chat conversations, support email correspondence, feedback submissions	When you contact our support team
Verification Data	Copies of government-issued ID, selfie photographs, proof of address documents	During KYC or enhanced verification checks

3.2. We do not collect sensitive special-category data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data for identification purposes) unless you voluntarily provide such information in the context of a responsible gaming self-assessment or support interaction.

3.3. Where you choose not to provide personal data that is marked as mandatory during the registration process, gt98 may be unable to provide you with access to the platform or specific services, particularly where such data is required for identity verification, payment processing, or legal compliance purposes.

4. Legal Basis for Processing

4.1. gt98 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you under the Terms & Conditions, including operating your account, processing transactions, and delivering the Services you have requested.
• Legitimate Interests: Processing carried out for gt98's legitimate business interests, including fraud prevention, platform security, anti-money laundering monitoring, responsible gaming compliance, and improving the quality of our Services — provided these interests are not overridden by your fundamental rights.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including identity verification, age verification, and the reporting of suspicious transactions.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, such as sending you promotional communications or optional analytics. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

5. How We Use Your Data

5.1. gt98 uses the personal data we collect for the following purposes:

5.1 Account Management

To create, verify, manage, and maintain your gt98 Member Account, including processing your registration, authenticating your login sessions, enabling password resets, and communicating important account-related updates to you.

5.2 Payment Processing

To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank (DBBL), and BRAC Bank. Financial data is shared with payment processors solely to the extent necessary to complete transactions and to verify the source and ownership of funds in accordance with our anti-money laundering obligations.

5.3 Identity and Age Verification

To verify that all Members are aged 21 or above and that their identity information is accurate and genuine. gt98 works with trusted third-party KYC verification providers to conduct these checks. Verification data is retained for the period required by applicable law.

5.4 Fraud Prevention and Security

To detect, investigate, and prevent fraudulent transactions, unauthorised account access, multi-accounting, money laundering, and other prohibited activities as defined in the gt98 Terms & Conditions. This includes monitoring betting patterns and transaction activity for anomalies consistent with suspicious behaviour.

5.5 Responsible Gaming

To support responsible gaming obligations, including processing self-exclusion requests, enforcing deposit limits, delivering reality check notifications, and flagging accounts that show indicators of problem gambling behaviour for review by our responsible gaming team.

5.6 Personalisation and Platform Improvement

To personalise your experience on the gt98 platform, including tailoring game recommendations, promotional offers, and content based on your preferences and activity history. We also use aggregated, anonymised behavioural data to improve platform performance, fix bugs, and develop new features.

5.7 Marketing Communications

With your consent, to send you promotional emails, SMS notifications, or in-platform messages about new games, bonuses, seasonal offers (such as Eid or Pohela Boishakh promotions), and platform updates relevant to Bangladeshi players. You may opt out of marketing communications at any time by following the unsubscribe instructions in any communication or by contacting our support team.

6. Data Sharing & Disclosure

6.1. gt98 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes under any circumstances.

6.2. We may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and other payment processors necessary to facilitate your transactions.
• Identity Verification Partners: Third-party KYC and age verification service providers who assist us in confirming the identity and eligibility of Members.
• Fraud Prevention and Security Services: Providers of anti-fraud, anti-money laundering, and cybersecurity services who assist us in protecting the integrity of the platform and its Members.
• Game Software Providers: Licensed casino and sportsbook software providers — including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming — who may process limited technical and session data to deliver their games. Each provider is contractually bound to handle such data in accordance with applicable data protection standards.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or regulatory direction, gt98 may disclose your personal data to law enforcement agencies, financial intelligence units, or other competent authorities.
• Professional Advisers: Lawyers, auditors, and other professional advisers bound by confidentiality obligations where disclosure is necessary in connection with legal proceedings, compliance reviews, or corporate transactions.

6.3. All third parties with whom gt98 shares personal data are required to maintain appropriate technical and organisational security measures and to process your data only for the purposes for which it was shared.

7. Cookies & Tracking Technologies

7.1. gt98 uses cookies and similar tracking technologies (collectively, "Cookies") to enhance platform functionality, maintain session security, and gather analytics data. The categories of Cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the operation of the gt98 platform. These include session authentication cookies, security tokens, and load balancing cookies. You cannot opt out of strictly necessary cookies as they are fundamental to platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, display preferences, and recently played games, to provide a more personalised experience.
• Analytics Cookies: Used to collect anonymised data on how Members interact with the gt98 platform, including page visit frequency, navigation paths, and session duration. This data helps us improve the platform's usability and performance.
• Marketing Cookies: Used with your consent to display relevant promotional messages and offers within the platform based on your activity. These cookies do not track your browsing activity outside of gt98.io.

7.2. You can manage your cookie preferences at any time through your browser settings. Disabling functional or analytics cookies may affect certain aspects of your gt98 experience but will not prevent you from accessing core platform features.

8. Data Retention

8.1. gt98 retains your personal data for as long as your Account remains active and for a period thereafter as required to fulfil our legal and regulatory obligations, resolve disputes, and enforce our agreements.

8.2. As a general guide, the following retention periods apply:

• Account and Identity Data: Retained for the duration of your Account and for a minimum of 5 years following Account closure, in accordance with anti-money laundering and financial crime prevention obligations.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction to satisfy financial record-keeping requirements.
• Communications Data: Live chat and email correspondence is retained for up to 2 years from the date of the interaction to support dispute resolution and quality assurance purposes.
• Technical and Behavioural Data: Retained in aggregated or anonymised form for analytical purposes; identifiable technical logs are retained for up to 12 months.
• Marketing Consent Records: Retained for the duration of your membership and for 1 year after you withdraw consent, to demonstrate compliance with consent requirements.

8.3. When your personal data is no longer required for the purposes for which it was collected, gt98 will securely delete or anonymise it in accordance with our data disposal procedures.

9. Data Security

9.1. gt98 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL (Secure Sockets Layer) encryption for all data transmitted between your device and the gt98 platform.
• Encrypted storage of sensitive account data, including payment references and identification documents, at rest.
• Multi-factor authentication options for Member account access.
• Real-time intrusion detection and monitoring systems to identify and respond to security threats promptly.
• Role-based access controls ensuring that only authorised gt98 personnel can access Member data, strictly on a need-to-know basis.
• Regular security audits and penetration testing conducted by qualified independent security professionals.

9.2. Despite these measures, no data transmission over the internet can be guaranteed to be completely secure. While gt98 takes every reasonable precaution to protect your data, we cannot guarantee absolute security. You are responsible for keeping your Account credentials confidential and for notifying us immediately if you suspect any unauthorised access to your Account.

10. Your Data Rights

10.1. As a Member of the gt98 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all verified requests within 30 days.

10.2. Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

10.3. gt98 may need to verify your identity before fulfilling a data rights request to ensure the security of Member data. We reserve the right to decline requests that are manifestly unfounded or excessive, or that conflict with our legal retention obligations.

11. Children & Minors

11.1. The gt98 platform is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or store personal data from individuals under the age of 21. If we become aware that a Member has provided false age information during registration and is in fact under the minimum age requirement, we will immediately close the Account, delete all associated personal data, and return any real-money deposits to the originating payment method.

11.2. If you believe that a minor may have accessed the gt98 platform or provided personal data to us, please contact our support team at [email protected] immediately so that we can take appropriate action without delay.

12. Third-Party Links

12.1. The gt98 platform does not contain links to third-party websites, social media platforms, or external services that are outside the control of gt98. If you navigate to any external website or application independently, please be aware that those platforms operate under their own privacy policies, and gt98 accepts no responsibility or liability for how they collect, use, or protect your data.

12.2. Game content provided by third-party software providers (such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming) is delivered within the gt98 platform environment. These providers may process limited technical session data to render their games. Such processing is governed by data processing agreements between gt98 and each provider and is subject to the same data protection standards described in this Policy.

13. Changes to This Privacy Policy

13.1. gt98 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or platform features. When material changes are made, we will notify Members by displaying a prominent notice on the platform or by sending a notification to the email address associated with the Member's Account.

13.2. The "Last Updated" date displayed at the top of this page indicates when the most recent revision was made. We encourage you to review this Policy periodically to stay informed about how gt98 is protecting your information.

13.3. Your continued use of the gt98 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated Policy.

14. Contact Us

14.1. If you have any questions, concerns, or requests relating to this Privacy Policy or the way gt98 processes your personal data, please contact our Data Protection team using the details below:

• Email: [email protected]
• Live Chat: Available 24/7 via the gt98 platform — Bangladesh Standard Time (UTC+6)
• Response Time: We aim to respond to all privacy-related enquiries within 5 business days. Urgent matters relating to account security or suspected unauthorised access will be prioritised.

14.2. When submitting a data rights request or privacy enquiry, please include your registered email address and a brief description of your request so that we can verify your identity and respond efficiently.