gto9 Privacy Policy — Your Data, Your Rights
This Privacy Policy explains how gto9 collects, uses, and safeguards the personal information of players in Bangladesh. We are committed to handling your data with transparency, security, and respect.
Introduction and Scope
This Privacy Policy ("Policy") is issued by gto9 ("we", "us", "our") and applies to all personal information collected from or about users ("you", "your") who access the gto9 website at gto9.org, register an account, make deposits, place wagers, use customer support, or otherwise interact with any part of the gto9 platform. This Policy describes the types of personal data we collect, the purposes for which we process it, the parties with whom we may share it, the security measures we apply, and your rights in relation to your personal data.
By using gto9, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you must cease using gto9 immediately. We may update this Policy from time to time; the current version is always the version displayed on this page, marked with the effective date above.
Privacy Commitments at a Glance
These six commitments summarise how gto9 approaches data privacy. Full details for each are provided in the sections below.
1. What Personal Data We Collect
gto9 collects personal data that is necessary to operate the platform, verify player identity, process payments, prevent fraud, and comply with applicable legal and regulatory obligations. We collect data in the following categories:
Categories of Personal Data
- 👤 Identity Data:Full name, date of birth, national ID number, passport number (where provided for KYC), and photograph (where submitted for identity verification). This data is collected at registration and during any KYC verification process.
- 📱 Contact Data:Bangladesh mobile phone number (used as primary account identifier and for OTP delivery), email address (where provided), and any correspondence you send to gto9 customer support including chat transcripts and support ticket history.
- 💳 Financial Data:Transaction records including deposit amounts, withdrawal requests, transaction timestamps, and the mobile wallet identifiers (bKash, Nagad, Rocket, Upay account references) associated with your account. gto9 does not store full card numbers or bank account credentials.
- 🌐 Technical Data:IP address, device type, operating system, browser type and version, screen resolution, session duration, pages visited, referral URL, and general geolocation derived from IP address (country and city level only — gto9 does not use precise GPS-level location tracking).
- 🎮 Gaming Data:Betting and gaming history, game session records, bonus claims, wagering activity, win and loss records, responsible gaming settings (deposit limits, self-exclusion requests, cooling-off periods), and any notes or flags generated through our responsible gaming monitoring process.
gto9 collects data directly from you (at registration, during identity verification, via support interactions), automatically through your use of the platform (via cookies and server logs), and from payment processors involved in processing your deposits and withdrawals.
2. How We Use Your Personal Data
gto9 processes your personal data only for specific, legitimate purposes. We do not use your data for any purpose incompatible with the purposes listed below:
- 1Account creation and management: to register your account, verify your identity, authenticate your login sessions, update your account details, and manage your profile settings including responsible gaming preferences.
- 2Payment processing: to process deposits from bKash, Nagad, Rocket, Upay and other approved payment channels; to process withdrawal requests; and to maintain accurate financial records for your account and for our internal accounting.
- 3Service delivery and platform operation: to deliver the games, sports betting markets, live casino streams, promotions, and all other features of the gto9 platform that you access; to personalise your in-platform experience; and to provide customer support.
- 4Legal and regulatory compliance: to comply with anti-money laundering (AML) requirements, to perform Know Your Customer (KYC) identity verification, to maintain records required by applicable law, to respond to lawful requests from competent authorities, and to enforce our Terms and Conditions.
- 5Security and fraud prevention: to detect and investigate suspicious activity, prevent account takeover, identify and block fraudulent payment patterns, enforce our responsible gaming tools, and protect the integrity of the gto9 platform.
- 6Platform improvement: to analyse aggregated and anonymised usage patterns to improve platform performance, fix bugs, optimise page load times (especially for Bangladeshi mobile networks), and develop new features that better serve our players.
3. Who We Share Your Data With
gto9 does not sell, rent, or trade your personal data. We share personal data only in the following limited and controlled circumstances:
- 1Payment processors and mobile wallet operators: gto9 shares transaction-specific data with bKash, Nagad, Rocket, Upay, and other approved payment partners solely to process your deposit and withdrawal transactions. These partners process your data as independent data controllers under their own privacy policies and applicable Bangladesh regulations.
- 2KYC and identity verification partners: gto9 may share identity documentation with approved third-party KYC service providers to verify your identity in compliance with AML obligations. These providers are contractually bound to process your data only for the stated verification purpose and to maintain equivalent data security standards.
- 3Law enforcement and regulatory authorities: gto9 will disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities when required to do so by applicable law, court order, or lawful regulatory request. gto9 will, where legally permitted, notify you of such a disclosure.
- 4Service providers acting on our behalf: gto9 may engage trusted technical service providers (for example, cloud hosting providers, analytics platforms, and customer support software vendors) who process personal data on our behalf under strict data processing agreements. These providers are not permitted to use your data for their own purposes.
4. Financial Data and Payment Security
gto9 processes all financial transactions in Bangladeshi Taka (BDT) via approved local payment channels. When you make a deposit using bKash, Nagad, Rocket, or Upay, the transaction is processed directly through the relevant payment provider's secure gateway. gto9 receives a transaction reference and confirmation of the deposit amount; we do not receive or store your full mobile banking PIN, password, or any sensitive authentication credentials associated with your mobile wallet.
All financial records related to your gto9 account — including deposit history, withdrawal history, and account balance snapshots — are encrypted at rest and in transit. Access to financial records is restricted to authorised gto9 personnel on a need-to-know basis and to approved third-party payment processors operating under binding data processing agreements.
5. Cookies and Tracking Technologies
gto9 uses cookies and similar browser-based storage technologies to operate the platform, remember your session, and measure aggregate usage patterns. We do not use advertising cookies, retargeting pixels, or social media tracking scripts. The cookies gto9 uses fall into the following three categories:
- 1Essential cookies: strictly necessary for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. Without these cookies, the gto9 website cannot operate. They do not track you across other websites and are deleted when you close your browser session.
- 2Functional cookies: used to remember your preferences such as language setting, odds format, and responsible gaming configurations. These cookies make the platform more convenient to use but are not required for core functionality. You may disable them in your browser settings without breaking the platform.
- 3Analytics cookies: used to collect anonymised, aggregated data about how players navigate and use the gto9 platform. This data helps us understand which pages perform well, where users encounter difficulties, and how to improve the overall experience. No personally identifiable information is included in analytics reports.
6. Data Security Measures
gto9 implements a range of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include: SSL/TLS encryption for all data in transit between your device and gto9 servers; encryption at rest for all sensitive personal data stored in our databases; access controls ensuring that only authorised personnel can access personal data, with access granted strictly on a need-to-know basis; regular security audits and vulnerability assessments of our platform infrastructure; and two-factor authentication (2FA) available to all registered players via account settings.
While gto9 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. If you suspect that your gto9 account has been compromised or that your personal data has been accessed without authorisation, you must contact gto9 support immediately at [email protected]. gto9 will investigate all credible security incidents promptly and take appropriate remedial action.
7. Your Data Rights
As a gto9 user, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected]. We will respond to all valid requests within 30 days:
- 1Right of access: you may request a copy of the personal data we hold about you, including your account information, transaction history, gaming history, and any KYC documentation we retain on file.
- 2Right of rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. You can update most account details directly through your profile settings; for identity-related data, please contact support.
- 3Right of erasure: you may request deletion of your personal data. We will action erasure requests subject to our legal obligation to retain certain categories of data (for example, financial transaction records and KYC documentation required under AML law). Where data cannot be erased due to a legal hold, we will inform you of the reason and the expected retention period.
- 4Right to restrict processing: in certain circumstances (for example, where you contest the accuracy of data we hold, or where you have objected to our processing), you may request that we restrict processing of your personal data while the matter is under review.
- 5Right to object: you may object to our processing of your personal data for direct marketing purposes (if applicable). You may also object to processing based on our legitimate interests, in which case we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
8. Data Retention and Deletion
gto9 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply: identity and KYC documentation is retained for a minimum of 5 years following account closure, in compliance with AML record-keeping obligations; financial transaction records are retained for a minimum of 5 years following the date of the transaction; gaming history records are retained for the duration of your active account and for 2 years following account closure; customer support correspondence is retained for 3 years; and technical log data (IP addresses, session logs) is retained for 12 months.
When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. You may request early deletion of your data as described in Section 7 above, subject to the legal retention obligations that apply.
9. Protection of Minors
gto9 is strictly a platform for adults aged 21 and above. gto9 does not knowingly collect personal data from individuals under the age of 21. If we become aware that an account has been registered by a person under 21, or that personal data has been collected from a minor, we will close the account immediately, void any associated transactions, and securely delete or anonymise the personal data collected. If you believe that a minor has registered an account on gto9 using false information, please contact us at [email protected] so that we can take immediate action.
10. Policy Updates and How to Contact Us
gto9 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the features and services offered on the platform. When we make material changes to this Policy, we will notify registered users by sending a notification to their registered mobile number or by displaying a prominent notice on the gto9 platform. The updated Policy will display a new effective date at the top of this page. Continued use of gto9 after the effective date of any revised Policy constitutes your acceptance of the updated terms.
For any privacy-related questions, data access requests, erasure requests, or other enquiries about how gto9 handles your personal information, please contact our support team by email at [email protected]. Please include your registered mobile number in any correspondence so that we can identify your account and respond efficiently. Our support team is available 24/7 and we aim to respond to all privacy enquiries within 72 hours.
Ready to Play Responsibly at gto9?
Your privacy is protected every step of the way. Explore gto9 Casino, check our FAQ, or review our full Terms & Conditions before you play.