gk89 Privacy Policy — How We Collect, Use & Protect Your Data
Your privacy matters to gk89. This Privacy Policy explains in clear, plain English exactly what personal data we collect from players in Bangladesh, how we use it, who we share it with, and how you can exercise your rights over your own information at any time.
Six Core Privacy Commitments
Before you read the full policy, here is a plain-English summary of the six most important things gk89 commits to regarding your personal data.
We Only Collect What We Need
gk89 collects only the personal data necessary to operate your account, process payments, verify your identity, and comply with legal obligations. We do not collect excessive or irrelevant information.
We Never Sell Your Data
gk89 does not sell, rent, or trade your personal information to any third party for commercial purposes. Your data is used solely to deliver and improve the gk89 service and to comply with applicable legal requirements.
Your Data Is Kept Secure
All data held by gk89 is protected by SSL/TLS encryption in transit and AES-256 encryption at rest. Access to personal data is restricted to authorised personnel only, on a strict need-to-know basis.
You Control Your Data
You have the right to access, correct, and request deletion of the personal data gk89 holds about you. Submit a data request to our support team at any time and we will respond within 30 days.
Clear Retention Periods
gk89 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Transaction records are retained for a minimum of five years for financial compliance purposes.
Opt-Out of Marketing
Marketing communications from gk89 are entirely opt-in. If you no longer wish to receive promotional emails, SMS, or push notifications, you may unsubscribe at any time via your account settings or by contacting support.
1 Introduction
gk89 is committed to protecting the privacy and personal data of every player who uses its online betting and casino platform. This Privacy Policy sets out in clear, formal terms what information gk89 collects, the purposes for which that information is used, the parties with whom it may be shared, the security measures applied to protect it, and the rights available to you as a data subject.
This Privacy Policy applies to all interactions with the gk89 platform, including account registration, identity verification, deposits and withdrawals, sports betting, casino gaming, customer support contacts, and any promotional participation. It applies regardless of the device — desktop, mobile browser, or any future gk89 application — used to access the platform.
This Privacy Policy should be read alongside gk89's Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference and form part of the overall agreement between you and gk89.
If you have questions about how gk89 handles your personal data, or wish to exercise any of your data rights, please contact the gk89 support team at the email address provided in Section 14 of this policy.
2 Personal Data We Collect
gk89 collects personal data across several categories. The table below summarises the types of data collected, the context in which each type is collected, and its primary purpose:
| Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, National ID (NID), passport number | Account registration, KYC verification, age verification |
| Contact Data | Email address, mobile phone number, residential address in Bangladesh | Account communication, support, transaction notifications |
| Financial Data | bKash/Nagad/Rocket/Upay mobile number, bank account details, transaction history | Payment processing, withdrawal verification, fraud prevention |
| Technical Data | IP address, device type, browser type, operating system, session timestamps | Platform security, fraud detection, service optimisation |
| Usage Data | Pages visited, games played, bet history, session duration, feature interactions | Platform improvement, responsible gaming monitoring, personalisation |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | Customer support, dispute resolution, service quality review |
| Verification Documents | NID scan or photograph, selfie with ID, proof of address document | KYC compliance, identity confirmation, account security |
2.1 Special Categories of Data
gk89 does not intentionally collect special category data (including racial or ethnic origin, religious beliefs, health data, or biometric data) unless it is directly required for responsible gaming compliance — for example, where a player voluntarily discloses a gambling addiction during a self-exclusion request. Any such data disclosed in a responsible gaming context is handled with the highest level of confidentiality and is not used for any commercial purpose.
2.2 Data You Are Not Required to Provide
Certain data fields during the account registration process are marked as optional. You are not obliged to provide optional information. However, withholding required data — such as identity documents during KYC verification — may result in your ability to withdraw funds being temporarily restricted until the verification is satisfactorily completed.
3 How We Collect Your Data
gk89 collects personal data through the following means:
- Direct Submission: Data you enter into account registration forms, KYC document upload portals, deposit and withdrawal request forms, and customer support chat interfaces;
- Automated Technical Collection: Data automatically collected when you access the gk89 platform, including IP addresses, device identifiers, browser fingerprints, cookies, and session activity logs;
- Payment Processing Partners: Transaction confirmation data shared by payment processors including bKash, Nagad, Rocket, Upay, and partner banks to validate deposits and withdrawals;
- Third-Party Identity Verification: Where gk89 uses third-party KYC or fraud-detection services, those services may provide data verification results back to gk89 based on documents you have submitted;
- Game Providers: Game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may share session and game-outcome data with gk89 for platform reconciliation and dispute resolution purposes.
4 How We Use Your Personal Data
gk89 uses the personal data it collects for the following specific purposes:
- Account Management: Creating, maintaining, and securing your gk89 account; processing login authentication; enabling two-factor authentication (2FA);
- Identity Verification (KYC): Confirming your age (21+), identity, and residential location in compliance with gk89's responsible gaming and anti-fraud policies;
- Payment Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and banking partners; reconciling transaction records; detecting and preventing unauthorised transactions;
- Service Delivery: Enabling access to sports betting markets, live casino games, slot titles, jackpot games, and all other gk89 platform features;
- Customer Support: Responding to queries, resolving account issues, handling withdrawal holds, and managing dispute proceedings;
- Fraud & Security: Detecting multi-accounting, identifying automated betting activity, preventing money laundering, and protecting the integrity of the gk89 platform;
- Responsible Gaming: Monitoring betting patterns for signs of problem gambling; administering self-exclusion, deposit limits, cooling-off periods, and reality check tools;
- Legal Compliance: Retaining transaction records and identity data as required by applicable financial and anti-money-laundering regulations;
- Platform Improvement: Analysing aggregated usage data to improve the gk89 platform's performance, user experience, and game offering;
- Marketing Communications (opt-in only): Sending promotional emails, SMS, and push notifications regarding bonuses, seasonal offers (BPL, IPL, Eid, Pohela Boishakh), and new game launches — only where you have explicitly opted in to receive such communications.
5 Legal Basis for Processing
gk89 processes your personal data on the following legal grounds:
- Contractual Necessity: Processing required to perform the contract between you and gk89 — including account creation, game access, and payment processing — is carried out on the basis of contractual necessity;
- Legal Obligation: Processing required to comply with applicable law — including retention of financial records, identity verification, and anti-money-laundering checks — is carried out on the basis of legal obligation;
- Legitimate Interests: Processing carried out for fraud prevention, platform security, and service improvement is based on gk89's legitimate interests in operating a safe and reliable platform, provided those interests are not overridden by your rights;
- Consent: Processing for optional purposes — specifically, marketing communications — is carried out solely on the basis of your explicit, freely given, and withdrawable consent.
Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
6 Sharing Your Personal Data
gk89 does not sell, rent, or trade personal data. gk89 shares personal data only in the following limited and controlled circumstances:
6.1 Payment Partners
gk89 shares the minimum necessary financial data with payment processors — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely for the purpose of processing your deposit and withdrawal transactions. Payment partners operate under their own privacy policies and are responsible for the data they independently collect during payment processing.
6.2 Game Providers
Third-party game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) receive a unique player session token and game-specific data to operate their games within the gk89 platform. Game providers do not receive your full identity data, payment details, or contact information unless specifically required for dispute resolution and agreed to by gk89.
6.3 Identity Verification Services
Where gk89 uses third-party KYC and identity verification services to confirm your identity documents, those service providers receive only the documents and data necessary to complete verification. They act as data processors under instruction from gk89 and are contractually prohibited from using your data for any independent purpose.
6.4 Legal and Regulatory Authorities
gk89 may disclose personal data to competent authorities where required by applicable law, court order, or legitimate regulatory request. gk89 will notify affected players of such disclosures where legally permitted to do so.
6.5 Business Transfers
In the event of a merger, acquisition, or sale of all or part of gk89's business, personal data held by gk89 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.
7 Cookies & Tracking Technologies
7.1 What Are Cookies?
Cookies are small text files placed on your device when you access the gk89 platform. They allow gk89 to recognise your device across sessions, maintain your login state, remember your preferences, and collect analytical data about how the platform is used.
7.2 Types of Cookies Used by gk89
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session management, login state, security tokens, fraud prevention identifiers | Session / up to 24 hours |
| Functional | Remembering language preferences, game display settings, responsible gaming tool states | Up to 12 months |
| Analytical | Aggregated usage statistics, page performance monitoring, feature interaction tracking | Up to 24 months |
| Marketing (opt-in) | Tracking which promotions you have viewed or interacted with, to avoid repeat messaging | Up to 6 months |
7.3 Managing Cookies
Strictly necessary cookies cannot be disabled as they are required for the gk89 platform to function. All other cookie categories can be managed via your browser settings. Disabling functional or analytical cookies may affect your platform experience. Disabling marketing cookies will not affect your ability to receive marketing communications if you have opted in via email or SMS.
7.4 Device Fingerprinting
In addition to cookies, gk89 uses device fingerprinting technology — a combination of browser attributes, screen resolution, installed fonts, and network configuration — to identify unique devices for fraud prevention and multi-account detection purposes. Device fingerprint data is treated as personal data under this Privacy Policy.
8 Data Retention
gk89 retains personal data for no longer than necessary to fulfil the purposes outlined in this Privacy Policy, subject to the minimum retention periods required by applicable law. The following retention schedule applies:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account identity & KYC documents | 5 years after account closure | Financial compliance, anti-money-laundering obligations |
| Financial transaction records | 5 years from transaction date | Accounting and legal compliance |
| Betting and game history | 3 years from activity date | Dispute resolution, responsible gaming audit |
| Customer support communications | 2 years from last interaction | Service quality, dispute evidence |
| Marketing consent records | Until consent withdrawn + 1 year | Proof of consent basis for communications |
| Technical / IP log data | 12 months from collection | Security monitoring, fraud investigation |
| Self-exclusion records | Permanently | Responsible gaming — prevent re-registration during exclusion |
At the expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.
9 Your Data Rights
As a data subject, you have the following rights regarding the personal data gk89 holds about you. To exercise any of these rights, contact the gk89 support team at the email address in Section 14. gk89 will respond to all valid data rights requests within 30 calendar days.
- Right of Access: You may request a copy of all personal data gk89 holds about you, along with information about how it is being processed;
- Right to Rectification: You may request correction of any inaccurate or incomplete personal data held about you. Updates to account contact details can also be made directly via your account settings;
- Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Note that this right is subject to gk89's legal obligation to retain certain financial and identity records for minimum statutory periods (see Section 8);
- Right to Restrict Processing: You may request that gk89 restricts its processing of your personal data — for example, during an investigation into a data accuracy dispute — while retaining the data;
- Right to Data Portability: You may request a machine-readable copy of the personal data you have directly provided to gk89, to transfer to another service provider;
- Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring. gk89 will assess whether its legitimate interests are overridden by your rights in each case;
- Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.
10 Data Security
gk89 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- Encryption in Transit: All data transmitted between your device and the gk89 platform is encrypted using TLS 1.2 or higher (HTTPS). gk89 enforces HSTS (HTTP Strict Transport Security) to prevent downgrade attacks;
- Encryption at Rest: Sensitive personal data stored on gk89 servers — including identity documents, financial records, and password hashes — is encrypted using AES-256 encryption;
- Access Controls: Access to personal data within the gk89 organisation is restricted to authorised personnel on a strict need-to-know basis. Administrative access requires multi-factor authentication;
- Password Security: Player account passwords are stored as salted cryptographic hashes and are never stored or transmitted in plain text. gk89 recommends players enable two-factor authentication (2FA) via OTP on their accounts;
- Fraud Detection Systems: gk89 operates automated fraud detection systems that monitor account activity in real time for unusual login locations, payment anomalies, and betting pattern irregularities;
- Third-Party Security Audits: The gk89 platform undergoes periodic security assessments and penetration testing by independent security professionals;
- Incident Response: In the event of a data breach that poses a risk to player data, gk89 will notify affected players promptly and take immediate remediation action. gk89 maintains a documented incident response procedure for this purpose.
11 Children & Minors
The gk89 platform is strictly intended for adults aged 21 years and over. gk89 does not knowingly collect, process, or store personal data relating to individuals under the age of 21. If you believe that a minor has registered an account on the gk89 platform or provided personal data without appropriate parental consent, please contact gk89 support immediately.
Upon receiving a credible report that personal data has been collected from a minor, gk89 will take the following steps without delay:
- Immediately suspend the account in question pending investigation;
- Delete or anonymise all personal data associated with the minor's account, subject to any legal obligation to retain records for a minimum period;
- Void all bets, casino game outcomes, and transactions placed during the period of underage use;
- Report the matter to the relevant support authorities where required by applicable law.
12 Third-Party Services & Links
The gk89 platform integrates third-party services — including game providers, payment processors, and analytics tools — which operate under their own independent privacy policies. gk89 is not responsible for the data practices of third-party services. Where a third party processes personal data on behalf of gk89 (acting as a data processor), gk89 ensures that appropriate data processing agreements are in place, contractually requiring those parties to process data only in accordance with gk89's instructions and this Privacy Policy.
Third-party game providers whose software is embedded within the gk89 platform (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) may independently collect technical session data as part of their game operation. Players are encouraged to review the privacy policies of these providers independently. gk89 does not control the independent data collection practices of game providers operating within their own studio environments.
13 Amendments to This Policy
gk89 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, platform practices, or data processing activities. When material changes are made, gk89 will:
- Post the revised Privacy Policy on the gk89 platform with an updated "Last Updated" date;
- Notify registered players of material changes via email or an in-platform notification at least 7 days before the changes take effect;
- Where changes affect processing based on consent, seek fresh consent from affected players before the new processing begins.
Continued use of the gk89 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with a revised version of this policy, you may request account closure in accordance with the Terms & Conditions.
14 Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or gk89's handling of your personal data, please contact the gk89 Data Privacy team through the following channels:
- Email: [email protected] (plain text — not a clickable link)
- Subject Line: Use "Privacy Request — [Your Registered Username]" for faster routing
- Live Chat: Available 24/7 via the support widget on the gk89 platform
- Response Time: Privacy-related queries responded to within 5 business days; formal data rights requests fulfilled within 30 calendar days
- Support Hours: 24 hours a day, 7 days a week, including all public holidays in Bangladesh (Bangladesh Standard Time, UTC+6)
Explore gk89 With Confidence
Now that you understand how gk89 protects your personal data, explore everything the platform has to offer — from live cricket betting and jackpot games to world-class slots and live casino tables. Your privacy is always our priority.