App / Mobile
gtl99 is clear about what data we collect, why we collect it, and how you can review or adjust it at any point. Access and use of this platform depends on your local law and eligible region — this policy covers what applies when you hold an account with us.
When you open an account on gtl99, we collect the information you provide directly — your contact details, login credentials and the payment method identifiers you add to your wallet. For local payment routes such as bKash, Rocket and Bank Transfer, we record the transaction reference and account identifier needed to process and reconcile your deposit or withdrawal; we do not store your full mobile banking PIN or bank password. We also collect data your device sends automatically when you browse the site: your IP address, browser type, device model and session timestamps. This helps us keep the account environment consistent across the phones and desktops you use. We do not sell personal data to third parties. Data shared with payment processors — including the operators behind bKash, Rocket and Bank Transfer flows — is limited to what those processors require to complete a transaction. Any marketing communications we send are based only on account activity you have already carried out. You can withdraw consent for marketing messages at any time through the account settings page. Eligibility to hold an account and use the platform depends entirely on the laws of your jurisdiction and the eligible regions we serve at the time.
This policy applies specifically to data processed by gtl99 when you access the platform through our website or any account-linked session. It does not extend to services or websites operated by third parties, even when you reach them through a link on our pages. Understanding the boundary between what we cover and what we do not is straightforward when you know which category your activity falls into.
All data collected during login, account creation and session activity on gtl99 falls under this policy. This includes your registered contact details, device identifiers and any account preferences you set. We are responsible for how this data is handled inside our platform environment.
When you initiate a deposit or withdrawal through bKash, Rocket or Bank Transfer, the transaction data passes to the relevant payment processor. Their own privacy terms apply to data held on their side. We retain only the reference data needed to match the transaction to your account.
Game titles from studios such as Pragmatic Play, Joker and CQ9 are delivered through integrated content feeds. Studio-side data practices — such as session logging within a game engine — are governed by that studio's own policy, not ours. We do not share your personal account details with studios.
Any external link on gtl99 that takes you to another website or app sits outside the scope of this policy the moment you leave our domain. We cannot control data collection on third-party pages. Check those sites' own privacy terms before sharing information there.
You have several real actions available to you under this policy — not just abstract rights but steps you can take through your account or by contacting us directly. If you want to review the personal information we hold, the starting point is the account details page inside your signed-in dashboard; the fields shown there reflect what we have on record. If something is incorrect — your contact number, the wallet identifier linked to your bKash or Rocket account — you can update it in account settings or ask our support team to correct it. You also have the right to ask what data we have shared with third-party processors for payment purposes and to receive a clear answer in writing. Where local law in your jurisdiction provides a right to erasure or portability, we will respond to a written request within the timeframe required by those rules. We aim to handle every data-related query with the same directness we apply to account support.
Open the account details page in your signed-in dashboard to see the personal information we currently hold. The fields there are a direct reflection of your registered data. If anything looks unfamiliar, contact support before making changes.
Update your contact number, email or linked wallet identifier through account settings. For corrections that require identity verification — such as changing the mobile number tied to your bKash account — our support team will walk you through the steps shown in your account.
You can ask in writing which payment processors received data related to your account. We will identify the processor, the category of data shared and the purpose. This applies to bKash, Rocket and Bank Transfer routes you have used.
Where your local law grants rights of erasure or data portability, submit a written request through our published support contact. We will acknowledge receipt and respond within the period required under the applicable rules for your eligible region.
If you have a question about this policy, want to exercise a data right or need to report a privacy concern, use the contact routes published on our site. We do not publish operating hours or response-time commitments we cannot verify, but every request sent through an official route is logged and followed up.
The live chat widget on our site is the fastest way to raise an account-specific privacy question. Use it when you are signed in so our team can match your query to your account record immediately.
For formal data requests — correction, deletion, portability or a written record of data shared with payment processors — send an email through the address published in our contact section. Include your registered account identifier so we can locate your record.
Our help centre contains published articles on account data, wallet linking and session management. Check there first for answers to common questions about what we store and how to adjust your account settings without needing to contact support.
We handle account data with a straightforward principle: collect what is necessary, retain it only as long as required, and give you a clear way to query or correct it. Our approach to cookies, session data and payment identifiers reflects that same discipline.
We use cookies to keep your session active across pages and to remember account preferences you have set. We do not use tracking cookies that share your browsing activity with advertising networks. You can clear cookies through your browser settings at any time without losing your account data.
Passwords and mobile wallet identifiers linked to bKash, Rocket or Bank Transfer are stored in hashed or tokenised form — we do not hold plain-text credentials. If you suspect unauthorised access to your account, use the account recovery route shown on the login page and contact support immediately.
We retain account and transaction records for the period required to resolve disputes and meet any applicable regulatory requirements in your eligible region. When a retention period ends and no active obligation requires the data, it is deleted from our records. You can ask about the retention period for specific data categories via email.
When we update this policy, the revised version is published at this URL with a note indicating the change. We do not notify every account holder of minor wording adjustments, but material changes that affect your rights or how we process data will be communicated through your account notification channel.
These are the questions we hear most often from account holders about data, privacy and their rights under this policy. If your question is not here, the support routes in the section above are the right next step.
We collect the details you enter during registration — your contact information, login credentials and any payment identifiers you add, such as your bKash or Rocket mobile number. We also collect session data your device sends automatically, including your IP address and browser type, to maintain account consistency.
We share only the minimum data required to process a transaction — typically a transaction reference and account identifier. We do not pass your full account profile or personal contact details to payment processors. Each processor handles its own share of data under its own privacy terms.
Start with the account details page inside your signed-in dashboard; that reflects your current registered information. For a broader record of data we hold or have shared with payment processors, send a written request through our published email support route with your registered account identifier included.
Where your local law in your eligible region grants a right of erasure, you can submit a deletion request in writing to our support email. We will acknowledge it, confirm what can be deleted immediately and explain any data we are required to retain for dispute resolution or regulatory reasons.
We use session cookies to keep you signed in and remember your account preferences. We do not use advertising-network tracking cookies. You can clear or block cookies through your browser settings. Blocking session cookies will affect your ability to stay signed in, but will not delete your account data.
Use the live chat on our site for quick account-specific questions, or send a formal written request by email using the address in our contact section. Include your account identifier. For questions about data shared with bKash, Rocket or Bank Transfer processors, email is the appropriate route so we can provide a written response.