cg999 Privacy Policy — How We Protect Your Personal Data
Your privacy is a foundational commitment at cg999, not an afterthought. This Privacy Policy explains in clear, plain English exactly what personal information cg999 collects from players in Bangladesh, how that information is used, who it may be shared with, how long it is retained, and what rights you have over your own data. Please read this document carefully before registering an account or providing any personal information to cg999.
Six Core Privacy Commitments from cg999
These cards summarise the most important privacy principles that govern how cg999 handles your personal information. They do not replace the full policy below.
cg999 operates the online casino and sports betting platform accessible at cg999.io (the "Platform"). For the purposes of this Privacy Policy, cg999 is the data controller responsible for the personal information of players who register accounts or interact with the Platform, including players based in Bangladesh.
This Privacy Policy applies to all personal data collected through the Platform, including data submitted during account registration, identity verification, payment processing, customer support communications, and general use of the Platform's games and betting markets.
By registering a cg999 account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this policy, you should discontinue your use of the Platform and contact us to close your account.
cg999 collects the following categories of personal data from players. Collection is limited to information that is necessary for the specific purpose described:
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, national ID or passport number | Age verification (21+), KYC compliance, fraud prevention |
| Contact Data | Email address, mobile phone number, city of residence | Account communication, support, security alerts |
| Financial Data | bKash / Nagad / Rocket account numbers, transaction history, deposit and withdrawal amounts in BDT | Payment processing, AML compliance, dispute resolution |
| Account Data | Username, encrypted password, account preferences, bonus history | Account management, personalisation, responsible gaming |
| Gameplay Data | Game session logs, bet amounts, game outcomes, wagering history | Game integrity, dispute resolution, responsible gaming monitoring |
| Technical Data | IP address, device type, browser type, operating system, session timestamps | Security, fraud detection, platform performance |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | Customer service, quality assurance, dispute records |
cg999 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or biometric data for identification purposes, unless specifically required by applicable law and disclosed to you at the point of collection.
cg999 collects personal data through the following channels:
- Direct submission: Information you provide when registering an account, completing identity verification, making a deposit or withdrawal, or contacting our support team.
- Automated collection: Technical and usage data collected automatically as you interact with the Platform, including through cookies, server logs, and session tracking technologies (see Section 9).
- Third-party sources: Identity and fraud-prevention data received from our payment partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank) and KYC verification service providers, where you have authorised such sharing as part of your account registration or payment transaction.
- Game Providers: Aggregated game performance data from our Game Providers (such as Pragmatic Play, Evolution Gaming, Ezugi, and Spribe) relating to your gameplay sessions on their certified software, used for dispute resolution and game-integrity monitoring.
cg999 processes your personal data on one or more of the following lawful bases, depending on the specific processing activity:
- Contractual necessity: Processing required to perform the contract with you — i.e., to operate your account, process your bets, and execute deposits and withdrawals. Without this processing, cg999 cannot provide the Platform services to you.
- Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, age verification requirements, and financial record-keeping mandates.
- Legitimate interests: Processing carried out in pursuit of cg999's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and product improvement — provided those interests are not overridden by your own privacy rights.
- Consent: Where cg999 sends you optional promotional communications (such as bonus offers related to BPL, IPL, or seasonal events like Eid and Pohela Boishakh), this is done on the basis of your explicit consent, which you may withdraw at any time by contacting support or updating your account notification preferences.
cg999 uses the personal data it collects for the following specific purposes:
- To create, verify, and maintain your cg999 account, and to authenticate your identity each time you log in.
- To process BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, and linked bank accounts, and to maintain accurate financial records of all transactions.
- To verify that you meet the minimum age requirement of 21 years, and to carry out ongoing Know Your Customer (KYC) checks as required by applicable compliance standards.
- To deliver game content from our Game Providers and to log game sessions for the purposes of dispute resolution and game-integrity monitoring.
- To operate our responsible gaming programme, including monitoring gameplay patterns for signs of problem gambling and applying any self-imposed limits or exclusions you have requested.
- To detect, investigate, and prevent fraudulent activity, money laundering, collusion, and other prohibited conduct as defined in our Terms & Conditions.
- To communicate with you regarding your account status, security alerts, transaction confirmations, and responses to your support requests.
- To send you optional promotional communications (bonus offers, seasonal promotions) where you have provided consent and not subsequently withdrawn it.
- To analyse aggregated, anonymised usage data for the purpose of improving Platform performance, game selection, and user experience.
cg999 does not use your personal data to make fully automated decisions that have a significant legal or similarly significant effect on you without providing you with an opportunity to request human review.
cg999 does not sell your personal data to third parties. We share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:
- Payment partners: bKash, Nagad, Rocket, Upay, and affiliated Bangladeshi banks receive the minimum data required to process your deposit or withdrawal transaction (typically your registered mobile number or bank account details and the transaction amount in BDT).
- Identity verification providers: Third-party KYC service providers receive identity documents and personal details strictly for the purpose of verifying your age and identity on our behalf. These providers are bound by contractual data-protection obligations.
- Game Providers: Pragmatic Play, Evolution Gaming, Ezugi, Spribe, and other licensed Game Providers receive your account identifier and session data to deliver game content and maintain game-integrity logs. They do not receive your financial details or national identity documents.
- Fraud prevention and security partners: Specialist third-party services may receive technical data (IP address, device fingerprint, session metadata) to assist in detecting and preventing fraudulent activity and account takeovers.
- Legal and regulatory authorities: cg999 will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required by applicable law, a valid court order, or where we reasonably believe disclosure is necessary to prevent fraud or criminal activity.
- Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of cg999's assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer and any change in data controller before it takes effect.
cg999's primary operations and data storage infrastructure are designed to serve the Bangladesh market. However, some of our Game Providers and technical service partners operate servers in jurisdictions outside Bangladesh. Where your personal data is transferred to or processed in a country outside Bangladesh, cg999 takes steps to ensure that such transfers are carried out under appropriate contractual safeguards that provide a level of protection for your data equivalent to applicable data-protection standards.
Specifically, data transfers to Game Providers such as Pragmatic Play and Evolution Gaming are governed by data-processing agreements that impose binding obligations on those providers with respect to the confidentiality, security, and limited use of your data. If you have questions about the specific safeguards in place for any particular transfer, please contact us at [email protected].
cg999 retains your personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML compliance, dispute resolution |
| Financial transaction records | 7 years from transaction date | Financial record-keeping obligations |
| Identity verification documents | 5 years post-account closure | KYC and AML compliance |
| Gameplay and betting logs | 5 years from session date | Game integrity, dispute resolution |
| Support communications | 3 years from last interaction | Quality assurance, dispute records |
| Technical/log data | 12 months from collection | Security monitoring, fraud detection |
| Marketing consent records | Until consent withdrawn + 2 years | Consent management compliance |
Once the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.
cg999 uses cookies and similar technologies (such as local storage and session storage) to operate the Platform effectively. The following table describes the categories of cookies in use and their specific purposes:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your login session, remember your account preferences, enable core Platform functionality. The Platform cannot operate without these cookies. | Session / up to 30 days |
| Performance | Collect anonymised data about how players use the Platform (pages visited, time spent, errors encountered) to help us improve performance and fix issues. | Up to 12 months |
| Security | Detect and prevent fraudulent activity, bot traffic, and account takeover attempts by tracking device fingerprints and session anomalies. | Up to 90 days |
| Functional | Remember your language preferences, preferred payment method, and responsible gaming settings to provide a personalised experience on your next visit. | Up to 12 months |
cg999 does not use third-party advertising or tracking cookies. No cookie data is shared with advertising networks or data brokers.
Most web browsers allow you to control cookie settings through your browser preferences. Disabling strictly necessary cookies may impair your ability to log in to or use the Platform. Disabling performance or functional cookies will not prevent you from using the Platform but may reduce the quality of your experience.
As a cg999 player, you have the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected]. cg999 will respond within a reasonable timeframe and at no charge to you.
The cg999 Platform is strictly intended for adults aged 21 years and above. cg999 does not knowingly collect, store, or process personal data from any individual under the age of 21. If we become aware that personal data from an individual under the minimum age has been collected, we will immediately close the associated account, delete all associated personal data, and reverse any financial transactions to the extent practicable.
If you are a parent or guardian and believe that a minor in your care has registered a cg999 account or provided personal data to the Platform without your knowledge, please contact us immediately at [email protected] so that we can take prompt action. We encourage parents and guardians to use parental control software and internet filtering tools to prevent minors from accessing gambling platforms.
cg999 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:
- SSL/TLS encryption: All data in transit between your browser or device and the cg999 servers is encrypted using current Transport Layer Security (TLS) protocols.
- Encrypted storage: Sensitive data fields — including identity document scans and financial identifiers — are encrypted at rest using industry-standard algorithms.
- Access controls: Access to personal data by cg999 staff is restricted on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication for administrative systems.
- Intrusion detection: Automated systems continuously monitor for suspicious access patterns, anomalous login behaviour, and potential data-exfiltration events.
- Regular security reviews: cg999 conducts periodic internal and third-party security assessments of its data infrastructure to identify and remediate vulnerabilities.
While cg999 takes reasonable and proportionate steps to protect your data, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights or interests, cg999 will notify affected players without undue delay in accordance with applicable legal requirements.
The cg999 Platform may contain references to or integrations with third-party services, including Game Providers whose game launchers open within the Platform interface. While cg999 takes care to partner only with reputable, licensed Game Providers, cg999 is not responsible for the privacy practices or content of those third-party services.
Each Game Provider — including Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, Microgaming, and others — operates under its own privacy policy with respect to data collected through its game software. We encourage you to review the privacy policies of any third-party services you interact with through the Platform.
cg999 reserves the right to update this Privacy Policy from time to time to reflect changes in our data-processing practices, applicable law, or Platform functionality. When material changes are made, cg999 will post a prominent notice on the Platform and, where practicable, notify registered players by email in advance of the revised policy taking effect.
The effective date at the top of this document will be updated each time this policy is revised. We encourage you to review this page periodically to stay informed about how cg999 prot ects your personal data. Continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which cg999 handles your personal data, please contact our data protection team in the first instance. We are committed to resolving all privacy-related enquiries promptly and transparently.
Contact details: [email protected]
When submitting a data rights request or privacy complaint, please include your registered account username and a clear description of your request or concern. This will allow us to locate your records and respond as efficiently as possible.
cg999 aims to acknowledge all privacy-related correspondence within 24 hours of receipt (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 10 business days. For complex requests — such as a full subject-access request involving large volumes of data — we may require up to 30 calendar days, in which case we will inform you of the extended timeframe promptly.
Questions About Your Privacy? We Are Here to Help
Our support team is available 24/7 to answer any questions about how cg999 handles your personal data. You can also explore our full legal documentation or head straight to the casino.