Reference

How gf999 Handles Your Personal Information

When you open an account on gf999, we collect only the information we need to run your account and process payments through bKash, Nagad, and Rocket.

Account data kept securebKash, Nagad, Rocket payment data protectedYour right to access or delete dataNo data sold to third parties
gf999 How gf999 Handles Your Personal Information
PRIVACY CONTACT PATHS

Reach Us About Your Privacy Questions

If you want to access, correct, or delete your personal data, our support team handles these requests directly. You can reach us through live chat inside your account dashboard, by email, or through the in-app help button on mobile. We aim to acknowledge every privacy request and provide a substantive response — the timeline depends on the complexity of your request and what verification we need to confirm your identity before acting.

Live Chat Open your account dashboard and tap the chat icon. Our support team can log a data access or deletion request directly from that conversation.
Email Support Send your privacy request by email with your registered account details. We verify your identity before processing any change or deletion.
In-App Help On mobile, the help button in the account menu routes your message to the same support team. Useful if you are managing your account from your phone.
HOW WE PROTECT YOU

Security, Cookies, Retention and Your Controls

We apply SSL encryption across the site so that data moving between your device and our servers — including payment confirmations from bKash, Nagad, and Rocket — cannot be read in transit. Your account password is stored in hashed form; we never see it in plain text. Cookies on gf999 are used to keep your session active, remember your language preference, and measure which pages load correctly on mobile. You can block non-essential cookies through your browser settings without losing access to your account. We do not use tracking cookies to build advertising profiles.

SSL Encryption

All data in transit — including payment references from bKash, Nagad, and Rocket — is encrypted. Your session details are never sent in plain text.

Cookie Controls

We use session and preference cookies only. You can disable non-essential cookies in your browser settings at any time without losing account access.

Data Retention

Your data stays on file while your account is active and for a period after closure as required by applicable rules. You may request earlier deletion where the law permits.

Account Security

Login uses OTP verification tied to your registered number. If you suspect unauthorised access, contact support immediately to freeze your account wallet.

Common Questions About Your Data on gf999

Below are the questions we hear most from account holders in Bangladesh about how their personal information is handled, stored, and shared on gf999.

We collect your name, email address, phone number and account credentials. Payment transaction references from bKash, Nagad, or Rocket are also logged when you make a deposit or withdrawal.

We share data only with payment processors like bKash, Nagad, and Rocket to complete transactions, and with regulatory bodies where local law in Bangladesh requires it. We do not sell your data.

Contact support through live chat or email with your registered account details. We verify your identity first, then provide the data we hold on your account in a readable format.

Yes. Submit a deletion request via email or live chat. We will action it where local law and our retention obligations allow. Some records may need to be kept for a defined period after account closure.

We store only the transaction reference and wallet identifier, not your mobile banking PIN. All payment data in transit is protected by SSL encryption so it cannot be intercepted.

We use session cookies to keep you logged in and preference cookies to remember your settings. Non-essential cookies can be blocked in your browser settings without affecting your account access.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.