Introduction & Scope v2026.1
gb99b is committed to handling personal data responsibly, transparently, and securely. This Privacy Policy has been written to give players a clear and honest account of how the gb99b platform processes personal information — from the moment an account is created through to the day an account is closed and beyond. The language used in this document is intentionally plain and accessible, while maintaining the legal precision required of a data protection notice.
The gb99b platform operates as an online casino and sports betting service directed primarily at adult players in Bangladesh. All personal data collected through gb99b is used exclusively for the purposes described in this policy. gb99b does not sell personal data to third parties, does not operate in the data-broker market, and does not share user information with advertisers without explicit consent where consent is the applicable legal basis.
This Privacy Policy must be read alongside the gb99b Terms & Conditions and the Responsible Gaming Policy. Together these three documents form the complete set of agreements that govern your relationship with the gb99b platform. Any terms not defined in this policy carry the meaning given to them in the Terms & Conditions.
256-bit SSL Encryption
All data transmitted between your device and the gb99b platform is protected by 256-bit SSL encryption — the same standard used by major banking institutions. No data travels over the network in plain text.
No Data Sales
gb99b does not sell, rent, or trade your personal data to any third party for commercial purposes. Data shared with service providers is strictly limited to what is necessary for them to perform their contracted function.
Your Data, Your Rights
Registered players on gb99b hold clear rights over their personal data, including the right to access, correct, and request deletion of information we hold. Contact our support team at any time to exercise these rights.
Minimal Data Principle
gb99b collects only the personal data that is strictly necessary for the purposes described in this policy. We do not collect excessive information, and we regularly review our data collection practices to ensure they remain proportionate.
Data We Collect
gb99b collects personal data from you in three primary ways: information you provide directly when registering or using your account, information generated automatically through your use of the platform, and information received from trusted third-party sources as part of our verification and fraud prevention processes.
| Data Category | Specific Examples | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID number, photograph (for KYC) | Provided by player at registration or during KYC verification |
| Contact Data | Email address, mobile phone number, residential address (city, district) | Provided by player at registration or account update |
| Financial Data | bKash / Nagad / Rocket account numbers, bank account details, transaction history | Provided by player when making deposits or requesting withdrawals |
| Technical Data | IP address, browser type, operating system, device identifiers, time zone | Collected automatically when you access the gb99b platform |
| Usage Data | Pages visited, games played, bet history, session duration, click patterns | Collected automatically via server logs and analytics tools |
| Communications Data | Live chat transcripts, support email content, survey responses | Generated when you contact gb99b support or participate in feedback activities |
gb99b does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or health information except where strictly required by law or where you voluntarily disclose such information in the context of a responsible gaming self-assessment. Any sensitive data disclosed in a responsible gaming context is used solely to apply appropriate account protections and is not used for marketing or profiling purposes.
How We Use Your Data
gb99b uses the personal data we collect for specific, documented purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The following table sets out each processing purpose, the categories of data involved, and the legal basis on which gb99b relies for that processing activity.
- Account Registration & Management: We use your identity and contact data to create and maintain your player account, verify your identity, and communicate important account notices to you. Legal basis: performance of contract.
- Payment Processing & Fraud Prevention: We use your financial and technical data to process deposits and withdrawals, detect and prevent fraudulent transactions, and comply with anti-money laundering (AML) obligations. Legal basis: legal obligation and legitimate interests.
- Responsible Gaming Monitoring: We use your usage data and betting history to identify patterns that may indicate problem gambling behaviour, and to apply any responsible gaming tools you have activated (such as deposit limits or self-exclusion). Legal basis: legal obligation and legitimate interests.
- Customer Support: We use your communications data and account history to respond to your support queries, resolve disputes, and improve the quality of our service. Legal basis: performance of contract.
- Platform Security & Integrity: We use technical data to monitor for unauthorised access attempts, detect bot activity, investigate Terms & Conditions violations, and maintain the overall security of the gb99b platform. Legal basis: legitimate interests.
- Personalisation & Platform Improvement: We use aggregated usage data to understand how players navigate the gb99b platform, which games are most popular, and where the user experience can be improved. Where personalisation goes beyond aggregated analysis and involves individual profiling, we will seek your consent. Legal basis: legitimate interests or consent.
- Marketing Communications: If you have opted in to receive promotional communications from gb99b, we will use your contact data to send you details of bonuses, promotions, and platform news. You can withdraw your consent to marketing communications at any time by updating your account notification preferences or by contacting support. Legal basis: consent.
gb99b will never use your personal data for automated decision-making that produces significant legal or similarly significant effects without providing you with an opportunity to request human review of that decision. If you believe an automated process has produced an unfair outcome — for example, in relation to an account suspension — please contact our support team to request a manual review.
Data Sharing & Disclosure
gb99b shares personal data with third parties only in limited, controlled circumstances. Every third-party recipient of gb99b player data is subject to contractual obligations requiring them to keep that data confidential, to use it only for the specified purpose, and to apply security standards at least equivalent to those used by gb99b itself.
- Payment Service Providers: We share the minimum necessary financial and identity data with payment processors (including bKash, Nagad, Rocket, Upay, Visa/Mastercard partner banks, and participating Bangladeshi banks) to facilitate deposits and withdrawals. These providers act as independent data controllers for their own AML and compliance obligations.
- Identity Verification Partners: We may share identity documents and personal details with third-party KYC and age-verification service providers in order to comply with our verification obligations. These partners are contractually restricted from using your data for any purpose other than the verification service they provide to gb99b.
- Game Software Providers: The games available on gb99b are supplied by third-party software studios (such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming). These providers may receive anonymised or pseudonymised gameplay data for the purpose of game performance monitoring and fairness auditing. They do not receive your full identity or financial data unless specifically required for regulatory reasons.
- Analytics & Platform Tools: gb99b uses analytics tools to understand how the platform is used. These tools may process technical and usage data. Where such tools involve transferring data outside Bangladesh, we ensure appropriate contractual protections are in place.
- Legal & Regulatory Authorities: gb99b may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies when required to do so by applicable law, court order, or binding regulatory request. In such cases, gb99b will disclose only the data specifically requested and will seek to notify the affected player wherever legally permissible to do so.
- Business Transfers: In the event that the gb99b business or any part of it is transferred, merged, or acquired by another entity, player data may be transferred as part of that transaction. Affected players will be notified of any such change and of the privacy practices of the new entity before any transfer of data takes effect.
Data Retention & Security
gb99b retains personal data for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law and regulatory obligations. The following retention periods apply as a general guide, though specific legal or regulatory requirements may necessitate longer retention in individual cases:
- Account data (identity, contact, KYC documents): Retained for the duration of the account relationship plus a minimum of 5 years following account closure. This period reflects standard financial record-keeping obligations applicable to online payment platforms operating in Bangladesh.
- Transaction records (deposits, withdrawals, bet history): Retained for a minimum of 7 years from the date of the transaction, in line with financial audit and AML record-keeping requirements.
- Customer support communications: Retained for 3 years from the date of the last communication in a support thread, or longer where the communication relates to an unresolved dispute or regulatory inquiry.
- Marketing consent records: Retained for the duration of active consent plus 2 years following withdrawal of consent, as evidence that marketing communications were sent on a valid legal basis.
- Technical and usage data (server logs, analytics): Typically retained in identifiable form for up to 13 months, after which data is aggregated and anonymised for long-term trend analysis.
gb99b employs a range of technical and organisational security measures designed to protect personal data against unauthorised access, loss, alteration, and disclosure. These measures include 256-bit SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, role-based access controls limiting staff access to personal data on a strict need-to-know basis, regular security assessments and penetration testing of platform infrastructure, and a documented incident response procedure for handling suspected data breaches.
In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected players, gb99b will notify affected individuals without undue delay and will take all reasonable steps to contain and remediate the breach. Notifications will be sent to the email address registered on the affected account.
Bank-Grade Encryption
All personal and financial data held by gb99b is encrypted both in transit and at rest using industry-standard AES-256 encryption, the same level of protection used by major financial institutions in Bangladesh and globally.
Access Control
Internal access to player personal data is governed by strict role-based access controls. Only authorised personnel with a legitimate operational need can access identifiable player data, and all access is logged and audited.
Your Rights Over Your Data
As a player whose personal data is processed by gb99b, you hold the following rights in relation to that data. gb99b is committed to facilitating the exercise of these rights promptly and without unnecessary barriers. Requests can be submitted by contacting our support team via live chat or by emailing [email protected] with the subject line "Data Rights Request".
- Right of Access: You have the right to request a copy of the personal data that gb99b holds about you, along with information about how that data is being used. gb99b will respond to access requests within 30 days of receipt. The response will be provided electronically to your registered email address.
- Right to Rectification: If any of the personal data gb99b holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For most contact and identity data, you can update your own records directly through your account settings. For KYC documents and verified identity data, please contact support to submit a correction request with supporting documentation.
- Right to Erasure ("Right to Be Forgotten"): You may request that gb99b delete your personal data where the data is no longer necessary for the purpose for which it was collected, or where you withdraw your consent and there is no other legal basis for continued processing. Please note that gb99b may be unable to fulfil erasure requests in full where retention is required by law — for example, transaction records subject to AML obligations must be retained for the statutory period regardless of an erasure request.
- Right to Restrict Processing: You may request that gb99b restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of the data is being resolved. During a restriction period, gb99b will store the data but will not actively use it for any other purpose.
- Right to Data Portability: For data that you have provided to gb99b and that is processed on the basis of your consent or a contract, you may request that we provide that data to you in a structured, commonly used, machine-readable format (such as CSV or JSON), suitable for transfer to another service provider.
- Right to Object: You have the right to object to gb99b processing your personal data where that processing is based on our legitimate interests. You also have an unconditional right to object to your data being used for direct marketing purposes at any time.
gb99b will not charge a fee for processing a data rights request unless the request is manifestly unfounded or excessive. In such cases, we may charge a reasonable administrative fee or decline to act on the request, and we will explain our reasoning in writing. We may need to verify your identity before processing a data rights request to ensure that we do not disclose information to an unauthorised person.
Contact & Policy Updates
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have concerns about how gb99b has handled your personal data, please contact our support team using the details below. We aim to respond to all privacy-related enquiries within 5 business days.
gb99b reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements in our privacy standards. When we make material changes to this policy, we will notify registered players by posting a notice on the platform and, where the change significantly affects how we use personal data, by sending a notification to your registered email address. The effective date at the top of this page will be updated to reflect the date the revised policy comes into force.
We encourage all players to review this Privacy Policy periodically to stay informed about how gb99b protects and uses personal data. Continued use of the gb99b platform following notification of a policy change constitutes acceptance of the updated policy. If you do not agree with a material change to this policy, you may close your account by contacting our support team, and your data will be handled in accordance with our retention obligations as described in the Data Retention section above.