gb99bd Privacy Policy

gb99bd ("we", "us", "our", "the Platform") is the data controller responsible for the personal information collected through the website located at gb99bd.app and all associated services, mobile-compatible interfaces, live chat tools, payment processing integrations, and promotional communications operated under the gb99bd brand.

This Privacy Policy applies to all individuals who interact with gb99bd in any of the following capacities: registered account holders, prospective players who begin but do not complete registration, visitors who browse the platform without registering, and any individual who contacts our support team via live chat or email.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy. Where terms used here are defined in the Terms & Conditions, those definitions apply equally to this document.

gb99bd collects personal data through several channels: directly from you during registration and account use, automatically through your use of the platform, and in limited cases from third-party identity and payment verification providers. The categories of personal data we collect are as follows:

Registration & Identity Data

• Full legal name
• Date of birth (used primarily for age verification — 18+ requirement)
• Residential address (city, district, division — e.g., Dhaka, Chittagong, Sylhet, Khulna)
• Email address
• Mobile phone number
• Username and encrypted password

Identity Verification (KYC) Data

• Copies of government-issued photo ID (National ID card, passport, or driving licence)
• Proof of address documents (utility bills, bank statements dated within 3 months)
• Proof of payment method ownership (mobile wallet screenshots or confirmations from bKash, Nagad, Rocket, Upay)

Financial & Transaction Data

• Deposit amounts, dates, and the mobile wallet or banking method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, BRAC Bank)
• Withdrawal requests, amounts, and processing status
• Account balance history and bonus credit/debit records
• Transaction reference numbers issued by your mobile financial services provider

Gaming & Betting Activity Data

• Game sessions played (slots, live casino, sports betting markets)
• Bets placed, stakes, outcomes, and winnings
• Bonus wagering progress and Rewards Points balances
• Session durations and frequency of platform visits

Technical & Device Data

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser type and version
• Referral source (how you arrived at gb99bd.app)
• Pages visited, click paths, and time spent on each page
• Cookie identifiers and session tokens (see Section 6 for full details)

Communications Data

• Live chat transcripts with our support team
• Email correspondence sent to or received from [email protected]
• Any feedback, complaint, or dispute record you submit

gb99bd uses the personal data described in Section 2 for the following specific purposes:

Marketing Communications

gb99bd will only send you promotional communications — including bonus offers, reload promotions, and tournament announcements — where you have expressly opted in to receive them during the registration process or subsequently through your account settings. You may withdraw your marketing consent at any time by updating your account preferences or by emailing [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any processing already carried out on the basis of that consent.

gb99bd processes your personal data on the following legal bases, depending on the specific purpose for which the data is used:

• Performance of a contract: Processing necessary to create and operate your account, execute deposits and withdrawals, provide gaming services, and administer bonuses. Without this processing, we cannot provide you with the services you have requested.
• Legal obligation: Processing required to comply with anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, age verification mandates, and any other applicable legal or regulatory obligations.
• Legitimate interests: Processing carried out for fraud detection and prevention, platform security, responsible gaming monitoring, and aggregated service analytics — where these interests do not override your fundamental rights and freedoms.
• Consent: Processing for optional marketing communications and non-essential cookies, where you have provided a clear, freely given, specific, informed, and unambiguous expression of agreement.

Where processing is based on legitimate interests, gb99bd has conducted an assessment to ensure that those interests are not outweighed by your rights and interests. You may request a summary of that assessment by contacting [email protected].

gb99bd does not disclose your personal data to third parties except in the following specific and limited circumstances:

Game Technology Providers

To deliver the gaming experience, gb99bd shares limited session and account data with licensed game software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. These providers receive only the minimum data necessary to authenticate your session and record game results. They are contractually prohibited from using this data for any purpose other than service delivery.

Payment Processing Partners

Transaction data is shared with mobile financial services providers (bKash, Nagad, Rocket, Upay) and banking partners (Visa, Mastercard, Dutch-Bangla Bank, City Bank, BRAC Bank) to the extent required to process your deposits and withdrawals. Each payment partner operates under its own privacy and data security framework, which we encourage you to review directly with that provider.

Identity Verification Services

gb99bd may use third-party KYC and identity verification services to cross-check the documents you submit during the verification process. These services process your identity documents under strict contractual data processing agreements and are not permitted to retain your data beyond the verification purpose.

Legal & Regulatory Disclosure

gb99bd will disclose personal data to law enforcement agencies, regulatory bodies, or other authorities where required to do so by applicable law, court order, or where we believe in good faith that such disclosure is necessary to prevent fraud, money laundering, or other criminal activity, or to protect the rights, property, or safety of gb99bd, its users, or the public.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving gb99bd, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the privacy terms that will apply to your data following the transfer before it takes place.

gb99bd uses cookies and similar tracking technologies (including local storage tokens and session identifiers) to operate the platform, remember your preferences, and collect analytical data about usage patterns. The cookies we use fall into the following categories:

Managing Your Cookie Preferences

You may adjust your cookie preferences at any time through your account settings panel under the "Privacy & Cookies" section. You may also configure your browser to block or delete cookies; however, please note that disabling strictly necessary cookies will impair core platform functionality including the ability to log in and complete transactions.

gb99bd does not use third-party advertising networks or cross-site behavioural tracking tools. Analytical and marketing cookies, where used, are confined to activity on the gb99bd.app domain only.

gb99bd retains personal data only for as long as is necessary for the purposes for which it was collected and to meet our legal and regulatory obligations. The following retention periods apply:

• Active account data (registration, transaction, gaming activity): Retained for the duration of your account's active status plus a minimum of 5 years following account closure, in accordance with AML record-keeping requirements.
• KYC identity documents: Retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Customer support communications: Retained for 3 years from the date of the last interaction, or longer if the communication relates to an open dispute or legal matter.
• Marketing consent records: Retained for 3 years from the date of the most recent consent event (opt-in or renewal).
• Technical / device logs: Retained for 12 months on a rolling basis, unless specific log entries are flagged for fraud investigation, in which case they are retained until the investigation is formally closed.
• Anonymised analytical data: May be retained indefinitely as it no longer constitutes personal data after the anonymisation process is applied.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised using industry-standard data destruction methods. Where deletion is not immediately technically feasible (for example, where data exists in automated backup systems), the data will be isolated from active processing until deletion can be completed at the next scheduled backup rotation.

gb99bd implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your device and gb99bd.app is encrypted in transit using TLS 1.2 or higher. The padlock indicator in your browser confirms this encryption is active.
• Password hashing: Passwords are stored using a one-way cryptographic hashing algorithm. gb99bd staff cannot retrieve your plaintext password — only you know it.
• Access controls: Access to personal data within gb99bd systems is restricted on a strict need-to-know basis. Staff members who do not require access to specific categories of personal data to perform their job functions are blocked from accessing it.
• Payment tokenisation: Card payment details processed via Visa and Mastercard are tokenised at the point of entry by our PCI-DSS-compliant payment gateway. Full card numbers are never stored on gb99bd servers.
• Fraud monitoring: Automated systems continuously monitor account activity, login patterns, and transaction behaviour for anomalies indicative of account compromise, fraud, or money laundering.
• Data minimisation: gb99bd collects only the personal data that is demonstrably necessary for the purposes described in this Privacy Policy. Data minimisation is applied at the design stage of all new platform features.

As a user of gb99bd, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Request" and include your registered username and a description of the right you wish to exercise.

• Right of access: You may request a copy of the personal data gb99bd holds about you, along with information about how it is processed. We will provide this within 30 days of a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. You may update basic account details directly via your account settings panel.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (for consent-based processing), or where the data has been unlawfully processed. Note that this right is subject to overriding legal obligations — for example, AML regulations require us to retain transaction records for a minimum of 5 years and this obligation takes precedence over an erasure request in relation to those records.
• Right to restriction of processing: You may request that we restrict the processing of your data while a rectification request or objection is being assessed, or where processing is unlawful but you prefer restriction to deletion.
• Right to data portability: Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to object: You may object at any time to processing of your personal data for direct marketing purposes. You may also object to processing based on our legitimate interests, in which case we will assess whether our interests override your rights on a case-by-case basis.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without detriment, though withdrawal does not affect the lawfulness of prior processing.

gb99bd's primary operations and data storage infrastructure are located in jurisdictions that maintain robust data protection standards. However, due to the international nature of certain service providers — in particular, game technology providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe, which operate global infrastructure — some personal data may be processed in or transferred to countries outside Bangladesh.

Where such transfers occur, gb99bd ensures appropriate safeguards are in place by requiring all international data processors to operate under contractual data processing agreements that impose data protection obligations equivalent in substance to those described in this Privacy Policy. These agreements govern the purposes for which data may be used, the security standards that must be maintained, and the rules for sub-processing and data deletion.

gb99bd does not transfer personal data to any jurisdiction that it has reason to believe provides materially inadequate data protection for the categories of data being transferred, without first implementing additional contractual or technical safeguards appropriate to the risk.

gb99bd is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. The registration process requires all users to declare their date of birth, and this declaration is verified against KYC identity documents during the account verification process.

If gb99bd discovers or has reason to believe that a registered user is under 18 years of age, the following steps will be taken immediately:

• The account will be suspended with immediate effect pending investigation.
• All personal data associated with the account will be flagged for accelerated deletion following the conclusion of the investigation and any mandatory regulatory reporting obligations.
• Any deposits made by the underage user will be returned to the originating payment source, net of any withdrawals already processed.
• Any winnings generated during the period of underage use will be forfeited in full.
• The matter will be reported to relevant authorities as required by applicable law.

If you are a parent or guardian and you believe that a minor in your care has registered on gb99bd and provided personal data, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will treat your report with the highest priority and act on it without delay.

gb99bd reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of our service. When material changes are made to this Policy, we will notify registered users by publishing the updated Policy on this page with a revised effective date and, where the change is significant, by sending a notification to the email address registered on your account.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data. The effective date displayed at the top of this page will always reflect when the current version was last reviewed and approved.

Your continued use of the gb99bd platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with a revised version of this Policy, you must stop using the platform and contact our support team to arrange account closure. Any personal data retained following account closure will be handled in accordance with the retention periods described in Section 7 of this Policy.

For any questions about this Privacy Policy or our data processing practices, please contact us at [email protected] with the subject line "Privacy Policy Query". We are committed to responding to all privacy enquiries promptly and transparently.