Privacy Policy
How gb99app Protects Your Data

1. Data We Collect

gb99app collects personal data from players in several ways: directly from you when you register and use the platform, automatically through your use of the site, and in some cases from third-party service providers involved in payment processing and identity verification. Below is a detailed breakdown of the categories of data we collect.

1.1 Registration & Account Data

When you create a gb99app account, we ask you to provide:

• Full legal name
• Date of birth (for age verification — you must be 18 or older)
• Email address
• Mobile phone number (your primary contact and bKash/Nagad identifier)
• Residential address (city, district, and postal code within Bangladesh)
• Preferred username and password (stored in hashed, non-reversible form)

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may collect:

• A copy of your National Identity Card (NID), passport, or other government-issued photo ID
• A proof-of-address document such as a utility bill or bank statement
• A screenshot or confirmation of your registered mobile financial service account (e.g., bKash or Nagad) showing your name and registered number
• A selfie or live photo for identity matching purposes, where required

1.3 Payment & Transaction Data

To process deposits and withdrawals, we record:

• Transaction reference numbers from bKash, Nagad, Rocket, Upay, and bank transfers
• Deposit and withdrawal amounts in BDT or USDT
• Date and time of each transaction
• The payment method used for each transaction
• Partial masked identifiers of payment instruments (e.g., last four digits of a card, or first and last three digits of a mobile number) — never full credentials

1.4 Gaming & Betting Activity Data

We maintain records of all gaming activity associated with your account, including:

• Bets placed, games played, stakes, and outcomes
• Bonus activations, wagering progress, and bonus expiry events
• Session durations and frequency of platform access
• Responsible gaming tool activations (deposit limits, time-outs, self-exclusion requests)

1.5 Technical & Device Data

When you access gb99app, our servers automatically collect certain technical information:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Pages visited, time spent on each page, and navigation paths
• Referring URL (the site you visited immediately before gb99app)
• Session tokens and authentication timestamps

2. How We Use Your Data

gb99app uses the personal data we collect for specific, lawful purposes only. We do not use your data for purposes that are incompatible with those for which it was originally collected. The primary purposes for which we process your data are as follows:

Purpose	Data Used	Legal Basis
Account creation and management	Registration data, contact details	Contractual necessity
Identity and age verification	KYC documents, date of birth	Legal obligation
Processing deposits and withdrawals	Transaction data, payment identifiers	Contractual necessity
Fraud prevention and AML monitoring	Transaction data, device data, IP address	Legal obligation / Legitimate interests
Responsible gaming monitoring	Betting activity, session data	Legal obligation / Player welfare
Customer support	Account data, communication history	Contractual necessity
Platform improvement and analytics	Technical data, navigation behaviour	Legitimate interests
Promotional communications (opted-in only)	Email address, mobile number	Consent

2.1 Marketing Communications

gb99app will only send promotional emails, SMS messages, or in-platform notifications to players who have explicitly opted in to receive marketing communications during registration or subsequently through their account settings. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account profile, or by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

2.2 Automated Decision-Making

gb99app uses automated systems to monitor betting patterns, detect fraudulent activity, and enforce responsible gaming thresholds. These systems may result in automated actions such as triggering a KYC review, placing a temporary hold on a withdrawal, or flagging an account for manual review. Where an automated decision has a significant impact on your account, you have the right to request human review of that decision. Contact our support team to exercise this right.

3. Data Sharing & Third Parties

gb99app does not sell your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the specific purpose.

3.1 Payment Service Providers

To process your deposits and withdrawals, we share relevant transaction data with our payment partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank — strictly as required to complete each transaction. These providers operate under their own privacy policies and data protection obligations. gb99app is not responsible for the data practices of third-party payment providers once data has been transmitted to them for processing.

3.2 Identity Verification Partners

Where we use third-party KYC or identity verification services to authenticate your identity documents, we share only the minimum data required for that verification. All such partners are contractually bound to handle your data securely, use it only for the stated purpose, and delete it upon completion of the verification process.

3.3 Game Content Providers

Game content on the gb99app platform is delivered by licensed third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive your session token and anonymised game-play data to render their games within the gb99app interface. They do not receive your full name, payment details, or contact information. Each provider operates under strict licensing conditions that govern their data practices.

3.4 Legal and Regulatory Disclosure

gb99app may be required to disclose personal data to law enforcement agencies, regulatory authorities, or courts where we are legally compelled to do so, or where we have a good-faith belief that disclosure is necessary to protect the safety of our users, prevent fraud, or comply with a legal obligation. We will notify you of such disclosure where we are legally permitted to do so.

3.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of gb99app's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material change to data handling practices that results from it, and you will have the right to close your account if you do not wish your data to be transferred.

4. Cookies & Tracking Technologies

gb99app uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse site performance, and support fraud prevention. Below is an explanation of the types of cookies we use and how you can manage them.

4.1 Types of Cookies We Use

• Essential cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. The platform cannot be used without these cookies and they cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, currency display, and bet slip state across sessions. Disabling these may reduce your platform experience.
• Analytics cookies: Collect anonymised data on how users navigate the platform — pages visited, session length, and feature usage — to help us improve the gb99app experience. We use privacy-respecting analytics tools that do not share your data with advertising networks.
• Security and fraud prevention cookies: Help us identify suspicious activity, detect bot traffic, and protect the integrity of our platform. These are essential to our anti-fraud and responsible gaming obligations.

4.2 Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to be notified before a cookie is stored. Note that disabling functional cookies may affect your platform experience and disabling security cookies may prevent you from logging in. Please refer to your browser's help documentation for instructions on managing cookies.

4.3 Do Not Track

Some browsers send a "Do Not Track" (DNT) signal to websites. gb99app currently does not alter its data collection practices in response to DNT signals, as there is no universally accepted standard for interpreting them. We are committed to reviewing this position as DNT standards evolve.

5. Data Security & Storage

gb99app takes the security of your personal data seriously. We implement a layered set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, or disclosure.

5.1 Technical Safeguards

• All data in transit is encrypted using TLS 1.2 or higher (HTTPS throughout the platform).
• Passwords are stored using industry-standard one-way hashing algorithms (bcrypt) and are never stored or transmitted in plain text.
• Payment credentials are tokenised — we store only masked payment identifiers, never full card numbers, PINs, or mobile banking passwords.
• Our servers are hosted in secure data centres with physical access controls, network firewalls, and regular security auditing.
• Account access is protected by session management controls including automatic logout after inactivity and anomalous-login alerts.

5.2 Organisational Safeguards

• Access to player personal data is restricted to authorised staff on a strict need-to-know basis.
• All staff with access to personal data receive regular data protection training.
• Third-party service providers with access to player data are vetted and bound by data processing agreements requiring equivalent security standards.

5.3 Data Breach Response

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, gb99app will notify affected players as promptly as practicable. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures we have taken or propose to take to address the breach and mitigate its effects.

5.4 Data Storage Location

Personal data collected from players in Bangladesh is stored on servers located within or outside Bangladesh, subject to adequate data transfer safeguards. Where data is transferred to servers in other jurisdictions, gb99app ensures that appropriate contractual protections are in place to maintain the same standard of security and privacy protection that applies within Bangladesh.

6. Your Privacy Rights

As a user of the gb99app platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact our support team at [email protected]. We will respond to all valid requests within 14 business days.

6.1 Right of Access

You have the right to request a copy of all personal data gb99app holds about you. Upon receiving a verified access request, we will provide a structured, readable summary of your data including the categories collected, the purposes for which it is processed, and the third parties with whom it has been shared.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update basic account information (such as your email address or phone number) directly through your account settings. For changes to identity-verified data (such as your full name or date of birth), please contact support with supporting documentation.

6.3 Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn your consent and no other legal basis applies. Note that certain data — particularly financial transaction records and KYC verification documents — must be retained for a minimum period under applicable anti-money-laundering regulations, and cannot be erased until that retention period has expired.

6.4 Right to Restrict Processing

You may request that we restrict the processing of your personal data in certain circumstances — for example, while you are contesting the accuracy of data we hold, or while we are assessing a request for erasure. During a restriction, we will continue to store your data but will not actively process it beyond what is strictly necessary.

6.5 Right to Data Portability

Where we process your data on the basis of your consent or a contract, you have the right to receive a copy of that data in a structured, machine-readable format (such as CSV or JSON), which you may transfer to another service provider of your choosing.

6.6 Right to Object

You have the right to object at any time to processing of your personal data for direct marketing purposes. You also have the right to object to processing carried out on the basis of our legitimate interests, on grounds relating to your particular situation. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

7. Data Retention Policy

gb99app retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of data we hold:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	Legal / AML obligation
KYC identity documents	5 years from account closure or last verification	AML / regulatory requirement
Financial transaction records	7 years from the transaction date	Financial record-keeping obligations
Betting and gaming activity logs	3 years from account closure	Dispute resolution / responsible gaming audit
Support communications	3 years from the last interaction	Dispute resolution
Marketing preference records	Until consent is withdrawn + 1 year	Consent audit trail
Technical and device logs	90 days from collection	Security and fraud monitoring

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

8. Contact & Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how gb99app handles your personal data, please get in touch with us using the details below.

8.1 Support & Data Enquiries

Our support team handles all data-related enquiries on a priority basis. Please include "Privacy Enquiry" or "Data Rights Request" in the subject line of your message so we can route it to the appropriate team member promptly.

• Email: [email protected]
• Response time: Within 3 business days for general enquiries; within 14 business days for formal data rights requests
• Operating hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

8.2 Policy Updates

gb99app reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, new services, or evolving legal requirements. When material changes are made, we will notify registered players via the email address associated with their account, and update the "Last Updated" date at the top of this document. We encourage you to review this Policy periodically. Your continued use of the platform following notification of changes constitutes your acceptance of the updated Policy.