gb99b Privacy Policy — How We Collect, Use, and Protect Your Personal Data

gb99b operates the online betting and casino platform accessible at gb99b.io. The platform offers sports betting markets — including cricket, darts, and rugby — alongside live casino, slot games, and related services to players based in Bangladesh. For the purposes of this Privacy Policy, gb99b acts as the data controller in respect of all personal data collected through the platform.

If you have any questions about how gb99b handles your personal data, or if you wish to exercise any of your data rights as described in this Policy, you may contact our data support team by email at the address listed in Section 12 of this document. All data enquiries are handled by our dedicated compliance team and will be acknowledged within two (2) business days of receipt.

gb99b collects personal data that is necessary to provide a safe, compliant, and functional betting and gaming platform to players in Bangladesh. The categories of personal data we collect are described in the table below:

We do not knowingly collect or process sensitive personal data beyond what is strictly required for KYC and age verification purposes. We do not collect biometric data, health data, or political opinions.

gb99b collects personal data through the following channels and methods:

• Direct submission: Data you provide when registering your account, completing KYC verification, making deposits or withdrawals, contacting our support team, or participating in promotions.
• Automated collection: Technical and usage data collected automatically as you interact with the platform, using server logs, session tracking, and browser-based technologies such as cookies and local storage.
• Third-party payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank when you initiate a deposit or withdrawal through their services.
• Game suppliers: Session data and game round results passed to gb99b by third-party game providers such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe for the purposes of account crediting, responsible gaming monitoring, and dispute resolution.
• Identity verification services: Where gb99b uses a third-party identity verification service to cross-reference the documents you submit during KYC, data may be shared with and received from that service as part of the verification process.
• Referral programmes: If you arrive at gb99b via an affiliate or referral link, gb99b may record the referring source for the purposes of attribution and bonus eligibility assessment.

gb99b uses the personal data it collects for the following purposes:

• Account creation and management: To create and maintain your gb99b player account, verify your identity and age, and manage account settings including responsible gaming preferences.
• Payment processing: To process deposits and withdrawals in BDT via your chosen payment method, to reconcile transactions, and to return funds in the event of account closure.
• KYC and compliance: To verify that you meet the minimum age requirement of 21 years, to confirm your identity and address, and to fulfil our internal compliance obligations.
• Fraud and security: To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, identity theft, and other prohibited conduct on the platform. Technical and usage data is analysed for anomalous patterns that may indicate a security risk.
• Platform personalisation: To tailor your experience on gb99b — for example, displaying markets relevant to your location in Bangladesh, surfacing cricket promotions during BPL or T20 World Cup season, or recommending slots based on your play history.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance with account issues via our support team.
• Responsible gaming: To monitor betting and gaming patterns for indicators of problem gambling behaviour, and to apply responsible gaming tools such as deposit limits, loss limits, and self-exclusion at your request or where we deem it appropriate under our duty of care.
• Marketing and promotions: To send you information about gb99b promotions, bonuses, and special offers — including BPL season offers, Eid promotions, and Pohela Boishakh specials — where you have opted in to receive such communications. You may opt out at any time by contacting our support team or via your account settings.
• Platform improvement: To analyse usage patterns and player behaviour in aggregate to improve the platform's design, game offering, and performance for all Bangladesh players.
• Legal obligations: To retain records as required by our internal compliance standards and to respond to lawful requests for information from competent authorities.

gb99b processes your personal data on the following legal bases, depending on the specific purpose for which the data is used:

• Contractual necessity: Processing required to fulfil our obligations to you as a registered player — including account management, payment processing, and game delivery — is carried out on the basis that it is necessary for the performance of the contract between you and gb99b as set out in the Terms & Conditions.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and platform improvement is carried out on the basis of gb99b's legitimate interests in maintaining a safe, fair, and commercially viable platform, provided those interests are not overridden by your data protection rights.
• Consent: Processing for marketing and promotional communications is carried out solely on the basis of your freely given, specific, and informed consent. You may withdraw your consent to marketing communications at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Legal obligation: Processing required to comply with our internal KYC, anti-fraud, and record-keeping standards is carried out on the basis that it is necessary to fulfil a legal or compliance obligation.

gb99b does not sell your personal data to third parties under any circumstances. We share your data only where it is necessary to deliver platform services, comply with our compliance obligations, or protect the security of the platform. The categories of third parties with whom we may share your data are as follows:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive only the transaction data necessary to process your deposit or withdrawal. These providers are not authorised to use your data for any other purpose.
• Game suppliers: Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Spribe, and other third-party game studios receive session and account data necessary to deliver game functionality, process game results, and support responsible gaming monitoring. Game suppliers are contractually prohibited from using your data for purposes unrelated to service delivery.
• Identity verification services: Where gb99b uses a third-party KYC provider to verify identity documents submitted during account verification, the relevant identity data is shared with that provider under a data processing agreement that restricts its use to the verification purpose only.
• Platform infrastructure providers: Cloud hosting, database, and content delivery network providers who process data on gb99b's behalf under contractual data processing agreements requiring them to maintain appropriate security standards.
• Fraud and security services: Third-party providers of fraud detection, IP analysis, and device fingerprinting services who process technical data on gb99b's behalf to protect the platform and its players.
• Competent authorities: gb99b may disclose personal data to law enforcement, regulatory authorities, or other competent bodies where required to do so by a lawful order, subpoena, or equivalent legal process. gb99b will notify affected players of such disclosure where it is legally permitted to do so.

All third parties with whom gb99b shares personal data are required to process that data in accordance with applicable data protection standards and are prohibited from using it for purposes beyond those specified in their service agreement with gb99b.

gb99b uses cookies and similar tracking technologies to operate certain platform features, analyse usage patterns, and deliver a personalised experience to players. The following categories of cookies may be used on the gb99b platform:

gb99b does not use third-party advertising cookies or cross-site tracking technologies for the purpose of delivering targeted advertising on external websites. You may manage cookie preferences through your browser settings; however, disabling essential cookies will affect the functionality of the platform and may prevent you from accessing your account.

gb99b implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. The key security measures in place include:

• Transport encryption: All data transmitted between your browser or device and the gb99b platform is encrypted using 256-bit TLS/SSL encryption. Data transmitted in plain text is not accepted by the platform.
• Storage encryption: Personal data stored in gb99b's databases is encrypted at rest using AES-256 encryption. This applies to identity documents, financial data, and contact information.
• Password security: Account passwords are stored using a one-way cryptographic hashing algorithm. gb99b staff cannot access, view, or recover your password. If you forget your password, it must be reset through the secure password recovery process.
• Access controls: Access to systems that store personal data is restricted to authorised personnel on a need-to-know basis. All access is logged and subject to periodic review.
• Fraud monitoring: gb99b operates continuous automated monitoring of account activity, login patterns, and transaction behaviour to detect and respond to potential security threats in real time.
• Incident response: In the event of a data breach or security incident that poses a risk to player data, gb99b will take immediate remediation steps, notify affected players as promptly as practicable, and take all reasonable steps to limit the impact of the incident.

gb99b retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention considerations:

• Active accounts: Personal data associated with an active player account is retained for the duration of the account's active status and for a period of five (5) years following the closure or last active use of the account, whichever is later. This retention period supports our ability to respond to disputes, comply with internal compliance requirements, and detect patterns of repeated prohibited conduct.
• KYC documents: Identity verification documents are retained for a minimum of five (5) years from the date of submission or the date of account closure, whichever is later.
• Financial transaction records: Records of deposits, withdrawals, and bet settlements are retained for a minimum of five (5) years from the date of each transaction.
• Support correspondence: Customer support transcripts and email correspondence are retained for three (3) years from the date of the last communication in a given support case, to support quality assurance and dispute resolution.
• Marketing data: Where you have consented to receive marketing communications, your marketing preference data is retained until you withdraw that consent. Upon withdrawal, marketing-related data will be suppressed or deleted within thirty (30) days.

When personal data is no longer required for any of the purposes described in this Policy and no legal obligation requires its continued retention, gb99b will securely delete or anonymise that data in accordance with its internal data lifecycle procedures.

As a player on the gb99b platform, you have the following rights in respect of your personal data. To exercise any of these rights, please contact our data support team as described in Section 12 of this Policy.

• Right of access: You have the right to request a copy of the personal data gb99b holds about you, along with information about how it is used. gb99b will respond to a verified access request within thirty (30) days of receipt.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by gb99b be corrected. You may update certain account information directly through your account settings; for changes to identity or KYC data, please contact our support team.
• Right to erasure: In certain circumstances, you have the right to request that gb99b delete personal data it holds about you. This right is subject to exceptions — for example, where gb99b is required to retain data to comply with its internal compliance obligations or to defend against a legal claim. Where erasure is not possible in full, gb99b will explain the reason and the extent to which data can be deleted or anonymised.
• Right to restriction: You have the right to request that gb99b restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of the data is being resolved.
• Right to data portability: You have the right to receive a copy of personal data you have provided to gb99b in a structured, commonly used, machine-readable format where processing is based on your consent or the performance of a contract.
• Right to object: You have the right to object to processing based on gb99b's legitimate interests. gb99b will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is required for the establishment, exercise, or defence of legal claims.
• Right to withdraw consent: Where processing is based on consent — specifically for marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

The gb99b platform is strictly intended for adults aged 21 years and above. gb99b does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process, and accounts where the registered holder is found to be under 21 will be immediately closed and any balance returned to the verified payment method.

If gb99b becomes aware that personal data has been collected from an individual under the age of 21 without verifiable parental or guardian consent, that data will be deleted as promptly as practicable and the relevant account will be permanently closed. Parents or guardians who believe that a minor may have registered on the gb99b platform are encouraged to contact our support team immediately at the address listed in Section 12 so that appropriate action can be taken without delay.

gb99b supports responsible gaming and takes the protection of minors seriously. Players are encouraged to use parental control software and to ensure that devices used to access gb99b are secured with strong passwords to prevent access by underage users. Additional guidance is available on the gb99b Responsible Gaming page.

If you have any questions, concerns, or requests relating to this Privacy Policy or gb99b's handling of your personal data, please contact our data support team. Our support team is available 24 hours a day, seven days a week, with responses typically provided within two (2) hours by email during standard Bangladesh Standard Time (BST, UTC+6) business hours.

The support contact email address is shown below as plain text and is not a clickable link: [email protected]

When submitting a data rights request or privacy complaint, please include your registered account username, the email address associated with your account, and a clear description of your request or concern. This will help gb99b's team locate your account record and respond to your request as efficiently as possible.

gb99b is committed to resolving all privacy-related complaints promptly and fairly. If you submit a complaint, gb99b will acknowledge it within two (2) business days and aim to provide a full response within fourteen (14) business days of receipt. This Privacy Policy was last reviewed and updated in January 2026.