gb99d Privacy Policy
Your privacy matters at gb99d. This Privacy Policy explains exactly what personal data we collect from players in Bangladesh, why we collect it, how we store and protect it, and the rights you hold over your own information. We believe transparency is the foundation of trust.
Privacy at a Glance
Six Commitments gb99d Makes to Every Player
The sections below contain the full Privacy Policy in formal legal-document register. These six cards summarise the core commitments — they complement, but do not replace, the full policy text.
Minimum Data Collection
gb99d collects only the personal data that is strictly necessary to operate your account, process transactions, verify your identity, and comply with applicable legal obligations. We do not collect data speculatively or beyond what each stated purpose requires.
SSL Encryption in Transit
All data transmitted between your device and gb99d's servers is protected by industry-standard TLS/SSL encryption. This applies to account login, deposit and withdrawal flows, identity document uploads, and all other data exchanges on the Platform.
No Sale of Personal Data
gb99d does not sell, rent, or trade your personal data to third parties for marketing purposes. Data is shared with third parties only where required to deliver the service, fulfil a legal obligation, or prevent fraud — and only to the minimum extent necessary.
Clear Retention Limits
gb99d retains personal data only for as long as your account is active and for a defined period thereafter as required by law and our record-keeping obligations. Once the retention period expires, your data is securely deleted or anonymised.
Meaningful Player Rights
You have the right to access, correct, restrict, and request deletion of your personal data held by gb99d. Requests are actioned within 30 days and are free of charge for standard requests. Full details are set out in the Your Data Rights section below.
Direct Contact Channel
All privacy-related queries, data requests, and complaints are handled by gb99d's dedicated support team. Contact us at [email protected] with the subject line "Privacy Request" and we will respond within 5 business days.
Section 1
Information We Collect
When you register for a gb99d account, use the Platform, or interact with our support team, gb99d collects personal data in several categories. This section describes those categories, the specific data points collected within each category, and the circumstances in which that collection takes place.
1.1 Registration and Account Data
When you create a gb99d account you are required to provide: your full legal name, a valid email address, a Bangladesh mobile phone number, a date of birth (to confirm you are 18 years of age or older), a username of your choosing, and a password. You may also be asked to provide your residential address in Bangladesh (district and division) to assist with account security and fraud prevention. This data is collected at registration and updated whenever you modify your account profile.
1.2 Identity Verification (KYC) Data
Before gb99d processes your first withdrawal, we are required to verify your identity. As part of this Know Your Customer (KYC) process, we collect copies or photographs of the following documents: your Bangladesh National Identity Card (NID), or alternatively a valid passport or driving licence; a selfie or photo taken at the time of verification to confirm you are the person depicted in the identity document; and, where required by our compliance team, a recent proof of address such as a utility bill or bank statement dated within the past 90 days. KYC documents are handled with heightened security measures as described in the Data Security section below.
1.3 Financial and Transaction Data
gb99d records all financial transactions conducted through your account. This includes: deposit amounts, dates, and the payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, or Mastercard); withdrawal amounts, dates, and destination payment method; wagering history including game type, stake, outcome, and timestamp for every bet placed on the Platform; and balance adjustments made in connection with bonuses, promotions, or manual corrections applied by gb99d's compliance team. Financial transaction data is retained for the full period required by applicable anti-money-laundering record-keeping obligations.
1.4 Technical and Device Data
When you access the gb99d Platform via browser or mobile device, our servers automatically collect certain technical data. This includes: your IP address at the time of access; device type, operating system, and browser version; session timestamps (login time, logout time, session duration); in-game event logs (round IDs, bet placement timestamps, game provider identifiers); and geolocation data derived from your IP address to assist with fraud prevention and jurisdictional compliance. gb99d does not collect precise GPS-level location data from your device.
1.5 Communication Data
When you contact gb99d's support team via email, WhatsApp, or live chat, we retain a record of that communication, including its content, date, and outcome. This data is used to resolve your query, improve our support quality, and maintain a record of commitments made by gb99d in the course of resolving disputes. Support communications are retained for a period of three (3) years.
1.6 Data Collected Through Cookies and Tracking Technologies
gb99d uses cookies and similar technologies to collect data about how you navigate and use the Platform. Full details of the cookies we use, the data they collect, and how to manage your cookie preferences are set out in the Cookies and Tracking Technologies section of this Privacy Policy.
Name, email, Bangladesh mobile number, date of birth, username, password. Provided by you at sign-up.
NID / passport / driving licence, selfie, proof of address. Required before first withdrawal.
All deposits, withdrawals, and bet history including stakes, outcomes, and payment methods used.
IP address, device type, OS, browser, session logs, and IP-derived geolocation. Collected automatically on each visit.
All communications with gb99d support — email, WhatsApp, live chat — retained for 3 years.
Section 2
How We Use Your Data
gb99d uses your personal data only for specific, legitimate purposes. The table below maps each category of personal data to the purpose for which it is used and the legal basis that justifies that use. Where we rely on "legitimate interests" as a legal basis, gb99d has determined that our interests are not overridden by your rights and interests, taking into account the reasonable expectations of players on a regulated online gaming platform.
| Data Category | Purpose of Use | Legal Basis |
|---|---|---|
| Registration Data | Creating and managing your gb99d account; sending account-related notifications; recovering access to a locked account. | Contract performance; legitimate interests (account security). |
| KYC Documents | Verifying your identity and age before processing withdrawals; complying with anti-money-laundering obligations; preventing fraud and underage gambling. | Legal obligation; contract performance. |
| Transaction Data | Processing deposits and withdrawals; maintaining accurate account balance records; producing financial reports required for compliance; investigating disputed transactions. | Contract performance; legal obligation (AML record-keeping). |
| Technical & Device Data | Detecting and preventing fraudulent account access; identifying multi-account violations; ensuring Platform stability; complying with jurisdictional access restrictions. | Legitimate interests (fraud prevention, Platform security). |
| Wagering History | Settling bets accurately; identifying problem gambling patterns to trigger responsible gaming interventions; awarding loyalty rewards and cashback. | Contract performance; legal obligation (responsible gaming duty of care). |
| Communication Data | Resolving support queries; maintaining dispute records; training support staff; quality assurance. | Legitimate interests (service improvement, dispute resolution). |
| Cookie / Tracking Data | Remembering your session preferences; analysing Platform usage patterns to improve user experience; detecting anomalous navigation behaviour indicative of bot activity. | Consent (where required); legitimate interests (Platform analytics). |
| Email Address | Sending transactional emails (deposit confirmations, withdrawal notifications, password resets); sending promotional emails where you have opted in to marketing communications. | Contract performance (transactional); consent (marketing). |
Section 3
Cookies and Tracking Technologies
Cookies are small text files placed on your device when you visit the gb99d Platform. gb99d uses cookies and similar technologies (including local storage objects and session tokens) to ensure the Platform functions correctly, to personalise your experience, and to analyse Platform usage patterns.
Types of Cookies Used
Strictly necessary cookies are required for the Platform to operate. They include session authentication tokens that keep you logged in during a session, security cookies that detect cross-site request forgery attempts, and load-balancing cookies that route your requests to the correct server. These cookies cannot be disabled without preventing you from using the Platform.
Functional cookies remember your preferences — such as your preferred language, display settings, and responsible gaming tool configurations (deposit limits, session reminders). Disabling functional cookies may mean that some personalisation preferences are not retained between sessions.
Analytics cookies collect anonymised or pseudonymised data about how players navigate the Platform — which pages are visited most frequently, where players exit, and which game categories attract the most engagement. gb99d uses this data to improve Platform design and content. Analytics cookies do not identify you personally.
Fraud-detection cookies are used by gb99d's security systems to recognise devices associated with previously flagged suspicious activity, to detect unusual session patterns indicative of automated bot behaviour, and to cross-reference device fingerprints against known fraud vectors. The data collected by these cookies is used exclusively for security purposes.
Cookie Duration
Session cookies are deleted automatically when you close your browser. Persistent cookies remain on your device for a defined duration: functional preference cookies are retained for up to 12 months; analytics cookies are retained for up to 24 months; fraud-detection cookies are retained for up to 36 months. You may delete any cookie from your device at any time using your browser's cookie management tools, though doing so may affect Platform functionality.
Managing Your Cookie Preferences
With the exception of strictly necessary cookies, you may adjust your cookie preferences at any time through your browser settings or device privacy controls. Most modern browsers allow you to block third-party cookies, clear existing cookies, and receive alerts before a new cookie is placed. Please refer to your browser's help documentation for specific instructions. Note that blocking strictly necessary cookies will prevent you from logging in to your gb99d account.
Session auth tokens, security cookies, load-balancing. Cannot be disabled — essential for Platform operation.
Language preference, display settings, responsible gaming configurations. Retained up to 12 months.
Anonymised navigation data. Used to improve Platform UX. Retained up to 24 months. No personal identification.
Device fingerprint data used exclusively for security. Retained up to 36 months. Not used for profiling or marketing.
Section 4
Data Sharing and Third Parties
gb99d does not sell, rent, or trade your personal data to any third party for commercial gain. We share personal data with third parties only in the specific circumstances described below, and only to the minimum extent required for each stated purpose.
Game Content Providers
To deliver the games available on the gb99d Platform, we work with third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive a limited set of session-level data — typically a pseudonymous session token, game round identifiers, and stake/outcome data — that is necessary for the game software to function and for bet settlement to occur. Game providers do not receive your full name, NID number, or payment method details.
Payment Processing Partners
When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, or Mastercard, gb99d shares the transactional data required to process that payment with the relevant payment service provider. The data shared is limited to: your registered mobile number or account identifier for the payment method, the transaction amount in BDT, and a gb99d-generated transaction reference. Payment partners process this data under their own privacy policies and are independently responsible for its security.
Identity Verification Providers
gb99d may use a third-party identity verification service to assist with KYC processing. Where this is the case, your identity document images and selfie are transmitted securely to the verification provider for automated or assisted review. The provider is contractually prohibited from retaining your KYC data beyond the period required to complete the verification check and from using your data for any purpose other than identity verification on behalf of gb99d.
Legal and Regulatory Disclosures
gb99d may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where required to do so by applicable law — for example, in connection with a court order, an anti-money-laundering investigation, or a formal request from a competent authority. gb99d will, where permitted by law, notify you of any such disclosure.
Business Transfers
In the event that gb99d undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. gb99d will provide notice to registered players prior to any such transfer and will ensure that the receiving entity agrees to treat your personal data in a manner consistent with this Privacy Policy.
Game Providers
Receive pseudonymous session tokens and round data only. No name, NID, or payment data shared with game studios.
Payment Partners
bKash, Nagad, Rocket, bank partners receive only the data needed to process a specific transaction in BDT.
KYC Providers
Identity documents shared only for the duration of the verification check. Contractually prohibited from retention or secondary use.
Legal Authorities
Disclosed only where required by law, court order, or formal regulatory request. Players notified where permitted.
Section 5
Data Retention and Storage
gb99d retains personal data only for as long as is necessary for the purpose for which it was collected, or for as long as required by applicable legal and regulatory obligations. The retention periods below reflect gb99d's assessment of legal requirements and operational necessity. Where multiple retention triggers apply to a single data category, the longer period governs.
| Data Category | Retention Period | Reason for Retention |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Account history, dispute resolution, AML record-keeping |
| KYC identity documents | Duration of account + 5 years after closure | AML compliance and regulatory audit obligations |
| Financial transaction records | 7 years from transaction date | Financial record-keeping legal requirements |
| Wagering / bet history | 5 years from bet settlement date | Dispute resolution; responsible gaming monitoring |
| Support communications | 3 years from last communication | Dispute resolution records; quality assurance |
| Technical / device logs | 12 months from collection date | Fraud detection; security incident investigation |
| Marketing preferences | Until opt-out or account closure + 2 years | Evidence of consent; suppression list maintenance |
| Self-exclusion records | Permanent (permanent self-exclusions); 7 years (temporary) | Preventing re-registration by self-excluded players |
Secure Deletion
When a retention period expires, gb99d securely deletes or irreversibly anonymises the relevant personal data. Deletion is carried out in a manner that makes recovery of the data practically impossible. Where anonymisation is used in place of deletion — for example, to preserve aggregate statistical data for Platform analytics — the anonymised data no longer constitutes personal data and is not subject to the protections in this Privacy Policy.
Data Storage Location
gb99d stores personal data on servers maintained in secure data centre facilities. All storage environments are subject to physical and logical access controls, regular security assessments, and encryption at rest for sensitive data categories including KYC documents and financial records.
Section 6
Data Security Measures
gb99d implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. No security system is impenetrable, and gb99d cannot guarantee absolute security, but we maintain the following controls as a baseline standard across the Platform.
TLS/SSL Encryption
All data in transit between your device and gb99d's servers is encrypted using TLS 1.2 or higher. HTTPS is enforced across the entire Platform with no unencrypted HTTP fallback.
Encryption at Rest
Sensitive data categories — including KYC documents, NID numbers, and financial records — are encrypted at rest in storage using AES-256. Encryption keys are managed separately from the data they protect.
Access Control
Access to personal data within gb99d's systems is granted on a strict need-to-know basis. Staff roles are assigned minimum necessary permissions, and privileged access is subject to multi-factor authentication and audit logging.
Intrusion Detection
gb99d's infrastructure is monitored continuously by automated intrusion detection systems. Anomalous access patterns trigger alerts for immediate review by our security team around the clock, every day of the year.
Regular Security Reviews
gb99d conducts periodic security assessments of its Platform, including vulnerability scanning and penetration testing by qualified security professionals. Identified vulnerabilities are remediated according to a risk-prioritised schedule.
Staff Training
All gb99d staff with access to personal data receive mandatory data protection and information security training at onboarding and at regular intervals thereafter. Policies are reviewed and updated annually.
Breach Response
gb99d maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, affected players will be notified promptly with details of the breach and steps taken to contain it.
Two-Factor Authentication
gb99d offers SMS-based two-factor authentication (2FA) for player accounts. Enabling 2FA in Account Settings is strongly recommended to protect against unauthorised access to your account.
Section 7
Your Data Rights
As a gb99d player, you hold meaningful rights over your personal data. gb99d is committed to facilitating the exercise of these rights in a straightforward, timely, and free-of-charge manner for standard requests. The rights described below apply to personal data that gb99d holds about you. Some rights are subject to limitations where gb99d is required by law to retain certain data, or where the exercise of a right would adversely affect the rights of another person.
To exercise any of the rights below, submit a written request to [email protected] with the subject line "Data Rights Request" and a clear description of the right you wish to exercise and the data it relates to. gb99d will acknowledge your request within 5 business days and will provide a substantive response within 30 days. Where a request is complex or numerous, the response period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it.
Right of Access
You have the right to request a copy of the personal data that gb99d holds about you, along with information about how it is being used. gb99d will provide this in a structured, commonly used format (typically PDF or CSV) within 30 days.
Right to Rectification
If any personal data gb99d holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor profile corrections (name spelling, address update) can be made directly via Account Settings for most fields.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (for consent-based processing), or where you object to processing on legitimate interests grounds. This right is subject to legal retention obligations — for example, financial transaction records required by AML law cannot be deleted on request.
Right to Restriction
Where you contest the accuracy of your data, object to its processing, or believe processing is unlawful but prefer restriction over deletion, you may request that gb99d restrict processing of that data while the matter is investigated. Restricted data is retained but not actively processed.
Right to Data Portability
For data you have provided to gb99d and that is processed by automated means on the basis of your consent or a contract with you, you have the right to receive that data in a machine-readable format (CSV or JSON) suitable for transfer to another service provider.
Right to Object
You have the right to object to gb99d processing your data on the basis of its legitimate interests — for example, for analytics or fraud-detection profiling. gb99d will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
Right to Withdraw Consent
Where gb99d processes your data on the basis of your consent (for example, marketing emails or non-essential cookies), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Right Not to Be Profiled
gb99d does not make solely automated decisions that produce significant legal or similarly significant effects on you. Where automated tools are used to flag accounts for review (for example, fraud detection), a human reviewer is involved before any consequential action — such as account suspension — is taken.
Section 8
Contact and Complaints
If you have any questions about this Privacy Policy, want to understand how gb99d handles a specific category of your personal data, or wish to exercise any of your data rights, please contact gb99d's support team using the details below.
How to Reach Us
The primary channel for privacy-related queries and data rights requests is email. Send your message to [email protected] with the subject line "Privacy Request" or "Data Rights Request" as appropriate. You can also raise privacy queries via the live chat feature on the gb99d Platform, available 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6). Our support team will acknowledge your query within 5 business days and provide a full response within 30 days.
Complaints
If you are not satisfied with how gb99d has handled your personal data or responded to a data rights request, you have the right to lodge a formal complaint. In the first instance, gb99d encourages you to contact our support team so that we have the opportunity to resolve the matter directly. Most concerns can be addressed promptly through direct engagement.
If you have raised a complaint with gb99d and remain dissatisfied with the outcome, you may escalate the matter to the relevant data protection authority or supervisory body in your jurisdiction. gb99d will cooperate fully with any such authority in the investigation of a complaint.
Policy Updates
gb99d reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform functionality. When we make material changes to this Policy, we will notify registered players by email and by posting a prominent notice on the Platform for a period of at least 30 days prior to the changes taking effect. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. Continued use of the gb99d Platform after the effective date of any changes constitutes acceptance of the revised Privacy Policy.
Children and Minors
The gb99d Platform is strictly for adults aged 18 years and above. gb99d does not knowingly collect personal data from any person under the age of 18. If gb99d becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account will be permanently closed. If you believe that a minor has registered an account on the gb99d Platform, please contact [email protected] immediately so that we can investigate and take appropriate action.
Links to Third-Party Sites
The gb99d Platform may contain links to third-party websites or services — for example, links to payment service provider portals or game provider websites. This Privacy Policy applies only to data collected by gb99d directly. gb99d is not responsible for the privacy practices of third-party websites and encourages you to review the privacy policy of any third-party site before providing personal data to it.
[email protected] — use subject line "Privacy Request" or "Data Rights Request". Response within 5 business days.
Available 24/7 via the gb99d Platform. Bangladesh Standard Time (BST, UTC+6). Suitable for general privacy queries.
Acknowledgement within 5 business days. Full substantive response within 30 days. Complex requests may extend to 60 days with notice.
Material changes notified by email and on-Platform notice at least 30 days before taking effect. Last updated: January 2026.
gb99d does not knowingly collect data from persons under 18. Suspected minor accounts are closed immediately on discovery.
Your Privacy Is Protected at gb99d
Now that you have read our Privacy Policy, feel confident exploring everything gb99d has to offer — cricket betting, live casino, slots, and more — all secured with SSL encryption and local BDT payments.