gdb99 Privacy Policy — How We Handle Your Personal Data

1 Who We Are

gdb99 is an online casino and sports betting platform operating at gdb99.io and serving registered players in Bangladesh. For the purposes of this Privacy Policy, gdb99 is the data controller responsible for the personal information you provide when you register an account, make a deposit or withdrawal, participate in games, or otherwise interact with our platform and support channels.

All queries regarding the handling of your personal data should be directed to our support team at [email protected] (plain text — not a clickable link). We aim to respond to all privacy-related correspondence within five business days, Bangladesh Standard Time (UTC+6).

2 Data We Collect

gdb99 collects personal data through several channels. The categories of data we collect and the context in which each is gathered are set out below:

Category	Examples	Collection Point
Identity Data	Full legal name, date of birth, national ID (NID) number, passport number	Account registration; KYC verification
Contact Data	Mobile phone number, email address, residential address (Dhaka, Chittagong, Sylhet, etc.)	Account registration; profile updates
Financial Data	bKash / Nagad / Rocket / Upay wallet numbers, transaction amounts in ৳, deposit and withdrawal history	Deposit and withdrawal processing
Technical Data	IP address, browser type and version, device type, operating system, session timestamps	Automatic collection via server logs and cookies
Usage Data	Games played, bet amounts, win/loss history, session durations, features accessed	Platform activity tracking
Communications Data	Support chat transcripts, email correspondence, feedback submissions	Customer support interactions
Verification Documents	Scanned copies of NID, passport, utility bills, bank statements	KYC and source-of-funds verification

gdb99 does not knowingly collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or biometric data beyond what is present in submitted identity documents used solely for KYC purposes.

3 How We Use Your Data

gdb99 uses the personal data we collect for the following purposes:

• Account Creation & Management: To register your account, verify your identity, maintain your profile, and provide access to the gdb99 platform.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate transaction records.
• KYC & Fraud Prevention: To verify your age (21+ requirement), confirm your identity, detect and prevent fraud, money laundering, and other financial crimes, and to comply with applicable anti-money laundering (AML) obligations.
• Platform Delivery: To provide, maintain, and improve the gdb99 casino, sports betting, and live dealer services, including personalising your gaming experience based on your in-platform activity.
• Customer Support: To respond to your queries, complaints, and service requests through our English-language support channels.
• Responsible Gaming: To monitor gaming patterns and identify indicators of problem gambling, enabling us to apply appropriate responsible gaming tools as described in our Responsible Gaming policy.
• Marketing & Promotions: To send you information about gdb99 promotions, bonuses, and relevant offers, where you have provided consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time by contacting support.
• Legal & Regulatory Compliance: To fulfil our obligations under applicable Bangladeshi law, respond to lawful requests from regulatory authorities, and enforce our Terms & Conditions.
• Security & Integrity: To detect, investigate, and prevent security incidents, unauthorised account access, and abuse of our platform.

4 Legal Basis for Processing

gdb99 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our contract with you — including account management, payment processing, and platform service delivery.
• Legal Obligation: Processing required to comply with applicable laws — including KYC identity verification, anti-money laundering checks, and retention of transaction records as required by law.
• Legitimate Interests: Processing necessary for gdb99's legitimate business interests, provided those interests are not overridden by your privacy rights — including fraud prevention, platform security, responsible gaming monitoring, and service improvement.
• Consent: Processing based on your freely given, specific, informed consent — including the sending of marketing communications where we rely on your opt-in. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 Data Sharing & Disclosure

gdb99 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. We share your personal data only in the limited circumstances described below:

• Payment Processors: We share financial data with payment service providers (including bKash, Nagad, Rocket, Upay, and card-processing networks) solely to process your transactions. These providers are contractually bound to handle your data in accordance with applicable data protection standards.
• KYC & Identity Verification Providers: We share identity documents and personal information with third-party KYC verification services to fulfil our age and identity verification obligations. These providers process data only as instructed by gdb99.
• Technology & Infrastructure Partners: We engage third-party technology providers for hosting, analytics, fraud detection, and customer support tooling. All such providers operate under data processing agreements that restrict their use of your data to the services they supply to gdb99.
• Game Content Providers: Game studios and live dealer providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Ezugi) may receive limited technical data necessary to deliver their games within the gdb99 platform. These providers do not receive personally identifiable information beyond what is technically required.
• Regulatory & Law Enforcement Authorities: We may disclose personal data to government bodies, regulators, courts, or law enforcement agencies when required to do so by applicable law, court order, or lawful regulatory request. We will notify you of such disclosure where we are legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of assets involving gdb99, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer prior to it taking effect.

6 Cookies & Tracking

gdb99 uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your session and preferences, and to gather analytics data that helps us improve our service. The types of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the gdb99 platform to function. They enable you to log in, maintain your session, and access secure areas. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: These cookies remember your preferences — such as language settings, preferred game view, and session settings — so that you do not need to re-enter them on each visit.
• Analytics Cookies: We use anonymised analytics cookies to understand how players interact with the gdb99 platform — which pages are visited most frequently, where users navigate from, and how sessions are structured. This data is used in aggregate form to improve platform design and performance.
• Security Cookies: These cookies help gdb99 detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts on the platform.

You may control or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the gdb99 platform. gdb99 does not use third-party advertising cookies or permit external ad networks to place tracking cookies on our platform.

7 Data Retention

gdb99 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your active account relationship with gdb99, plus a minimum of five years following account closure, to comply with anti-money laundering and record-keeping obligations.
• Transaction Records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of five years from the date of each transaction.
• KYC Documents: Identity and age verification documents are retained for a minimum of five years following the conclusion of the business relationship, as required by AML regulations.
• Support Communications: Customer support correspondence is retained for up to three years from the date of the interaction, unless a longer period is required due to an ongoing dispute or regulatory matter.
• Technical & Log Data: Server logs and technical access records are retained for up to twelve months, after which they are anonymised or deleted.
• Marketing Consent Records: Records of your consent to marketing communications are retained for the duration of the consent period and for two years thereafter as evidence of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you.

8 Your Rights

Subject to applicable law, you hold the following rights in relation to your personal data held by gdb99. To exercise any of these rights, contact our support team at [email protected] (plain text). We will respond within 30 days of receiving a valid request.

• Right of Access: You have the right to request a copy of the personal data gdb99 holds about you, together with information about how that data is used and with whom it is shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. For basic profile corrections, you may update information directly in your gdb99 account settings.
• Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data. This right is subject to overriding legal obligations — for example, we are required by law to retain transaction records and KYC data for specified minimum periods and cannot delete these upon request.
• Right to Restrict Processing: You have the right to request that gdb99 restricts the processing of your data in certain circumstances — for example, while the accuracy of data is being contested, or where processing is unlawful but you prefer restriction over deletion.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where gdb99 relies on legitimate interests as its legal basis. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where gdb99 processes your data on the basis of consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

9 Data Security

gdb99 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the gdb99 platform.
• Encryption of sensitive data fields (including financial data and identity document references) at rest in our database systems.
• Role-based access controls, ensuring that internal staff can only access personal data relevant to their specific job function.
• Regular security assessments and vulnerability testing of the gdb99 platform infrastructure.
• Strict contractual data security requirements imposed on all third-party service providers who process data on our behalf.
• Incident response procedures to detect, contain, and report any data security breach in a timely manner.

While gdb99 takes all reasonable steps to protect your personal data, no transmission over the internet or electronic storage system is completely secure. You also have a responsibility to keep your gdb99 Login credentials confidential and to notify us immediately if you suspect unauthorised access to your account.

10 Children's Privacy

The gdb99 platform is strictly intended for individuals aged 21 years and above. gdb99 does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from an individual under 21, we will take immediate steps to delete that data and close the associated account. Parents or guardians who believe that a minor may have registered on the gdb99 platform should contact our support team at [email protected] (plain text) without delay.

11 Policy Updates

gdb99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data handling practices, applicable law, or the services we offer. Where any amendment is material — meaning it significantly affects how we use your personal data or alters your rights — gdb99 will provide advance notice via email to your registered address or through a prominent notice on the gdb99 platform, no less than 14 days before the change takes effect.

For non-material amendments (such as corrections of typographical errors or clarifications that do not change the substance of our practices), the updated Policy will be published on this page with a revised effective date. We encourage you to review this Privacy Policy periodically to stay informed about how gdb99 protects your information. Your continued use of the platform following the publication of any revised Privacy Policy constitutes acceptance of those changes.

12 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way gdb99 handles your personal data, please contact our support team using the details below. All privacy correspondence should be marked clearly as a "Privacy Request" to ensure it is directed to the appropriate team member.

• Email: [email protected] (plain text — not a clickable link)
• Response Time: We aim to respond to all privacy-related requests within 5 business days, and to fulfil formal data rights requests within 30 days, Bangladesh Standard Time (UTC+6).
• Language: All support communications are conducted in English.

For general complaints about our privacy practices that have not been resolved to your satisfaction through our internal process, you may seek further guidance from the relevant data protection authority in your jurisdiction.