Your Privacy Matters at gb999

gb999 operates the online casino and sports betting platform accessible at https://gb999.vu (the "Platform"). For the purposes of this Privacy Policy, gb999 acts as the data controller responsible for the personal information collected and processed in connection with your use of the Platform.

If you have any questions about how gb999 handles your personal data, or if you wish to exercise any of your data rights described in Section 11, you may contact us using the details set out in Section 15.

gb999 collects personal data in the categories set out in the table below. We collect only the data that is necessary for the specific purposes described in Section 4.

gb999 does not collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or biometric data for the purpose of unique identification, except where a government-issued ID is submitted for age and identity verification — in which case only the data necessary for verification is processed.

gb999 collects personal data through the following channels:

• Directly from you — when you register an account, complete the KYC process, make a deposit or withdrawal, contact support, or respond to a survey or promotion.
• Automatically — when you use the Platform, our servers and analytics tools automatically log technical and usage data including your IP address, device identifiers, and in-platform behaviour.
• From third-party service providers — our payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) share transaction confirmation data with gb999 to reconcile deposits and withdrawals. Identity verification partners may share verification outcomes.
• From cookies and similar technologies — as described in Section 7 below.

gb999 processes your personal data only where a valid legal basis exists. The table below sets out our primary processing purposes and the corresponding legal basis for each:

Where gb999 relies on legitimate interests as a legal basis, we have assessed that our interests are not overridden by your fundamental rights and freedoms. You may request further information about this assessment by contacting us at [email protected].

gb999 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing purposes. We share personal data only in the following limited circumstances:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and their respective processing partners — to execute deposits and withdrawals on your behalf.
• Identity Verification Partners: Third-party KYC service providers who assist gb999 in verifying player identity and age in accordance with our compliance obligations.
• Game Content Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed providers may receive limited session data (e.g., account token, currency) necessary to operate their games on our platform. They do not receive your full identity or financial data.
• Analytics and Technical Providers: Service providers who assist with platform performance monitoring, security scanning, and fraud detection. All such providers are bound by data processing agreements limiting their use of your data.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or legitimate regulatory request, gb999 may disclose personal data to competent authorities. We will notify you of such disclosures where legally permitted to do so.

All third-party processors engaged by gb999 are required to implement appropriate technical and organisational security measures and to process personal data only in accordance with gb999's documented instructions.

6.1 When you make a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, the transaction is processed through the respective mobile financial service provider's own secure infrastructure. gb999 receives only a transaction confirmation reference and the BDT amount — not your full mobile banking PIN, password, or full account credentials.

6.2 For card payments via Visa or Mastercard, card data is processed by a PCI-DSS compliant payment gateway. gb999 stores only the last four digits of your card number and the card type for reconciliation purposes. Full card numbers, CVV codes, and expiry dates are never stored on gb999 servers.

6.3 All financial transactions are logged as part of gb999's anti-money laundering obligations. Transaction records are retained for the period specified in Section 8.

gb999 uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session, prevent fraud, and understand how players use our services. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that keep you logged in and security tokens that protect against cross-site request forgery. They cannot be disabled.
• Functional Cookies: Remember your preferences (e.g., language, last-played game, display settings) to personalise your experience across sessions.
• Analytics Cookies: Collect aggregated, anonymised data about Platform usage — such as page views, session duration, and navigation paths — to help us improve performance for players in Dhaka, Chittagong, Sylhet, and across Bangladesh.
• Security Cookies: Detect and prevent fraudulent login attempts, account takeovers, and automated bot activity.

You can manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may impair the functionality of the Platform, including your ability to log in or complete transactions.

gb999 retains personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law. Our standard retention periods are:

Where retention beyond the above periods is required by law, court order, or ongoing legal proceedings, gb999 will retain the relevant data until that obligation is fulfilled. Upon expiry of the applicable retention period, data is securely deleted or anonymised so that it can no longer be linked to you.

gb999 implements a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and gb999 servers is encrypted using 256-bit SSL/TLS protocols.
• Password Hashing: Account passwords are hashed using industry-standard one-way cryptographic algorithms. gb999 staff cannot view or recover your password.
• Access Controls: Personal data is accessible only to authorised gb999 personnel who need it to perform their role. Access is logged and regularly reviewed.
• Intrusion Detection: gb999 operates automated monitoring systems that detect and alert on suspicious access patterns, brute-force login attempts, and anomalous transaction activity.
• Regular Security Audits: Our platform and infrastructure undergo periodic security assessments to identify and remediate vulnerabilities.

While gb999 takes every reasonable precaution to secure your data, no internet-based service can guarantee absolute security. You are responsible for keeping your own login credentials confidential and for logging out of your account on shared or public devices.

gb999 is strictly an adults-only platform. We do not knowingly collect or process personal data from individuals under the age of 21. Registration is prohibited for anyone under 21 years of age. If gb999 discovers that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed.

If you are a parent or guardian and believe that a minor has registered on gb999, please contact us immediately at [email protected] (plain text — not a clickable link) so that we can take prompt action.

Subject to applicable law, you have the following rights with respect to the personal data gb999 holds about you:

1. Right of Access: You may request a copy of the personal data gb999 holds about you, along with information about how it is being processed.
2. Right to Rectification: You may ask us to correct inaccurate or incomplete personal data without undue delay.
3. Right to Erasure: You may request that gb999 delete your personal data where it is no longer necessary for the purposes it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to legal retention obligations — for example, transaction records required for anti-money laundering compliance cannot be deleted on request.
4. Right to Restrict Processing: You may ask gb999 to temporarily limit how we use your data while an accuracy dispute or objection is being resolved.
5. Right to Data Portability: Where processing is based on your consent or on contract performance, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
6. Right to Object: You may object to processing of your personal data where gb999 relies on legitimate interests as its legal basis, including objecting to direct marketing and profiling for marketing purposes.
7. Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

To exercise any of these rights, submit your request in writing to [email protected]. Please include your registered username and a description of the right you wish to exercise. gb999 will acknowledge your request within 5 business days and will endeavour to respond fully within 30 calendar days. In complex cases, this period may be extended by up to a further 30 days, and we will notify you if this is the case.

gb999 will not charge a fee for handling a data rights request unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. gb999 may request additional information to verify your identity before fulfilling a request.

gb999 sends promotional communications — including bonus offers, tournament announcements, seasonal promotions tied to events such as the BPL, IPL, T20 World Cup, Eid, and Pohela Boishakh — only to players who have explicitly opted in to receive such communications during registration or through their account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the unsubscribe link included in any promotional email from gb999.
• Updating your communication preferences in your gb999 account settings.
• Contacting the gb999 support team at [email protected] and requesting to be removed from marketing lists.

Withdrawal of marketing consent does not affect your ability to continue using the Platform or receiving transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts, which are sent regardless of marketing preferences as they are necessary for the operation of your account.

gb999 may transfer personal data to, or process it in, countries other than the country in which you reside. This may occur where our servers, service providers, or operational teams are based in different jurisdictions. Wherever personal data is transferred internationally, gb999 takes appropriate steps to ensure that an adequate level of protection is applied, including by using contractual safeguards such as standard data protection clauses with third-party processors.

If you would like further information about the specific safeguards applied to any particular international data transfer, please contact us at [email protected].

gb999 may update this Privacy Policy from time to time to reflect changes in our data practices, operational requirements, or applicable legal obligations. When we make material changes to this Policy, we will notify registered players by email to their registered address and by posting a prominent notice on the Platform for a period of not less than 14 days prior to the changes taking effect.

The "Effective Date" shown at the top of this Policy indicates when the current version came into force. Your continued use of the gb999 Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Policy, you must cease using the Platform and may request account closure by contacting our support team.

We recommend reviewing this Privacy Policy periodically to stay informed about how gb999 protects your personal information.

If you have any questions, concerns, or complaints about this Privacy Policy or about how gb999 processes your personal data, please contact our Data Privacy team using the details below. All contact details are provided as plain text and are not clickable links.

We aim to resolve all privacy-related queries promptly and fairly. If you are not satisfied with our response, you may have the right to escalate your concern to a relevant data protection authority in your jurisdiction.