gb99k Privacy Policy

When you register for an account, use the gb99k platform, or interact with our support team, we collect certain categories of personal data. The specific information we collect depends on how you interact with us and which services you use. Below is a structured overview of the categories of data gb99k may collect and the circumstances under which each category is gathered.

gb99k does not collect sensitive categories of personal data such as racial or ethnic origin, religious beliefs, health records, or biometric data for the purpose of identification, unless specifically required by applicable law or a compliance authority. Where such data is inadvertently provided (for example, if a medical document is submitted in error), it will be deleted and not processed.

gb99k processes your personal data only where there is a lawful basis for doing so. The primary lawful bases we rely on are: performance of a contract (providing you with the services you have signed up for), compliance with a legal obligation (such as anti-money-laundering requirements and age verification), our legitimate interests (such as fraud prevention and platform security), and your consent (where you have opted in to marketing communications).

The following table sets out the specific purposes for which gb99k processes your personal data and the lawful basis applied to each:

gb99k will not use your personal data for purposes that are incompatible with those listed above without providing you with prior notice and, where required, obtaining your fresh consent. We do not use your data to make automated decisions that produce legal or similarly significant effects on you without human oversight and an opportunity for you to contest the outcome.

gb99k uses cookies and similar tracking technologies — including web beacons, pixel tags, and local storage objects — to operate the platform effectively, remember your preferences, maintain your login session, and understand how players interact with different features of the site.

The following categories of cookies are used on the gb99k platform:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as account login, session management, and security checks. Without these cookies, the gb99k website cannot operate correctly. No consent is required for strictly necessary cookies.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, display settings, and game category filters — so you do not need to reconfigure them on each visit.
• Analytics Cookies: We use anonymised analytics data to understand which pages are visited most frequently, how long players spend on different sections of the site, and where navigation improvements can be made. This data is aggregated and does not identify individual users.
• Performance Cookies: These cookies monitor the technical performance of the platform — page load times, server response rates, and error logging — so that our engineering team can identify and resolve issues promptly.

You can control cookie behaviour through your browser settings. Most modern browsers allow you to refuse new cookies, delete existing cookies, or receive a notification before a cookie is placed. Please note that disabling strictly necessary cookies will affect your ability to use core platform features, including staying logged in to your gb99k account.

gb99k does not sell, rent, or broker your personal data to third parties for their own marketing or commercial purposes. However, in order to deliver our services, we do share limited personal data with a defined set of trusted service providers and, where legally required, with regulatory or law enforcement authorities. All third parties who process data on our behalf are contractually required to handle it in accordance with applicable data protection standards and to use it only for the specific purpose for which it was shared.

The categories of third parties with whom gb99k may share your data are as follows:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner Bangladeshi banks (including Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank) receive the financial transaction data necessary to process your deposits and withdrawals. Each provider operates under its own privacy and security framework.
• Identity Verification Partners: Where automated KYC verification tools are used, your identity documents and personal details may be processed by a third-party verification service acting as a data processor on gb99k's behalf. These processors are bound by strict confidentiality and data security obligations.
• Game Content Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier in order to initialise game sessions and maintain game state. These providers do not receive your full name, contact details, or financial information.
• Platform Technology Providers: Cloud hosting, CDN, and platform infrastructure providers who store or transmit data on our behalf are subject to data processing agreements and are required to implement appropriate technical and organisational security measures.
• Legal and Regulatory Authorities: gb99k will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by a valid legal order, court order, or applicable regulation. We will notify affected players of such disclosures where legally permitted to do so.
• Fraud Prevention Services: Aggregated technical and behavioural data may be shared with fraud prevention platforms to identify suspicious account activity, coordinated bonus abuse, and potential money laundering patterns. Individual player profiles are not disclosed to these services beyond the scope required for fraud screening.

gb99k implements a layered approach to data security, combining technical controls, procedural safeguards, and ongoing staff training to protect the personal data of our players from unauthorised access, accidental loss, destruction, or disclosure.

Our key technical security measures include:

• TLS 1.2+ encryption for all data transmitted between players' devices and our servers.
• Encrypted storage of passwords using industry-standard hashing algorithms — gb99k staff cannot view your plain-text password at any time.
• Two-factor authentication (2FA) available on all player accounts for an additional layer of login security.
• Regular independent security audits and penetration testing of platform infrastructure.
• Automated intrusion detection and rate-limiting systems to prevent brute-force attacks and credential stuffing attempts.
• Strict role-based internal access controls ensuring that each staff role can access only the data categories necessary to perform their specific function.

Retention periods: gb99k retains your personal data for as long as your account remains active and for a period thereafter as required by law. Specifically:

• Account registration and identity data is retained for a minimum of five (5) years following account closure, in line with anti-money-laundering record-keeping requirements.
• Transaction and financial records are retained for a minimum of seven (7) years for accounting and regulatory compliance purposes.
• Support correspondence is retained for three (3) years unless a longer retention period is required in connection with an ongoing dispute or legal proceeding.
• Technical and usage data collected via cookies and analytics tools is retained for up to twenty-four (24) months, after which it is anonymised or deleted.

When personal data is no longer required and the applicable retention period has expired, gb99k securely destroys or irreversibly anonymises it. Anonymised data may be retained indefinitely for statistical and platform improvement purposes, as it can no longer be used to identify any individual.

Despite the robust measures we employ, no system connected to the internet can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights, gb99k will notify affected players and relevant authorities as required by applicable data protection obligations, without undue delay.

As a player on the gb99k platform, you have the following rights in relation to the personal data we hold about you. You may exercise any of these rights at any time by submitting a written request to our support team at [email protected], with the subject line "Privacy Rights Request". We will acknowledge your request within 48 hours and respond in full within 30 days.

• Right of Access: You have the right to request a copy of the personal data gb99k holds about you, together with information about how and why it is processed. We will provide this information in a clear, structured format.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account details directly from your account settings page.
• Right to Erasure: You may request that gb99k delete your personal data. This right is subject to our legal retention obligations — where we are required by law to retain certain records (for example, transaction data for anti-money-laundering compliance), we will explain this clearly and delete all data that is not subject to a legal hold.
• Right to Restriction of Processing: In certain circumstances — for example, while a dispute about data accuracy is being resolved — you may request that we restrict the processing of your data without deleting it.
• Right to Data Portability: Where processing is carried out on the basis of your consent or contract performance, you may request that we provide your personal data in a machine-readable format so that it can be transferred to another service provider of your choice.
• Right to Withdraw Consent: Where we process your data on the basis of consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Object: You may object to processing carried out on the basis of gb99k's legitimate interests, including profiling for fraud prevention. We will stop such processing unless we can demonstrate compelling legitimate grounds that override your interests.

The gb99k platform is strictly intended for adults aged 18 and above. 18+ We do not knowingly collect, process, or retain personal data belonging to individuals under the age of 18. Our registration process requires confirmation that the applicant is at least 18 years of age, and our KYC verification procedures are designed to detect and reject underage registrations.

If gb99k becomes aware that personal data has been collected from a person under 18 — whether through a misrepresentation during registration or any other means — we will immediately suspend the associated account, delete all personal data collected from that individual, and return any deposited funds to the original payment source. We will not process any bets or retain any winnings generated by an underage player.

gb99k reviews this Privacy Policy regularly and may update it from time to time to reflect changes in our data processing practices, applicable law, or the services we offer. When we make material changes — those that affect your rights or the way we handle your data in a meaningful way — we will notify registered players via email to their registered address and/or via a prominent notice on the platform at least seven (7) days before the changes take effect.

Minor or administrative updates (such as typographical corrections, clarifications that do not change the substance of our practices, or contact detail updates) may be made without advance notice. The effective date at the top of this policy will always reflect when the most recent version came into force. We encourage you to review this policy periodically to stay informed of how gb99k protects your information.

Your continued use of the gb99k platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you should cease using the platform and may request account closure by contacting our support team.

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to report a potential data protection concern, please contact the gb99k data support team using the details below. All privacy-related enquiries are handled with strict confidentiality and are prioritised by our compliance team.

This Privacy Policy was last updated on 1 January 2026. If you are reading a printed or cached copy of this document, please visit https://gb99k.net/privacy-policy to confirm you have the most current version.