gb991 Privacy Policy

1 Who We Are

gb991 is an online casino and sports betting platform operating at gb991.io and serving players primarily based in Bangladesh. When this Privacy Policy refers to "gb991", "we", "us", or "our", it refers to the gb991 platform and the entity responsible for the collection and processing of your personal data.

gb991 acts as the data controller for all personal data collected through the gb991.io website, mobile-optimised interface, and any associated communications channels including email, WhatsApp, live chat, and in-app messaging. As data controller, gb991 determines the purposes for which personal data is processed and the means by which that processing takes place.

If you have questions about how gb991 handles your personal data, or if you wish to exercise any of your data rights described in Section 10 of this Policy, you may contact our dedicated data support team at [email protected].

2 Data We Collect

gb991 collects personal data in several categories depending on how you interact with the platform. The table below summarises the categories of data we collect and examples of specific data points within each category.

3 How We Collect Data

gb991 collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide when creating an account, completing identity verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated technical collection: Data collected automatically by our servers and analytics systems when you visit gb991.io, including IP address, device identifiers, session duration, and page interaction events.
• Payment provider data: Transaction confirmation data shared by payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard when you initiate a deposit or withdrawal. gb991 receives transaction reference numbers and status confirmations — we do not receive or store full card numbers.
• Third-party identity verification services: Where gb991 uses an accredited KYC service provider to assist with document verification, that provider may share verification outcomes and risk scores with gb991 as part of the onboarding or re-verification process.
• Cookies and similar technologies: gb991 uses session cookies, persistent cookies, and similar browser-based technologies to maintain login sessions, remember preferences, and gather aggregated usage analytics. See Section 7 for full details.

4 Why We Use Your Data

gb991 processes personal data for the following purposes. Where multiple purposes apply to the same data, each purpose has its own legal basis as described in Section 5.

• Account creation and management: To register your account, verify your identity, manage your player profile, and provide access to all gb991 platform features.
• Transaction processing: To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer, or card), to maintain accurate financial records, and to resolve payment disputes.
• Legal and regulatory compliance: To fulfil anti-money-laundering (AML) obligations, conduct know-your-customer (KYC) checks, retain financial records for the legally required period, and respond to law enforcement requests where legally compelled.
• Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, account takeover attempts, bonus abuse, collusion, and other prohibited conduct as defined in the gb991 Terms & Conditions.
• Responsible gaming monitoring: To monitor gaming patterns and identify indicators of problem gambling behaviour, apply responsible gaming tools where triggered, and maintain self-exclusion records.
• Customer support: To handle enquiries, complaints, and requests submitted via live chat, email, WhatsApp, or in-app messaging, and to maintain records of support interactions for quality assurance.
• Platform improvement: To analyse aggregated and anonymised usage data in order to identify areas for improvement, optimise game loading performance, and refine the player experience on gb991.
• Marketing communications (opt-in only): To send promotional offers, bonus alerts, tournament announcements, and seasonal promotions (such as BPL, Eid, and Pohela Boishakh specials) to players who have explicitly opted in to marketing communications.

5 Legal Bases for Processing

gb991 relies on one or more of the following legal bases when processing your personal data:

• Contractual necessity: Processing required to fulfil our obligations under the account agreement with you — including account registration, transaction processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements, financial record-keeping mandates, and responses to lawful authority requests.
• Legitimate interests: Processing conducted for gb991's legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics for platform improvement.
• Consent: Processing based on your freely given, specific, and informed consent — primarily marketing communications. You may withdraw your consent at any time by updating your preferences in Account Settings or by contacting support.

6 Sharing Your Data

gb991 does not sell your personal data to third parties. We share data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: We share necessary transaction data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard solely to process your deposits and withdrawals. These providers operate under their own privacy policies and data security standards.
• Identity verification providers: We may share identity documents and data with accredited KYC/AML service providers for the purpose of verifying your identity and conducting required compliance checks. These providers are contractually bound to process your data only as directed by gb991.
• Game technology providers: Game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token or player identifier to initialise and record your game sessions. These providers do not receive your full identity or financial data.
• Fraud prevention and security services: We may share technical data (IP address, device fingerprint, behavioural indicators) with specialist fraud detection services to identify and prevent prohibited conduct on the platform.
• Law enforcement and legal authorities: Where required by applicable law, court order, or a request from a competent authority, gb991 will disclose personal data as legally required. gb991 will notify affected players of such disclosures where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the gb991 business, personal data held by gb991 may be transferred to the acquiring entity. Players will be notified of any such transfer and of any change to the applicable privacy policy in advance.

7 Cookies and Tracking Technologies

gb991 uses cookies and similar browser-based technologies to operate the platform, maintain login sessions, remember your preferences, and gather aggregated analytics that help us improve the gb991 experience.

• Strictly necessary cookies: These cookies are essential for the gb991 platform to function. They maintain your login session, store your language and currency preferences, and enable core platform features. These cookies cannot be disabled without impairing platform functionality.
• Analytics cookies: gb991 uses first-party analytics tools to collect aggregated, anonymised data on how players navigate the platform — including which pages are visited most frequently and where players encounter errors. This data is used solely to improve the platform and is not linked to your personal identity.
• Preference cookies: These cookies remember choices you have made on the platform — such as your preferred game category or notification settings — so that you do not have to re-enter them on each visit.
• Security cookies: Short-lived cookies used to support our fraud detection and account security systems, including OTP verification flows and unusual login detection.

gb991 does not use third-party advertising cookies, social media tracking pixels, or cross-site retargeting technologies. You may manage cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies may affect your ability to log in or use certain platform features.

8 Data Security

gb991 takes data security seriously and maintains a range of technical and organisational measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and gb991 servers.
• Encryption of sensitive data fields — including payment details and identity document records — at rest in our databases.
• Role-based access controls ensuring that gb991 staff can only access personal data to the extent required for their specific function.
• Multi-factor authentication required for all administrative access to systems holding player personal data.
• Regular third-party security assessments and penetration testing of the gb991 platform infrastructure.
• Incident response procedures that include notifying affected players and relevant authorities in the event of a data breach involving material risk to player rights.

9 Data Retention

gb991 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Active account data: Retained for the full lifetime of your gb991 account while it remains open and active.
• Post-closure account and transaction records: Retained for a minimum of five years following account closure to satisfy financial record-keeping and AML compliance obligations. This period may be extended if required by a legal hold, ongoing investigation, or regulatory instruction.
• Identity verification documents: Retained for a minimum of five years post-closure in line with KYC and AML regulatory requirements.
• Support communications: Retained for three years following resolution of the relevant support interaction, for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for the duration of the account and for three years post-closure as evidence of consent status.
• Analytics data: Aggregated and anonymised analytics data that cannot be linked to an individual player is retained indefinitely for platform improvement purposes.

When data is no longer required, gb991 securely deletes or permanently anonymises it in accordance with our internal data disposal procedures.

10 Your Rights

As a gb991 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". gb991 will acknowledge your request within two business days and provide a substantive response within 30 days.

• Right of access: You may request a copy of all personal data gb991 holds about you, together with information about how it is being used.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. For routine changes such as contact details, you can update these directly in Account Settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to gb991's legal retention obligations. Where a legal obligation requires us to retain data, we will inform you of the applicable retention period.
• Right to restrict processing: You may request that gb991 restrict processing of your data in certain circumstances — for example, while a correction request is under review.
• Right to data portability: You may request a copy of data you have provided to gb991 in a structured, commonly used, machine-readable format (such as CSV), where technically feasible.
• Right to object: You may object to processing of your personal data carried out on the basis of legitimate interests, and to processing for direct marketing purposes. Objection to direct marketing will be actioned immediately.
• Right to withdraw consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time via Account Settings or by contacting support. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

11 Children's Privacy

gb991 is strictly an adult platform. The minimum age for registration and use of any gb991 service is 21 years. gb991 does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will delete that data immediately and close the associated account.

If you are a parent or guardian and believe that your child may have created a gb991 account or submitted personal data to gb991, please contact our support team immediately at [email protected]. We will investigate and take appropriate action without delay.

12 Third-Party Links

The gb991 platform may occasionally reference third-party services, particularly in the context of payment methods (bKash, Nagad, Rocket, Upay) or game providers (Pragmatic Play, Evolution Gaming, etc.). gb991 is not responsible for the privacy practices of these third-party organisations. Their collection and use of your data is governed by their respective privacy policies, which we encourage you to review independently.

gb991 does not link to external websites for commercial, affiliate, or promotional purposes. If you reach a third-party site from a payment or game provider integration embedded within gb991, your interaction with that third-party site is outside the scope of this Privacy Policy.

13 Policy Updates

gb991 reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify registered players via their registered email address or via a prominent in-platform notice at their next login, with a minimum of seven days' notice before the updated Policy takes effect.

The effective date shown at the top of this Policy will be updated each time a new version is published. We encourage you to review this page periodically. Your continued use of the gb991 platform after the effective date of an updated Policy constitutes your acceptance of the changes.

14 Contact Us

For all privacy-related enquiries, data rights requests, or concerns about how gb991 handles your personal data, please use the following contact details. All communications are handled in English.

• Email: [email protected] — for data rights requests, use subject line "Data Rights Request"
• WhatsApp: +880 1700-000991
• Live Chat: Available 24/7 via the gb991 platform — average response under 3 minutes
• In-App Messaging: Available to all logged-in players via Account Settings

gb991 aims to acknowledge all privacy-related enquiries within two business days and to resolve the matter fully within 30 calendar days. For complex requests involving large volumes of data, the resolution period may be extended by a further 30 days, with notification provided to the requesting player at the point of extension.