Privacy Policy — gb99bat

1. Information We Collect

gb99bat collects personal data in order to operate a safe, compliant, and enjoyable gaming environment for players across Bangladesh. The categories of information we collect are set out below, along with the specific data points within each category.

1.1 Registration & Identity Data

When you create an account through the gb99bat Login portal, we collect the following registration data: your full legal name, date of birth, residential address (including district, division, and postcode), mobile phone number, and email address. This information is required to establish your identity, comply with our Know Your Customer (KYC) obligations, and ensure that only eligible players aged 18 and above access real-money services on the Platform.

1.2 Identity Verification Documents

As part of our KYC and anti-money laundering (AML) compliance obligations, gb99bat may request copies of government-issued identity documents. Acceptable documents include: National Identity Card (NID), passport, and driving licence. We may also request proof of address in the form of a recent utility bill, bank statement, or official government correspondence. These documents are collected solely for the purpose of verifying your identity and are stored in accordance with the data retention provisions in Section 5 of this Policy.

1.3 Financial & Payment Data

When you make a deposit or request a withdrawal, gb99bat collects the information necessary to process the transaction. This includes your bKash, Nagad, Rocket, or Upay mobile wallet number, bank account details (where bank transfers are used), and transaction reference numbers. We do not store full payment credentials on our own servers — all payment data is processed through our payment partners' secure, encrypted infrastructure. gb99bat retains only the minimum transaction metadata required for accounting, fraud prevention, and regulatory audit purposes.

1.4 Usage & Behavioural Data

As you interact with the Platform, we automatically collect technical and behavioural data, including: your IP address, device type and operating system, browser type and version, session start and end times, pages and game titles visited, bet history, deposit and withdrawal history, bonus usage records, and in-game actions. This data is used to improve the Platform, personalise your experience, detect fraudulent or unusual activity, and meet our responsible gaming obligations.

1.5 Communications Data

When you contact our support team via email or any other supported communication channel, we retain a record of the correspondence, including the content of your message, our response, the timestamp, and the contact method used. These records are kept to ensure consistency and quality of support, and to maintain an audit trail of player interactions with gb99bat staff.

2. How We Use Your Data

gb99bat processes your personal data only for specific, defined purposes. We do not use your data in ways that are incompatible with the original purpose of collection. The primary purposes for which we process your personal data are set out below.

Marketing Communications

gb99bat will only send you promotional communications — including information about bonuses, seasonal offers such as Eid promotions or BPL cricket season deals, and new game launches — where you have explicitly opted in to receive such communications during the registration process or via your account preferences panel. You may withdraw your consent and unsubscribe from all marketing communications at any time by updating your account notification settings or by contacting our support team at support@gb99bat.

Withdrawing your consent to marketing does not affect the lawfulness of any processing carried out before the withdrawal, and it does not affect our ability to send you essential service communications such as transaction confirmations, security alerts, or account status notifications.

3. Data Sharing & Third Parties

gb99bat does not sell, rent, or trade your personal data to third parties for commercial purposes. We share your data only where necessary for the operation of the Platform, fulfilment of legal obligations, or protection of our legitimate interests. The categories of third parties with whom we may share data are described below.

3.1 Payment Service Providers

To process your deposits and withdrawals, we share the minimum necessary payment data with our partner payment service providers, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. Each of these providers operates under its own privacy and data security frameworks. The sharing of data with payment providers is strictly limited to the data required to execute and verify the specific transaction.

3.2 Game Studio Providers

The casino games available on gb99bat are supplied by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. These studios may receive certain session-level technical data (such as player session tokens and game round IDs) in order to render games and maintain fair-play audit trails. Game studios do not receive your full personal profile, payment data, or identity documents.

3.3 Identity Verification Providers

gb99bat may engage specialist identity verification service providers to assist with KYC processing. These providers receive only the data required to carry out the verification task and are bound by strict data processing agreements that prohibit the use of your data for any purpose other than verification on behalf of gb99bat.

3.4 Legal & Regulatory Authorities

In circumstances required by law, regulation, or court order, gb99bat may be required to disclose your personal data to relevant law enforcement agencies, regulatory bodies, or judicial authorities. Such disclosures are made only to the extent required by the applicable legal obligation and are carried out in accordance with standard data protection practices.

3.5 Analytics & Technical Service Providers

We use third-party analytics and infrastructure tools to maintain Platform performance, detect technical faults, and understand aggregate player behaviour. These providers receive anonymised or pseudonymised data where possible and are contractually prohibited from using any data received from gb99bat for purposes beyond the contracted service.

4. Cookies & Tracking Technologies

gb99bat uses cookies and similar tracking technologies to operate the Platform effectively, maintain your logged-in session, remember your preferences, and collect aggregate analytics data. A cookie is a small text file placed on your device by a website you visit. Cookies themselves do not contain personally identifiable information, but the data they collect may be associated with your account profile where you are logged in.

Categories of Cookies We Use

Managing Cookies

You may control or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging in and using core Platform features. Disabling analytics or functional cookies will not affect your ability to play but may degrade the personalisation of your experience. Instructions for managing cookies in the most commonly used browsers (Chrome, Firefox, Safari, Edge) are available from those browsers' respective help documentation.

gb99bat does not use cross-site advertising cookies or tracking pixels that follow your behaviour across third-party websites outside the Platform.

5. Data Retention & Storage

gb99bat retains your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, and in any event for the minimum periods required by applicable law and our internal compliance obligations.

Retention Periods by Data Category

Data Storage Location

All personal data collected from players on gb99bat is stored on servers with appropriate physical and logical security controls. Data is not transferred to jurisdictions that do not provide an adequate level of data protection without appropriate safeguards being in place. All data storage and transfer infrastructure used by gb99bat is protected by SSL/TLS encryption at rest and in transit.

Upon the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual player. Transaction metadata that has been fully anonymised may be retained indefinitely for statistical and modelling purposes.

6. Your Privacy Rights

As a player on gb99bat, you have a number of rights in relation to the personal data we hold about you. These rights are described below, along with the procedure for exercising each one. All privacy rights requests are handled by our support team and are acknowledged within 48 hours. We aim to fulfil all requests within 14 calendar days. Complex requests may require up to 30 days; we will notify you if this is the case.

Right of Access

You have the right to request a copy of the personal data that gb99bat holds about you, along with information about how it is being processed. This is commonly referred to as a Subject Access Request (SAR). To submit a SAR, contact our support team at support@gb99bat with the subject line "Data Access Request" and confirmation of your registered account details for identity verification.

Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay. Minor corrections such as updating your mobile number or email address can be made directly through your account settings panel. For corrections to identity documents or legal name, please contact support with supporting documentation.

Right to Erasure

You may request the deletion of your personal data — sometimes referred to as the "right to be forgotten" — where the data is no longer necessary for the purpose for which it was collected, where you have withdrawn your consent (and there is no other legal basis for processing), or where the data has been unlawfully processed. Please note that the right to erasure does not apply where gb99bat is required to retain the data to comply with a legal obligation (for example, our AML/KYC retention requirements described in Section 5). In such cases, we will explain which data cannot be deleted and the reason why.

Right to Restriction of Processing

You may request that gb99bat restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified, or where you have objected to processing based on legitimate interest. During a restriction period, we will continue to store your data but will not actively process it for any purpose other than storage.

Right to Object

You have the right to object to the processing of your personal data for marketing purposes at any time. You also have the right to object to processing based on our legitimate interests, although in such cases we may be able to demonstrate compelling grounds that override your objection. To exercise this right, contact our support team or update your account notification preferences.

Right to Data Portability

Where processing is carried out by automated means and is based on your consent or a contract with you, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (for example, JSON or CSV). You may also request that we transmit this data directly to another service provider where technically feasible.

7. Data Security Measures

gb99bat applies a multi-layered approach to data security, combining technical controls, procedural safeguards, and staff training to protect the personal data of all players on the Platform. The key security measures we have in place are described below.

Technical Controls

• SSL/TLS Encryption: All data transmitted between your device and the gb99bat Platform is encrypted using industry-standard SSL/TLS protocols. This applies to all account pages, the cashier, and the game lobby.
• Encryption at Rest: Sensitive personal data — including identity documents and payment records — is encrypted at rest using AES-256 encryption on our storage infrastructure.
• Access Controls: Access to personal data within gb99bat's internal systems is restricted on a need-to-know basis. Staff roles are assigned the minimum level of data access required to carry out their job function. All access to sensitive player data is logged and audited.
• Two-Factor Authentication: gb99bat strongly recommends that all players enable SMS-based two-factor authentication (2FA) on their accounts. This is available directly through the account security settings panel and significantly reduces the risk of unauthorised account access.
• Intrusion Detection: The Platform is monitored continuously using automated intrusion detection and anomaly-alerting systems. Suspicious activity patterns — including unusual login locations, high-frequency login attempts, and irregular transaction volumes — trigger immediate review by our security team.
• Vulnerability Management: gb99bat conducts regular security assessments of its infrastructure and application stack. Critical vulnerabilities identified during these assessments are remediated on a priority basis.

Procedural Safeguards

All gb99bat personnel who handle personal data are required to complete data protection and information security training as part of their onboarding and on a regular refresher basis. Our internal data protection policies set clear standards for data handling, incident reporting, and the secure disposal of data at the end of its retention period.

Data Breach Response

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, gb99bat will notify the affected players without undue delay. Notifications will be sent to the email address associated with your account and will describe the nature of the breach, the data categories affected, the likely consequences, and the measures taken or proposed to address the breach and mitigate its effects.

8. Policy Updates & Contact

Changes to This Privacy Policy

gb99bat reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the Platform's privacy framework. When we make material changes to this Policy, we will notify you by email to the address associated with your account and by posting a prominent notice on the Platform for a minimum of 30 days following the change.

Non-material changes — such as formatting improvements, correction of typographical errors, or clarifications that do not alter the substance of the Policy — may be made without individual notification. The effective date at the top of this document will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how gb99bat protects your data.

Children & Minors

gb99bat is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If you believe that a minor has accessed the Platform and provided personal data, please notify us immediately at support@gb99bat. Upon receiving such a notification, we will take immediate steps to verify the account, suspend access if necessary, and delete any personal data associated with an underage user.

Responsible Gaming & Privacy

Some of the personal data we collect — in particular session duration data, deposit frequency, and bet history — is processed specifically to support our responsible gaming programme. This data helps us identify players who may be at risk of developing a gambling problem and allows us to intervene with appropriate support tools such as deposit limits, session reminders, and self-exclusion. This type of processing is carried out under our legitimate interest in player protection and our legal obligations as a gaming platform. For full details of our responsible gaming tools and resources, please visit our Responsible Gaming page.

Contact Our Privacy Team

If you have any questions, concerns, or requests related to this Privacy Policy or to the way gb99bat processes your personal data, please contact our support team. We handle all privacy enquiries in English and guarantee a response within 48 hours.

Email: support@gb99bat (plain text — not a clickable link)

Support hours: 24 hours a day, 7 days a week, including Bangladeshi public holidays such as Eid, Pohela Boishakh, Victory Day (December 16), and Independence Day (March 26). All communications are handled in English with a response time commitment of under 2 hours for urgent account security matters.