gb991 Privacy Policy — How We Handle Your Personal Data

gb991 (operated at gb991.club) is committed to protecting the privacy of every person who uses our platform. This Privacy Policy sets out in clear and plain terms what personal data gb991 collects from you, the purposes for which that data is used, the circumstances under which it may be shared, how long it is retained, and the rights you hold in relation to your personal data. This Policy applies to all users of the gb991 platform, including registered account holders, visitors who browse the platform without registering, and any person who communicates with gb991 support.

By registering an account on gb991 or by continuing to use the platform after this Policy has been published, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described in this Policy, you should discontinue use of the platform. This Policy should be read alongside gb991's Terms & Conditions, which together govern the full relationship between gb991 and its users.

gb991 collects personal data in three principal ways: data you provide directly when registering or using the platform, data generated automatically through your use of the platform, and data received from third-party service providers such as payment processors in the ordinary course of our operations.

Data You Provide Directly

• Registration data: full name, date of birth, contact mobile number, and the bKash, Nagad, Rocket, or Upay account number used for deposits and withdrawals.
• Identity verification (KYC) documents: copies of government-issued identification documents, such as a National Identity Card (NID), passport, or driver's licence, where required to satisfy verification obligations.
• Support communications: records of any messages, enquiries, or complaints submitted via live chat or email, including the content of those communications and any attachments provided.
• Voluntary preference data: any preferences, settings, or responsible gaming tool configurations that you set within your account, including deposit limit levels, session time limit settings, and self-exclusion requests.

Data Generated Automatically

• Technical and device data: IP address, browser type and version, operating system, device type (handset model, screen resolution), and session timestamps recorded each time you access the platform.
• Behavioural and usage data: pages visited, features used, games played, betting markets accessed, session duration, and navigation patterns within the platform. This data is used in aggregate to improve the platform and is not used to profile individual players for advertising purposes.
• Cookie data: session cookies and analytics cookies as described in Section 8 of this Policy.

Data Received from Third Parties

• Payment confirmation data from bKash, Nagad, Rocket, and Upay confirming the status, amount, and timing of deposit and withdrawal transactions. gb991 does not receive full payment account credentials from these providers.
• Identity verification data returned by any KYC verification service provider engaged by gb991 to assist with document authenticity checks.
• Fraud and risk screening data returned by third-party fraud detection and anti-money laundering screening services, where such services are engaged to protect the integrity of the platform.

gb991 uses personal data for a defined and limited set of purposes. The table below summarises the primary use cases and the corresponding lawful basis for each:

gb991 processes personal data only where a valid legal basis exists for doing so. The legal bases relied upon are as follows:

• Performance of contract: where processing is necessary to provide the services you have requested, including account operation, payment processing, and customer support.
• Legal obligation: where processing is required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, and record-keeping requirements under applicable financial regulations.
• Legitimate interests: where processing serves gb991's legitimate operational interests, including platform security, fraud prevention, and improving the quality of the service, provided that these interests are not overridden by your rights and interests as a data subject.
• Consent: for any processing activity not covered by the bases above, gb991 will seek your explicit consent prior to processing. You may withdraw consent at any time by contacting support via live chat.

gb991 does not sell or rent your personal data to any third party. Your data may be disclosed to the following categories of recipients only where strictly necessary and for the specific purposes described:

Payment Service Providers

Transaction data is shared with bKash, Nagad, Rocket, and Upay solely to process your deposit and withdrawal requests. These providers operate under their own privacy policies and are not authorised to use your data for any purpose beyond processing the transaction instructed by gb991 on your behalf.

KYC and Compliance Providers

Where identity verification is required, gb991 may share your name, date of birth, and identity document details with a licensed KYC verification service provider. This sharing is limited to what is necessary to complete the verification check and the provider is contractually prohibited from retaining or further processing your data beyond the scope of the verification.

Legal and Regulatory Authorities

gb991 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law or by a valid legal order. In such cases, gb991 will disclose only the minimum amount of data required to comply with the legal obligation and, where legally permitted, will notify the affected account holder of the disclosure.

gb991 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to the following minimum retention periods that apply regardless of account status: transaction records and financial data are retained for a minimum of five years from the date of the transaction to satisfy applicable financial record-keeping requirements; identity verification documents and KYC records are retained for a minimum of five years from the date of account closure; responsible gaming records, including self-exclusion requests and deposit limit configurations, are retained for a minimum of three years from the date of the last modification to such settings.

Once a retention period has expired and there is no longer any legal or operational requirement to retain the data, gb991 will securely delete or anonymise the data in question. Anonymised data from which no individual can be identified may be retained indefinitely for statistical and platform improvement purposes.

As a data subject, you hold the following rights in relation to your personal data processed by gb991. To exercise any of these rights, please contact gb991 support via live chat. gb991 will respond to all valid data rights requests within a reasonable timeframe:

• Right of access: you may request a copy of the personal data gb991 holds about you, together with information about the purposes for which it is processed and the categories of recipients to whom it has been disclosed.
• Right of rectification: you may request correction of any personal data held by gb991 that is inaccurate or incomplete. Where data is being used in an active process (for example, a pending verification), correction may be delayed until that process concludes.
• Right to erasure: you may request deletion of personal data that is no longer necessary for the purpose for which it was collected, subject to gb991's legal obligation to retain certain categories of data for defined statutory periods as described in Section 6.
• Right to restriction: you may request that gb991 restrict processing of your data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing based on legitimate interests and that objection is under consideration.
• Right to data portability: where processing is based on your consent or on the performance of a contract, and processing is carried out by automated means, you may request that gb991 provide your personal data in a structured, commonly used, and machine-readable format.
• Right to object: you may object at any time to processing of your personal data based on legitimate interests. gb991 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where the processing is necessary for the establishment, exercise, or defence of legal claims.

gb991 will not charge a fee for handling a data rights request submitted in good faith. Where a request is manifestly unfounded or excessive in scope, gb991 reserves the right to charge a reasonable administrative fee or to decline to act on the request, and will provide written reasons for that decision.

gb991 uses cookies and similar lightweight tracking technologies to operate the platform reliably and to understand how users interact with it. This section explains the types of cookies used, their purposes, and how you can manage them.

Essential Session Cookies

Essential cookies are strictly necessary for the platform to function. They maintain your login session, preserve your account preferences during a browsing session, and protect the platform against certain security threats such as cross-site request forgery. These cookies are temporary and are deleted when you close your browser. They cannot be disabled without preventing the platform from operating correctly.

Analytics Cookies

gb991 uses analytics cookies to collect aggregate, anonymised data about how users navigate and use the platform. This data helps gb991 identify pages that perform well, pages that may have technical issues, and areas of the platform that users find most useful. Analytics data is processed at an aggregate level and is not used to identify individual users. You may opt out of analytics cookies through your browser settings without affecting your ability to use the platform.

Managing Your Cookie Preferences

You can manage or delete cookies at any time through your browser's settings menu. Instructions for managing cookies vary by browser; consult your browser's help documentation for guidance. Please note that disabling essential cookies will prevent the gb991 platform from functioning correctly and you will be unable to log in or use account features. gb991 does not use advertising cookies, cross-site tracking cookies, or social media tracking pixels.

gb991 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL encryption for all data transmitted between user devices and the gb991 platform, restricted internal access to personal data on a need-to-know basis, regular security assessments of platform infrastructure, and secure storage of all personal data on access-controlled servers.

While gb991 takes reasonable and appropriate steps to protect your personal data, no data transmission over the internet or data storage system can be guaranteed to be completely secure. If you become aware of any suspected security vulnerability affecting your gb991 account, please report it to support via live chat immediately. You play an important role in keeping your account secure by maintaining the confidentiality of your login credentials and by not sharing your account access with any third party.

gb991 operates a strict 21+ policy. The platform is not directed at, and must not be used by, any person under the age of 21. gb991 does not knowingly collect or process personal data from individuals under the age of 21. If gb991 becomes aware that personal data has been collected from a person under 21, that data will be deleted promptly and the associated account will be closed. If you are a parent or guardian and believe that a person under your care has registered on gb991, please contact support via live chat immediately so that the account can be reviewed and closed without delay.

gb991 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the platform. The most current version of this Policy will always be available on the gb991 platform. Where a change is material — meaning it meaningfully affects how your data is used or the rights available to you — gb991 will notify active account holders via a notice displayed upon login. Your continued use of the platform following publication of any amendment constitutes your acknowledgement of the revised Policy. We encourage you to review this Policy periodically.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way gb991 handles your personal data, please contact our support team via live chat, available 24 hours a day, seven days a week. For written enquiries, please use the following contact address:

Email: [email protected]