gb993 Privacy Policy — How We Protect Your Personal Data

This Privacy Policy describes how gb993 ("we", "us", "our", or the "Company") collects, uses, stores, discloses, and protects the personal information of individuals ("you", "your", or the "Player") who access and use the gb993 online casino and sports betting platform available at gb993.io (the "Platform").

This policy applies to all personal data collected through the Platform, including data provided during account registration, identity verification, deposit and withdrawal transactions, gameplay activity, customer support interactions, and any voluntary correspondence you initiate with gb993.

By creating a gb993 account, making a deposit, placing a wager, or otherwise using any feature of the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this policy, you must discontinue use of the Platform immediately.

gb993 is committed to handling personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. We review and update this policy periodically to reflect changes in our practices or applicable standards. The effective date at the top of this document indicates the version currently in force.

For the purposes of this Privacy Policy, gb993 acts as the data controller in respect of the personal data collected from players registered on the Platform. As data controller, gb993 determines the purposes and means by which your personal data is processed.

All data-related enquiries, subject access requests, correction requests, and deletion requests should be directed to the gb993 data team via the contact details provided in Section 13 of this policy. gb993 endeavours to respond to all legitimate data requests within thirty (30) days of receipt.

gb993 collects the following categories of personal data, depending on the nature of your interaction with the Platform:

Data Category	Examples	Collection Method
Identity Data	Full name, date of birth, National ID number, passport number, photograph	Registration form, KYC verification upload
Contact Data	Mobile number, email address, residential address (Dhaka, Chittagong, Sylhet, etc.)	Registration form, account settings
Financial Data	bKash / Nagad / Rocket / Upay account reference, bank account details (partial), transaction history	Deposit and withdrawal forms, payment processors
Technical Data	IP address, device type, operating system, browser type, session timestamps	Automatically collected on Platform access
Usage Data	Games played, bet amounts, wager history, login frequency, session duration	Automatically logged during gameplay and account activity
Communications Data	Support chat transcripts, email correspondence, complaint records	Live chat, email, and support ticket system
Marketing Preferences	Opt-in or opt-out status for promotional emails, SMS alerts, platform notifications	Registration preferences, account settings updates

gb993 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data, except where disclosure of health-related information is voluntarily provided by a player in the context of a responsible gaming support request.

gb993 uses the personal data we collect for the following purposes:

• Account management: Creating, maintaining, and securing your gb993 player account, including authentication and access control.
• Identity verification (KYC): Verifying your identity and age to comply with our 21+ policy and to meet anti-money laundering (AML) and fraud prevention obligations.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other supported payment methods.
• Service delivery: Providing access to casino games, sports betting markets, live dealer games, slots, and all other Platform features.
• Customer support: Responding to your queries, complaints, and support requests through our 24/7 support channels.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, account abuse, money laundering, and other unlawful conduct on the Platform.
• Responsible gaming compliance: Monitoring gameplay patterns to identify potential problem gambling behaviour and applying responsible gaming tools where appropriate.
• Legal compliance: Meeting obligations imposed by applicable laws and regulations, including record-keeping, reporting, and cooperation with lawful authority requests.
• Marketing communications: Sending promotional offers, bonus notifications, and Platform updates to players who have opted in to receive such communications.
• Platform improvement: Analysing aggregated and anonymised usage data to improve the gb993 user experience, game offerings, and Platform performance.

gb993 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and gb993, including account creation, payment processing, and service delivery. Without this processing, gb993 cannot provide the Platform to you.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including identity verification, AML record-keeping, and cooperation with law enforcement authorities.
• Legitimate interests: Processing carried out in pursuit of gb993's legitimate business interests — such as fraud prevention, platform security, and service improvement — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent, primarily in the context of marketing communications. You may withdraw consent for consent-based processing at any time without affecting the lawfulness of processing carried out before withdrawal.

gb993 does not sell, rent, or trade your personal data. We share personal data with the following categories of third-party service providers only where necessary for the operation of the Platform:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and their respective technical intermediaries, for the purpose of processing deposits and withdrawals.
• Identity verification providers: Third-party KYC and age verification services used to confirm player identity and age in compliance with our 21+ policy.
• Fraud and AML screening services: Providers who assist gb993 in detecting suspicious activity, monitoring transaction patterns, and meeting anti-money laundering obligations.
• Game technology providers: Software suppliers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others, who receive the minimum data necessary to deliver their games to authenticated players.
• Customer support platforms: Third-party live chat and ticketing infrastructure providers who process support interaction data on gb993's behalf.
• Legal and regulatory authorities: Where gb993 is required by law, court order, or regulatory directive to disclose personal data to competent authorities.

All third-party data processors engaged by gb993 are bound by contractual obligations to process personal data only on gb993's instructions, to implement appropriate security measures, and to handle data in a manner consistent with this Privacy Policy.

gb993 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• SSL/TLS encryption: All data transmitted between your device and gb993 is encrypted using current industry-standard TLS protocols. HTTPS is enforced across every page of the Platform.
• Data-at-rest encryption: Sensitive personal data stored on gb993 servers is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data within gb993 is restricted on a strict need-to-know basis. Staff members are granted access only to the data required to perform their specific role.
• Secure password storage: Player passwords are stored using one-way cryptographic hashing with salting. gb993 cannot retrieve your plaintext password and will never ask you to share it.
• Two-factor authentication: gb993 supports additional authentication measures for player accounts to reduce the risk of unauthorised access.
• Regular security reviews: gb993's Platform and infrastructure undergo periodic security assessments to identify and remediate potential vulnerabilities.

No system is entirely immune to security risks. In the event of a data breach that is likely to result in a significant risk to your rights or interests, gb993 will notify affected players promptly and take all reasonable steps to mitigate the impact of the breach.

gb993 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the following considerations:

• Active accounts: Personal data is retained for the full duration of your gb993 account and for a defined period following account closure.
• Transaction and financial records: Deposit, withdrawal, and wagering transaction records are retained for a minimum of five (5) years following the transaction date, in line with standard AML compliance obligations.
• Identity verification documents: KYC documents are retained for the period required by applicable anti-money laundering and identity verification standards.
• Support communications: Customer support correspondence is retained for a period of three (3) years from the date of the most recent interaction, to facilitate resolution of any subsequent disputes.
• Marketing data: Marketing preference data and opt-in records are retained until you withdraw consent or request deletion, after which they are purged from active systems.

Once the applicable retention period expires, personal data is securely deleted or permanently anonymised so that it can no longer be associated with an identifiable individual.

As a player whose personal data is processed by gb993, you hold the following rights in respect of your personal information:

• Right of access: You may request a copy of the personal data gb993 holds about you. gb993 will provide this information in a clear, structured format within a reasonable timeframe.
• Right to rectification: You may request that gb993 correct any inaccurate or incomplete personal data held in your account record.
• Right to erasure: In certain circumstances, you may request the deletion of your personal data. This right is subject to limitations where gb993 is required to retain data to comply with legal obligations or to defend against legal claims.
• Right to restrict processing: You may request that gb993 limit the processing of your personal data in specific circumstances, such as where you contest the accuracy of the data held.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that gb993 provide your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.
• Right to object: You may object to processing of your personal data based on gb993's legitimate interests, including profiling for marketing purposes.

To exercise any of the above rights, submit a written request to the gb993 data team at the email address provided in Section 13. gb993 will respond within thirty (30) days and may request identity verification before processing your request.

gb993 uses cookies and similar tracking technologies on the Platform to enhance your browsing experience, maintain session integrity, and gather aggregated analytics data. The following categories of cookies may be set when you access gb993.io:

• Strictly necessary cookies: Essential for the Platform to function. These cookies enable core features such as account login sessions, security tokens, and shopping cart equivalents for pending transactions. They cannot be disabled without impairing Platform functionality.
• Performance and analytics cookies: Used to collect aggregated, anonymised data about how players use the Platform — including which pages are visited most frequently and how long sessions last. This information helps gb993 improve the Platform experience over time.
• Functional cookies: Enable the Platform to remember your preferences, such as language selection or display settings, to personalise your experience on return visits.
• Marketing cookies: Used to deliver relevant promotional content and to measure the effectiveness of gb993's marketing activities. These cookies are only set with your consent.

You may manage or restrict cookie placement through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use core Platform features including account login. Your cookie preferences for non-essential cookies can be updated at any time.

gb993 is strictly an adult platform intended for players aged 21 and above. gb993 does not knowingly collect personal data from individuals under the age of 21. The Platform implements a mandatory age verification process at registration, and all accounts are subject to ongoing age verification checks.

If gb993 discovers that personal data has been collected from a player who is under 21 years of age, the relevant account will be suspended immediately, all associated funds will be held pending review, and the personal data will be handled in accordance with applicable policies and legal obligations. Parents or guardians who believe that a minor has registered a gb993 account should contact support immediately at the address in Section 13.

gb993 encourages all adults in Bangladesh to make use of parental control software and internet filtering tools to prevent minors from accessing online gambling platforms.

gb993 may update this Privacy Policy from time to time to reflect changes in our data processing practices, the services we offer, or applicable legal and regulatory requirements. When we make material changes, we will update the effective date shown at the top of this document and, where the changes are significant, notify registered players via their registered email address or mobile number.

Your continued use of the gb993 Platform following the publication of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you must cease using the Platform and contact gb993 support to request account closure and deletion of your personal data where applicable.

We recommend that you review this Privacy Policy periodically to stay informed about how gb993 protects your personal information.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data gb993 holds about you — including subject access requests, correction requests, deletion requests, or marketing opt-out requests — please contact the gb993 data team using the following details:

• Email: [email protected]
• Response time: gb993 endeavours to respond to all data-related requests within thirty (30) calendar days of receipt.
• Identity verification: To protect player privacy, gb993 may require you to verify your identity before processing any data request. You will be asked to provide information consistent with the identity details held on your account.

For general account support, game-related queries, deposit or withdrawal assistance, and responsible gaming tools, gb993's 24/7 support team is available via the support email address above. Please include your registered mobile number or username in all correspondence to help us locate your account and respond efficiently.