gtb99 Privacy Policy — How We Handle Your Personal Data

This Privacy Policy ("Policy") applies to gtb99 ("the Platform", "we", "us", "our") and governs the collection, use, storage and disclosure of personal data relating to users ("you", "your") who access or use the services available at gtb99.app. By registering an account or using any part of the Platform, you confirm that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein.

gtb99 is committed to protecting the privacy and security of its users' personal information. This Policy is intended to be read alongside our Terms and Conditions. If there is any conflict between this Policy and the Terms and Conditions regarding privacy matters, this Policy shall take precedence. We encourage you to read this Policy carefully and to contact us if you have any questions.

We collect personal information that you provide to us directly and information that is generated automatically when you use the Platform. Specifically, we may collect the following categories of information:

• Registration information: your mobile phone number, chosen username, date of birth, and any other details you provide when creating your gtb99 account.
• KYC (Know Your Customer) documents: National Identity Card (NID), passport, or other government-issued identification documents submitted for identity verification, together with any supporting selfie or liveness-check images.
• Financial transaction records: deposit and withdrawal history including payment method reference numbers for bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa and Mastercard transactions.
• Gaming activity data: bets placed, games played, game outcomes, bonus usage, session start and end times, and any responsible gaming limit settings you configure.
• Technical and device data: IP address, device identifier, browser type and version, operating system, screen resolution, referring URL, pages visited within the Platform and clickstream data.

We do not intentionally collect sensitive personal data beyond what is necessary for account registration, identity verification and fraud prevention. We do not collect biometric data, health information or political opinions. If you contact our support team by email, the content of your communications with us will also be retained for as long as necessary to resolve your query and for quality assurance purposes.

gtb99 uses the personal data we collect for the following purposes. We will only use your personal data where we have a lawful basis to do so, as described in Section 4 of this Policy.

• To create and manage your account, verify your identity and authenticate your access to the Platform.
• To process deposits and withdrawals, verify payment method ownership and maintain accurate financial records.
• To provide customer support, respond to account enquiries and resolve disputes or complaints.
• To monitor gaming activity for responsible gaming compliance, detect signs of problem gambling and apply player-requested limits such as deposit caps, session time reminders and self-exclusion periods.
• To detect and prevent fraud, money laundering, bonus abuse and other prohibited activities, and to comply with anti-money-laundering (AML) and Know Your Customer (KYC) obligations.
• To improve and personalise the Platform experience, analyse usage trends and optimise platform performance, including game recommendation and promotional relevance.

gtb99 processes your personal data only where a valid legal basis exists. The primary legal bases on which we rely are as follows:

• Contractual necessity: Processing required to deliver the services you have signed up for, including account management, payment processing and the provision of games.
• Legal obligation: Processing necessary to comply with applicable laws and regulations, including AML/KYC requirements, fraud prevention obligations and responsible gaming mandates.
• Legitimate interests: Processing carried out for the purposes of fraud detection, platform security, abuse prevention and service improvement, where those interests are not overridden by your rights and freedoms.
• Consent: For certain non-essential data uses, such as optional marketing communications, we will seek your explicit consent. You may withdraw your consent at any time by contacting us at [email protected].

gtb99 does not sell, rent or trade your personal data to any third party. We may, however, share your personal data in the following limited and specific circumstances:

• Service providers and processors: Third-party vendors who provide services on our behalf, such as payment processing (bKash, Nagad), identity verification, fraud detection analytics and cloud infrastructure. These providers are bound by data processing agreements and are not permitted to use your data for their own purposes.
• Game content providers: Licensed game studios and data feed providers (e.g. Pragmatic Play, Evolution Gaming) may receive session and stake data necessary to deliver the game experience. They operate under their own privacy frameworks.
• Legal and regulatory authorities: Where required by applicable law, court order or government authority, we may be required to disclose personal data. We will only do so to the extent required and will notify you where legally permissible.
• Fraud prevention and security partners: Where necessary to detect, investigate or prevent fraud, financial crime or security breaches, we may share relevant data with specialist fraud prevention services.

In the event of a business restructure, merger or acquisition involving gtb99, your personal data may be transferred to the successor entity, subject to the same or equivalent privacy protections. We will notify you of any such transfer where legally required to do so.

gtb99 uses cookies and similar tracking technologies to operate the Platform, remember your preferences and analyse how the Platform is used. The types of cookies we use include:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, anti-CSRF tokens, and load-balancing cookies. Without these, core features such as login, account access and payment processing would not work.
• Functional cookies: Used to remember your language preferences, display settings and previous session state so that you do not need to reconfigure your preferences each time you visit.
• Analytics cookies: Used to understand how users interact with the Platform, which pages are most visited, how long sessions last and where users encounter difficulties. This data is aggregated and anonym ised and helps us improve the Platform experience.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies will impair core Platform functionality. As the Platform is delivered as a mobile web application, some device-level storage mechanisms (such as localStorage) may also be used in place of or alongside cookies for session management purposes.

gtb99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting and reporting obligations. The following general retention periods apply: account and identity data is retained for the duration of your active account and for a minimum of five (5) years following account closure; financial transaction records are retained for a minimum of five (5) years in line with standard financial record-keeping requirements; gaming activity logs are retained for two (2) years from the date of the activity; support communications are retained for two (2) years from the date of the last interaction.

Where personal data is no longer needed and no legal obligation requires its continued retention, gtb99 will securely delete or anonymise the data. Anonymised, aggregated data that can no longer be linked to an individual may be retained indefinitely for statistical and product improvement purposes.

gtb99 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss or destruction. These measures include SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data stored at rest, role-based access controls limiting data access to authorised personnel only, firewalls and intrusion detection systems, regular security audits and penetration testing, and secure coding practices applied during Platform development and updates.

While we take all reasonable steps to safeguard your data, no method of internet transmission or electronic storage is completely secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and will take all reasonable steps to mitigate the impact of the breach.

gtb99 is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If you are a parent or guardian and believe that a minor has registered an account or submitted personal data to gtb99, please contact us immediately at [email protected]. We will investigate and, where confirmed, delete the minor's account and all associated personal data without delay. gtb99 encourages parents and guardians to make use of parental control software on any shared device that may be used by minors.

gtb99 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or Platform functionality. When we make material changes, we will update the effective date shown at the top of this page. We encourage you to review this Policy periodically. Where changes are significant, we may also notify registered users via their account contact details. Your continued use of the Platform after any update constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you should stop using the Platform and may request account closure by contacting [email protected].

If you have any questions, concerns or requests relating to this Privacy Policy or to the way in which gtb99 handles your personal data, please contact our dedicated support team. We are committed to addressing all privacy-related enquiries promptly and in accordance with applicable data protection principles. Our support team is available 24 hours a day, 7 days a week.

Contact email: [email protected]