gdb999 Privacy Policy
At gdb999, protecting the personal data of our Bangladesh-based players is a responsibility we take seriously. This Privacy Policy explains precisely what information we collect, how we use it, who we share it with, and how you can exercise your data rights at any time.
Data Minimisation
gdb999 collects only the personal data that is strictly necessary to provide our services, verify player identity, process transactions, and comply with applicable regulations. We do not harvest data beyond what is required for these purposes.
SSL Encryption
All data transmitted between your browser or device and the gdb999 platform is protected using industry-standard TLS/SSL encryption. Your financial details, login credentials, and personal information travel over an encrypted channel at all times.
No Unauthorised Selling
gdb999 does not sell, rent, or trade your personal data to third-party advertisers or data brokers. Your information is shared only with our vetted service partners on a need-to-know basis and under strict data processing agreements.
Your Control
You retain meaningful control over your personal data at gdb999. You may request access to, correction of, or deletion of your data at any time by contacting our support team. Marketing communications can be opted out of directly from your Account Settings.
Transparent Cookie Use
gdb999 uses cookies and similar tracking technologies solely to improve platform performance, remember your preferences, and deliver a consistent experience. Our Cookie Policy section explains each category of cookie in plain language.
Secure Payment Data
Payment method data — including bKash, Nagad, Rocket, and card details — is handled exclusively through our certified payment processing partners. gdb999 does not store raw card numbers or mobile banking PINs on its own servers.
Section 1
Information We Collect
gdb999 collects personal data through several channels: directly from you when you register and use the platform, automatically through your device and browser as you interact with our services, and from trusted third parties such as payment processors and identity verification providers. The categories of data we collect are described below.
Registration & Account Data
When you create a gdb999 account, we collect the following information:
- Full legal name (as shown on your government-issued identity document)
- Date of birth (to verify the 18+ age requirement)
- Email address
- Bangladesh mobile phone number
- Username and hashed password
- Residential address in Bangladesh
- Preferred currency (Bangladeshi Taka, ৳)
Identity Verification (KYC) Data
To comply with anti-money laundering requirements and to confirm player age, gdb999 collects KYC documentation, which may include:
- Scanned or photographed copies of your Bangladesh National Identity Card (NID), passport, or driver's licence
- Proof of residential address (utility bill, bank statement dated within 90 days)
- Proof of payment method ownership (screenshot of bKash/Nagad wallet showing the registered name and number)
Transaction & Financial Data
Every deposit, withdrawal, and wagering activity conducted on the gdb999 platform generates a transaction record. We retain the following financial data:
- Deposit amounts, timestamps, and originating payment method references
- Withdrawal requests, approval statuses, and destination payment method references
- Bonus credits, wagering progress records, and bonus expiry events
- Account balance history and bet settlement records
Raw card numbers and mobile financial service PINs are never stored on gdb999 servers. Payment tokenisation is handled entirely by our PCI-compliant payment processing partners.
Technical & Usage Data
When you access the gdb999 platform, our servers and analytics tools automatically collect certain technical data, including:
- IP address and approximate geolocation derived from IP
- Device type, operating system, and browser version
- Pages visited, time spent on each page, and navigation paths
- Game sessions initiated, game titles played, and session durations
- Referring URL (the site or link that directed you to gdb999)
- Error logs and crash reports
Communications Data
When you contact gdb999 support via live chat, email, or WhatsApp, we retain records of those communications — including the content of messages, timestamps, and the support agent's responses — for quality assurance, dispute resolution, and regulatory compliance purposes.
| Data Category | Collection Method | Legal Basis |
|---|---|---|
| Registration & Account Data | Provided directly by the player at sign-up | Contractual necessity; consent |
| KYC / Identity Documents | Submitted by the player upon withdrawal request | Legal obligation (AML compliance) |
| Transaction & Financial Data | Generated automatically on each transaction | Contractual necessity; legal obligation |
| Technical & Usage Data | Collected automatically via server logs and analytics | Legitimate interest (platform security & improvement) |
| Communications Data | Recorded during support interactions | Legitimate interest (quality assurance; dispute resolution) |
Section 2
How We Use Your Data
gdb999 processes personal data only for the purposes described in this Privacy Policy. We do not use your data in ways that are incompatible with the original purposes for which it was collected. The primary purposes for which gdb999 uses your personal data are as follows:
Account Management & Service Delivery
Your registration and account data enables us to create and maintain your gdb999 player account, authenticate your identity when you log in, process deposits and withdrawals in Bangladeshi Taka (৳), apply bonuses and promotional credits to your account, and deliver customer support when you contact us. Without this data, we cannot provide the core services of the gdb999 platform.
Identity Verification & Regulatory Compliance
gdb999 is required to verify the identity and age of all players before processing withdrawal requests. KYC documents are used exclusively for this purpose and for ongoing anti-money laundering (AML) monitoring. We may also use account data to generate reports required by regulatory bodies or law enforcement authorities where we are legally obliged to do so.
Fraud Prevention & Platform Security
Technical and usage data — including IP addresses, device fingerprints, and behavioural patterns — is analysed to detect and prevent fraudulent activity, bonus abuse, multi-accounting, unauthorised access attempts, and other security threats. This processing is based on our legitimate interest in maintaining a safe and fair platform for all players.
Platform Improvement & Analytics
Aggregated and anonymised usage data helps us understand how players navigate the gdb999 platform, which game categories are most popular among Bangladeshi players, where technical bottlenecks occur, and how we can optimise the overall experience. This analysis never involves decisions made about individual players on the basis of automated profiling alone.
Marketing Communications
With your consent, gdb999 may use your email address and mobile phone number to send you information about promotions, seasonal offers (such as BPL season bonuses, Eid special events, or Pohela Boishakh offers), new game launches, and platform updates. You may withdraw your consent for marketing communications at any time by updating your notification preferences in Account Settings or by contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of processing that occurred before the withdrawal.
Responsible Gaming Monitoring
gdb999 analyses account activity — including deposit frequency, session duration, and wagering patterns — to identify players who may be exhibiting signs of problem gambling behaviour. Where such indicators are detected, gdb999 may reach out proactively to offer responsible gaming tools, or may apply protective account limits in accordance with our Responsible Gaming Policy.
Section 3
Data Sharing & Disclosure
gdb999 does not sell, rent, or trade your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent necessary for the relevant purpose.
Payment Processing Partners
To process deposits and withdrawals, gdb999 shares transaction reference data with our payment processing partners, which include the operators of bKash, Nagad, Rocket, Upay, and our banking and card-network partners (Visa, Mastercard, and affiliated banks including Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank). These partners receive only the minimum data required to execute the transaction and are contractually prohibited from using that data for any other purpose.
Identity Verification & KYC Providers
gdb999 uses third-party identity verification technology to assist in the review of KYC documents. These providers process identity document images and biometric comparison data under strict data processing agreements with gdb999 and are not permitted to retain your data beyond the period required to complete the verification task.
Game Content Providers
Games on the gdb999 platform are provided by licensed third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. These providers may receive a player session token and anonymised session data for the purpose of rendering the game and recording game outcomes. They do not receive your full name, identity documents, or financial account details.
Legal & Regulatory Disclosure
gdb999 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where we are required to do so by applicable law, court order, or regulatory directive. In such cases, gdb999 will disclose only the minimum data required to satisfy the legal obligation and will, where legally permissible, notify the affected player of the disclosure.
Business Transfers
In the event that gdb999 undergoes a merger, acquisition, or sale of all or a substantial portion of its assets, player data may be transferred to the acquiring entity as part of the transaction. In such circumstances, gdb999 will provide advance notice to registered players via email and will ensure that the acquiring entity assumes equivalent data protection obligations.
Section 4
Cookies & Tracking Technologies
gdb999 uses cookies, local storage, and similar tracking technologies to deliver a functional, personalised, and secure experience on the platform. A cookie is a small text file placed on your device by our web server when you visit gdb999.net. Cookies do not contain executable code and cannot access other files stored on your device.
Categories of Cookies We Use
| Cookie Type | Purpose | Duration | Can Be Disabled? |
|---|---|---|---|
| Strictly Necessary | Session authentication, CSRF protection, load balancing, maintaining your logged-in state | Session / up to 24 hours | No — required for platform to function |
| Functional | Remembering language preference, game lobby layout, responsible gaming limits you have set | Up to 12 months | Yes — disabling may reduce personalisation |
| Analytics | Measuring page visits, session durations, and feature usage to improve platform performance | Up to 24 months | Yes — opt out via Account Settings |
| Security | Fraud detection, bot detection, device fingerprinting for multi-account detection | Up to 12 months | No — required for account security |
Managing Your Cookie Preferences
You may manage non-essential cookies at any time through the Privacy section of your gdb999 Account Settings. You may also configure your browser to block or delete cookies; however, disabling strictly necessary or security cookies may prevent you from logging in or using core platform features. Please note that browser-level cookie blocking does not affect server-side session tokens used for authentication.
gdb999 does not use third-party advertising cookies or place retargeting pixels on behalf of external advertisers. Any analytics tools deployed on the platform process data in an aggregated, anonymised form and are configured to respect user opt-out signals.
Section 5
Data Retention
gdb999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | AML regulatory requirement; dispute resolution |
| KYC identity documents | Duration of account + 5 years after closure | Legal obligation under AML best practices |
| Transaction records | 7 years from transaction date | Financial record-keeping; tax and audit compliance |
| Support communications | 3 years from last interaction | Dispute resolution; quality assurance |
| Technical & usage logs | 13 months on a rolling basis | Security monitoring; platform analytics |
| Marketing consent records | Until consent is withdrawn + 1 year | Evidence of lawful marketing basis |
Upon expiry of the applicable retention period, personal data is either securely deleted from gdb999 systems or irreversibly anonymised so that it can no longer be associated with any identifiable individual. Data that has been anonymised may be retained indefinitely for statistical and analytical purposes.
Where a player submits a data deletion request and no overriding legal retention obligation applies, gdb999 will complete the deletion within 30 calendar days of receiving the verified request and will confirm the outcome to the requesting player by email.
Section 6
Data Security
gdb999 implements a multi-layered security architecture to protect the personal and financial data of all players. Our security programme encompasses technical controls, organisational policies, and ongoing monitoring activities as described below.
Technical Security Controls
- TLS/SSL encryption: All data in transit between your device and gdb999 servers is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained by a trusted Certificate Authority and is renewed well in advance of expiry.
- Password hashing: Player passwords are never stored in plaintext. They are stored as salted cryptographic hashes using a current industry-standard algorithm. Even gdb999 staff cannot retrieve your password — only a reset can be initiated.
- Two-factor authentication (2FA): gdb999 supports 2FA for all player accounts. Players who enable 2FA benefit from an additional layer of protection against unauthorised login attempts.
- Database encryption: Sensitive data fields — including identity document references and payment method tokens — are encrypted at rest within our database infrastructure.
- Intrusion detection: Our platform is monitored 24/7 by automated intrusion detection and anomaly alerting systems. Unusual access patterns trigger immediate investigation by our security team.
- Regular penetration testing: gdb999 commissions periodic third-party penetration tests to identify and remediate potential vulnerabilities in our platform before they can be exploited.
Organisational Security Measures
Access to player personal data within gdb999 is restricted on a strict need-to-know basis. Staff members are granted the minimum level of data access required to perform their job function. All staff with access to personal data undergo mandatory data protection training at onboarding and annually thereafter. Access privileges are reviewed quarterly and revoked immediately upon termination of employment or change of role.
Incident Response
In the event of a data security incident that poses a risk to the rights and freedoms of our players, gdb999 will take immediate containment and remediation steps and will notify affected players without undue delay. Notifications will be sent to the email address registered on the affected account and will include a clear description of the nature of the incident, the data categories affected, the steps gdb999 has taken in response, and the steps we recommend affected players take to protect themselves.
Section 7
Your Privacy Rights
gdb999 respects your rights as a data subject and is committed to honouring those rights in a timely and transparent manner. The following rights are available to all registered players and, where applicable, to unregistered visitors of gdb999.net:
Right of Access
You have the right to request a copy of the personal data that gdb999 holds about you. Upon receiving a verified access request, gdb999 will provide a structured summary of your data in a commonly used electronic format within 30 calendar days. There is no fee for a standard access request. Where requests are manifestly excessive or repetitive, gdb999 reserves the right to charge a reasonable administrative fee or decline to respond, with written reasons provided.
Right to Rectification
If any personal data held by gdb999 about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating your contact email or phone number) can be made directly within Account Settings. For corrections to KYC data, you must contact our support team and provide updated supporting documentation.
Right to Erasure
You may request that gdb999 delete your personal data where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and there is no other legal basis for processing; or (c) you object to processing based on legitimate interests and gdb999 cannot demonstrate an overriding legitimate ground. Where a legal retention obligation applies (such as AML requirements for transaction records), gdb999 may be unable to fulfil an erasure request in full and will inform you of the specific data categories that must be retained and the applicable legal basis.
Right to Restriction
You may request that gdb999 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being verified, or where you have objected to processing and a determination is pending. During a restriction period, gdb999 will continue to store the data but will not process it for any other purpose without your consent.
Right to Object to Marketing
You have an absolute right to object to the processing of your personal data for direct marketing purposes at any time. You may exercise this right by updating your notification preferences in Account Settings or by contacting support. gdb999 will action all marketing opt-out requests within 5 business days.
How to Submit a Privacy Request
To exercise any of the rights described above, please contact the gdb999 Data Protection team by emailing [email protected] with the subject line "Privacy Request — [Your Username]". To protect your privacy, we will verify your identity before processing any request. Please allow up to 30 calendar days for a response, though we aim to resolve all requests as quickly as possible.
Section 8
Policy Updates & Contact
gdb999 reviews this Privacy Policy on a regular basis and may update it to reflect changes in our data practices, new service features, changes in applicable law, or feedback received from players. The effective date at the top of this page will be updated whenever a material change is made.
Where a change to this Privacy Policy materially affects the way gdb999 processes your personal data, we will notify registered players by email to the address associated with their account and by displaying a prominent in-platform notification when they next log in. For minor clarifications or corrections that do not change the substance of how your data is processed, we may update the page without specific notice, though the effective date will always reflect the latest revision.
Your continued use of the gdb999 platform following the effective date of any update to this Privacy Policy constitutes your acknowledgement of the revised policy. If you do not agree with any update, you may request voluntary account closure in accordance with the Account Suspension & Closure section of the gdb999 Terms & Conditions.
Contact & Data Protection Enquiries
For any questions, concerns, or requests related to this Privacy Policy or to the handling of your personal data by gdb999, please contact our support team. We are available 24 hours a day, 7 days a week, via live chat on the platform. For formal data protection requests, please use email so that a written record is maintained:
- Email: [email protected] (plain text — not a clickable link)
- Live Chat: Available 24/7 directly within the gdb999 platform
- WhatsApp: +880 1700-000000 (available 08:00–00:00 BST)
We aim to respond to all privacy-related email enquiries within one business day (Bangladesh Standard Time, UTC+6). For formal data subject requests, the statutory response period is 30 calendar days from verified identity confirmation.
Questions About Your Privacy? We Are Here
Our support team is available around the clock to answer any questions about your data, your account, or your experience on gdb999. You can also explore our FAQ for quick answers.
Visit Our FAQ Terms & Conditions Responsible Gaming18+ Please gamble responsibly. Terms and conditions apply to all promotions.