gb993 Privacy Policy —
How We Protect Your Data
At gb993, your privacy is treated as a fundamental obligation, not an afterthought. This Privacy Policy explains in plain English exactly what personal data we collect, why we collect it, how it is stored and protected, and the rights you hold over your own information.
All personal data held by gb993 is stored on servers protected by industry-standard AES-256 encryption. Access to stored data is restricted to authorised gb993 personnel on a strict need-to-know basis.
gb993 does not sell, rent, or trade your personal data to third parties for marketing purposes. Your information is used solely to deliver and improve our services to you as a gb993 player.
Identity verification documents you submit during the KYC process are used exclusively for age verification, fraud prevention, and anti-money-laundering compliance. They are never used for profiling or marketing.
Every page of gb993 is served over HTTPS with a valid SSL certificate. Data transmitted between your device and the gb993 platform — including login credentials and payment details — is encrypted in transit.
You have the right to access, correct, export, and request deletion of your personal data at any time. gb993 is committed to responding to all data rights requests within 10 business days of receipt.
gb993 uses cookies strictly for session management, analytics, and fraud detection. We do not use third-party advertising cookies. Our full cookie policy is detailed in this document under the Cookies section.
Data We Collect
gb993 collects personal data only to the extent necessary to provide a safe, compliant, and personalised gaming experience for players in Bangladesh.
Registration Data: When you create a gb993 account, we collect your full legal name, date of birth, mobile telephone number, residential address, and — where provided — your email address. This information is required to verify your identity, comply with age-restriction rules, and process financial transactions in your name.
Identity Verification (KYC) Data: As part of our Know Your Customer process, we may collect scanned or photographed copies of government-issued identity documents, including National Identity Cards (NID), passports, and birth certificates. Where address verification is required, we may also request utility bills, bank statements, or equivalent documentary proof of your residential address in Bangladesh.
Financial Data: gb993 collects the mobile wallet numbers or bank account identifiers associated with the payment methods you use on the platform — including bKash, Nagad, Rocket, Upay, and linked bank accounts. We do not store full card numbers or mobile banking PINs. Financial data is collected solely to process deposits and withdrawals in BDT and to detect suspicious transaction patterns.
Technical and Device Data: We automatically collect certain technical data when you visit or use gb993, including your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, language preference, and time zone. This data is collected via server logs and browser-based analytics and is used for fraud detection, service optimisation, and security monitoring.
Gameplay and Betting Data: gb993 retains a full record of your game sessions, bet histories, sports wagering activity, bonus opt-ins, wagering progress, and account balance changes. This data is required for dispute resolution, responsible gaming monitoring, and regulatory compliance.
Communications Data: When you contact gb993 via live chat, email, or any other support channel, we record the content of that communication together with any attachments you provide. This data is retained for quality assurance, staff training, and dispute resolution purposes.
| Data Category | Examples |
|---|---|
| Registration | Name, DOB, mobile, address |
| KYC Documents | NID, passport, utility bill |
| Financial | bKash number, bank account ID |
| Technical | IP address, device type, browser |
| Gameplay | Bet history, session logs, balance |
| Communications | Support chat logs, email threads |
| Cookies | Session tokens, analytics identifiers |
How We Use Your Data
gb993 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your express consent or being required to do so by applicable law.
- Account Management: To create and maintain your gb993 player account, authenticate your identity at login, manage your account settings, and communicate important account-related updates to you.
- Age and Identity Verification: To confirm that you are at least 18 years of age and that you are who you claim to be, in compliance with our age-restriction obligations and anti-fraud policies.
- Transaction Processing: To process deposits and withdrawals in BDT through your registered payment methods (bKash, Nagad, Rocket, Upay, or linked bank accounts), and to maintain accurate financial records for each transaction.
- Responsible Gaming Monitoring: To identify unusual patterns of play that may indicate problem gambling behaviour, and to implement responsible gaming tools such as deposit limits, session reminders, and self-exclusion where requested or required.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other security threats to the gb993 platform and its players.
- Customer Support: To respond to your enquiries, resolve disputes, and provide assistance through our 24/7 support team.
- Promotions and Bonuses: To determine your eligibility for bonuses and promotions, credit qualifying bonuses to your account, and communicate promotional offers to you — where you have not opted out of marketing communications.
- Platform Improvement: To analyse aggregate usage patterns, game performance metrics, and technical logs in order to improve the gb993 platform, fix bugs, and develop new features.
- Legal Compliance: To comply with any legal obligation imposed on gb993 by applicable law, including obligations to retain transaction records, respond to lawful requests from competent authorities, and report suspicious financial activity.
Data Sharing
gb993 does not sell, rent, or license your personal data to third parties for their own commercial purposes. We share personal data with external parties only in the specific, limited circumstances described below.
Payment Processors: When you make a deposit or request a withdrawal, gb993 shares the minimum necessary financial identifiers with the relevant payment service provider — such as bKash, Nagad, Rocket, Upay, or a partner bank — to execute the transaction. These providers process your payment data under their own privacy frameworks, which you should review independently.
Game Content Providers: gb993 sources casino games and live dealer content from third-party studio providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a session token and limited technical identifiers to authenticate your game session. They do not receive your full name, payment details, or identity documents.
KYC and Fraud Prevention Partners: gb993 may use third-party identity verification services to cross-reference the documents you submit during KYC against publicly available databases for authenticity checking. These partners are bound by strict data processing agreements and may not retain or use your documents beyond the verification purpose.
Legal and Regulatory Disclosure: gb993 may disclose your personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or regulatory direction. We will notify you of such disclosure where legally permitted to do so.
Business Transfers: In the event that gb993 undergoes a merger, acquisition, or sale of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to this Privacy Policy that may result from it.
| Recipient Category | Data Shared |
|---|---|
| Payment Providers | Wallet/account ID, transaction amount |
| Game Studios | Session token, technical identifiers |
| KYC Partners | ID documents (verification only) |
| Analytics Tools | Anonymised usage data |
| Legal Authorities | As required by law |
Data Retention
gb993 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal and regulatory obligations, whichever is the longer period.
Active Accounts: While your gb993 account remains open and active, all registration data, financial records, gameplay histories, and communications data are retained in full. This data is necessary to provide the service, process transactions, resolve disputes, and comply with anti-money-laundering record-keeping obligations.
Closed Accounts: Upon account closure — whether initiated by you or by gb993 — your personal data is not immediately deleted. gb993 retains transaction records and identity documents for a minimum of five years following account closure to comply with financial crime legislation and to defend against any legal claims that may arise from the account's history.
KYC Documents: Identity verification documents are retained for a minimum of five years from the date of submission. Where a document was submitted in connection with an account that was found to be fraudulent or linked to financial crime, gb993 may retain that document for a longer period as required by applicable law or ongoing investigation.
Support Communications: Customer support chat logs and email correspondence are retained for a minimum of two years from the date of the last message in the conversation thread, to support dispute resolution and staff quality assurance processes.
Anonymised Analytics Data: Aggregated, anonymised analytics data that cannot reasonably be linked back to an individual player may be retained indefinitely for the purpose of long-term platform performance analysis and product development.
When a retention period expires and no legal obligation requires continued storage, gb993 will securely delete or anonymise the relevant personal data so that it can no longer be attributed to you as an identifiable individual.
| Data Type | Retention Period |
|---|---|
| Registration & Account Data | Duration of account + 5 years |
| Transaction Records | Minimum 5 years post-closure |
| KYC / Identity Documents | Minimum 5 years post-submission |
| Gameplay & Bet History | Duration of account + 5 years |
| Support Communications | 2 years from last message |
| Analytics Data (anonymised) | Indefinite (non-personal) |
| Marketing Consent Records | Until withdrawal + 1 year |
Data Security
gb993 applies a layered security model to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. The following technical and organisational measures are in place at all times.
Encryption in Transit: All data transmitted between your device and the gb993 platform is protected by TLS 1.2 or higher. Our SSL certificate is maintained on every page and subdomain of gb993.net, including payment pages, login screens, and account management areas.
Encryption at Rest: Personal data stored in gb993 databases is encrypted at rest using AES-256 encryption. Database access requires multi-factor authentication and is restricted to a small number of authorised backend personnel.
Access Controls: gb993 operates a principle of least privilege for internal data access. Staff members have access only to the categories of personal data required to perform their specific job function. Access logs are maintained and reviewed regularly. Former staff access credentials are revoked immediately upon termination of employment.
Penetration Testing and Audits: gb993 engages independent security professionals to conduct periodic penetration tests and security audits of the platform infrastructure. Findings from these tests are addressed in order of severity with defined remediation timelines.
Incident Response: In the event of a data security incident that may affect your personal data, gb993 will notify affected players without undue delay and will take immediate steps to contain the breach, assess its scope, and implement remedial measures. gb993 will cooperate with any competent authority investigating the incident.
Your Responsibilities: The security of your gb993 account also depends on the strength and confidentiality of your login credentials. We strongly recommend using a unique, complex password for your gb993 account and not sharing your login details with any other person. gb993 cannot be held liable for security breaches that result from your failure to maintain the confidentiality of your credentials.
- TLS 1.2+ encryption on all data in transit across every page of gb993.net.
- AES-256 encryption for all personal data stored in gb993 databases.
- Multi-factor authentication required for all internal staff database access.
- Principle of least privilege — staff access only what their role requires.
- Periodic penetration testing conducted by independent security professionals.
- Access logs maintained and reviewed to detect anomalous internal access patterns.
- Incident response plan in place — affected players notified without undue delay.
- Immediate credential revocation for all departing staff members upon termination.
Your Privacy Rights
As a gb993 player, you hold the following rights over the personal data we hold about you. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Rights Request".
You may request a copy of all personal data gb993 holds about you. We will provide this within 10 business days in a readable format.
If any personal data gb993 holds about you is inaccurate or incomplete, you may request that we correct it. Corrections are processed within 5 business days.
You may request deletion of your personal data. Note that legal retention obligations may prevent full deletion of certain data categories such as transaction records.
You may request that gb993 restrict its processing of your data — for example, while a dispute about accuracy is being resolved — without requesting full deletion.
You may request that gb993 provide your personal data in a structured, machine-readable format so that you can transfer it to another service provider if you choose.
You may object to gb993's processing of your personal data where that processing is based on legitimate interests, including processing for direct marketing purposes.
Contact & Complaints
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way gb993 handles your personal data, please contact us in the first instance through the following channel:
Privacy Support Email: [email protected] — please use the subject line "Privacy Policy Enquiry" or "Privacy Rights Request" so that your message reaches the correct team promptly.
gb993 aims to acknowledge all privacy-related enquiries within 2 business days and to resolve them fully within 10 business days. Where a request is complex or involves a large volume of data, we will notify you of the extended timeline within the initial 2-day acknowledgement period.
Complaints: If you believe that gb993 has handled your personal data in a manner that violates this Privacy Policy or applicable data protection principles, you have the right to lodge a formal complaint. Please submit your complaint in writing to [email protected] with the subject line "Formal Privacy Complaint". gb993 will investigate your complaint thoroughly and provide a written response within 15 business days of receipt.
Policy Updates: gb993 reserves the right to amend this Privacy Policy at any time. When material changes are made, we will notify registered players by posting a prominent notice on the gb993 platform and, where appropriate, by sending a notification to your registered contact details. Continued use of the gb993 platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed of how we protect your data.
Governing Language: This Privacy Policy is written in English. In the event of any conflict between this English-language version and any translation, the English-language version shall prevail.
Effective Date: This Privacy Policy is effective as of 1 January 2026 and supersedes all prior versions published by gb993.
Email: [email protected]
Subject: "Privacy Policy Enquiry" or "Privacy Rights Request"
Response time: Within 2 business days (acknowledgement), 10 business days (resolution).
Ready to Play at gb993?
Now that you know how gb993 protects your privacy, explore our full range of games — cricket betting, live casino, slots, and more — all in BDT with bKash and Nagad support.