Privacy Policy

1. Introduction

gb98 ("gb98", "we", "us", or "our") is committed to protecting the privacy and personal data of every player who uses our online casino and sports betting platform. This Privacy Policy describes how gb98 collects, uses, stores, shares, and protects personal information in connection with your use of the gb98 website, mobile-optimised pages, and all associated services (collectively, the "Platform").

By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. This Privacy Policy should be read alongside the gb98 Terms and Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2. Information We Collect

gb98 collects personal information that you provide directly when creating an account, completing KYC verification, making deposits, or contacting customer support. We may also collect information automatically when you interact with the Platform. The categories of personal data we collect include:

• Identity data: full legal name, date of birth, national identification number, and copies of government-issued identification documents submitted for KYC verification.
• Contact data: mobile phone number, email address, and mailing address where provided during registration or account management.
• Financial data: payment method details (bKash account number, Nagad account, Rocket account, or bank account reference numbers), transaction history, deposit and withdrawal records.
• Technical data: IP address, browser type and version, device type, operating system, session data, and referring URLs collected automatically when you access the Platform.
• Gameplay data: betting history, game session logs, wagering patterns, bonus usage, and responsible gaming tool activations associated with your account.

Where gb98 is required to collect personal data by law or under the terms of a contract and you do not provide that data when requested, gb98 may not be able to provide the requested services or may be required to restrict your access to certain Platform features.

3. How We Use Your Information

gb98 uses the personal data we collect for the following purposes, each of which is supported by a lawful basis for processing:

• Account creation and management: to register your account, verify your identity through KYC, and maintain your account throughout your relationship with gb98.
• Payment processing: to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and local bank transfer, and to maintain accurate financial records.
• Fraud prevention and compliance: to detect, investigate, and prevent fraudulent transactions, money laundering, and other illegal activity, and to comply with applicable legal obligations.
• Customer support: to respond to your enquiries, resolve disputes, and provide assistance with account or gameplay issues through our support channels.
• Responsible gaming: to monitor gameplay patterns, enforce responsible gaming tools (deposit limits, self-exclusion, session timers), and to fulfil our duty of care obligations to players.
• Service improvement and analytics: to analyse Platform usage, identify technical issues, improve user experience, and develop new features, using aggregated or anonymised data wherever possible.

4. Legal Basis for Processing

gb98 processes your personal data only where a lawful basis exists. The applicable bases for the processing activities described in this Privacy Policy are:

• Contract performance: processing is necessary to fulfil the contract between you and gb98, including operating your account, processing payments, and providing gaming services.
• Legal obligation: processing is necessary to comply with anti-money laundering laws, KYC regulations, age verification requirements, and other applicable legal and regulatory obligations.
• Legitimate interests: processing is necessary for gb98's legitimate interests in fraud prevention, Platform security, responsible gaming enforcement, and service improvement, where these interests are not overridden by your fundamental privacy rights.
• Consent: where gb98 relies on your consent for specific processing activities (such as marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Sharing Your Information

gb98 does not sell, rent, or trade your personal data. We may share personal data with the following categories of third parties only where strictly necessary and subject to appropriate data protection safeguards:

• Payment service providers: bKash, Nagad, Rocket, Upay, and partner banks process transaction data on our behalf for the sole purpose of completing deposits and withdrawals initiated by you.
• Identity verification partners: third-party KYC service providers process identity and document data solely for the purpose of age verification and fraud prevention as required.
• Regulatory and law enforcement authorities: gb98 may be required by applicable law to disclose personal data to regulatory bodies, law enforcement agencies, or other public authorities in response to lawful requests or court orders.
• Technical infrastructure providers: hosting, cloud storage, and security service providers who process data on gb98's behalf under strict contractual confidentiality obligations.

All third parties with whom gb98 shares personal data are bound by contractual obligations to process that data only for the specified purpose, to maintain appropriate security standards, and not to disclose or further share the data without authorisation.

6. Payment Data and Financial Information

When you make a deposit or withdrawal on gb98, payment transaction data is processed through our partner payment gateways including bKash, Nagad, Rocket, Upay, and local bank transfer services. gb98 does not store full payment instrument credentials (such as complete mobile banking PINs or full bank account numbers) on its own servers. Payment data is tokenised or handled directly by the relevant payment service provider in accordance with their own security standards.

7. Cookies and Tracking Technologies

gb98 uses cookies and similar tracking technologies to operate the Platform, personalise your experience, and analyse usage patterns. Cookies are small text files placed on your device when you access the Platform. We use the following types of cookies:

• Essential cookies: necessary for the Platform to function correctly, including maintaining your login session, processing transactions, and enabling security features. These cookies cannot be disabled without impairing Platform functionality.
• Analytics cookies: used to collect aggregated information about how players use the Platform, which pages are most visited, and where technical errors occur, to help gb98 improve the user experience.
• Preference cookies: used to remember your settings and preferences (such as language selection or game view preferences) so that gb98 can deliver a more personalised experience on subsequent visits.

You may manage your cookie preferences through your browser settings. Please note that disabling non-essential cookies may affect the functionality and personalisation of certain Platform features. gb98 does not use third-party advertising cookies or share your browsing data with advertising networks.

8. Data Retention

gb98 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The following general retention periods apply: account data and KYC records are retained for a minimum of five years following account closure; transaction and financial records are retained for a minimum of five years as required by applicable financial regulations; gameplay and session logs may be retained for up to two years for the purposes of fraud detection and responsible gaming monitoring.

When personal data is no longer required for any of the above purposes and no legal obligation requires its continued retention, gb98 will securely delete or anonymise it in accordance with our internal data lifecycle management procedures.

9. Your Privacy Rights

Subject to applicable law, you have the following rights in relation to the personal data gb98 holds about you. To exercise any of these rights, please contact our support team via live chat or by email at [email protected]:

• Right of access: you may request a copy of the personal data gb98 holds about you, along with information about how and why it is being processed.
• Right to rectification: you may request that gb98 corrects any inaccurate or incomplete personal data held about you without undue delay.
• Right to erasure: you may request that gb98 deletes your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to restrict processing: you may request that gb98 restricts the processing of your personal data in certain circumstances, for example while the accuracy of the data is being verified following a rectification request.
• Right to data portability: you may request that gb98 provides you with a copy of your personal data in a structured, commonly used, and machine-readable format where the processing is based on your consent or on a contract.

gb98 will respond to all privacy rights requests within 30 days of receipt. In complex cases or where a high volume of requests is received simultaneously, this period may be extended by a further 30 days, in which case gb98 will notify you of the extension and the reason for it.

10. Data Security

gb98 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL encryption for all data in transit, access controls limiting internal access to personal data on a need-to-know basis, regular security assessments of our Platform and infrastructure, and secure data storage with restricted physical and logical access.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, gb98 will notify you without undue delay and will take all reasonable steps to mitigate the impact of the breach. gb98 cannot guarantee absolute security in the transmission of data over the internet, and any such transmission is undertaken at your own risk. Once data is received, gb98 applies all reasonable security measures to protect it.

11. Children's Privacy

The gb98 Platform is strictly for persons aged 21 years and above. gb98 does not knowingly collect, process, or retain personal data from any person under the age of 21. If gb98 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed. If you believe that a minor has registered an account or provided personal data on the Platform, please contact our support team at [email protected] immediately so that we can take appropriate action.

12. Changes to This Privacy Policy

gb98 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. Where amendments are material, gb98 will endeavour to provide reasonable notice to Players via a Platform notification or email before the changes take effect. The date of the most recent update is displayed at the top of this page.

Your continued use of the Platform after any updated Privacy Policy takes effect constitutes your acceptance of the revised policy. If you do not agree to any changes, you must stop using the Platform and may request closure of your account by contacting gb98 customer support.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way gb98 handles your personal data, please contact our support team via live chat available 24 hours a day, 7 days a week from within your account, or by email at [email protected]. gb98 aims to respond to all privacy-related enquiries within 30 days of receipt, in accordance with Bangladesh Standard Time (BST, UTC+6).

Your Privacy at a Glance

A quick summary of the key ways gb98 protects and respects your personal data.