gb999 Privacy Policy

This Privacy Policy ("Policy") describes the data processing practices of gb999.games ("gb999", "we", "us", "our") in relation to the personal data of individuals who register as players on the gb999 platform accessible at gb999.games ("Platform").

This Policy applies to all personal data collected from players at the point of registration, during account operation, through use of the Platform's gaming and betting features, and in the course of customer support interactions. It applies to all players accessing the Platform from locations within Pakistan and covers data processed by gb999 directly as well as data processed by authorised third-party service providers acting on gb999's behalf.

This Policy should be read alongside the gb999 Terms & Conditions and the Responsible Gaming Policy, both of which contain provisions relevant to the processing of player data.

gb999 collects the following categories of personal data from players during registration, account operation, and platform use:

gb999 does not collect sensitive personal data such as biometric data, health records, religious beliefs, or political opinions. The CNIC document collected during KYC is used solely for identity and age verification purposes and is stored securely with strict access controls.

gb999 collects personal data through the following channels and methods:

• Directly from you: Information you provide when completing the gb999 registration form, submitting KYC verification documents, updating your account profile, or contacting the support team via live chat.
• Automatically during platform use: Technical data such as IP addresses, device identifiers, browser information, and session activity data collected through standard web server logs and analytics tools when you access and use the gb999 platform.
• Through payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, and banking partners (HBL, UBL, Meezan Bank) in connection with deposit and withdrawal processing.
• From third-party identity verification providers: Verification status and data quality confirmation from KYC service providers used to validate identity documents submitted by players.
• Through cookies and similar technologies: Session management and analytics data collected via cookies placed on your device when you browse the gb999 platform. See Section 8 for full cookie details.

gb999 processes player personal data for the following specific and defined purposes:

• To create, manage, and administer your gb999 player account, including processing gb999 login requests and maintaining your account session securely.
• To verify your identity and confirm that you meet the 21+ age eligibility requirement before allowing you to access real-money gaming features.
• To process deposits and withdrawals in PKR through your chosen payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or direct bank transfer).
• To deliver the casino games, sports betting markets, live dealer sessions, and other gaming services available on the gb999 platform.
• To detect, investigate, and prevent fraudulent activity, money laundering, account abuse, and other prohibited conduct in accordance with gb999's Fair Play Policy.
• To communicate with you regarding your account, including transaction notifications, security alerts, support responses, and responsible gaming communications.
• To fulfil legal and regulatory obligations, including record-keeping requirements, compliance audits, and responses to lawful requests from competent authorities.
• To provide and improve customer support services, including reviewing live chat and email correspondence to resolve disputes and improve service quality.
• To send promotional communications and personalised bonus offers where you have consented to receive such communications. You may opt out at any time through your account settings or by contacting support.
• To monitor gameplay patterns and account behaviour to support responsible gaming obligations, including identifying players who may be exhibiting signs of problematic gambling.

gb999 does not use automated decision-making processes that produce legal or similarly significant effects on players without human review. Where automated systems flag an account for review (for example, fraud detection or responsible gaming monitoring), a qualified member of the gb999 team will assess the case before any material action is taken.

gb999 processes player personal data on the following legal bases depending on the purpose of processing:

gb999 does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own commercial purposes. Personal data is shared only in the following limited and defined circumstances:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment partners receive necessary transaction data to process your PKR deposits and withdrawals. These providers are bound by their own data protection obligations.
• Identity verification providers: KYC service providers who assist gb999 in verifying player identity and age receive the minimum data required to complete the verification process.
• Game content providers: Third-party game studios whose titles are integrated into the gb999 platform may receive anonymised session and game play data for the purpose of game performance analytics. These providers do not receive personally identifiable information.
• Fraud prevention and security services: Third-party providers who assist gb999 in detecting and preventing fraudulent activity, money laundering, and account abuse.
• Legal and regulatory authorities: gb999 will disclose personal data to competent authorities, courts, regulators, or law enforcement agencies where required to do so by applicable law, valid legal process, or regulatory requirement.
• Professional advisers: Lawyers, auditors, and compliance consultants who are subject to confidentiality obligations and whose engagement requires access to relevant account data.

All financial transactions on the gb999 platform are denominated in Pakistani Rupees (PKR). gb999 processes payment data through established Pakistani payment infrastructure including JazzCash, EasyPaisa, and major bank transfer networks.

gb999 does not store complete card numbers, full bank account credentials, or mobile wallet PINs on its servers. Payment information is tokenised or truncated before storage, with full payment details processed exclusively within the secure environments of the relevant payment service providers.

Payment accounts used to deposit to a gb999 account must be registered in the same name as the gb999 account holder. gb999 retains records of payment methods used and transaction histories as required for compliance, fraud prevention, and withdrawal verification purposes.

The gb999 platform uses cookies and similar browser-based technologies to operate the site, maintain login sessions, and understand how the platform is used. The following categories of cookies are used on gb999:

• Strictly Necessary Cookies: Required for the gb999 platform to function. These include session authentication cookies that keep you logged into your gb999 account during a browser session. These cannot be disabled without affecting the platform's functionality.
• Functional Cookies: Store your platform preferences such as language settings, responsible gaming limit acknowledgements, and display preferences. These improve your experience on the platform.
• Analytics Cookies: Help gb999 understand aggregate usage patterns across the platform — such as which pages are most visited, where players encounter errors, and how long sessions typically last. This data is used to improve the platform experience and is not linked to individual player identities.
• Security Cookies: Support fraud detection mechanisms by helping gb999 identify unusual access patterns, unfamiliar devices, or suspicious login behaviour.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from being able to log in to or use the gb999 platform. Disabling other cookie categories may affect the quality of your experience but will not prevent access to the platform's core features.

gb999 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to the following retention considerations:

• Player account data is retained for the duration of the account's active status and for a defined period following account closure, as required for audit, legal, and compliance purposes.
• Financial transaction records and KYC documentation are retained for the period required under applicable financial compliance and anti-money laundering standards.
• Customer support records, including live chat transcripts and email correspondence, are retained for a period sufficient to handle any follow-up queries, disputes, or regulatory inquiries related to the interaction.
• Technical logs and session data are retained for a shorter period in line with their primary purpose of security monitoring and fraud detection.
• Marketing consent records are retained for the duration of the consent plus a period sufficient to demonstrate compliance with consent obligations.

When personal data is no longer required for the purpose for which it was collected and no legal obligation requires its continued retention, gb999 securely deletes or irreversibly anonymises the data.

gb999 implements a range of technical and organisational security measures designed to protect player personal data from unauthorised access, loss, misuse, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between players' browsers and the gb999 platform.
• Encrypted storage of all personal data at rest, with access restricted to authorised personnel only.
• Role-based access controls ensuring that gb999 staff can only access player data that is necessary for their specific function.
• Two-factor authentication requirements for administrative access to systems that hold player data.
• Regular security assessments and vulnerability scanning of platform infrastructure.
• Real-time fraud monitoring and anomaly detection systems that identify suspicious account activity.

While gb999 takes all reasonable precautions to protect player data, no internet-based platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their gb999 accounts, to enable two-factor authentication, and to contact gb999 support immediately if they suspect their account has been accessed without their authorisation.

As a registered player on the gb999 platform, you hold the following rights in respect of your personal data. These rights may be exercised by contacting the gb999 support team through the live chat function or by writing to [email protected].

To exercise any of the above rights, contact the gb999 support team via live chat or at [email protected]. gb999 will respond to rights requests within 30 days. In certain complex cases, this period may be extended by a further 30 days, and you will be notified of any extension.

The gb999 platform is strictly restricted to individuals who are 21 years of age or older. gb999 does not knowingly collect personal data from persons under the age of 21 and does not permit minors to register accounts or access real-money gaming services.

Age verification is a mandatory step in the gb999 registration and KYC process. Players are required to submit valid government-issued identification — specifically a CNIC — confirming that they are 21 years of age or older before being granted access to real-money gaming features. Any account found to belong to a person under the age of 21 will be immediately closed, all balances will be returned to the source payment account, and any gameplay data associated with the account will be deleted.

If you have reason to believe that a minor has registered or is using the gb999 platform, please notify the support team immediately at [email protected]. gb999 takes underage gambling seriously and will investigate and act on all such reports promptly.

gb999 reserves the right to update or amend this Privacy Policy at any time. Changes will be posted on this page with an updated "Last updated" date at the top of the document. Where changes are material — for example, where a new category of data is being collected or a new purpose for processing is introduced — gb999 will take reasonable steps to notify registered players via the contact details held on their account before the changes take effect.

Your continued use of the gb999 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to remain informed of how your data is being handled.

For all privacy-related queries, data subject rights requests, or concerns about the way gb999 handles your personal data, please contact the gb999 data team through one of the following channels:

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" for prompt routing to the relevant team.
• Live Chat: Available 24/7 directly from any page on the gb999 platform. For data-related matters, ask the support agent to log a formal privacy request on your behalf.

gb999 will acknowledge all privacy-related enquiries within 48 hours and will provide a substantive response within 30 calendar days. For complex requests, the response period may be extended as described in Section 11.

If you are unsatisfied with gb999's handling of a privacy concern after raising it directly with the support team, you have the right to escalate the matter through appropriate external channels. gb999 will provide information about applicable escalation routes upon request.