gg66 Privacy Policy — How We Protect Your Personal Data

gg66 ("we", "us", "our", "the Platform") operates the online gambling website located at https://gg66.bar. We are committed to protecting the privacy of all individuals who interact with our platform, including registered players, prospective users, and visitors browsing without an account.

This Privacy Policy ("Policy") describes how gg66 collects, processes, stores, uses, and discloses personal data in connection with the provision of our services, including sports betting, live casino, slots, account management, deposits, withdrawals, and customer support. It also sets out your rights in relation to the personal data we hold about you.

This Policy should be read alongside the gg66 Terms & Conditions and Responsible Gaming Policy, all of which together govern your relationship with the gg66 platform. In the event of any conflict between this Policy and the Terms & Conditions, the Terms & Conditions will prevail.

gg66 serves players primarily based in Bangladesh and operates in compliance with applicable international data protection standards. We are committed to maintaining the confidentiality, integrity, and availability of all personal data entrusted to us.

gg66 collects and processes the following categories of personal data in connection with your use of the platform:

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, biometric data, or health information unless specifically required by applicable law or regulatory authority instruction.

gg66 collects personal data through the following primary channels:

• Direct interactions: Data you provide voluntarily when registering an account, completing the KYC verification process, making a deposit or withdrawal, contacting customer support, submitting feedback, or participating in promotions.
• Automated technologies: When you visit and interact with the gg66 platform, we automatically collect technical data via cookies, server logs, and similar tracking mechanisms. This includes your IP address, device identifiers, browser fingerprint, and clickstream data.
• Payment processors: When you initiate a financial transaction, our integrated payment partners (including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, and Mastercard) may share transaction confirmation data with gg66 to enable processing and reconciliation.
• Game providers: Our game suppliers — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — may provide gg66 with aggregated game session data for the purposes of dispute resolution and platform integrity monitoring.
• Identity verification services: Third-party KYC and anti-fraud service providers may supply gg66 with identity verification outcomes based on documents you submit during the verification process.
• Publicly available sources: In limited circumstances, gg66 may supplement account data with information from publicly available records for the purposes of fraud detection or regulatory compliance.

gg66 uses personal data collected from users for the following specific purposes:

• Account management: To create, verify, maintain, and administer your gg66 account, including processing deposits and withdrawals, managing account settings, and providing transaction records.
• Service delivery: To provide access to all gg66 features including sports betting markets, live casino tables, slot games, and promotional offers available to registered players.
• Identity and age verification: To confirm that you meet the minimum age requirement of 21 years and to verify your identity in compliance with anti-money laundering (AML) and Know Your Customer (KYC) obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, match-fixing involvement, and other forms of misconduct that could harm the integrity of the gg66 platform or other players.
• Regulatory compliance: To fulfil gg66's obligations under applicable international gaming and financial regulation, including record-keeping requirements, suspicious activity reporting, and cooperation with lawful authority requests.
• Responsible gaming: To monitor gambling behaviour patterns that may indicate problem gambling, to enforce player-set limits and self-exclusion requests, and to enable our responsible gaming team to intervene where appropriate.
• Customer support: To respond to your queries, resolve disputes, process complaints, and improve the quality of our support services by maintaining records of interactions.
• Platform improvement: To analyse usage patterns, test new features, optimise platform performance, and improve the overall user experience for players based in Bangladesh and internationally.
• Marketing communications: Where you have provided explicit consent, to send you information about new promotions, bonuses, game launches, and seasonal offers relevant to your interests. You may withdraw marketing consent at any time by updating your preferences or contacting [email protected].

gg66 does not use automated decision-making processes that produce significant legal effects on users, except where required by applicable anti-fraud or AML screening obligations. Where automated screening flags an account for review, the outcome is always subject to human oversight before any consequential action is taken.

gg66 processes personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing required to provide the services you have contracted with gg66 to receive — including account registration, transaction processing, and game access.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML/KYC obligations, age verification requirements, and regulatory reporting duties.
• Legitimate interests: Processing conducted for gg66's legitimate business interests, including fraud detection, security monitoring, platform improvement, and responsible gaming oversight, provided such interests are not overridden by your fundamental rights.
• Consent: Processing for purposes such as direct marketing communications, where your explicit prior consent has been obtained. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

gg66 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share data only in the following limited and controlled circumstances:

• Payment service providers: Transaction data is shared with integrated payment partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, Mastercard) solely to process deposits and withdrawals on your behalf.
• Game software providers: Limited technical data may be shared with our game providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi) for the purposes of game integrity monitoring and dispute resolution.
• KYC and anti-fraud services: Identity documents and related data are shared with certified third-party verification providers for the purpose of completing KYC checks and detecting fraudulent activity.
• Regulatory and law enforcement authorities: Where required by law, court order, or instruction from a competent regulatory authority, gg66 will disclose personal data without prior notice to you. gg66 will always seek to limit any such disclosure to the minimum data required.
• Corporate transactions: In the event of a merger, acquisition, restructuring, or sale of gg66's business or assets, personal data held by gg66 may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties with whom gg66 shares personal data are contractually required to process that data in accordance with applicable data protection standards and to implement appropriate technical and organisational security measures.

The gg66 platform uses cookies and similar technologies (including web beacons, pixel tags, and local storage) to enhance platform performance, improve your user experience, and fulfil our security and compliance obligations. We do not use third-party advertising or retargeting cookies.

The following categories of cookies are used by gg66:

• Strictly necessary cookies: Essential for the platform to function correctly. These cookies manage your login session, maintain account security, remember your preferences during a session, and enable core features such as the betting slip and cashier. These cannot be disabled without significantly impairing your ability to use gg66.
• Performance and analytics cookies: Used to collect anonymised information about how players interact with the gg66 platform, including which pages are visited most frequently, where errors occur, and how long sessions last. This data helps us identify and resolve issues and improve the platform.
• Functional cookies: Used to remember your preferences — such as your preferred language, display settings, and previously entered information — so that you do not need to re-enter them on every visit.
• Security cookies: Used to detect suspicious login behaviour, prevent cross-site request forgery (CSRF) attacks, and support our fraud-detection systems.

You may control cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from accessing your gg66 account and using core platform features. Your continued use of the gg66 platform following your first visit constitutes acceptance of our cookie usage as described in this Policy.

gg66 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Industry-standard 256-bit SSL/TLS encryption for all data transmitted between your device and the gg66 platform.
• Encryption of sensitive data at rest, including identity documents, financial information, and account credentials stored on gg66 servers.
• Strict role-based access controls limiting staff access to personal data on a need-to-know basis, with all access logged and audited.
• Regular independent security assessments and penetration testing of the gg66 platform and supporting infrastructure.
• Multi-factor authentication requirements for all internal systems handling player personal data.
• Continuous real-time monitoring of platform systems for signs of intrusion, data exfiltration, or unusual access patterns.

Despite these measures, no digital platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, gg66 will notify affected users promptly and take all reasonable steps to contain and remediate the breach.

You are also responsible for maintaining the security of your own gg66 account. Use a strong, unique password for your gg66 login, do not share your credentials with anyone, and contact [email protected] immediately if you suspect your account has been compromised.

gg66 retains personal data for as long as necessary to fulfil the specific purposes for which it was collected, and in accordance with applicable regulatory retention requirements. The following general retention periods apply:

• Active account data: Retained for the duration of your active account relationship with gg66, plus a minimum of five (5) years after account closure to satisfy AML record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of submission, or longer if required by applicable regulatory authority instruction.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, consistent with financial record-keeping requirements.
• Customer support communications: Retained for a minimum of two (2) years from the date of the most recent interaction, for dispute resolution and service quality purposes.
• Marketing consent records: Retained for the duration of the consent and for a minimum of two (2) years following withdrawal of consent, to demonstrate compliance.
• Technical and security logs: Retained for up to twelve (12) months for security monitoring and fraud investigation purposes.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is not technically feasible within the applicable timeframe, data is pseudonymised and access is restricted to the minimum necessary personnel pending full deletion.

As a gg66 user, you hold the following rights in relation to the personal data we process about you. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request". gg66 will respond to all valid requests within 30 calendar days.

• Right of access: You have the right to request a copy of the personal data gg66 holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data held by gg66 without undue delay.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to gg66's legal obligations to retain certain records.
• Right to restriction: You have the right to request that gg66 restricts the processing of your data in certain circumstances, such as where you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to object: You have the right to object to processing of your data where gg66 relies on legitimate interests as the legal basis, including profiling for responsible gaming purposes, where your individual circumstances warrant such an objection.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to data portability: Where technically feasible and where processing is based on consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.

Please note that certain rights are subject to limitations. For example, gg66 may decline an erasure request where retention of the data is required to comply with a legal obligation or to defend a legal claim. In such cases, gg66 will explain the reason for the limitation in our response.

The gg66 platform is strictly intended for adults aged 21 years and above. gg66 does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account, attempt to use gg66's services, or provide any personal data to the platform.

If gg66 discovers or is notified that an account has been registered by a person under the age of 21, we will immediately suspend the account, reverse any transactions where possible, delete the personal data associated with the account in accordance with our data retention obligations, and report the incident where required by applicable law.

Parents and guardians who believe that a minor under their care may have accessed the gg66 platform are encouraged to contact our support team immediately at [email protected]. gg66 takes underage access extremely seriously and will act swiftly to address any confirmed cases.

gg66 operates an international platform and works with game providers, payment processors, and technology partners located in multiple countries. As a result, your personal data may be transferred to and processed in countries outside Bangladesh, including countries within the European Union, the United Kingdom, Malta, Gibraltar, Isle of Man, and Southeast Asia.

Where personal data is transferred internationally, gg66 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to or higher than the protections described in this Privacy Policy. These safeguards include:

• Contractual data protection clauses in agreements with all third-party processors and sub-processors located outside Bangladesh.
• Transfers to game providers and technology partners operating under recognised international gaming regulatory frameworks, which include mandatory data protection obligations.
• Ongoing assessment of the data protection standards applicable in recipient countries and implementation of supplementary safeguards where gaps are identified.

By using the gg66 platform, you acknowledge and accept that your personal data may be transferred, stored, and processed outside Bangladesh in the manner described in this section.

gg66 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory guidance. The effective date at the top of this Policy will be updated whenever a material change is made.

When we make material changes to this Policy, we will notify registered users by displaying a prominent notice on the gg66 platform and, where appropriate, by sending a notification to the email address associated with your account. We recommend that you review this Policy periodically to stay informed about how gg66 protects your personal data.

Your continued use of the gg66 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated Policy, you should cease using the platform and may request deletion of your personal data as described in Section 10.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way gg66 handles your personal data, please contact our Data Protection team using the details below. All privacy-related correspondence should be submitted in English.

• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Privacy Policy Enquiry" or "Privacy Rights Request"
• Response time: Within 30 calendar days for privacy rights requests; within 24–48 hours for general enquiries
• Support hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Language: English

gg66 takes all privacy enquiries and complaints seriously. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.