gg66 Privacy Policy

1. Information We Collect

gg66 collects personal data from Players in several ways: directly through the information you provide during registration and account use; automatically through your interaction with the gg66 platform; and, in limited cases, from third-party identity verification and payment service providers. The categories of data we collect are described below.

1.1 Registration & Account Data

When you create an account via the gg66 Login page, we collect the following information:

• Full legal name as it appears on your government-issued identification;
• Date of birth (used to verify that you are aged 18 or above — gg66 is an 18+ platform);
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or elsewhere in Bangladesh);
• Email address and mobile phone number;
• Username and hashed password (passwords are never stored in plain text);
• Preferred currency (BDT / Bangladeshi Taka ৳) and language preference.

1.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and to verify that all Players meet the 18+ age requirement, gg66 collects the following KYC documents when a Player submits their first withdrawal request or when a manual review is triggered:

• Government-issued photo identification (National ID card, passport, or driving licence);
• Proof of residential address (utility bill, bank statement, or equivalent dated within the last three months);
• Proof of payment method ownership (e.g., a screenshot confirming ownership of the bKash or Nagad account used for deposits);
• Selfie photograph where enhanced identity verification is required.

1.3 Financial & Transaction Data

gg66 records details of all financial transactions processed through the platform. This includes deposit amounts, withdrawal amounts, payment method identifiers (such as the mobile number associated with a bKash or Nagad account), transaction reference numbers, timestamps, and currency amounts in BDT. Full card numbers are never stored by gg66 — card transactions are tokenised by our PCI-DSS-compliant payment processor.

1.4 Gameplay & Betting Data

gg66 records gameplay activity data for all registered Players, including game sessions, bet amounts, win/loss outcomes, game titles played, sports betting selections, and timestamps of gaming activity. This data is used for account management, bonus eligibility assessment, responsible gaming monitoring, and dispute resolution. It is not shared with third parties for commercial purposes.

1.5 Technical & Device Data

When you access gg66, our servers automatically collect certain technical information including your IP address, browser type and version, operating system, device type (mobile or desktop), screen resolution, referring URL, and session duration. This data is used for security monitoring, fraud detection, geographic access control, and platform optimisation.

1.6 Customer Support Communications

When you contact gg66 support via email at [email protected] or via live chat, the content of those communications — including any attachments you submit — is retained as part of your account record. This data is used for resolving your query, training quality assurance, and maintaining an audit trail of support interactions.

2. How We Use Your Data

gg66 processes personal data only for clearly defined, lawful purposes. We do not use personal data for any purpose that is incompatible with the purpose for which it was originally collected. The primary purposes for which gg66 processes your data are set out below.

2.1 Marketing Communications

gg66 may send Players promotional communications about bonuses, new games, cricket betting promotions, BPL special offers, and seasonal campaigns (such as Eid or Pohela Boishakh promotions) via email or SMS. These communications are sent only where the Player has provided explicit opt-in consent during registration or subsequently via their account settings. Players may withdraw marketing consent at any time by updating their communication preferences in the account dashboard or by emailing [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out prior to withdrawal.

2.2 Automated Decision-Making

gg66 uses automated systems for fraud detection and responsible gaming monitoring. These systems may result in automated decisions affecting account access — for example, temporarily locking an account pending a manual security review. Where an automated decision materially affects you, you have the right to request human review of that decision by contacting [email protected].

3. Data Sharing & Third Parties

gg66 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Data sharing is strictly limited to the categories of recipients described in this section, and in each case is subject to appropriate contractual protections including data processing agreements.

3.1 Payment Service Providers

To process deposits and withdrawals, gg66 shares the minimum necessary financial data with licensed payment service providers including mobile wallet operators (bKash, Nagad, Rocket, Upay), banking partners (DBBL, City Bank, BRAC Bank), and international card networks (Visa, Mastercard). These providers process payment data in accordance with their own privacy policies and applicable financial regulations. gg66 does not share gameplay data or account history with payment providers.

3.2 Identity Verification Providers

KYC document verification may be carried out by a third-party identity verification service provider engaged by gg66. This provider receives KYC documents solely for the purpose of verifying their authenticity and confirming the Player's identity and age. KYC data is not used by verification providers for any other purpose.

3.3 Technology & Platform Providers

gg66 relies on third-party technology providers for hosting infrastructure, game content delivery (including studios such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi), customer support software, and analytics tools. These providers may process limited personal data — such as IP addresses or session identifiers — in the course of delivering their services. All such providers are bound by data processing agreements that restrict their use of personal data to the contracted service only.

3.4 Legal & Regulatory Disclosure

gg66 may disclose personal data to law enforcement authorities, regulatory bodies, or other governmental entities where such disclosure is required by applicable law, court order, or legal process. gg66 will, where legally permitted, notify the affected Player of any such disclosure request prior to complying. In cases where advance notification is not legally permitted (for example, in connection with an active law enforcement investigation), gg66 will notify the Player as soon as legally possible after the disclosure.

4. Cookies & Tracking Technologies

gg66 uses cookies and similar tracking technologies to provide a functional, personalised, and secure platform experience. This section describes the types of cookies gg66 uses and explains how you can manage your cookie preferences.

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, remember your preferences, and collect information about how you interact with the site. Cookies may be session cookies (which expire when you close your browser) or persistent cookies (which remain on your device for a defined period or until manually deleted).

4.2 Categories of Cookies Used by gg66

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your gg66 session, security tokens, and cookies that remember your language preference. These cannot be disabled without rendering core platform features non-functional.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how Players navigate the gg66 platform — which pages are visited most frequently, where users drop off, and how long sessions last. This data helps gg66 improve the platform experience. No personally identifiable information is transmitted via analytics cookies.
• Functional Cookies: Remember your preferences such as display settings, currency selection (BDT), and game lobby filters so that you do not need to reconfigure them on every visit.
• Targeting & Marketing Cookies: Used only where you have provided consent, to deliver promotional content relevant to your interests — for example, cricket betting offers during a BPL season or Eid bonus promotions. You may withdraw consent for targeting cookies at any time via your account settings.

4.3 Managing Cookie Preferences

You can manage or delete cookies at any time through your browser's settings. Most modern browsers allow you to refuse new cookies, delete existing cookies, and receive notifications when a new cookie is set. Please note that disabling strictly necessary cookies will impair your ability to log in to and use the gg66 platform. Detailed instructions for managing cookies are available in the help section of your chosen browser.

5. Data Retention & Storage

gg66 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following retention principles apply.

5.1 Active Account Data

Personal data associated with an active gg66 account is retained for the full duration of the account's active status. This includes registration data, gameplay history, transaction records, and support communications. Active account data is reviewed periodically and any data no longer required for operational or legal purposes is deleted or anonymised on a rolling basis.

5.2 Post-Closure Retention

Following voluntary account closure or account termination, gg66 retains certain categories of personal data for a minimum period required by applicable law. Financial transaction records and KYC documents are retained for a minimum of five years from the date of the last transaction to comply with anti-money laundering record-keeping obligations. After this period, data is securely deleted or irreversibly anonymised.

5.3 Data Storage Location

gg66's data is stored on secure servers managed by gg66's infrastructure partners. Servers used to store Bangladesh player data are located in data centres that meet internationally recognised security standards (ISO 27001 or equivalent). Data transfers between gg66 and its service providers are encrypted in transit using TLS 1.2 or higher.

5.4 Anonymisation

Where data is no longer required in identifiable form but has ongoing analytical value, gg66 may anonymise it rather than delete it. Anonymised data — from which no individual can be identified — is not subject to the same retention limits as personal data and may be retained indefinitely for platform improvement and statistical analysis purposes.

6. Your Privacy Rights

As a user of the gg66 platform, you hold a number of rights in relation to your personal data. gg66 is committed to facilitating the exercise of these rights in a straightforward and timely manner. To exercise any of the rights described below, contact the gg66 Data Privacy team at [email protected] with the subject line "Privacy Rights Request" and a description of the right you wish to exercise.

6.1 Right of Access

You have the right to obtain confirmation of whether gg66 processes personal data about you, and — where it does — to receive a copy of that data together with information about the purposes of processing, the categories of data processed, and the recipients to whom data has been disclosed. gg66 will respond to access requests within 30 days of receipt of a valid request.

6.2 Right to Rectification

If any personal data gg66 holds about you is inaccurate or incomplete, you have the right to request correction. Many basic data fields — such as email address and contact number — can be updated directly from within your account dashboard after gg66 Login. For corrections to KYC-verified data (such as your legal name or date of birth), please contact [email protected] with supporting documentation.

6.3 Right to Erasure ("Right to Be Forgotten")

You may request deletion of your personal data from gg66's systems. This right is subject to certain limitations — gg66 is legally required to retain financial transaction records and KYC documentation for a minimum period under AML regulations, and this retention obligation takes precedence over erasure requests for those specific data categories. For all other data not subject to legal retention, gg66 will action erasure requests within 30 days.

6.4 Right to Restrict Processing

In certain circumstances — for example, where you contest the accuracy of data gg66 holds, or where you object to processing based on legitimate interests — you may request that gg66 restrict processing of your data to storage only, pending resolution of the relevant dispute or review.

6.5 Right to Data Portability

Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another service provider. gg66 will provide portable data exports in CSV or JSON format upon request.

6.6 Right to Withdraw Consent

Where gg66 processes your data on the basis of consent — in particular, for marketing communications and targeting cookies — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal. To withdraw marketing consent, update your preferences in the account dashboard or email [email protected].

7. Data Security Measures

gg66 implements a comprehensive, layered approach to data security, combining technical, organisational, and procedural controls to protect personal data against unauthorised access, alteration, disclosure, or destruction.

7.1 Technical Controls

• 256-Bit SSL/TLS Encryption: All data in transit between the Player's device and gg66 servers is encrypted using TLS 1.2 or 1.3 with 256-bit AES encryption, preventing interception by any third party;
• Encryption at Rest: Sensitive data stored in gg66's databases — including KYC documents and payment method identifiers — is encrypted at rest using industry-standard encryption algorithms;
• Password Hashing: Player passwords are never stored in plain text. gg66 uses a modern, salted cryptographic hashing algorithm to protect password data;
• Two-Factor Authentication (2FA): gg66 offers optional 2FA for all Player accounts. Players are strongly encouraged to enable 2FA from their account security settings after gg66 Login;
• Firewall & Intrusion Detection: gg66's infrastructure is protected by enterprise-grade firewalls and automated intrusion detection systems that monitor for anomalous access patterns in real time.

7.2 Organisational Controls

Access to personal data within gg66's internal systems is governed by a strict role-based access control policy. Staff members are granted access only to the categories of personal data necessary for their specific job functions. All staff with access to personal data are subject to confidentiality obligations and receive data protection training as part of their onboarding and on an ongoing basis.

7.3 Incident Response

In the event of a personal data breach that poses a risk to Players' rights and freedoms, gg66 will notify affected Players via the email address associated with their account without undue delay, and no later than 72 hours after becoming aware of the breach where feasible. The notification will describe the nature of the breach, the categories and approximate number of records affected, the likely consequences, and the measures gg66 has taken or proposes to take to address the breach.

8. Updates to This Privacy Policy

gg66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, gg66 will notify registered Players via the email address associated with their account and/or via a prominent notice on the gg66 platform, at least 14 days before the changes take effect.

The "Effective Date" displayed at the top of this Privacy Policy will be updated to reflect the date on which the most recent version came into force. Players are encouraged to review this page periodically to remain informed of how gg66 handles their personal data.

Continued use of the gg66 platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Privacy Policy, you should discontinue use of the platform and request account closure by contacting [email protected]. Any data already processed prior to the effective date of the revised policy was processed under the version of the policy in force at the time of processing.

For questions or concerns about this Privacy Policy or about gg66's data practices more generally, please contact the gg66 support and data privacy team at [email protected]. We aim to respond to all privacy-related enquiries within 12 working hours.