gb66 Privacy Policy — How We Protect Your Data

This Privacy Policy ("Policy") describes how gb66 ("gb66", "we", "us", "our") collects, processes, stores, shares, and protects personal information provided by users ("you", "your", "the Player") of the gb66 online casino and sports betting platform accessible at gb66.im. This Policy applies to all data processing activities carried out in connection with your use of the gb66 website, mobile-optimised interface, and any related services we offer to players based primarily in Bangladesh.

By registering an account or continuing to use the gb66 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal information as described herein. If you do not agree with any part of this Policy, you must discontinue use of the gb66 platform.

Information We Collect

gb66 collects personal information from you through several channels: directly when you register an account or interact with our support team, automatically when you use our platform, and occasionally from trusted third-party partners involved in identity verification and payment processing. The categories of personal data we collect are set out below.

1.1 Registration and Account Data

When you create a gb66 account, we collect the following information:

• Full legal name as it appears on your official identity documents.
• Date of birth (used to verify that you are 18 years of age or older).
• Residential address in Bangladesh, including district, division, and postcode.
• Email address and mobile phone number.
• Username and encrypted password (passwords are never stored in plain text).
• Preferred currency (Bangladeshi Taka, ৳).

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process — which is required for account verification, withdrawal processing, and regulatory compliance — we may collect:

• Copies of government-issued identity documents (National Identity Card, passport, or driving licence).
• Proof of residential address (utility bill or bank statement issued within the past 90 days).
• Proof of payment method (bKash, Nagad, Rocket, Upay, or bank account statement).
• Selfie or live photo for facial verification, where required.

1.3 Financial Transaction Data

• Deposit and withdrawal amounts, dates, and reference numbers.
• Payment method details (mobile wallet account numbers, partial bank account information).
• Transaction history associated with your gb66 account balance.

1.4 Gameplay and Betting Data

• Game history, bet amounts, stake sizes, and outcomes across all gb66 products including slots, live casino, and sports betting markets.
• Session duration, frequency of play, and wagering patterns (used for responsible gaming monitoring).
• Bonus and promotion usage history.

1.5 Technical and Device Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system, and browser type and version.
• Unique device identifiers and session tokens.
• Pages visited, features used, click paths, and time spent on the platform.
• Error logs and performance diagnostics.

1.6 Communications Data

• Content of customer support interactions submitted via email to [email protected].
• Responses to surveys or feedback forms where you voluntarily participate.
• Records of any complaints or disputes you raise with our team.

How We Use Your Data

gb66 uses the personal information we collect for the following specific purposes. We process your data only where we have a lawful basis for doing so, as detailed in Section 3.

Purpose	Data Categories Used
Account creation and authentication	Registration data, device data
Age and identity verification (KYC)	KYC documents, registration data
Processing deposits and withdrawals in ৳	Financial transaction data, KYC data
Delivering casino and sports betting services	Gameplay data, account data
Fraud detection and anti-money laundering monitoring	All categories
Responsible gaming monitoring and intervention	Gameplay data, account data
Providing customer support	Communications data, account data
Sending transactional notifications (deposit confirmations, withdrawal updates)	Contact data, financial data
Sending promotional communications (bonuses, offers) — where consent given	Contact data, gameplay data
Platform analytics and performance improvement	Technical data, gameplay data
Legal compliance and regulatory reporting	All categories as required

2.1 Marketing Communications

gb66 may send you promotional emails, SMS notifications, or in-platform messages about bonuses, new games, seasonal offers (such as Eid promotions or BPL season offers), and other gb66 products that may be of interest to you. We will only send marketing communications where you have provided your consent at registration or through your account preferences, or where we have a legitimate interest to do so under applicable law. You may opt out of marketing communications at any time by contacting [email protected].

2.2 Automated Decision-Making

gb66 uses automated systems for fraud detection, responsible gaming monitoring, and certain KYC screening processes. These systems may result in actions being taken on your account — such as triggering an additional verification request or flagging unusual transaction patterns — without direct human review at the initial stage. If you believe an automated decision has negatively affected your account in error, you have the right to request a manual review by contacting our support team.

Legal Basis for Processing

gb66 processes your personal data on one or more of the following legal bases, depending on the specific purpose for which the data is being used:

• Contractual Necessity: Processing is required to perform our contract with you — namely, to operate your gb66 account, process deposits and withdrawals in Bangladeshi Taka, and deliver the gaming and betting services you have signed up for.
• Legal Obligation: Processing is required for gb66 to comply with applicable legal and regulatory obligations, including anti-money laundering checks, age verification, KYC requirements, and any mandatory reporting obligations.
• Legitimate Interests: Processing is necessary for gb66's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving our services — provided those interests are not overridden by your rights and interests.
• Consent: For certain processing activities, such as sending marketing communications or deploying non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Third Parties

gb66 does not sell your personal data to third parties. However, to operate a reliable, secure, and legally compliant platform, we share certain categories of personal data with the following categories of trusted third-party partners:

4.1 Game Providers

To deliver casino games and sports betting markets, gb66 integrates technology from game and content providers including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Spribe, and Microgaming. These providers may receive limited technical data (such as session tokens and player IDs) necessary to deliver their games within the gb66 environment. Game providers are contractually prohibited from using this data for any purpose beyond delivering their services to gb66.

4.2 Payment Processors

To process deposits and withdrawals in Bangladeshi Taka (৳), gb66 shares relevant financial and identity data with approved payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card networks Visa and Mastercard. Data shared with payment partners is limited to what is strictly necessary to complete the relevant transaction and comply with financial regulations.

4.3 Identity Verification Partners

gb66 may use specialist third-party identity verification and KYC technology providers to assist with document verification and screening processes. These partners process your identity documents and personal data strictly under gb66's instructions and are subject to appropriate data processing agreements.

4.4 Legal and Regulatory Authorities

gb66 will disclose personal data to law enforcement agencies, financial intelligence units, courts, or other regulatory bodies where we are legally required or compelled to do so, or where we reasonably believe that disclosure is necessary to prevent fraud, money laundering, or other serious criminal activity.

4.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of assets involving gb66, personal data held by gb66 may be transferred to the successor entity as part of that transaction. In such circumstances, we will take reasonable steps to ensure that your privacy rights continue to be protected under the new entity's data handling practices.

Cookies & Tracking

gb66 uses cookies and similar browser-based tracking technologies to ensure the platform operates correctly, to remember your preferences, and to analyse how the platform is used so that we can improve your experience. This section explains what cookies we use and why.

5.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and retrieve stored information. Cookies themselves do not contain executable code and cannot access other files on your device. Similar technologies include local storage, session storage, and pixel tags, which function in comparable ways.

5.2 Cookies We Use

Cookie Type	Purpose	Required?
Essential / Session	Maintain your logged-in session, keep your account secure, prevent cross-site request forgery	Yes — cannot be disabled
Functional / Preference	Remember your language preference (English), currency (৳), and display settings	Recommended
Analytics	Understand how users navigate the platform, identify popular features, and improve UX	Optional — consent required
Responsible Gaming	Track session duration and activity thresholds for responsible gaming monitoring tools	Yes — required for player safety
Fraud Detection	Identify suspicious device behaviour and help prevent account takeover attacks	Yes — required for security

5.3 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies from specific websites. Please note that disabling essential cookies will prevent the gb66 platform from functioning correctly and may prevent you from logging in or processing transactions. Disabling functional cookies will cause the platform to lose your saved preferences between sessions.

gb66 does not use cookies to serve third-party advertising or to track your activity on other websites. Our cookie usage is limited to the purposes described in the table above.

Data Security

gb66 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption for all data in transit between your browser and gb66 servers.
• Encryption of sensitive data fields at rest within our database systems.
• Hashed and salted password storage — your password is never stored or transmitted in plain text.
• Multi-factor authentication options for account access.
• Access controls ensuring that only authorised gb66 staff with a legitimate need can access personal data.
• Regular security audits and penetration testing of the gb66 platform infrastructure.
• Monitoring systems to detect and respond to unusual access patterns and potential intrusion attempts.
• Staff data protection training covering safe handling of personal information.

6.1 Data Breach Response

In the event that gb66 becomes aware of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, we will take immediate steps to contain and investigate the breach. Affected players will be notified promptly via the email address registered to their account, and we will provide guidance on any steps you should take to protect yourself. gb66 will also report material breaches to the relevant authorities as required by applicable law.

6.2 Your Responsibility

While gb66 implements robust technical security measures, the security of your account also depends on you. You are responsible for keeping your login credentials confidential, using a strong and unique password for your gb66 account, logging out when using shared devices, and promptly reporting any suspected unauthorised access to [email protected]. gb66 cannot be held responsible for security breaches that result from a player's own failure to protect their account credentials.

Your Data Rights

You have a number of rights with respect to the personal data that gb66 holds about you. These rights are described below. To exercise any of these rights, please submit a written request to [email protected]. gb66 will acknowledge your request promptly and aim to respond fully within 30 calendar days. In some cases, we may need to verify your identity before processing a data rights request.

7.1 Right of Access

You have the right to request a copy of the personal data that gb66 holds about you. This is sometimes called a Subject Access Request (SAR). We will provide you with a structured summary of your data in a readable format. There is no charge for this service unless the request is manifestly unfounded or excessive.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update basic account details (such as your email address or contact number) directly through your gb66 account settings. For corrections to identity or KYC data, please contact [email protected] with the corrected information and supporting documentation.

7.3 Right to Erasure

You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other legal basis for processing. Please note that gb66 is subject to legal obligations that require us to retain certain categories of data (such as financial transaction records) for specified minimum retention periods, even after account closure. In these cases, your erasure request will be partially fulfilled to the extent permitted by law.

7.4 Right to Restriction

You have the right to request that gb66 restricts the processing of your personal data in certain circumstances, such as while the accuracy of the data is being contested or while an objection to our legitimate interest processing is being assessed.

7.5 Right to Data Portability

Where processing is based on your consent or on a contract with you, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to have it transmitted to another service provider where technically feasible.

7.6 Right to Object

You have the right to object to the processing of your personal data where that processing is based on gb66's legitimate interests. You also have an absolute right to object to your data being used for direct marketing purposes at any time, without needing to provide a reason. To opt out of marketing communications, email [email protected].

7.7 Right to Withdraw Consent

Where gb66 processes your personal data on the basis of your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to the withdrawal. To withdraw consent, contact [email protected].

Data Retention

gb66 retains your personal data for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The table below summarises our standard retention periods by data category.

Data Category	Standard Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	Legal and regulatory obligations
KYC identity documents	Duration of account + 5 years after closure	Anti-money laundering compliance
Financial transaction records	Duration of account + 7 years after closure	Financial reporting and legal obligations
Gameplay and betting history	Duration of account + 3 years after closure	Dispute resolution, responsible gaming records
Customer support communications	3 years from date of interaction	Dispute resolution and service improvement
Marketing consent records	Until consent is withdrawn + 2 years	Evidence of valid consent basis
Technical / device logs	12 months from collection	Security monitoring and fraud detection

Once the applicable retention period expires, gb66 will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual. Anonymised and aggregated data (from which no individual can be identified) may be retained indefinitely for statistical analysis and platform improvement purposes.

8.1 Account Closure

If you request closure of your gb66 account, your account will be deactivated and your personal data will be moved to a restricted archive. Data in the restricted archive is not used for any active purpose and is accessible only to authorised staff for legal compliance and dispute resolution purposes. Data in the restricted archive is deleted in accordance with the retention schedule above once all applicable periods have expired.

8.2 Self-Exclusion and Responsible Gaming Records

Where a player has exercised a self-exclusion option through gb66's Responsible Gaming tools, records of that self-exclusion are retained for the full duration of the exclusion period and for a minimum of five years thereafter. This retention is in place to protect the player by preventing re-registration attempts during the exclusion period and to maintain an accurate record of the player's responsible gaming history.

Policy Updates

gb66 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will update the effective date displayed at the top of this page and, where the changes are significant, notify registered players via the email address on their account. Your continued use of the gb66 platform after any such update constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed about how gb66 protects your personal data.

Contact and Complaints

If you have any questions, concerns, or complaints about how gb66 handles your personal data, please contact our support team in the first instance:

We take all privacy-related complaints seriously and will investigate each matter thoroughly. If you are not satisfied with our response, you may escalate the matter to the appropriate data protection authority or regulatory body in your jurisdiction.