gb66 Privacy Policy
This Privacy Policy explains what personal data gb66 collects from players in Bangladesh, how we use and protect it, and what rights you have over your information.
1. Introduction
gb66 is committed to protecting the privacy and personal data of all players and visitors who use the gb66 platform. This Privacy Policy ("Policy") describes how gb66 ("we", "us", "our") collects, stores, processes, and discloses personal information obtained from individuals ("you", "User", "Player") who access or use any part of the gb66 website and associated services. By registering an account with gb66 or by continuing to use the gb66 platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. This Policy applies to all personal data we collect whether through the website, customer support communications, or payment processing interactions.
gb66 takes data protection seriously. We collect only the data we genuinely need to provide the Service, verify player identities, process payments, and meet our obligations under applicable law. We do not sell personal data to third parties for advertising purposes. We do not share player data with unaffiliated commercial partners for their own marketing use. Our data practices are guided by the principles of purpose limitation, data minimisation, and storage limitation — meaning we collect data for specific, legitimate purposes, collect no more than necessary, and retain it no longer than required.
2. Data We Collect
Full name, date of birth, and government-issued ID details collected during registration and KYC verification.
Your registered mobile number and email address used to manage your account and deliver support communications.
Transaction records, deposit and withdrawal histories, and payment method identifiers (e.g., bKash wallet reference). Full card numbers are never stored by gb66.
Game history, betting activity, session durations, login timestamps, and platform interactions that help us monitor account integrity and deliver the Service.
IP address, device type, operating system, browser type, and session cookies used for security monitoring and platform optimisation.
Records of your interactions with gb66 customer support, including email correspondence and live chat transcripts, retained for quality assurance and dispute resolution.
3. How We Use Your Data
gb66 uses the personal data we collect strictly for the purposes described below. We do not use your data for purposes incompatible with those stated at the time of collection. Where we intend to use your data for a new or different purpose, we will notify you and, where required, obtain fresh consent. Our data use is guided at all times by the principle of proportionality — we use only as much data as is necessary to achieve the specified purpose.
- Account creation and management: to register your account, verify your identity, and maintain accurate account records throughout the account lifecycle.
- Payment processing: to facilitate deposits via bKash, Nagad, Rocket, Upay, Visa and Mastercard, and to process withdrawal requests to your registered payment method.
- Regulatory compliance and fraud prevention: to meet Know Your Customer (KYC) obligations, detect and prevent fraudulent activity, money laundering, and underage gambling.
- Service delivery and improvement: to provide access to casino games, sports betting markets, promotions, and customer support, and to analyse usage patterns to improve platform performance.
- Responsible gaming: to monitor gaming behaviour for indicators of problem gambling, deliver session reminders, and process self-exclusion and deposit limit requests.
- Communications: to send account-related notifications (deposit confirmations, withdrawal updates, security alerts) and, where you have opted in, promotional communications about gb66 offers.
4. Legal Basis for Processing
gb66 processes your personal data on one or more of the following legal bases depending on the nature and purpose of the processing activity: (a) Contract performance — processing that is necessary to provide the Service you have requested, including account management, payment processing, and game access; (b) Legal obligation — processing required to comply with applicable laws, including anti-money laundering obligations, KYC requirements, and age verification; (c) Legitimate interests — processing that serves gb66's legitimate business interests, such as fraud detection, platform security, and service improvement, where those interests are not overridden by your own data protection rights; and (d) Consent — where we rely on your freely given, specific, and informed consent, such as for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Where gb66 relies on legitimate interests as the legal basis for processing, we carry out a balancing assessment to ensure our interests are not overridden by your fundamental rights and freedoms. If you would like more information about any specific balancing assessment, you may contact us using the details in Section 14 of this Policy.
5. Data Sharing and Disclosure
gb66 does not sell your personal data. We do not share your data with unaffiliated third parties for their own commercial or marketing purposes. However, to operate the gb66 platform and comply with our legal obligations, we do share data with a limited number of carefully selected service providers and in specific legally required circumstances, as described below.
- Payment processors: We share transaction data with payment service providers (including bKash, Nagad, Rocket, Upay, and card processing networks) strictly to the extent necessary to complete deposit and withdrawal transactions on your behalf.
- Identity verification providers: We share identity documents and associated personal data with KYC and fraud-prevention service providers for the purpose of verifying player age and identity and detecting fraudulent account activity.
- Technology and infrastructure providers: We use third-party hosting, database management, and analytics providers who process data on our behalf under strict data processing agreements that prohibit any secondary use of player data.
- Legal and regulatory disclosure: We will disclose personal data where required by applicable law, court order, or competent regulatory or law enforcement authority, including for anti-money laundering reporting obligations. We will notify you of any such disclosure where legally permitted to do so.
6. Data Retention
gb66 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, whichever is longer. The following general retention periods apply: active account data is retained for the duration of the account and for a minimum of five (5) years following account closure to meet anti-money laundering record-keeping requirements; transaction records are retained for a minimum of five (5) years from the date of the transaction; KYC verification documents are retained for a minimum of five (5) years from the date of verification or account closure, whichever is later; communications and support records are retained for two (2) years from the date of the interaction.
When data is no longer required, gb66 will securely delete or anonymise it in accordance with industry-standard data destruction procedures. Anonymised or aggregated data that can no longer identify an individual may be retained indefinitely for statistical analysis and platform improvement purposes. If you request deletion of your account and personal data under Section 10 of this Policy, we will action your request subject to any retention obligations that override your right to erasure under applicable law.
7. Data Security
gb66 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include SSL/TLS encryption for all data transmitted between your device and the gb66 platform; encrypted storage of sensitive account data including passwords (stored as salted cryptographic hashes — never in plaintext); role-based access controls that restrict internal access to personal data to personnel who require it to perform their job functions; and regular security assessments to identify and address potential vulnerabilities in our systems.
No method of data transmission over the internet or electronic storage is completely secure, and gb66 cannot guarantee absolute security. However, we take data security seriously and continually review our security practices to address emerging risks. If gb66 becomes aware of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay in accordance with applicable data protection law.
8. Your Data Rights
Subject to applicable law and any overriding legal obligations that may limit the exercise of certain rights in particular circumstances, you have the following rights in relation to the personal data gb66 holds about you. To exercise any of these rights, contact gb66 customer support at [email protected] with a clear description of your request and your registered mobile number for identity verification purposes. We will respond to all valid requests within a reasonable timeframe.
-
👁️
Right of AccessYou may request a copy of the personal data gb66 holds about you, together with information about how it is used and with whom it is shared.
-
✏️
Right of RectificationYou may request that gb66 correct any inaccurate or incomplete personal data we hold about you. You can also update many account details directly from your account settings.
-
🗑️
Right to ErasureYou may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to our legal retention obligations under anti-money laundering and other applicable laws.
-
⏸️
Right to Restrict ProcessingYou may request that gb66 restrict the processing of your data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing pending verification of our legitimate grounds.
-
📤
Right to Data PortabilityWhere processing is based on your consent or on a contract with you, and processing is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
-
🚫
Right to ObjectYou may object at any time to the processing of your personal data where we rely on legitimate interests as the legal basis. You also have an absolute right to object to your data being used for direct marketing purposes, and gb66 will cease such processing immediately upon receiving your objection.
9. Cookies and Tracking Technologies
gb66 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored on your device by your browser when you visit a website. gb66 uses the following categories of cookies: (a) Strictly necessary cookies — these are essential for the platform to function and cannot be switched off. They include session cookies that keep you logged in during your visit and security cookies that help detect fraudulent activity. (b) Performance and analytics cookies — these collect anonymous, aggregated information about how players use the platform (pages visited, time on site, error messages) to help us improve platform performance. (c) Functional cookies — these remember your preferences (such as language settings) to provide a more personalised experience.
You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the gb66 platform — in particular, disabling strictly necessary cookies will prevent you from logging in or using core platform features. gb66 does not use third-party advertising cookies or cross-site tracking technologies for targeted advertising purposes.
10. Children and Minors
The gb66 platform is strictly for adults aged 21 and above. gb66 does not knowingly collect or process personal data from individuals under the age of 21. If you are under 21, you must not use the gb66 platform or provide any personal data to gb66. If gb66 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data from our systems and permanently close the associated account. If you are a parent or guardian and believe that a minor in your care has registered on the gb66 platform, please contact us immediately at [email protected] so we can investigate and take appropriate action.
11. Changes to This Privacy Policy
gb66 reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will update the Last Updated date at the top of this page and, where the change is significant, notify you via your registered contact details or by posting a notice on the gb66 platform prior to the change taking effect. Your continued use of the gb66 platform following the effective date of any update constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed about how we protect your personal data. Archived versions of previous Policy iterations are available on request by contacting customer support.
12. Contact Us
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how gb66 handles your personal data, please contact our customer support team. Support is available daily between 09:00 and 24:00 Bangladesh Standard Time (BST, UTC+6). Email: [email protected] (plain text — not a clickable link). Please include your registered mobile number and a clear description of your request in all correspondence to allow us to verify your identity and respond promptly.