gb666 Privacy Policy

gb666 is an online casino and sports betting platform operating at https://gb666.io, serving players across Bangladesh with a full suite of casino games, live dealer tables, slot machines, and sports betting markets — including cricket, football, and kabaddi. For the purposes of this Privacy Policy, "gb666", "we", "us", and "our" refer to the entity operating the gb666 platform.

We act as the data controller in respect of the personal information you provide to us when you register for an account, make a deposit, contact our support team, or otherwise interact with the gb666 platform. As data controller, we determine the purposes and means by which your personal data is processed.

If you have any questions about this Privacy Policy or our data practices, you may contact our Data Protection team at [email protected]. Please note that this email address is for written enquiries only and is displayed as plain text — it is not a clickable link.

gb666 collects personal data in several categories depending on your level of interaction with the platform. The table below summarises the categories of data we may collect and why.

gb666 collects your personal data through the following channels:

• Direct interactions: Data you provide when you fill in the registration form, complete KYC verification, make a deposit or withdrawal request, contact customer support, or respond to a promotion.
• Automated technologies: As you browse and use the gb666 platform, we automatically collect Technical Data and Usage Data through cookies, server logs, and similar tracking technologies. See Section 8 for full details on our cookie practices.
• Third-party sources: We may receive data about you from KYC verification partners, payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank), fraud prevention services, and game studio providers where necessary to verify your identity, process a transaction, or investigate a security concern.

gb666 uses the personal data we collect for the following purposes:

• Account management: To create and maintain your gb666 account, verify your identity and age, and ensure your account details remain accurate and up to date.
• Service delivery: To enable you to access and play casino games, place sports bets, participate in promotions, and use all features of the gb666 platform.
• Payment processing: To process deposits and withdrawals in BDT via your chosen payment method and to maintain accurate financial records of all transactions.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct as described in our Terms & Conditions.
• Responsible gaming: To monitor your gaming activity for signs of problem gambling and to administer any deposit limits, cooling-off periods, or self-exclusion requests you have submitted.
• Customer support: To respond to your enquiries, resolve disputes, and improve the quality of our support services through the review of past interactions.
• Marketing communications: To send you relevant promotional offers, bonus notifications, and platform updates by email or SMS, where you have consented to receive such communications. You may unsubscribe at any time by contacting [email protected].
• Legal compliance: To comply with applicable legal obligations, including anti-money laundering (AML) requirements, know-your-customer (KYC) regulations, and any lawful requests from regulatory or law enforcement authorities.
• Platform improvement: To analyse aggregated usage data in order to improve the gb666 platform, optimise game performance, and develop new features that better serve our players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and beyond.

gb666 processes your personal data on the following legal grounds:

• Contractual necessity: Processing your Identity Data, Contact Data, and Financial Data is necessary to perform the contract between you and gb666 — that is, to provide you with a registered account and the services you have signed up to use.
• Legal obligation: Certain processing activities — particularly KYC identity verification and AML transaction monitoring — are required by law and are carried out to ensure gb666's compliance with applicable regulations.
• Legitimate interests: gb666 processes Technical Data and Usage Data on the basis of our legitimate interest in maintaining platform security, preventing fraud, and improving the quality of our services. We conduct a balancing test to ensure our legitimate interests do not override your data protection rights.
• Consent: Where we rely on your consent as a legal basis — for example, for sending marketing emails or SMS messages — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

gb666 does not sell your personal data to any third party. We share your data only in the following limited circumstances and only to the extent necessary for the stated purpose:

• Payment processors: Your Financial Data is shared with your chosen payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank) solely to process your deposit or withdrawal transaction.
• KYC and identity verification partners: Your Identity Data may be shared with a certified third-party KYC provider to verify your identity and age as part of our onboarding and ongoing compliance obligations.
• Game studio providers: Usage Data relating to games you play may be processed by the relevant game studio (e.g., Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) in order to serve game content, resolve technical disputes, and generate certified RNG results. These providers act as data processors under agreements that require them to protect your data.
• Fraud prevention and security services: We may share Technical Data and Identity Data with specialist fraud detection services where we have reasonable grounds to investigate suspicious activity on your account.
• Legal and regulatory authorities: gb666 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by law or in response to a valid legal order. We will notify you of such disclosure where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of gb666's assets, your personal data may be transferred to the acquiring entity, subject to that entity honouring the commitments set out in this Privacy Policy.

gb666 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The following retention periods apply:

• Active account data: Retained for the full duration of your account's active status plus a minimum of five years after account closure, to meet our legal and regulatory record-keeping obligations.
• Transaction records: Financial transaction records are retained for a minimum of seven years from the date of the transaction in compliance with anti-money laundering regulations.
• KYC documents: Identity verification documents are retained for five years following account closure or, where required by law, for a longer period as directed by applicable regulation.
• Support communications: Live chat transcripts and support email records are retained for two years from the date of the interaction to support dispute resolution and quality assurance processes.
• Marketing consent records: Records of your marketing consent (or withdrawal thereof) are retained for five years to demonstrate compliance.

When the relevant retention period expires, gb666 will securely delete or anonymise your personal data. Anonymised data — which can no longer be linked back to you — may be retained indefinitely for statistical and platform improvement purposes.

gb666 uses cookies and similar technologies (including local storage and session tokens) to operate the platform, keep your session secure, remember your preferences, and analyse how players use our services. We do not use third-party advertising cookies or behavioural retargeting technologies.

The following categories of cookies are used on the gb666 platform:

• Strictly necessary cookies: These cookies are essential for the gb666 platform to function correctly. They enable you to log in, maintain a session, and access secure areas of the site. These cookies cannot be disabled without affecting your ability to use the platform.
• Functional cookies: These cookies remember your preferences — such as your chosen language and display settings — to provide you with a more personalised experience across sessions.
• Analytics cookies: gb666 uses first-party analytics cookies to measure page performance, identify technical issues, and understand how players navigate the platform. This data is aggregated and does not identify individual users.
• Security cookies: Short-lived session security tokens that help gb666 detect and prevent fraudulent login attempts, session hijacking, and cross-site request forgery (CSRF) attacks.

You can control non-essential cookies through your browser settings. Blocking strictly necessary cookies may impair the functionality of the gb666 platform. For detailed guidance on managing cookies in your specific browser, please refer to your browser's help documentation.

gb666 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and gb666's servers.
• Encryption of sensitive stored data, including financial records and identity documents, using industry-standard encryption algorithms.
• Strict access controls ensuring that personal data is accessible only to gb666 personnel and authorised service providers who have a documented need to access it.
• Regular penetration testing and security audits conducted by independent third-party security specialists.
• Two-factor authentication (2FA) available for all registered player accounts.
• Continuous monitoring of platform infrastructure for anomalous activity, intrusion attempts, and data exfiltration events.

Despite our best efforts, no data transmission over the internet or electronic storage system can be guaranteed as 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, gb666 will notify affected players without undue delay and take all reasonable steps to mitigate the impact of the breach.

As a gb666 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with your full name, registered email address, and a description of your request. We will respond within 30 days.

• Right of access: You have the right to request a copy of the personal data gb666 holds about you, along with information about how it is processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it.
• Right to erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to our legal and regulatory data retention obligations — we may not be able to delete data we are required by law to retain.
• Right to restriction of processing: You may request that gb666 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being investigated.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to processing based on gb666's legitimate interests, including direct marketing. If you object to marketing communications, we will stop sending them immediately.
• Right to withdraw consent: Where gb666 processes your data on the basis of consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out before the withdrawal.

The gb666 platform is strictly intended for adults aged 21 years and above. gb666 does not knowingly collect personal data from any individual under the age of 21. Our registration process includes age verification steps designed to identify and prevent underage access.

If gb666 discovers that personal data has been collected from a person under the age of 21 — for example, because an underage individual provided false date-of-birth information during registration — the relevant account will be immediately suspended, all associated funds will be returned, and all personal data associated with that account will be securely deleted.

If you are a parent or guardian and believe that a minor in your care has registered on the gb666 platform, please contact us immediately at [email protected] so we can take appropriate action without delay.

The gb666 platform may contain references to third-party payment providers (bKash, Nagad, Rocket, Upay) and game studio providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). When you interact with a game or payment service provided by a third party, that party's own privacy policy will apply to the data they collect independently.

gb666 is not responsible for the privacy practices of third-party providers, and this Privacy Policy does not cover data collected directly by those providers. We recommend that you review the privacy policies of any third-party service you interact with through the gb666 platform.

gb666 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. Where changes are material — for example, changes to the categories of data we collect, new third-party sharing arrangements, or changes to your rights — gb666 will notify registered players by email at the address on file at least seven days before the revised policy takes effect.

For non-material changes (such as clarifications of existing language or corrections of typographical errors), the updated policy will be published on this page with a revised "Last Updated" date and will take effect immediately. We encourage you to review this Privacy Policy periodically to stay informed about how gb666 protects your personal data.

Your continued use of the gb666 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you should stop using the platform and close your account before the changes take effect.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way gb666 handles your personal data, please contact our Data Protection team using the details below. We are committed to resolving all privacy-related queries promptly and transparently.

• Email: [email protected] (plain text — not a clickable link)
• Response time: All data privacy enquiries are acknowledged within 48 hours and fully responded to within 30 days of receipt.
• Data subject requests: To submit a formal data access, rectification, erasure, or portability request, please email [email protected] with the subject line "Data Subject Request" and include your full name and registered email address.