gb66 Privacy Policy

gb66 ("we", "us", "our") operates the online betting and gaming platform accessible at https://gb66.online (the "Platform"). We are committed to protecting the privacy and personal data of all users who interact with the Platform, whether as registered players, prospective players, or visitors browsing the website.

This Privacy Policy explains what personal data we collect about you, the purposes for which we use it, the legal bases upon which we rely to process it, the circumstances in which we may share it with third parties, and the rights you have in relation to your data. This Policy applies to all personal data processed by gb66 in connection with the Platform and any related customer support or communication channels.

This Privacy Policy should be read in conjunction with the gb66 Terms & Conditions, which are incorporated by reference. Capitalised terms used in this Privacy Policy that are not otherwise defined here carry the meanings given to them in the Terms & Conditions. This Privacy Policy was last updated in January 2026.

gb66's Platform is designed for and marketed to adult players based in Bangladesh. All data processing activities described in this Privacy Policy are conducted with Bangladesh-based players in mind. If you are accessing the Platform from outside Bangladesh, please be aware that your data may be processed in a different jurisdiction, and different legal protections may apply.

gb66 collects personal data from you directly when you register an account, make a deposit or withdrawal, contact our support team, or otherwise interact with the Platform. We also collect certain data automatically when you visit the Platform, and in some cases from third-party sources such as payment processors. The categories of personal data we collect are set out below.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where a player voluntarily discloses such information in the course of a support interaction. Where such data is disclosed incidentally, it is not recorded separately and is handled with the highest level of care.

gb66 uses the personal data collected about you for the following purposes. Each purpose is matched to the legal basis upon which we rely, as detailed in Section 4 of this Privacy Policy.

• Account creation and management: To register your account, verify your identity, maintain your account profile, and provide you with access to the Platform's full range of features.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain accurate financial records associated with your account.
• Identity verification (KYC): To fulfil our obligation to verify the identity and age of all registered players in accordance with our Terms & Conditions and applicable compliance requirements.
• Platform security and fraud prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, bonus abuse, and other forms of prohibited conduct on the Platform.
• Customer support: To respond to your queries, complaints, and requests, and to maintain records of communications for quality assurance and dispute resolution purposes.
• Responsible gaming: To monitor player activity for indicators of problem gambling, to administer self-exclusion and deposit limit settings, and to fulfil our duty of care to players.
• Platform improvement: To analyse aggregate usage patterns, conduct internal research, and improve the functionality, design, and content of the Platform. This analysis uses anonymised or pseudonymised data wherever possible.
• Legal compliance: To comply with applicable legal obligations, respond to lawful requests from government or regulatory authorities, and to establish, exercise, or defend legal claims.
• Marketing communications: To send you promotional emails, bonus offers, and news about the Platform, where you have given explicit consent to receive such communications. You may opt out at any time by contacting [email protected].

gb66 does not use automated decision-making or profiling that produces legal effects or similarly significant effects on individual players, except where required to detect fraud or enforce responsible gaming obligations. Where automated processing of this nature takes place, you have the right to request human review of any decision that affects you.

gb66 processes your personal data on one or more of the following legal bases, depending on the specific processing activity in question:

• Contractual necessity: Processing required to enter into or perform the contract between you and gb66 — primarily account registration, transaction processing, and customer support. Without this processing, gb66 cannot provide its services to you.
• Legal obligation: Processing required to comply with legal obligations applicable to gb66, including identity verification (KYC), anti-money laundering checks, and the retention of financial transaction records.
• Legitimate interests: Processing carried out for gb66's legitimate business interests, provided those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security, and internal analytics for service improvement.
• Consent: Processing based on your explicit, freely given, informed consent — primarily marketing communications. Where consent is the legal basis, you have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Vital interests: In exceptional circumstances, processing may be necessary to protect the vital interests of a data subject or another natural person. This basis is relied upon rarely and only where no other basis is available.

gb66 does not sell your personal data to any third party. We share your personal data only in the circumstances described below, and only to the extent necessary for the stated purpose.

• Payment processors: Your financial data is shared with payment service providers — including bKash, Nagad, Rocket, Upay, and banking partners — solely for the purpose of processing deposits and withdrawals on your behalf. These providers are bound by their own privacy and data security obligations.
• Game providers: Certain technical identifiers (such as a pseudonymised player ID and session token) are shared with third-party game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to deliver their games on the Platform. No personally identifiable data beyond what is strictly necessary is shared for this purpose.
• KYC and identity verification services: Where gb66 uses third-party identity verification tools, relevant identity documents and biographic data may be processed by those providers strictly for the purpose of completing KYC verification.
• Legal and regulatory authorities: gb66 may disclose personal data to government bodies, law enforcement agencies, or regulatory authorities where required to do so by law, court order, or formal legal process. gb66 will notify affected players of such disclosures to the extent permitted by law.
• Professional advisers: gb66 may share personal data with lawyers, accountants, auditors, or insurers where necessary to obtain professional advice or in connection with legal proceedings.
• Business transfers: In the event of a merger, acquisition, or sale of all or a portion of gb66's business assets, personal data held by gb66 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer in advance.

All third parties with whom gb66 shares personal data are required to handle that data securely, to use it only for the purpose for which it was shared, and to comply with applicable data protection obligations. gb66 does not permit its service providers to use your personal data for their own marketing purposes.

gb66 uses cookies and similar tracking technologies on the Platform to ensure its proper functioning, to enhance your user experience, and to gather anonymised analytics data. A cookie is a small text file placed on your device when you visit the Platform. Cookies allow the Platform to recognise your device on subsequent visits and to remember your preferences and session state.

The following categories of cookies may be used on the gb66 Platform:

• Strictly necessary cookies: These cookies are essential for the Platform to function and cannot be switched off. They are typically set in response to actions you take, such as logging in or setting deposit limits. These cookies do not store any personally identifiable information.
• Performance and analytics cookies: These cookies collect aggregated, anonymised information about how visitors use the Platform — such as which pages are visited most frequently and how users navigate through the site. This information is used to improve the Platform's performance and usability.
• Functional cookies: These cookies allow the Platform to remember choices you have made — such as your preferred language or display settings — and to provide a more personalised experience. The information these cookies collect may be anonymised.
• Session cookies: These cookies are temporary and are deleted from your device when you close your browser. They are used to maintain your session while you are logged into your gb66 account.

You can control the use of non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform — for example, session cookies are required to keep you logged in during your visit. Strictly necessary cookies cannot be disabled without significantly impairing the Platform's core functions.

gb66 does not use third-party advertising cookies or behavioural tracking cookies for the purpose of serving targeted advertisements on external websites.

gb66 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the gb66 servers is encrypted in transit using industry-standard SSL/TLS protocols, ensuring that your personal and financial data cannot be intercepted during transmission.
• Encrypted data storage: Sensitive personal data, including identity verification documents and financial details, is stored in encrypted form on secure servers. Encryption keys are managed separately from the encrypted data.
• Access controls: Access to personal data within gb66's systems is restricted on a strict need-to-know basis. Staff with access to personal data are trained in data protection obligations and are subject to confidentiality obligations.
• Regular security audits: gb66 conducts regular internal and third-party security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Intrusion detection: gb66's systems are monitored continuously for signs of unauthorised access, abnormal data flows, or other indicators of a security breach.
• Incident response: In the event of a confirmed personal data breach, gb66 has procedures in place to assess the impact, contain the breach, notify affected players where required, and take corrective action to prevent recurrence.

While gb66 takes all reasonable steps to protect your personal data, no method of transmission over the internet or method of electronic storage is completely secure. You are responsible for keeping your gb66 login credentials confidential and for notifying gb66 immediately at [email protected] if you suspect that your account has been accessed without your authorisation.

gb66 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Where data is anonymised rather than deleted, it may be retained indefinitely for statistical and research purposes.

If you request closure of your gb66 account, we will initiate the deletion or anonymisation of your personal data within 90 days of confirming the account closure, subject to the retention periods set out above for data that we are legally required to retain for a longer period.

As a player using the gb66 Platform, you have the following rights in relation to your personal data. gb66 is committed to honouring these rights and will respond to all valid requests within a reasonable timeframe, typically within 30 days of receipt of a complete request.

• Right of access: You have the right to request a copy of the personal data gb66 holds about you, along with information about how it is being processed. This is sometimes called a Subject Access Request (SAR). gb66 will provide this information free of charge in a commonly used electronic format.
• Right to rectification: You have the right to request the correction of any inaccurate or incomplete personal data gb66 holds about you. Where possible, you may update certain data directly through your account settings without needing to submit a formal request.
• Right to erasure: You have the right to request that gb66 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and there is no other legal basis for processing. This right is subject to legal retention obligations that require gb66 to retain certain data for specified periods.
• Right to restriction of processing: You have the right to request that gb66 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being verified following a rectification request.
• Right to data portability: Where processing is based on your consent or on contractual necessity, and processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller.
• Right to object: You have the right to object to processing based on gb66's legitimate interests, including profiling for fraud detection. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact gb66's data support team at [email protected] with a clear description of your request and sufficient information to identify your account. gb66 may ask for additional verification of your identity before processing a request, in order to protect your data from unauthorised access.

The gb66 Platform is strictly for adults aged 21 years and above. gb66 does not knowingly collect, process, or store personal data from any person under the age of 21. The Platform's registration process includes age verification steps, and gb66 conducts KYC checks to confirm that registered players meet the minimum age requirement.

If gb66 discovers or is notified that personal data has been collected from a person under the age of 21 — whether through a falsified registration or any other means — gb66 will immediately close the relevant account, delete all associated personal data, and reverse any transactions linked to that account.

If you are a parent or guardian and you believe that your child (under 21) has registered on the gb66 Platform, please contact us immediately at [email protected]. We will investigate and take prompt action to remove the account and all associated data.

gb66 encourages parents and guardians to make use of parental control software and internet filtering tools to help prevent minors from accessing online betting and gaming platforms. The responsibility for supervising the online activities of children ultimately rests with parents and guardians.

The gb66 Platform may contain links to or integrations with third-party services — most notably the game software provided by studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you access a game delivered by a third-party game provider, you may be interacting with software hosted or partially processed on that provider's infrastructure.

gb66 is not responsible for the privacy practices of third-party game providers, payment processors, or any other external services linked to or integrated with the Platform. Each third party operates under its own privacy policy and data protection framework. gb66 recommends that you review the privacy policies of any third-party services you interact with through the Platform.

Third-party services integrated with gb66 are contractually required to handle any data shared with them in a manner consistent with applicable data protection obligations and with the terms of their data processing agreements with gb66. gb66 does not share more data with these providers than is strictly necessary for the delivery of their specific service.

gb66 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the Platform. When we make material changes to this Privacy Policy, we will notify registered players by email to the address held on their account and will display a prominent notice on the Platform for a reasonable period following the update.

The effective date of the current version of this Privacy Policy is stated at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how gb66 is protecting your data. Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the changes.

If you disagree with any changes to this Privacy Policy, you have the right to close your gb66 account and request deletion of your personal data in accordance with Section 9 of this Policy. To close your account, please contact [email protected].

If you have any questions, concerns, or complaints about this Privacy Policy or about how gb66 handles your personal data, please contact our data support team through the following channel:

• Email: [email protected] — available 24 hours a day, 7 days a week. Please include "Privacy Request" in the subject line of your email along with your registered username to help us respond efficiently.
• Response timeframe: gb66 aims to acknowledge all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 30 calendar days.
• Complaint resolution: If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint through the appropriate channels available in your jurisdiction.

gb66 treats all privacy-related correspondence with the utmost seriousness and is committed to resolving any concerns about your personal data promptly, transparently, and fairly. We value the trust you place in gb66 when you share your personal data with us, and we take that responsibility seriously.