gf66 Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how gf66 ("gf66", "we", "us", or "our") collects, uses, stores, and protects the personal information of players and visitors ("you" or "your") who access the online casino and sports betting platform available at https://gf66.club and any associated mobile or desktop applications (collectively, the "Platform").

gf66 is committed to protecting your privacy and handling your personal data in a transparent, fair, and lawful manner. This Policy has been drafted to give you a clear understanding of our data practices so that you can make informed decisions about your use of the Platform.

By registering an account, accessing the Platform, or otherwise interacting with our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you must discontinue use of the Platform and contact us to close your account.

This Policy should be read alongside gf66's Terms & Conditions and Responsible Gaming Policy, both of which are available on the Platform and are incorporated herein by reference.

Data We Collect

gf66 collects personal data in the following categories, depending on the nature of your interaction with the Platform:

2.1 Identity Data

When you register an account or complete our Know Your Customer (KYC) verification process, we collect information including your full legal name, date of birth, nationality, and copies of government-issued identification documents (such as a National ID card or passport).

2.2 Contact Data

We collect your email address, mobile phone number (including numbers associated with your bKash, Nagad, or Rocket mobile money accounts), and residential address within Bangladesh.

2.3 Financial Data

We collect transactional information relating to your deposits and withdrawals, including mobile money account references (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, BRAC Bank, City Bank), and card details (Visa, Mastercard) where applicable. Full payment card numbers are never stored on gf66's servers.

2.4 Account & Activity Data

We collect data about your use of the Platform, including your username, login history, betting and gaming activity, transaction history, bonus usage, session duration, game preferences, and any communications you exchange with our support team.

2.5 Technical Data

We collect technical information automatically when you access the Platform, including your IP address, browser type and version, device type and operating system, screen resolution, referral URL, and geolocation data (at country and city level).

2.6 Communications Data

If you contact gf66 via live chat, email at [email protected], or any other support channel, we retain records of those communications to resolve your query and improve our service quality.

How We Collect Data

gf66 collects personal data through the following means:

• Direct interactions: Data you provide voluntarily when creating an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated technologies: Technical data collected automatically as you navigate the Platform, including via cookies, web beacons, server logs, and similar tracking technologies. Please see Section 9 for our full Cookie Policy.
• Third-party service providers: Information received from payment processors (such as bKash and Nagad) and identity verification providers to confirm the accuracy of details you have provided to us.
• Publicly available sources: In certain circumstances, gf66 may verify information you have provided against publicly available databases to comply with fraud prevention and anti-money-laundering obligations.

How We Use Your Data

gf66 uses the personal data we collect for the following purposes:

• Account creation and management: To register your account, verify your identity, and maintain your player profile on the Platform.
• Service delivery: To process your bets, manage your casino gameplay, calculate winnings, process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and banking partners, and provide the full range of gf66's gaming services.
• Customer support: To respond to your queries, resolve disputes, and improve the quality of our support services.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, money laundering, bonus abuse, and other prohibited activities as described in our Terms & Conditions.
• Responsible gaming compliance: To monitor gaming activity and apply responsible gaming tools (such as deposit limits and self-exclusion) where a player has requested them or where gf66 identifies a potential problem gambling pattern.
• Legal and regulatory compliance: To meet our obligations under applicable anti-money-laundering, know-your-customer, and data protection requirements.
• Platform improvement: To analyse usage patterns, improve the performance and user experience of the Platform, and develop new features and games relevant to players in Bangladesh.
• Promotional communications: With your consent, to send you information about gf66 promotions, bonuses, and seasonal offers relevant to events such as the BPL, IPL, Eid, and Pohela Boishakh. You may opt out of marketing communications at any time through your account settings or by contacting support.

Legal Basis for Processing

gf66 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered player — including account management, bet settlement, and payment processing — is carried out on the basis that it is necessary to perform the contract between you and gf66.
• Legal obligation: Processing carried out to comply with applicable legal requirements, including KYC verification, anti-money-laundering checks, and regulatory reporting, is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and Platform improvement is carried out on the basis of gf66's legitimate business interests, where those interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications is carried out on the basis of your explicit consent. You have the right to withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Sharing Your Data

gf66 does not sell your personal data to any third party. We may share your data with carefully selected third parties only in the following circumstances:

• Payment processors: We share necessary financial data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard to facilitate your deposit and withdrawal transactions. These providers process your data solely for the purpose of executing your financial instructions.
• Identity verification providers: We work with authorised KYC and age verification service providers who assist us in confirming the identity and eligibility of players. These providers operate under strict data processing agreements.
• Game software providers: Where live dealer games are supplied by third-party studios such as Evolution Gaming or Ezugi, minimal technical data (such as your session token) may be shared with those providers to enable live game functionality. No personally identifiable information beyond what is operationally necessary is shared.
• Fraud prevention agencies: We may share data with fraud prevention and anti-money-laundering agencies to detect and prevent financial crime. This includes sharing IP addresses, device fingerprints, and transaction data with relevant verification services.
• Law enforcement and regulatory authorities: gf66 may disclose your personal data to law enforcement agencies, courts, or regulatory bodies where required by law or where we have a good-faith belief that disclosure is necessary to protect the rights, property, or safety of gf66, its players, or others.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of gf66's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and your rights will be preserved.

Data Retention

gf66 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to the following considerations:

• Active accounts: For the duration of your active account relationship with gf66, all account and activity data is retained to provide you with an uninterrupted service.
• Post-closure retention: Following the closure of your gf66 account, we retain your identity, financial, and transaction data for a minimum of five (5) years to comply with anti-money-laundering obligations and to defend against any claims that may arise from your period of play.
• Marketing data: If you have consented to marketing communications, your contact details are retained for this purpose until you withdraw consent. Upon withdrawal of consent, your data is removed from our marketing lists within fourteen (14) days.
• Support records: Communications data relating to support interactions is retained for three (3) years to allow for dispute resolution and service quality review.
• Technical data: Server logs and technical data are typically retained for twelve (12) months for security monitoring and platform analytics purposes, after which they are anonymised or deleted.

When retention periods expire, data is securely deleted or anonymised so that it can no longer be associated with any individual player.

Data Security

gf66 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your browser or app and gf66's servers is encrypted using industry-standard SSL/TLS protocols. You can verify the presence of an encrypted connection via the padlock icon in your browser's address bar when accessing https://gf66.club.
• Encrypted data storage: Sensitive personal and financial data is stored in encrypted form on gf66's servers. Full payment card numbers are never stored.
• Access controls: Access to personal data within gf66 is restricted on a need-to-know basis. Staff with access to player data receive training on data protection obligations and are bound by confidentiality agreements.
• Two-factor authentication: gf66 encourages all players to enable two-factor authentication on their accounts to provide an additional layer of security against unauthorised access.
• Regular security assessments: gf66 conducts periodic internal reviews of its data processing systems, and engages external security professionals to perform vulnerability assessments of the Platform.
• Incident response: In the event of a personal data breach that poses a risk to player rights, gf66 has a documented incident response procedure. Affected players will be notified promptly in accordance with applicable data breach notification obligations.

Cookies & Tracking Technologies

gf66 uses cookies and similar technologies (including web beacons, pixel tags, and local storage) on the Platform. This section explains what these technologies are, what we use them for, and how you can manage your preferences.

9.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device on subsequent visits and to remember information about your preferences and activity.

9.2 Types of Cookies We Use

9.3 Managing Cookies

You can manage non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies via their privacy or security settings. Please note that disabling strictly necessary cookies may prevent some or all features of the Platform from functioning correctly. Detailed instructions for managing cookies are available in the help documentation of all major browsers.

Your Privacy Rights

As a player on the gf66 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request":

• Right of access: You have the right to request a copy of the personal data gf66 holds about you, together with information about how it is being used. We will respond to access requests within thirty (30) days.
• Right to rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. You may update certain account details directly through the Platform's account settings page.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Please note that this right is subject to our legal obligations to retain certain data (see Section 7).
• Right to restriction: You have the right to request that we restrict processing of your data in certain circumstances, such as while a dispute about data accuracy is being resolved.
• Right to object: You have the right to object to processing of your personal data where that processing is based on legitimate interests or is carried out for direct marketing purposes.
• Right to data portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

gf66 will respond to all privacy rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, in which case you will be notified of the extension and the reason for it.

Protection of Minors

gf66 operates a strict 18+ only policy. The Platform is not intended for, and must not be accessed by, any person under the age of 18. We do not knowingly collect personal data from individuals under 18 years of age.

If you are a parent or guardian and you believe that a minor in your household has provided personal data to gf66 or has accessed the Platform, please contact us immediately at [email protected]. Upon verification, gf66 will promptly close the account and delete all associated personal data in accordance with our legal obligations.

We encourage parents and guardians to make use of parental control software and to keep their gf66 login credentials private to prevent minors from accessing online gambling services.

International Data Transfers

gf66 primarily processes and stores personal data on servers located in secure data centres. In certain circumstances, your personal data may be transferred to and processed by third-party service providers located outside Bangladesh — for example, where gf66 uses internationally based KYC verification providers, fraud detection services, or live casino game studios.

Where such transfers occur, gf66 ensures that appropriate safeguards are in place to protect your data. These safeguards may include data processing agreements incorporating recognised data protection standards, or reliance on service providers who operate under equivalent data protection frameworks.

By using the Platform and accepting this Privacy Policy, you consent to the transfer of your personal data as described in this section, subject always to the protections outlined in this Policy.

Changes to This Policy

gf66 reserves the right to update or modify this Privacy Policy at any time. When material changes are made, we will notify registered players via a prominent notice on the Platform and, where practicable, via the email address associated with your account, at least seven (7) days prior to the changes taking effect.

The "Last Updated" date at the top of this document reflects the date of the most recent revision. Your continued use of the Platform following notification of changes constitutes your acceptance of the updated Privacy Policy. If you do not agree to the revised Policy, you must cease using the Platform and may close your account by contacting support.

We encourage you to review this Privacy Policy periodically to stay informed about how gf66 is protecting your information. The current version of this Policy is always available at https://gf66.club/privacy-policy.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or gf66's handling of your personal data, please contact our dedicated support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the gf66 Platform in Bangladesh Standard Time (UTC+6)
• Response Time: Privacy-related enquiries are typically responded to within 24 hours. Formal rights requests are processed within 30 days.

gf66 serves players across Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. Our support team is knowledgeable about local payment methods including bKash, Nagad, Rocket, and Upay, and can assist with any data-related query in connection with those services.