gt66 Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") describes how gt66 ("gt66", "we", "us", "our"), the operator of the online betting and casino platform accessible at https://gt66.bar, collects, uses, stores, and protects personal data relating to players and visitors ("you", "your") who access or use the gt66 platform.

This Policy applies to all personal data collected through the gt66 website, mobile browser interface, customer support channels, and any other interaction you have with gt66 as an operator. It should be read together with the gt66 Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference.

By registering an account or continuing to use the gt66 platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Policy, you should discontinue use of the platform immediately.

2. Data Controller

gt66 is the data controller responsible for the personal data you provide when using the gt66 platform. As data controller, gt66 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing is carried out lawfully, fairly, and transparently.

For all data-related enquiries, including subject access requests, correction requests, and deletion requests, you may contact the gt66 data team using the contact details provided in Section 13 of this Policy.

3. Information We Collect

gt66 collects personal data from you in the following categories:

3.1 Registration & Identity Data. When you create a gt66 account, we collect your full legal name, date of birth, residential address in Bangladesh, mobile number, email address, and username. This data is required to open and maintain your account.

3.2 Identity Verification (KYC) Data. To comply with responsible platform management obligations and to verify that you meet the minimum age requirement of 21 years, gt66 may collect copies of government-issued identity documents such as your National Identity Card or passport, proof of address documents, and proof of ownership of the payment method used on your account.

3.3 Financial & Transaction Data. gt66 records all deposit and withdrawal transactions processed through your account, including the payment method used (e.g., bKash, Nagad, Rocket, Upay), transaction amounts in Bangladeshi Taka (BDT), timestamps, and transaction reference numbers. We do not store full bank account credentials or mobile financial service PINs.

3.4 Gaming & Betting Activity Data. We maintain records of your betting history across all sports markets (including cricket BPL, IPL, and T20 matches), casino game sessions, slot game play, live dealer table activity, and any bonuses or promotions credited to your account. This data is used for account management, dispute resolution, and responsible gaming monitoring.

3.5 Technical & Device Data. When you access the gt66 platform, we automatically collect your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, time spent on pages, and session duration. This data is collected via server logs and analytics cookies.

3.6 Communications Data. If you contact gt66 customer support via email or live chat, we retain a record of the communication, including your enquiry and our response. This data is used to improve support quality and to maintain an audit trail for compliance purposes.

3.7 Marketing Preferences. Where you have opted in to receive promotional communications from gt66, we record your marketing preferences and the communications sent to you. You may withdraw this consent at any time by contacting support or updating your account preferences.

Data Category	Examples	Collection Method
Identity Data	Full name, date of birth, National ID	Registration form, KYC upload
Contact Data	Mobile number, email address, Dhaka/Chittagong address	Registration form
Financial Data	bKash/Nagad number, deposit amounts in ৳, withdrawal history	Cashier transactions
Gaming Activity	Bet history, casino sessions, slot play, bonus usage	Platform activity logs
Technical Data	IP address, browser, device type, session data	Server logs, analytics cookies
Communications	Support emails, live chat transcripts	Customer support interactions

4. How We Use Your Information

gt66 uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your gt66 account, including processing login sessions, updating account details, and managing account closures.
• Payment Processing: To facilitate deposits and withdrawals through bKash, Nagad, Rocket, Upay, and other supported Bangladeshi payment methods, and to maintain accurate financial records for each transaction.
• Identity Verification: To verify your age (minimum 21 years) and identity as required by our KYC procedures, and to confirm ownership of payment methods used on your account.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance with account-related issues in a timely and accurate manner.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised account access, and any other conduct that may be prohibited under the gt66 Terms & Conditions.
• Responsible Gaming: To monitor your gaming activity for signs of problem gambling, to administer self-exclusion requests and deposit limits, and to deliver responsible gaming communications where appropriate.
• Platform Improvement: To analyse aggregated, anonymised usage data to understand how players interact with the platform and to improve the user experience across cricket betting, slot games, live dealer tables, and other features.
• Legal Compliance: To comply with applicable laws and regulations, to respond to lawful requests from regulatory or law enforcement authorities, and to maintain records required for audit purposes.
• Marketing Communications (with consent): Where you have opted in, to send you information about promotions, bonuses, new games, and platform updates relevant to your interests as a gt66 player. You may opt out at any time.

5. Legal Basis for Processing

gt66 processes your personal data on the following legal bases:

• Contractual Necessity: Processing your registration data, financial transaction data, and gaming activity records is necessary for the performance of the contract between you and gt66 — specifically, the provision of the betting and casino services described in the Terms & Conditions.
• Legal Obligation: Processing your KYC documentation and transaction records is required for gt66 to fulfil its obligations under applicable anti-money laundering, responsible gaming, and age verification requirements.
• Legitimate Interest: Processing technical data and platform usage data for fraud detection, security monitoring, and platform improvement is carried out on the basis of gt66's legitimate interest in maintaining a secure, fair, and functional platform for all players.
• Consent: Where processing is based on your consent — such as sending optional marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Information

6.1 Payment Processors. gt66 shares transaction data with third-party payment service providers — including bKash, Nagad, Rocket, and Upay — solely to the extent necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and data security standards.

6.2 Identity Verification Providers. gt66 may use third-party KYC and identity verification services to authenticate the documents you submit. These providers are contractually bound to process your data only for the purpose of identity verification and to maintain appropriate security standards.

6.3 Game Suppliers. Session data (such as a unique session token and game outcome records) may be shared with gt66's game providers — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — to ensure the integrity and accurate settlement of game rounds. These providers do not receive your full personal profile.

6.4 Regulatory & Law Enforcement Bodies. gt66 may disclose your personal data to competent authorities, regulators, or law enforcement bodies where required or permitted by applicable law, including in connection with anti-money laundering investigations, fraud inquiries, or court orders.

6.5 No Sale of Data. gt66 does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing or commercial purposes. Any data sharing is strictly limited to what is necessary for the purposes described in this Policy.

6.6 Business Transfers. In the event that gt66 undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer via the contact details on your account before your data is transferred and becomes subject to a different privacy policy.

7. Data Retention

gt66 retains your personal data for as long as your account remains active and for a defined period thereafter, as described below:

• Active Account Data: Retained for the full duration of your account with gt66, including all transaction records, KYC documentation, and gaming activity logs.
• Closed Account Data: Following account closure (whether initiated by you or by gt66), your data is retained for a minimum of five (5) years to satisfy legal, regulatory, and audit obligations. After this period, data is securely deleted or anonymised.
• KYC Documents: Identity and address verification documents are retained for a minimum of five (5) years from the date of submission, consistent with applicable anti-money laundering record-keeping requirements.
• Support Communications: Customer support correspondence is retained for three (3) years from the date of the interaction for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Records of your marketing consent (or withdrawal of consent) are retained for the duration of any related marketing activity plus three (3) years.

Where gt66 is required by law to retain data for a longer period, the statutory retention period takes precedence over the timelines listed above.

8. Cookies & Tracking Technologies

gt66 uses cookies and similar tracking technologies to operate and improve the platform. The following types of cookies may be set when you visit gt66:

• Essential Cookies: Required for the platform to function. These include session cookies that maintain your login state, security tokens that protect against cross-site request forgery, and cookies that store your language and display preferences. Disabling essential cookies will prevent the platform from functioning correctly.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate the gt66 platform, which pages are most frequently visited, and where users encounter issues. This data is used to improve the platform experience. gt66 uses reputable analytics tools for this purpose.
• Functional Cookies: Used to remember your preferences across sessions, such as your preferred deposit method or recently viewed game categories including cricket betting markets and slot game filters.

You can manage and delete cookies at any time through your browser settings. Note that disabling analytics or functional cookies will not affect your ability to use the core platform features, but may result in a less personalised experience. gt66 does not use third-party advertising or retargeting cookies.

9. Security Measures

gt66 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and gt66 servers.
• Salted cryptographic hashing for all stored account passwords — passwords are never stored in plain text and are not accessible by gt66 staff.
• Role-based access controls ensuring that personal data is accessible only to gt66 staff members who require it to perform their specific job function.
• Regular internal security reviews and vulnerability assessments of the platform infrastructure.
• Secure, access-controlled data storage environments with audit logging for all administrative access to personal data.
• Mandatory data protection training for all gt66 staff who handle personal data as part of their role.

While gt66 takes these measures seriously, no digital platform can guarantee absolute security. You are encouraged to use a strong, unique password for your gt66 account and to contact support immediately if you suspect any unauthorised activity on your account.

10. Your Data Rights

As a gt66 player, you have the following rights in respect of your personal data:

• Right of Access: You may request a copy of the personal data that gt66 holds about you. gt66 will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data gt66 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details directly from your account settings, or contact support for changes to KYC records.
• Right to Erasure: You may request that gt66 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing and there are no overriding legitimate grounds. Note that gt66 may be required to retain certain data to fulfil legal obligations, even following a deletion request.
• Right to Restrict Processing: You may request that gt66 restrict the processing of your data in certain circumstances — for example, while the accuracy of your data is being verified following a rectification request.
• Right to Object: You have the right to object to processing based on gt66's legitimate interests, and to object at any time to the use of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.

To exercise any of the rights listed above, please contact the gt66 data team at [email protected] with the subject line "Data Rights Request" and a clear description of your request. gt66 may ask you to verify your identity before processing the request.

11. Children & Minors

The gt66 platform is strictly restricted to individuals who are 21 years of age or older. gt66 does not knowingly collect personal data from any person under the age of 21. If gt66 becomes aware that personal data has been collected from an individual under the minimum age, the relevant account will be closed immediately, all associated data will be deleted (subject to any legal obligations to retain records of the breach), and any funds held in the account will be handled in accordance with applicable law.

If you believe that a minor has registered a gt66 account, please notify us immediately at [email protected] so that we may investigate and take appropriate action without delay.

12. Changes to This Policy

gt66 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, changes to the categories of data collected, the purposes for which data is used, or the third parties with whom data is shared — gt66 will notify registered players via the email address or mobile number associated with their account, or by displaying a prominent notice on the platform.

The "Last updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the gt66 platform following the publication of an updated Policy constitutes your acceptance of the revised terms. It is your responsibility to review this Policy periodically.

13. Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which gt66 handles your personal data, please contact the gt66 data protection team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Use "Privacy Enquiry" or "Data Rights Request" to ensure your message is routed to the correct team
• Response Time: gt66 aims to acknowledge all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6) and to provide a full response within 30 calendar days

If you are not satisfied with gt66's response to a privacy complaint, you may have the right to escalate your complaint to the relevant data protection authority or regulatory body in your jurisdiction. gt66 will cooperate fully with any such inquiry.