Privacy Policy
gfg66 Online Casino

This Privacy Policy ("Policy") sets out the basis on which gfg66 ("we", "us", "our") collects, processes, stores, and shares personal data relating to individuals ("you", "your", "the player") who access or use the gfg66 online casino and sports betting platform, accessible at gfg66.io (the "Platform").

We are committed to processing your personal data in a transparent, fair, and lawful manner. This Policy is intended to give you a clear and complete understanding of how your information is handled from the moment you register an account through to any subsequent use of the Platform's services — including deposits, gameplay, withdrawals, bonus participation, and customer support interactions.

This Policy applies to all personal data collected via the gfg66 website, any associated mobile applications, and through communications you have with our customer support team. It should be read together with our Terms & Conditions and Responsible Gaming Policy, which are available at gfg66.io/terms-conditions and gfg66.io/responsible-gaming respectively.

By registering an account on the gfg66 platform, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not proceed with registration.

gfg66 is an online casino and sports betting platform operated for players located in Bangladesh. The platform provides access to casino games, live dealer tables, sports betting markets, crash games, and related entertainment services. All transactions on the gfg66 platform are denominated in Bangladeshi Taka (BDT).

For the purposes of this Privacy Policy, gfg66 acts as the data controller in respect of the personal data of registered players. As data controller, gfg66 determines the purposes for which personal data is collected and the means by which it is processed.

The categories of personal data that gfg66 may collect about you are described below. Not all categories will necessarily be collected from every player; the specific data collected depends on how you interact with the Platform.

gfg66 does not intentionally collect sensitive personal data such as health information, racial or ethnic origin, political opinions, religious beliefs, or biometric data except where strictly required by applicable law or regulation (for example, in the context of enhanced KYC checks).

gfg66 collects personal data through the following methods:

4.1 Direct Collection. You provide data directly to us when you register an account, complete identity verification, make a deposit or withdrawal request, contact customer support, participate in a promotion, or respond to a survey or feedback request.

4.2 Automated Collection. Certain technical and usage data is collected automatically as you use the Platform. This is done through server logs, session cookies, analytics tools, and similar tracking technologies that record your interactions with the gfg66 website and its features. See Section 8 (Cookies & Tracking) for more detail.

4.3 Third-Party Sources. We may receive information about you from third-party sources where necessary for identity verification and fraud prevention, including:

• Identity verification providers who cross-reference submitted documents
• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) who confirm transaction details
• Fraud detection and anti-money laundering screening services
• Responsible gaming databases such as self-exclusion registers

4.4 Inferred Data. gfg66 may derive certain inferences about your preferences and risk profile based on your gameplay patterns, deposit behaviour, and session activity. These inferences are used internally to personalise your experience and to fulfil our responsible gaming obligations — they are not shared with third parties for commercial profiling purposes.

gfg66 uses your personal data for the following purposes:

gfg66 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or notifying you of the new purpose in an updated Privacy Policy.

gfg66 processes your personal data on the following legal grounds, depending on the specific purpose of processing:

6.1 Contractual Necessity. Processing that is necessary to perform our contract with you — that is, to operate your account, process transactions, and provide the Platform services you have registered to use. Without this processing, we cannot deliver the services described in our Terms & Conditions.

6.2 Legal Obligation. Processing that is required to comply with a legal obligation, including KYC identity verification, anti-money laundering checks, fraud prevention requirements, and responding to lawful requests from competent authorities.

6.3 Legitimate Interests. Processing that is necessary for gfg66's legitimate business interests, provided those interests are not overridden by your rights and interests. This includes fraud detection, platform security, responsible gaming monitoring, and improving the quality of our services.

6.4 Consent. Processing that is based on your freely given, specific, informed, and unambiguous consent — in particular, the sending of direct marketing communications. You may withdraw your consent at any time by contacting our support team or updating your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

gfg66 does not sell your personal data. We may share your data with the following categories of third parties strictly on a need-to-know basis and subject to appropriate data protection safeguards:

7.1 Payment Service Providers. We share transaction-related data with payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) to facilitate deposits and withdrawals. These providers receive only the data necessary to execute the specific transaction and are bound by their own privacy and security obligations.

7.2 Identity Verification Providers. We engage third-party KYC and identity verification services to confirm the accuracy of documents submitted by players as part of the verification process. These providers process identification documents on our behalf under strict data processing agreements.

7.3 Game Content Providers. Game studios and technology providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive limited technical data (such as session tokens and game round identifiers) necessary to deliver game content and record outcomes. These providers do not receive your full identity profile.

7.4 Fraud Prevention and AML Services. We may share data with specialist fraud detection and anti-money laundering screening services as required to identify and prevent financial crime. Sharing for this purpose is based on legal obligation or legitimate interest.

7.5 Legal and Regulatory Authorities. gfg66 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, court order, or legitimate legal process. We will notify you of such disclosures where permitted by law.

7.6 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. We will notify you of any such transfer and the applicable privacy terms before your data is subject to a new privacy policy.

gfg66 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, maintain your login session, and analyse how the Platform is used. This section explains the types of technologies we use and your options for managing them.

8.1 What Are Cookies? Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to store information about your preferences or session state. Cookies may be session cookies (deleted when you close your browser) or persistent cookies (stored on your device for a defined period).

8.2 Categories of Cookies We Use:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that detect fraudulent access attempts. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: These remember your preferences (such as language settings, preferred game categories, and deposit method) to personalise your experience. Disabling these cookies will mean your preferences are not retained between sessions.
• Analytics Cookies: These collect aggregate, anonymised data about how players interact with the Platform — including pages visited, session duration, and features used — to help us improve the service. We use this data internally only.
• Security & Fraud Prevention Cookies: These help us detect and prevent fraudulent activity, including account takeover attempts, bot activity, and unusual transaction patterns.

8.3 Managing Cookies. You may manage your cookie preferences through your browser settings. Most browsers allow you to view, delete, and block cookies. Note that blocking strictly necessary cookies will prevent the gfg66 platform from functioning correctly. For detailed instructions on managing cookies in your specific browser, consult the browser's help documentation.

8.4 Local Storage and Session Storage. In addition to cookies, gfg66 may use browser local storage and session storage to store temporary data related to your session and game state. This data does not leave your device except as part of normal Platform communication.

gfg66 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Our retention periods are set out below:

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for aggregate statistical analysis without any restriction, as it can no longer identify any individual.

gfg66 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include:

• Encryption in transit: All data transmitted between your browser and the gfg66 servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to all pages of the Platform, including login, registration, cashier, and game pages.
• Encryption at rest: Sensitive data fields stored in our databases, including identity documents and financial information, are encrypted using industry-standard algorithms.
• Password hashing: Player passwords are never stored in plain text. We use strong cryptographic hashing algorithms with salt to store password credentials, meaning that even internal gfg66 staff cannot retrieve your password.
• Access controls: Internal access to player data is restricted based on role and necessity. All access is authenticated, logged, and subject to periodic access review.
• Network security: Our infrastructure is protected by firewalls, intrusion detection systems, and DDoS mitigation technology. Regular vulnerability assessments and penetration testing are conducted by independent security professionals.
• Incident response: gfg66 maintains a documented data breach incident response procedure. In the event of a breach that is likely to result in a risk to your rights and freedoms, we will notify affected players promptly and take immediate remediation steps.

gfg66 respects your rights over your personal data. The following rights are available to you as a registered player on the Platform. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will verify your identity before processing any request and will respond within a reasonable timeframe at no charge to you.

Please note that some rights are subject to conditions and exceptions. For example, we may be unable to delete data that we are legally required to retain, or data that is necessary to resolve an outstanding dispute. We will always explain the reasons clearly if we are unable to fulfil a request in full.

The gfg66 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from any individual under the age of 21. Registration on the Platform is prohibited for minors, and age verification is a mandatory step in our KYC process.

If gfg66 becomes aware that personal data has been collected from a person under the age of 21 without verifiable parental consent, we will take immediate steps to delete that data and close the associated account. Any winnings accrued on an account found to belong to an underage individual will be forfeited in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a minor in your care has registered on the gfg66 platform without your consent, please contact us immediately at [email protected]. We will investigate the matter promptly and take appropriate action.

The gfg66 platform may, from time to time, contain references to third-party services, game providers, or payment processors. While we take care to work only with reputable partners, gfg66 is not responsible for the privacy practices or content of any third-party website or service that is not directly operated by us.

This Privacy Policy applies exclusively to data processed by gfg66 in connection with the Platform at gfg66.io. If you navigate to a third-party site or application from a link on the Platform, you should review the privacy policy of that site independently. We have no control over how third parties collect, use, or share data about you once you leave the gfg66 platform.

Game content delivered by providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi is served within the gfg66 platform environment. While these providers may process limited technical data (such as session tokens) to deliver game functionality, gfg66 has data processing agreements in place with all content providers to ensure your data is handled appropriately.

gfg66 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable legal requirements. We will not reduce your rights under this Policy without your explicit consent.

When we make material changes to this Policy, we will notify you by sending an email to your registered address and by posting a prominent notice on the Platform. We will provide at least 7 days' advance notice before material changes take effect, giving you sufficient time to review the updated terms.

Your continued use of the gfg66 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you may close your account by contacting our support team before the effective date.

The "Last Updated" date shown at the top of this document — and in the hero section of this page — reflects the date of the most recent revision. We recommend reviewing this page periodically to stay informed of how we protect your data.

All historical versions of this Privacy Policy are available on request by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way gfg66 handles your personal data, please contact us using the details below. Our support team operates in English and is available around the clock to assist players from all regions of Bangladesh.

When submitting a data-related request, please include your registered account username, a clear description of your request, and any relevant account reference numbers. This helps us verify your identity and process your request as efficiently as possible.

All privacy-related communications are treated as confidential and handled by trained personnel. gfg66 is committed to responding to all legitimate data rights requests promptly, fairly, and at no cost to you.