gd66 Privacy Policy:
Your Data, Fully Protected
gd66 is committed to safeguarding the personal information of every player across Bangladesh. This Privacy Policy explains precisely what data we collect, how we use it, who we share it with, and the rights you hold over your own information.
Types of Data gd66 Processes
Full name, date of birth, national ID number, and photo ID submitted during account verification.
Mobile number, email address, and correspondence records with our support team.
Payment method details (bKash, Nagad, Rocket), transaction history, deposit and withdrawal records.
Betting history, games played, session durations, login timestamps, and platform interaction logs.
IP address, browser type, device identifiers, operating system, and cookie data collected automatically.
Records of live chat sessions, email correspondence, feedback submissions, and support ticket history.
Introduction
Welcome to the gd66 Privacy Policy. gd66 ("we", "us", "our") operates the online betting and casino platform available at gd66.io (the "Platform"), providing services to players across Bangladesh. We understand that privacy matters deeply to our users, and we are firmly committed to handling your personal information with transparency, integrity, and the highest standards of data security.
This Privacy Policy explains in clear, plain English how gd66 collects, uses, stores, discloses, and protects personal data when you visit our Platform, create an account, place bets, play casino games, make transactions, or contact our support team. It applies to all users of the gd66 Platform, including registered players and visitors who browse without registering.
By accessing or using the gd66 Platform, you confirm that you have read this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform immediately.
Scope: This Privacy Policy applies exclusively to data collected and processed by gd66 through the gd66.io Platform. It does not govern the data practices of any third-party payment providers (such as bKash, Nagad, or Rocket), game content suppliers, or external websites that may be referenced from our Platform. Please review the privacy policies of those third parties independently.
Data We Collect
gd66 collects only the personal data that is necessary to deliver our services, comply with legal obligations, and maintain the security and integrity of the Platform. The categories of personal data we collect include:
- Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification details (such as National Identity Card number) provided during account registration and KYC verification.
- Contact Information: Mobile phone number, email address, and any communication records (including live chat transcripts and support emails) generated during your interaction with gd66.
- Financial Information: Payment method identifiers (e.g., bKash account number, Nagad wallet number, Rocket number, card details for Visa/Mastercard), deposit and withdrawal transaction records, account balance history, and bonus transaction logs.
- Account Credentials: Your chosen username and a securely hashed version of your password. gd66 never stores passwords in plain text.
- Betting and Gaming Activity: Complete history of bets placed, games played, stakes, outcomes, winnings, session durations, and responsible gaming tool usage (e.g., deposit limit settings, self-exclusion requests).
- Technical and Device Data: IP address, device type and identifiers, browser type and version, operating system, referring URLs, time zone, and interaction logs generated automatically when you access the Platform.
- Location Data: General geographic location inferred from your IP address for the purpose of verifying eligibility and complying with jurisdictional requirements. gd66 does not collect precise GPS location data.
We do not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, or health data, except where specifically required for responsible gaming assessments and only with your explicit consent.
How We Collect Data
gd66 collects personal data through the following channels and mechanisms:
- Direct Submission: Information you actively provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting support, submitting feedback, or participating in promotions.
- Automated Collection: Technical and behavioural data collected automatically as you use the Platform through server logs, cookies, web beacons, and similar tracking technologies. This data is collected from the moment you visit gd66.io, whether or not you are logged in.
- Payment Processors: Transaction confirmation data received from payment partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard) following deposit or withdrawal processing.
- Third-Party Identity Verification: Where required by our KYC and anti-money laundering obligations, gd66 may use third-party identity verification services to cross-check the information you provide against official records.
- Fraud Prevention Systems: Data from our internal fraud detection and risk management systems that monitor account activity for irregular patterns.
Cookies Notice: gd66 uses cookies and similar technologies to enhance your experience on the Platform, remember your preferences, maintain your login session, and collect analytics data. See Section 09 for full details of our cookies policy and your choices regarding cookie use.
How We Use Your Data
gd66 uses the personal data we collect for the following specific purposes. We only process your data where we have a legitimate legal basis to do so (see Section 05):
- Account Management: To create, maintain, and manage your gd66 player account, including authenticating your identity when you log in and enabling you to use Platform features.
- Service Delivery: To process your bets, execute casino game sessions, credit winnings to your account, and provide the full range of sports betting, live casino, slots, and other gaming services available on gd66.
- Payment Processing: To facilitate deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and maintain accurate financial records of all transactions on your account.
- Identity Verification and KYC: To verify that you meet our eligibility requirements (21+ years of age, Bangladesh residency) and to comply with our anti-money laundering (AML) and know-your-customer (KYC) obligations.
- Customer Support: To respond to your queries, resolve disputes, process complaints, and provide technical assistance via live chat, email, or other support channels.
- Responsible Gaming: To monitor your gambling activity patterns, identify potential signs of problem gambling, enforce deposit limits and self-exclusion periods you have requested, and fulfil our duty of care to players.
- Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, bonus abuse, and other prohibited conduct on the Platform.
- Legal Compliance: To meet our obligations under applicable laws and regulations, respond to lawful requests from authorities, and maintain records required by law.
- Marketing and Promotions: With your consent, to send you personalised promotional offers, bonus notifications, and news about upcoming events on gd66 (e.g., BPL season promotions, Eid special offers). You may opt out of marketing communications at any time.
- Platform Improvement: To analyse usage patterns, test new features, optimise the user experience, and improve the performance and reliability of the gd66 Platform.
Marketing Opt-Out: You can withdraw your consent to receive marketing communications from gd66 at any time by contacting our support team at support@gd66.io or by following the unsubscribe instructions included in any marketing message we send. Opting out of marketing does not affect your ability to use the Platform or receive service-related communications.
Legal Basis for Processing
gd66 processes your personal data only where a valid legal basis exists. The legal bases we rely upon are as follows:
- Contractual Necessity: Processing is necessary to perform the contract between you and gd66 — specifically, to provide the betting and gaming services you have registered for, process payments, and manage your account.
- Legal Obligation: Processing is required for gd66 to comply with applicable legal and regulatory obligations, including KYC/AML requirements, financial record-keeping, and responses to lawful authority requests.
- Legitimate Interests: Processing is necessary for gd66's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, service improvement, and business analytics — provided those interests are not overridden by your rights and interests.
- Consent: Where none of the above bases apply, gd66 will seek your explicit consent before processing your data — for example, for sending optional marketing communications or processing sensitive data categories. You may withdraw consent at any time without affecting the lawfulness of prior processing.
Sharing Your Data
gd66 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:
- Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other payment processors receive the minimum data required to process your financial transactions securely.
- Identity Verification Partners: Third-party KYC and AML service providers who assist with identity verification and fraud detection may receive relevant identity data to perform these checks.
- Game Content Providers: Licensed game studios and platform providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) receive session data necessary to deliver their games and maintain game integrity.
- IT and Infrastructure Providers: Cloud hosting, server, and cybersecurity service providers who maintain the technical infrastructure supporting the gd66 Platform under strict data processing agreements.
- Legal and Regulatory Authorities: Law enforcement agencies, regulatory bodies, courts, and other public authorities where gd66 is legally required or permitted to disclose data — for example, in response to anti-money laundering investigations or court orders.
- Professional Advisors: Legal counsel, auditors, and consultants acting in a professional capacity for gd66, who are bound by confidentiality obligations.
No Sale of Data: gd66 will never sell, lease, or monetise your personal information to unrelated third parties for advertising, data brokerage, or any other commercial purpose not directly connected to the delivery of gd66's own services to you.
Data Retention
gd66 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting obligations. Our retention practices are as follows:
- Active Accounts: Personal data associated with an active gd66 account is retained for the duration of the account relationship and for a minimum period following account closure as required by applicable laws and regulations.
- Financial and Transaction Records: Transaction records, deposit/withdrawal history, and financial documentation are retained for a minimum of five (5) years following the transaction date in compliance with anti-money laundering regulations.
- KYC and Identity Documents: Copies of identification documents submitted for verification are retained for the period required by applicable KYC and AML regulations, typically a minimum of five (5) years after the business relationship ends.
- Support Communications: Records of live chat sessions, email correspondence, and support tickets are retained for up to three (3) years to assist with dispute resolution and service quality monitoring.
- Technical and Log Data: Server logs and technical access records are typically retained for up to twelve (12) months for security monitoring and fraud prevention purposes.
- Marketing Preferences: Records of your marketing consent or opt-out status are retained indefinitely to ensure we honour your communication preferences at all times.
When data is no longer required for any of the above purposes and no legal obligation requires its continued retention, gd66 will securely delete or anonymise the data so that it can no longer be associated with your identity.
Data Security
The security of your personal data is a top priority for gd66. We implement a comprehensive set of technical and organisational security measures to protect your data against unauthorised access, disclosure, alteration, loss, or destruction:
- 256-Bit SSL/TLS Encryption: All data transmitted between your device and the gd66 Platform is protected by industry-standard 256-bit SSL/TLS encryption, ensuring that your personal and financial information cannot be intercepted in transit.
- Password Hashing: Passwords are never stored in plain text. gd66 uses strong, modern cryptographic hashing algorithms to store password credentials securely.
- Access Controls: Access to personal data within gd66's systems is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data are bound by confidentiality obligations.
- Two-Factor Authentication: gd66 supports OTP (one-time password) verification for logins from new or unrecognised devices, providing an additional layer of account security for players.
- Intrusion Detection: Our platform is monitored continuously by automated security systems designed to detect and respond to suspicious access attempts, DDoS attacks, and other security threats in real time.
- Regular Security Reviews: gd66 conducts periodic security assessments and updates our security measures in line with evolving best practices and emerging threats.
Your Role in Security: While gd66 employs robust security measures, your account security also depends on you. Always use a strong, unique password for gd66. Never share your login credentials with anyone. Log out after each session, particularly on shared devices. If you suspect unauthorised access to your account, contact gd66 support at support@gd66.io immediately.
Cookies Policy
gd66 uses cookies and similar tracking technologies (including web beacons and local storage) on the Platform to deliver a better user experience. Here is what you need to know about our use of cookies:
- Essential Cookies: These cookies are strictly necessary for the Platform to function. They maintain your login session, remember your language and display preferences, and enable core functionality such as the game lobby and account management. Essential cookies cannot be disabled without affecting your ability to use the Platform.
- Analytics Cookies: gd66 uses analytics cookies to collect aggregated, anonymised data about how users navigate the Platform — which pages are visited most frequently, how long sessions last, and where users encounter errors. This data helps us improve the Platform's performance and usability.
- Functionality Cookies: These cookies remember your personalised settings and preferences (such as your default betting market, preferred game categories, and responsible gaming limit configurations) so you do not need to re-enter them on every visit.
- Security Cookies: Short-lived cookies used to support our fraud detection and security monitoring systems, helping gd66 identify and block suspicious login attempts and automated bot traffic.
Most web browsers allow you to manage your cookie preferences through browser settings. You can choose to block or delete cookies; however, disabling essential cookies will impair or prevent your use of the gd66 Platform. For detailed guidance on managing cookies in your specific browser, please refer to your browser's official help documentation.
Your Rights Over Your Data
As a gd66 player, you hold meaningful rights over the personal data we hold about you. The following table summarises your key data rights and how to exercise them:
| Your Right | What It Means | Status |
|---|---|---|
| Right of Access | You may request a copy of all personal data gd66 holds about you, along with information about how it is processed. | Available |
| Right to Rectification | You may ask gd66 to correct any inaccurate or incomplete personal data we hold about you. | Available |
| Right to Erasure | You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations. | Available |
| Right to Restriction | You may ask gd66 to restrict processing of your data in certain circumstances — for example, while a dispute is being investigated. | Available |
| Right to Portability | You may request that gd66 provide your personal data in a structured, commonly used, machine-readable format for transfer to another service provider. | Available |
| Right to Object | You may object to gd66 processing your data on the basis of legitimate interests, including for direct marketing purposes, at any time. | Available |
| Right to Withdraw Consent | Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing. | Available |
To exercise any of the rights described above, please contact gd66's support team at support@gd66.io. We will respond to all valid data rights requests within thirty (30) days of receipt. In complex cases, we may extend this period by up to an additional sixty (60) days, in which case we will notify you of the extension and the reasons for it.
We will not charge a fee for processing data rights requests unless they are manifestly unfounded or excessive, in which case we reserve the right to charge a reasonable administrative fee or decline to act on the request.
Children's Privacy
The gd66 Platform is strictly intended for adults aged 21 years and above. gd66 does not knowingly collect, process, or store personal data from any individual under the age of 21. Our account registration process includes mandatory age verification steps designed to prevent minors from accessing real-money gaming services.
If gd66 becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data from our systems and close the associated account. If you believe a minor has registered on the gd66 Platform, please contact us immediately at support@gd66.io so we can investigate and take appropriate action.
21+ Rule: gd66 enforces strict age verification as part of our commitment to responsible gaming. All players must confirm they are aged 21 or above during registration. Providing false information about your age is a violation of our Terms & Conditions and may result in immediate account suspension and forfeiture of any funds held in the account.
Policy Updates
gd66 reserves the right to update, amend, or revise this Privacy Policy at any time to reflect changes in our data practices, new legal obligations, or improvements to our services. When we make material changes to this Policy, we will update the "Last Updated" date displayed at the top of this page and, where the changes are significant, notify registered players via email or in-platform notification.
We encourage you to review this Privacy Policy periodically to stay informed about how gd66 protects your personal data. Your continued use of the gd66 Platform following the publication of any revised Privacy Policy constitutes your acceptance of the updated terms. If you disagree with any changes, you may discontinue use of the Platform and request account closure by contacting our support team.
Stay Updated: Bookmark this page and check back periodically — particularly ahead of major seasons such as BPL, IPL T20, or ICC tournaments, when we may run special promotions that involve updated data processing terms. Previous versions of this Privacy Policy are archived and available upon request by contacting support@gd66.io.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way gd66 handles your personal data, please do not hesitate to reach out to our dedicated support team. We are committed to addressing all privacy-related enquiries promptly, transparently, and in full compliance with our data protection obligations.
- Email: support@gd66.io (plain text — not a clickable link)
- Live Chat: Available 24/7 directly through the gd66 Platform
- Response Time: Within 24 hours for standard enquiries; urgent data security matters are prioritised
- Support Language: English
- Operating Hours: Around the clock, 365 days per year
- Time Zone: Bangladesh Standard Time (BST, UTC+6)
For data rights requests (access, rectification, erasure, portability, objection), please include your registered gd66 username and the specific right you wish to exercise in your message so we can process your request efficiently. gd66 aims to acknowledge all data rights requests within five (5) business days and to complete them within thirty (30) days.
How gd66 Keeps Your Data Safe
Six concrete commitments that underpin gd66's approach to data protection for every player across Bangladesh.
Every byte of data exchanged between your device and the gd66 Platform travels through a 256-bit SSL/TLS encrypted connection, keeping your credentials and financial details completely private in transit.
gd66 will never sell, rent, or trade your personal information to third-party advertisers or data brokers. Your data is used exclusively to deliver and improve the gd66 service to you.
You hold clear rights to access, correct, delete, and port your personal data at any time. Submit a request to support@gd66.io and our team will respond within 30 days.
gd66 applies data minimisation principles, collecting only the information that is strictly necessary to provide our services, satisfy legal requirements, and protect the security of the Platform.
Data is not kept indefinitely. gd66 applies defined retention periods to every category of personal data and securely deletes or anonymises records once the retention period expires.
Our English-speaking support team is available around the clock to handle privacy queries, data rights requests, and account security concerns for all gd66 players across Bangladesh.
Explore gd66 With Confidence
Now that you understand how gd66 protects your privacy, dive into Bangladesh's most trusted betting and casino platform. Live cricket odds, premium slots, live dealer tables, and more — all secured and built for you. 21+ only. Play responsibly.