gt666 Privacy
Policy & Data
Protection

gt666 is an online sports betting and casino platform operating at gt666.io and targeting players in Bangladesh. For the purposes of this Privacy Policy, gt666 is the data controller responsible for the personal data you provide when registering an account, making deposits, placing bets, or otherwise interacting with the platform.

If you have any questions about how gt666 handles your personal data, you may contact our data protection team directly at [email protected]. Our support team operates 24 hours a day, 7 days a week, including Bangladesh public holidays, in Bangladesh Standard Time (BST, UTC+6).

gt666 collects personal data through several channels: directly from you when you register an account or update your profile; automatically through your use of the platform; and from regulated third-party verification and payment services. The categories of personal data we collect are described below.

gt666 does not collect sensitive special-category personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond liveness checks for KYC), or health information, except where directly relevant to responsible gaming assessments and only with your explicit consent.

gt666 uses the personal data collected from you for the following specific purposes:

• Account Registration & Verification: To create and manage your gt666 account, verify your identity and age (21+ requirement), and fulfil our Know Your Customer (KYC) obligations.
• Service Delivery: To enable sports betting, live casino, slots, crash games, and all other features offered through the gt666 platform.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard in Bangladeshi Taka (৳).
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance via email and live chat.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, and other prohibited activities.
• Responsible Gaming: To monitor player behaviour for signs of problem gambling, enforce self-imposed limits, and proactively intervene where player welfare may be at risk.
• Legal Compliance: To comply with applicable anti-money laundering (AML) laws, know-your-customer (KYC) regulations, and any lawful requests from regulatory or law enforcement authorities.
• Platform Improvement: To analyse aggregated usage patterns in order to improve the gt666 platform's features, performance, and user experience.
• Marketing Communications: To send you promotional emails, bonus offers, and platform updates — but only where you have opted in to receive such communications (see Clause 12).

gt666 processes your personal data on the following legal bases, depending on the category of data and the purpose of processing:

• Contractual Necessity: Processing required to fulfil the contract between you and gt666 — including account registration, service delivery, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws, including AML obligations, KYC requirements, and responses to lawful regulatory requests.
• Legitimate Interests: Processing for fraud prevention, security monitoring, responsible gaming oversight, and platform improvement, where gt666's legitimate business interests are not overridden by your rights and interests.
• Consent: Processing for optional activities such as marketing communications and the use of non-essential cookies, where your explicit consent has been obtained and may be withdrawn at any time.

gt666 uses cookies and similar tracking technologies (including local storage objects and session tokens) on its website to provide core platform functionality, maintain your login session, remember your preferences, and analyse how players interact with the platform.

• Essential Cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing identifiers. These cookies cannot be disabled.
• Functional Cookies: Used to remember your language preferences, default stake sizes, and other personalisation settings. Disabling these may reduce your experience on the platform.
• Analytics Cookies: Used to collect anonymised data about how players navigate and use the gt666 platform, allowing us to identify performance issues and improve the user experience. These are set only with your consent.
• Security Cookies: Used to detect and prevent fraudulent logins, unusual session behaviour, and account takeover attempts. These are essential and cannot be disabled.

You may manage your cookie preferences through your browser settings. Note that disabling essential or security cookies will prevent you from logging into and using the gt666 platform.

gt666 does not sell, rent, or trade your personal data to any third party. We share personal data only in the limited circumstances described below, and only with third parties who are contractually bound to handle your data securely and in accordance with applicable data protection law.

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard — to process deposits and withdrawals in Bangladeshi Taka (৳).
• KYC & Identity Verification Providers: Regulated third-party services used to verify your identity documents and confirm your age as part of our 21+ compliance requirements.
• Fraud Prevention & AML Services: Specialist providers used to screen transactions and player activity for signs of money laundering, fraud, or other financial crime.
• Game Suppliers: Including Evolution Gaming, Pragmatic Play, Spribe, Ezugi, Microgaming, and NetEnt — game session data is shared with the relevant provider to deliver and settle game rounds. These providers operate under strict data processing agreements.
• Regulatory & Law Enforcement Authorities: gt666 will disclose personal data to competent authorities where required by law or in response to a lawfully issued court order or regulatory notice.
• IT Infrastructure & Hosting Providers: Trusted cloud infrastructure and security providers who host the gt666 platform under strict contractual data protection obligations.

The gt666 platform serves players primarily in Bangladesh. Some of our third-party service providers — including game suppliers and cloud infrastructure partners — may process data in jurisdictions outside Bangladesh. Where such international transfers occur, gt666 ensures that appropriate contractual safeguards are in place to protect your personal data to a standard equivalent to that described in this Policy.

Specifically, gt666 requires all international data processors to operate under data processing agreements that mandate appropriate technical and organisational security measures, purpose limitation, and data subject rights protections consistent with this Privacy Policy. gt666 will not transfer your data to any jurisdiction that does not provide an adequate level of data protection without first putting in place appropriate safeguards.

gt666 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• TLS/SSL encryption for all data in transit between your device and the gt666 platform.
• AES-256 encryption for sensitive data stored in gt666's databases, including identity documents and financial records.
• Role-based access controls, ensuring that only authorised gt666 personnel with a legitimate need can access personal data.
• Multi-factor authentication requirements for all gt666 staff accessing production systems containing personal data.
• Regular third-party penetration testing and vulnerability assessments of the gt666 platform infrastructure.
• Automated anomaly detection systems that flag unusual account access patterns and potential data breach indicators in real time.
• A documented data breach response procedure, under which gt666 will notify affected players without undue delay in the event of a breach that poses a high risk to their rights and freedoms.

While gt666 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. If you suspect your gt666 account has been compromised, contact [email protected] immediately.

gt666 retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account Data: Retained for the duration of your active account relationship with gt666, plus a minimum of five (5) years following account closure to comply with anti-money laundering (AML) record-keeping requirements.
• Transaction & Betting Records: Retained for a minimum of five (5) years from the date of each transaction to satisfy financial reporting and AML obligations.
• KYC & Identity Documents: Retained for a minimum of five (5) years from the date of verification, or longer where required by applicable law.
• Customer Support Correspondence: Retained for three (3) years from the date of the last communication, to facilitate dispute resolution and quality review.
• Technical & Log Data: Retained for up to twelve (12) months for security monitoring and fraud investigation purposes, after which it is anonymised or deleted.
• Marketing Consent Records: Retained for the duration of your active consent, plus three (3) years following withdrawal of consent as evidence of the consent history.

Upon expiry of the applicable retention period, personal data is irreversibly deleted or anonymised from all active gt666 systems and backups within a reasonable timescale. Where a legal hold applies — for example, where data is subject to an ongoing regulatory investigation — retention is extended for the duration of that hold.

As a data subject whose personal data is processed by gt666, you hold the following rights. To exercise any of these rights, contact [email protected] with your full name, registered email address, and a description of the right you wish to exercise. gt666 will respond to valid requests within 30 days.

• Right of Access: You may request a copy of all personal data gt666 holds about you, together with information about how it is used and with whom it is shared.
• Right to Rectification: You may request correction of any personal data that is inaccurate or incomplete. You may also update certain data directly through your account settings dashboard after login.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where gt666 no longer has a legal basis or legitimate interest for retaining it. Note that AML obligations may prevent full erasure of financial and identity records within mandatory retention periods.
• Right to Restriction of Processing: You may request that gt666 temporarily stops processing your personal data in certain circumstances — for example, while the accuracy of the data is disputed.
• Right to Data Portability: You may request a structured, machine-readable copy of the personal data you have provided to gt666, for transfer to another service provider where technically feasible.
• Right to Object: You may object to processing based on gt666's legitimate interests, including profiling for responsible gaming purposes, subject to gt666's overriding legal obligations.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails, non-essential cookies), you may withdraw consent at any time without affecting the lawfulness of prior processing.

gt666 operates a strict 21+ policy. The platform is not directed at, and does not knowingly collect personal data from, any individual under the age of 21. If gt666 discovers or has reasonable grounds to believe that an account has been registered by a person under 21 years of age, the account will be immediately suspended, all pending bets voided, and any deposited funds returned to the source payment method following identity verification.

If you are a parent or guardian and believe that a minor under your care has registered an account with gt666, contact [email protected] immediately. gt666 will investigate and take appropriate action without delay.

gt666 may send you promotional communications — including bonus offers, tournament announcements, seasonal promotions (such as Eid or BPL season campaigns), and platform news — to the email address registered to your account, but only where you have provided your explicit opt-in consent to receive such communications during or after registration.

You may opt out of marketing communications at any time by clicking the "Unsubscribe" link at the bottom of any promotional email, or by contacting [email protected] with an unsubscribe request. Opting out of marketing communications will not affect transactional notifications (such as deposit confirmations, withdrawal updates, or security alerts), which are sent as part of the service and cannot be disabled without closing your account.

gt666 does not engage in SMS marketing, push notification marketing, or third-party social media retargeting using individual player data. All marketing is delivered exclusively via the email channel to opted-in players.

gt666 processes certain categories of behavioural and financial data — including betting frequency, session duration, deposit velocity, and loss patterns — specifically for the purpose of monitoring player welfare and fulfilling our responsible gaming obligations. This processing is carried out on the basis of gt666's legitimate interest in preventing gambling-related harm and, where applicable, our legal obligation to maintain responsible gaming controls.

Data collected for responsible gaming purposes may be used to: automatically apply player-set deposit and loss limits; trigger responsible gaming alerts when patterns consistent with problem gambling are detected; enforce cool-off periods and self-exclusions; and inform proactive welfare interventions by the gt666 responsible gaming team.

Responsible gaming data is held separately from marketing data and is never used for promotional targeting. Players who have self-excluded will not receive any marketing communications from gt666 for the duration of their exclusion period. Self-exclusion data is retained beyond the exclusion period to prevent the re-opening of a new account in violation of the self-exclusion agreement.

gt666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. All changes will be published on this page with a revised "Last Updated" date. Where a change is material — meaning it significantly affects how your personal data is used or your rights as a data subject — gt666 will notify registered players via the email address on their account at least 7 days before the change takes effect.

Your continued use of the gt666 platform after the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. If you do not accept an amendment, you should stop using the platform and close your account by contacting [email protected] prior to the amendment's effective date.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way gt666 handles your personal data, please contact our data protection team using the details below. We aim to acknowledge all privacy-related enquiries within 2 business days and resolve them within 30 calendar days.

• Email: [email protected] (plain text — this address is not a clickable link)
• Response Time: Acknowledgement within 2 business days; resolution within 30 calendar days
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
• Language: English preferred; our support team can assist players located across Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar

If you are not satisfied with gt666's response to your privacy complaint, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. gt666 will cooperate fully with any such investigation.