Your Privacy Matters at gf666

gf666 collects personal data that is necessary to provide a safe, compliant, and enjoyable gaming experience. We do not collect data that goes beyond what is reasonably required to operate the Platform and meet our legal obligations. The categories of data we collect are outlined below.

Registration Data

When you create a gf666 account, we collect your full legal name, date of birth, email address, mobile phone number, and a password of your choosing. This information is required to create your account, verify your identity, and communicate with you about your account.

Identity Verification (KYC) Data

To comply with responsible gaming and anti-money laundering (AML) requirements, gf666 conducts Know Your Customer (KYC) verification before processing any withdrawals. During this process we may collect:

• A scanned copy or photograph of your valid National Identity Card (NID) or passport.
• Proof of your residential address in Bangladesh (e.g., a utility bill or bank statement dated within the past three months).
• Proof of ownership of the payment method used (e.g., confirmation of bKash or Nagad account registration).

Financial Transaction Data

We record details of all deposits and withdrawals made through your gf666 account. This includes the transaction amount in Bangladeshi Taka (BDT), the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank), the transaction timestamp (Bangladesh Standard Time, UTC+6), and the transaction reference number provided by the payment processor.

Gaming Activity Data

gf666 records your gaming activity on the Platform, including game sessions played, bets placed, winnings and losses, bonus participation, and session duration. This data is used to personalise your experience, detect problem gambling patterns, and comply with responsible gaming obligations.

Technical & Device Data

When you access the gf666 Platform, we automatically collect certain technical information from your device. This includes your IP address, browser type and version, operating system, device type (desktop, mobile, or tablet), screen resolution, referring URL, and the pages you visit on our Platform along with timestamps. This data helps us maintain platform security, diagnose technical issues, and understand aggregate usage patterns.

Communications Data

If you contact the gf666 support team by email or through any other channel, we retain a record of that correspondence including your name, contact details, and the content of your message. This allows us to track the history of your support interactions and improve the quality of our customer service.

gf666 uses the personal data we collect for specific, legitimate purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected. The primary purposes for which we process your personal data are as follows:

• Account management: Creating, maintaining, and securing your gf666 account, processing your login credentials, and enabling access to all Platform features.
• Identity and age verification: Confirming that you are at least 18 years of age and that the details you have provided are accurate, as required by responsible gaming standards.
• Payment processing: Facilitating deposits and withdrawals in Bangladeshi Taka via bKash, Nagad, Rocket, Upay, and other supported payment methods. Ensuring funds are credited and debited correctly and securely.
• Fraud prevention and security: Detecting and investigating suspicious account activity, unauthorised access attempts, bonus abuse, money laundering, and other forms of financial crime.
• Responsible gaming: Monitoring your gaming activity to identify signs of problem gambling, enforcing deposit limits and self-exclusion requests, and providing appropriate support resources.
• Legal and regulatory compliance: Meeting our obligations under applicable anti-money laundering regulations, data protection standards, and any other legal requirements applicable to online gaming services.
• Customer support: Responding to your enquiries, processing complaints, and maintaining records of our support interactions to ensure consistency and quality of service.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the performance, usability, and content of the gf666 Platform.
• Promotional communications: Sending you information about gf666 promotions, bonuses, and seasonal offers — including those tied to BPL cricket, Eid, and Pohela Boishakh — where you have not opted out of marketing communications.

gf666 processes your data only where a lawful basis exists for doing so. Depending on the context, the applicable lawful basis may be the performance of a contract (your account agreement with gf666), a legal obligation imposed on gf666, your consent (for example, for marketing communications), or the legitimate interests of gf666 or a third party, provided those interests are not overridden by your own rights and interests.

gf666 does not sell your personal data to third parties. We do not trade, rent, or exchange player data for commercial gain. However, there are limited and clearly defined circumstances in which gf666 shares your data with trusted third parties:

Payment Processors

To facilitate deposits and withdrawals, gf666 shares the minimum necessary financial data with our payment processing partners, including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank. These partners receive only the data required to execute your specific transaction and are contractually bound to protect that data in accordance with their own privacy standards.

Identity Verification Providers

gf666 may use third-party KYC and identity verification services to assist with the processing of verification documents. These providers act as data processors on behalf of gf666 and are not permitted to use your identity data for any purpose other than the verification service they provide.

Game Software Providers

The games available on gf666 are provided by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others. When you play a game hosted by these providers, limited session data (such as game outcome records and bet amounts) may be processed by the relevant game provider's systems to ensure the integrity of the game result. These providers do not receive your full personal profile.

Legal and Regulatory Authorities

gf666 may disclose your personal data to law enforcement agencies, regulatory bodies, or other authorities where we are legally required to do so, where we believe disclosure is necessary to prevent fraud or serious harm, or where we are responding to a valid legal request.

Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of assets involving gf666, your personal data may be transferred to the relevant successor entity as part of that transaction. You will be notified of any such change via the email address registered to your gf666 account.

The gf666 Platform uses cookies and similar tracking technologies to provide a functional, secure, and personalised user experience. A cookie is a small text file placed on your device by a website you visit. Cookies allow the Platform to recognise your device across sessions and remember certain preferences.

Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the Platform to function correctly. They enable core features such as secure login sessions, account authentication, and fraud prevention. You cannot opt out of strictly necessary cookies while using the Platform.
• Performance & Analytics Cookies: These cookies collect anonymous, aggregated data about how visitors interact with the gf666 Platform — such as which pages are most visited and how long users spend on each section. This data helps us improve the Platform's structure and performance.
• Functional Cookies: These cookies remember your preferences — such as your preferred language and display settings — so you do not need to reconfigure them on every visit.
• Marketing & Targeting Cookies: Where you have provided consent, we may use cookies to deliver promotional information that is relevant to your interests, including bonus offers and game recommendations. You may withdraw your consent at any time by adjusting your browser settings.

Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to view, block, or delete cookies. Please note that disabling strictly necessary cookies will impair the functionality of the gf666 Platform and may prevent you from logging in or completing transactions. Instructions for managing cookies are available in your browser's help documentation.

gf666 may also use web beacons, pixel tags, and similar technologies in promotional emails or on-Platform communications. These help us understand whether emails have been opened and whether links have been followed, allowing us to refine the relevance of future communications.

gf666 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention periods are outlined below:

• Active account data: Retained for the full duration of your account's active status, plus a minimum of five years following account closure. This period reflects standard record-keeping obligations applicable to financial services and gaming platforms.
• KYC verification documents: Retained for a minimum of five years from the date of verification, in line with anti-money laundering regulations. Copies of identity documents are stored in encrypted form and access is restricted to authorised compliance personnel only.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction, as required for financial auditing and AML compliance purposes.
• Gaming activity logs: Retained for three years from the date of each gaming session. Historical game logs are archived in anonymised form after this period.
• Customer support communications: Retained for two years from the date of the last communication in a given support thread, unless the thread relates to an active dispute or legal matter, in which case it is retained until the matter is fully resolved.
• Marketing opt-in records: Retained for as long as you remain subscribed to gf666 marketing communications, plus two years after any opt-out, to demonstrate compliance with consent requirements.

When personal data is no longer required, gf666 securely deletes or anonymises it so that it can no longer be linked to any individual. Where complete deletion is not immediately possible due to technical constraints, the data is isolated and protected from further processing until deletion can be completed.

As a gf666 player, you have a number of rights in relation to the personal data we hold about you. gf666 is committed to honouring these rights promptly and transparently. Your rights are described below:

gf666 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security approach is proportionate to the sensitivity of the data we process and the risks associated with operating an online gaming platform.

Key security measures in place on the gf666 Platform include:

• 256-bit SSL/TLS encryption: All data transmitted between your browser and the gf666 Platform is encrypted using industry-standard Transport Layer Security (TLS). This applies to all pages on the Platform, including login, deposit, and withdrawal flows.
• Encrypted data storage: Sensitive personal data, including KYC documents and payment method information, is stored in encrypted form in our databases. Encryption keys are managed separately from the data they protect.
• Access controls: Access to personal data within gf666's internal systems is restricted on a need-to-know basis. Only authorised staff with a legitimate operational requirement may access player data, and all access is logged and audited.
• Intrusion detection and monitoring: gf666 operates continuous monitoring of its platform infrastructure to detect unusual activity, potential security incidents, and unauthorised access attempts in real time.
• Password security: User passwords are stored using modern one-way hashing algorithms. gf666 staff cannot retrieve or read your password — only you know it. If you forget your password, the account recovery process generates a new one; the old password is never recovered or displayed.
• Regular security reviews: gf666 conducts periodic internal security reviews and, where appropriate, engages third-party specialists to assess the security posture of the Platform.

Despite these measures, no system connected to the internet can be guaranteed to be 100% secure. If you become aware of or suspect any security breach affecting your gf666 account, please notify us immediately at [email protected] so that we can investigate and take appropriate action without delay.

gf666 reviews this Privacy Policy on a regular basis to ensure it remains accurate, up-to-date, and reflective of our current data processing practices. We reserve the right to update or amend this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date displayed at the top of this page and, where the changes are significant, notify registered gf666 players by email.

We encourage you to revisit this Privacy Policy periodically to stay informed about how gf666 handles your personal data. Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way gf666 handles your personal data, please contact our support team. We aim to respond to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6).