gf666 Privacy Policy

This Privacy Policy ("Policy") describes how gf666 ("gf666", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of users ("you", "your", "Player") who access or use the gf666 website located at https://gf666.io ("Platform"), including all casino games, sports betting markets, promotional services, payment facilities, and customer support channels offered through the Platform.

This Policy should be read alongside the gf666 Terms & Conditions, which form part of the overall agreement between you and gf666 governing your use of the Platform. By registering an account or using the Platform, you confirm that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

gf666 operates as an internationally licensed offshore gaming platform. While this Policy reflects internationally recognised data protection standards, gf666 does not make representations that it satisfies the specific legal requirements of any particular national data protection regime. Players based in Bangladesh are responsible for satisfying themselves that their use of the Platform — and the associated data processing described in this Policy — is consistent with applicable local law.

gf666 collects personal data in three principal ways: information you provide directly, information generated automatically by your use of the Platform, and information received from third-party service providers. The specific categories of data collected are set out in the table below.

gf666 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data (other than document photographs submitted for identity verification purposes).

gf666 processes your personal data for the following specific, defined purposes. We do not use your data for any purpose other than those listed here without first obtaining your explicit consent or providing advance notice via an update to this Policy.

• Account creation and management: To register and maintain your player account, authenticate your identity at login, and maintain the security and integrity of your account.
• KYC and age verification: To verify that you are at least 21 years of age and to confirm your identity in compliance with our anti-money-laundering (AML) obligations. This is a mandatory process that cannot be waived.
• Transaction processing: To process your deposits via bKash, Nagad, Rocket, Upay, and other accepted payment methods, and to process withdrawal requests to your nominated payment account.
• Bonus and promotion administration: To assess eligibility for and credit applicable bonuses, to enforce wagering requirements, and to detect and prevent promotional abuse.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other illegal conduct. This includes automated risk-scoring of account behaviour.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour, to enforce deposit and loss limits set by you, to administer cool-off periods and self-exclusion requests, and to comply with our responsible gaming obligations.
• Customer support: To respond to your enquiries, resolve complaints, and maintain records of your support interactions for quality assurance and dispute resolution purposes.
• Platform improvement: To analyse usage patterns, test new features, and improve the performance, functionality, and content of the gf666 Platform. Data used for this purpose is aggregated and anonymised wherever possible.
• Marketing communications: To send you promotional offers, bonus notifications, and relevant Platform updates where you have opted in to receive such communications. See Section 12 for details on managing your marketing preferences.
• Legal compliance: To comply with applicable legal obligations, including responding to lawful requests from regulatory bodies, law enforcement authorities, and courts of competent jurisdiction.

For each purpose for which gf666 processes your personal data, we rely on one or more of the following legal bases:

• Contractual necessity: Processing that is necessary to perform the contract between you and gf666 — i.e., to operate your account, process transactions, credit bonuses, and provide the gaming services you have registered to use.
• Legal obligation: Processing that is required to comply with applicable legal requirements, including KYC/AML obligations, financial record-keeping requirements, and responses to lawful regulatory or law enforcement requests.
• Legitimate interests: Processing carried out in pursuit of gf666's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — principally for marketing communications and optional analytics cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

gf666 does not sell or commercially trade your personal data. We may share your personal data with the categories of third parties listed below, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other payment service providers receive the transactional data necessary to process your deposits and withdrawals. These entities operate under their own privacy policies and are independently regulated financial service providers.
• Identity verification (KYC) providers: Third-party KYC and age-verification service providers receive your identity documents and personal data for the purpose of verifying your eligibility to use the Platform. These providers are bound by confidentiality agreements and data protection obligations.
• Game providers and studios: Licensed game studios — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — may receive your account identifier and session data for the purpose of delivering their games through the Platform. They do not receive your financial data or identity documents.
• Fraud prevention and security services: We share data with specialist fraud detection and cybersecurity partners where necessary to protect the integrity of the Platform and the security of your account.
• Analytics providers: Aggregated, anonymised usage data may be shared with analytics platforms to help us understand Platform performance and user behaviour. No personally identifying data is included in these analytical datasets.
• Legal and regulatory authorities: gf666 may disclose your personal data to regulators, law enforcement agencies, courts, or other public authorities where required to do so by law, or where we have a good-faith belief that disclosure is necessary to prevent or investigate illegal activity.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of gf666's business, your personal data may be transferred to the successor entity as part of the transaction. You will be notified in advance of any such transfer that materially affects the processing of your data.

All third parties with whom gf666 shares personal data are required, as a condition of engagement, to process that data in a manner consistent with this Policy and to implement appropriate technical and organisational security measures to protect it.

gf666 uses cookies and similar tracking technologies (including local storage and session storage) on the Platform. The following categories of cookies are used:

You can control and manage cookies through your browser's settings. Instructions for managing cookies vary by browser — consult your browser's help documentation for guidance. Please note that disabling non-essential cookies may affect some aspects of the Platform's functionality but will not prevent you from accessing your account or placing bets.

gf666 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention schedule applies:

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

gf666 recognises and upholds the following data rights for all registered players. To exercise any of these rights, contact us in writing at [email protected]. We will acknowledge your request within 5 business days and aim to respond fully within 30 calendar days.

The gf666 Platform is strictly intended for adults aged 21 years and above. gf666 does not knowingly collect, store, or process the personal data of individuals under the age of 21.

During the registration process, all users are required to confirm that they meet the minimum age requirement. Identity verification (KYC) checks are performed to validate age claims. Where gf666 determines — through KYC review, parental notification, or any other means — that a registered account belongs to a person under the age of 21, the account will be immediately closed, all balances will be forfeited, and all personal data associated with the account will be deleted as soon as is reasonably practicable, subject to any mandatory legal retention obligations.

If you believe that a minor has registered on the Platform using false age information, please contact gf666 immediately at [email protected] so that the account can be reviewed and closed without delay.

gf666 implements a comprehensive programme of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• Encryption in transit: All data transmitted between your browser or device and the gf666 Platform is encrypted using 256-bit SSL/TLS protocols. You can verify this by confirming the padlock icon and "https://" prefix in your browser's address bar.
• Encryption at rest: Sensitive personal data stored on gf666 servers — including identity documents, financial data, and authentication credentials — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to systems containing personal data is restricted to authorised personnel only, on a strict least-privilege, need-to-know basis. All internal access is logged and periodically audited.
• Password security: Account passwords are hashed and salted using modern cryptographic methods. Plaintext passwords are never stored. gf666 staff cannot view your password — only you know it.
• Two-factor authentication (2FA): gf666 supports optional 2FA for player accounts as an additional layer of protection against unauthorised access. Players are strongly encouraged to enable 2FA in their account security settings.
• Regular security testing: gf666 conducts periodic security assessments, penetration testing, and vulnerability scanning to identify and remediate security weaknesses before they can be exploited.
• Incident response: gf666 maintains a documented data breach response procedure. In the event of a data breach that poses a material risk to affected players, gf666 will notify affected individuals and take all reasonable steps to contain and remediate the breach without undue delay.

gf666 operates as an internationally licensed offshore gaming platform. This means that your personal data may be transferred to, stored on, and processed on servers located in jurisdictions outside Bangladesh. These jurisdictions may have data protection laws that differ from — and in some cases provide less protection than — the laws of Bangladesh.

Where personal data is transferred internationally, gf666 takes reasonable steps to ensure that appropriate safeguards are in place to protect the data, including:

• Ensuring that data is transferred only to jurisdictions or service providers that implement security standards consistent with this Policy.
• Requiring all international data recipients to sign data processing agreements that include confidentiality and security obligations equivalent to those described in this Policy.
• Conducting due diligence on third-party service providers before onboarding them to confirm that their security and privacy practices meet gf666's standards.

By registering on the gf666 Platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to servers and processors located outside Bangladesh as described in this section.

With your consent, gf666 may send you promotional communications by email or SMS relating to new games, special offers, seasonal promotions (such as Eid, Pohela Boishakh, or BPL season offers), and other gf666 news that may be of interest to you as a player on the Platform.

You can manage your marketing communication preferences at any time through the following methods:

• Account settings: Log in to your gf666 account and navigate to the Notifications or Marketing Preferences section to update your email and SMS opt-in status.
• Unsubscribe link: Every marketing email sent by gf666 includes a clearly labelled unsubscribe link at the bottom of the message. Clicking this link will remove you from the relevant mailing list within 5 business days.
• Contact support: You may request removal from marketing communications by contacting our support team at [email protected] with the subject line "Marketing Opt-Out".

Please note that opting out of marketing communications does not prevent gf666 from sending you transactional and service-related messages, such as deposit confirmations, withdrawal notifications, account security alerts, and updates to this Privacy Policy. These service communications are essential to the operation of your account and cannot be opted out of while your account remains active.

gf666 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our business practices, or the services offered on the Platform. When material changes are made to this Policy, gf666 will:

• Update the "Last updated" date at the top of this Policy and increment the version number.
• Post a prominent notice on the gf666 Platform informing players that the Policy has been updated.
• Where the changes are material and affect how we process your personal data in a way that requires your consent, we will seek that consent before the new processing begins.
• Send a notification to your registered email address summarising the key changes, where we hold a valid email address for your account.

Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should stop using the Platform and close your account before the updated Policy takes effect. To close your account, contact our support team at [email protected].

We encourage you to review this Privacy Policy periodically — particularly before making deposits or disclosing additional personal information — to stay informed about how gf666 protects your data.

If you have any questions, concerns, or complaints about this Privacy Policy or about the way gf666 handles your personal data, please contact our Data Privacy team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

If you are not satisfied with the response you receive from gf666's Data Privacy Team, you have the right to escalate your complaint to an appropriate data protection supervisory authority in the jurisdiction applicable to your situation.

gf666 takes all privacy complaints seriously. Every complaint received is logged, reviewed by a qualified team member, and responded to with a clear explanation of our findings and any action taken. We treat privacy disputes as an opportunity to improve our practices and strengthen player trust.