gc66 Privacy Policy

1. Introduction

This Privacy Policy applies to all personal data processed by gc66 ("gc66", "we", "us", "our") in connection with your use of the gc66 online betting and gaming platform, accessible at gc66.io, including all associated subdomains, mobile-optimised interfaces, and related digital services (collectively, "the Platform").

gc66 is committed to handling your personal data with care, transparency, and integrity. This policy has been drafted in plain English to ensure that every member — regardless of their background or technical knowledge — can understand how their information is being used. We encourage you to read this document in full and to contact us if any aspect is unclear.

This Privacy Policy should be read alongside the gc66 Terms & Conditions and the gc66 Responsible Gaming policy, both of which are incorporated by reference into the overall agreement between you and gc66.

2. Data Controller

gc66 acts as the data controller in respect of the personal data collected from members and visitors to the Platform. As data controller, gc66 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

All data-related enquiries, requests to exercise data subject rights, and formal complaints regarding gc66's data processing activities should be directed to the gc66 Data Protection contact at:

• Email: support@gc66.io (plain text — not a link)
• Live Chat: Available 24 hours a day, 7 days a week, on every page of the Platform

3. Personal Data We Collect

gc66 collects personal data from you through a variety of channels and at different stages of your relationship with the Platform. The categories of data we collect, and the primary source of each, are set out in the table below.

Category	Examples	Primary Source
Identity Data	Full legal name, date of birth, gender, national ID number, passport number	Provided by you at registration or during KYC verification
Contact Data	Email address, mobile phone number, residential address (city, district, division)	Provided by you at registration or in your account profile
Financial Data	bKash account number, Nagad number, Rocket number, Upay number, bank account details, transaction history, deposit and withdrawal amounts	Provided by you during cashier transactions; generated by Platform activity
KYC Documents	Scanned copies of National ID, passport, driving licence, proof of address, payment method screenshots	Uploaded by you during identity verification
Technical Data	IP address, device type, operating system, browser type and version, screen resolution, session timestamps	Automatically collected when you access the Platform
Usage Data	Pages visited, games played, bets placed, bet amounts, game session duration, navigation paths, search queries within the Platform	Automatically generated by your activity on the Platform
Communications Data	Live chat transcripts, email correspondence, support ticket content	Generated when you contact gc66 support
Responsible Gaming Data	Self-exclusion status, deposit limit settings, cooling-off period records, problem gambling referral records	Provided by you when activating responsible gaming tools; generated by Platform systems

4. How We Use Your Personal Data

gc66 uses your personal data only for clearly defined, legitimate purposes. We will never use your data in a manner that is incompatible with the purpose for which it was originally collected. The primary purposes for which we process personal data are as follows:

4.1 Account Management and Service Delivery

We use Identity Data, Contact Data, and Financial Data to create and maintain your gc66 account, process deposits and withdrawals in Bangladeshi Taka (৳), authenticate your identity at login, and deliver the sports betting, live casino, slots, and other gaming services available on the Platform.

4.2 Identity Verification and KYC Compliance

We use Identity Data and KYC Documents to verify that you meet the minimum age requirement of 21 years, to confirm your identity in accordance with our anti-money laundering obligations, and to validate the ownership of payment methods linked to your account. KYC verification is a condition of processing withdrawal requests above specified thresholds.

4.3 Transaction Processing and Financial Security

We use Financial Data and Technical Data to process deposits and withdrawals, detect and prevent fraudulent transactions, monitor for money laundering activity, and maintain accurate financial records. This processing is necessary both for contract performance and for compliance with applicable financial regulations.

4.4 Responsible Gaming Monitoring

We use Usage Data and Responsible Gaming Data to monitor account activity for patterns consistent with problem gambling behaviour, to enforce deposit limits and self-exclusion periods requested by members, and to ensure that mandatory responsible gaming interventions are applied where required. This processing is carried out in the legitimate interests of member welfare and Platform integrity.

4.5 Customer Support

We use Communications Data, Identity Data, and Account Data to respond to your enquiries, resolve disputes, and provide technical assistance. Support interactions are logged and retained for quality assurance and regulatory compliance purposes.

4.6 Platform Security and Fraud Prevention

We use Technical Data and Usage Data to detect and prevent unauthorised account access, identify and block suspicious activity, enforce our fair-play policies, and protect the integrity of betting markets and casino games on the Platform.

4.7 Marketing Communications

Where you have provided explicit consent, we may use your Contact Data to send you promotional communications about gc66 bonuses, new game launches, seasonal offers, and platform updates. You may withdraw consent for marketing communications at any time by contacting our support team or by using the unsubscribe mechanism included in any marketing email.

4.8 Legal and Regulatory Compliance

We use all relevant categories of personal data to the extent necessary to comply with our legal obligations, to respond to lawful requests from competent authorities, and to establish, exercise, or defend legal claims arising in connection with the Platform.

5. Legal Basis for Processing

gc66 relies on one or more of the following legal bases when processing your personal data:

• Contract performance: Processing is necessary to perform the contract between you and gc66 — specifically, to operate your betting account, process transactions, and deliver gaming services.
• Legal obligation: Processing is necessary to comply with applicable laws and regulations, including anti-money laundering requirements, identity verification mandates, and responsible gaming obligations.
• Legitimate interests: Processing is necessary for gc66's legitimate interests — including fraud prevention, Platform security, and responsible gaming monitoring — provided those interests are not overridden by your rights and freedoms.
• Consent: Processing is based on your explicit consent, which applies primarily to optional marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

gc66 does not sell, rent, or trade your personal data to third parties for their own commercial purposes under any circumstances. Personal data may be shared with the following categories of recipients, solely to the extent necessary for the stated purpose:

6.1 Service Providers and Technology Partners

gc66 engages trusted third-party service providers to support Platform operations, including payment processing partners (such as bKash, Nagad, Rocket, and Upay gateway operators), cloud hosting and infrastructure providers, identity verification and KYC service providers, customer support platform operators, and fraud detection technology providers. All such service providers are bound by data processing agreements that restrict them from using your data for any purpose other than providing the contracted service to gc66.

6.2 Game Software Providers

Casino and sports betting content on the gc66 Platform is powered by licensed third-party software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. Where your gaming activity data is shared with these providers for the purpose of delivering game content, it is handled in accordance with their own data processing agreements with gc66.

6.3 Law Enforcement and Regulatory Authorities

gc66 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent public authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of gc66, our members, or the public. Such disclosures will be made only to the extent required by applicable law and will be documented internally.

6.4 Business Transfers

In the event that gc66 undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, personal data held by gc66 may be transferred to the acquiring or successor entity as part of that transaction. Members will be notified of any such transfer and of any resulting changes to this Privacy Policy prior to their data being subject to different terms.

7. International Data Transfers

The gc66 Platform serves members located in Bangladesh, and the majority of data processing activities are conducted within or in close proximity to the South and Southeast Asian region. Where it is necessary to transfer personal data to service providers or technology partners located outside this region, gc66 will ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

Appropriate safeguards for international transfers may include standard contractual clauses, binding corporate rules, or other legally recognised transfer mechanisms. You may request further information about the specific safeguards applied to any international transfer of your data by contacting our support team.

8. Data Retention Periods

gc66 retains personal data for as long as is necessary for the purposes described in this Privacy Policy, or for as long as is required by applicable law. The general retention principles applied by gc66 are as follows:

• Active account data: Retained for the duration of your account membership and for a period of five (5) years following account closure, in order to satisfy legal, audit, and dispute resolution requirements.
• KYC and identity documents: Retained for a minimum of five (5) years following the end of the business relationship, in accordance with anti-money laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years following each transaction date.
• Responsible gaming records: Retained for the duration of any active self-exclusion or restriction, and for five (5) years thereafter, to prevent circumvention of exclusion periods.
• Marketing consent records: Retained for the duration of your consent and for three (3) years following its withdrawal, as evidence of the consent previously given.
• Support communications: Retained for three (3) years following the closure of the relevant support ticket, unless the matter relates to an ongoing dispute or legal proceeding.

Upon expiry of the applicable retention period, personal data is securely deleted from gc66 systems or anonymised such that it can no longer be linked to an identifiable individual.

9. Your Data Subject Rights

As a gc66 member, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the gc66 support team via live chat or email. gc66 will respond to all valid rights requests within thirty (30) days of receipt.

• Right of access: You have the right to request a copy of all personal data that gc66 holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request the correction of any inaccurate or incomplete personal data held about you. Some data corrections can be made directly within your account profile settings.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to gc66's legal obligations to retain certain data for defined periods.
• Right to restriction: You have the right to request that gc66 temporarily restrict the processing of your personal data — for example, while the accuracy of data is being contested or while a complaint is pending.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to gc66 in a structured, commonly used, and machine-readable format, and to request that this data be transferred directly to another data controller where technically feasible.
• Right to object: You have the right to object to processing carried out on the basis of gc66's legitimate interests or for direct marketing purposes. Where you object to marketing communications, gc66 will cease processing your data for that purpose immediately.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

10. Cookies and Tracking Technologies

gc66 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. The types of cookies used by gc66 and their purposes are described below.

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled. They include session authentication cookies that keep you logged in during your visit, security tokens that protect against cross-site request forgery, and cookies that remember your responsible gaming settings and session preferences. No consent is required for strictly necessary cookies.

10.2 Performance and Analytics Cookies

These cookies collect anonymised data about how visitors use the Platform — for example, which pages are visited most frequently, how long users spend on each page, and where users encounter errors. This data helps gc66 improve Platform performance and user experience. These cookies are activated only where you have provided consent, or where their use is deemed to fall within gc66's legitimate interests given the anonymised nature of the data collected.

10.3 Functional Cookies

These cookies allow the Platform to remember choices you have made — such as your preferred language, display settings, and recently played games — to provide a more personalised experience. Disabling functional cookies may result in a reduced or less personalised experience on the Platform.

10.4 Managing Cookies

You can manage or disable cookies at any time through your browser settings. Most browsers allow you to block all cookies, block third-party cookies only, or delete cookies after each session. Please note that disabling strictly necessary cookies will prevent you from logging in to your gc66 account and using core Platform features. Instructions for managing cookies in popular browsers are available through your browser's help documentation.

11. Security Measures

gc66 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the gc66 Platform
• Encryption of sensitive stored data, including financial records and identity documents, using industry-standard cryptographic algorithms
• Role-based access controls that limit internal staff access to personal data on a strict need-to-know basis
• Regular internal security audits and vulnerability assessments
• Multi-factor authentication requirements for staff accessing administrative systems
• Automated monitoring systems designed to detect unusual account activity and potential data breaches in real time
• Documented incident response procedures to ensure prompt action and member notification in the event of a confirmed data breach

Despite these measures, no digital system can be guaranteed to be completely immune from security incidents. In the unlikely event of a data breach that poses a risk to your rights and freedoms, gc66 will notify affected members as promptly as possible and will take all reasonable steps to mitigate the impact of the incident.

12. Minors and Age Restrictions

The gc66 Platform is strictly intended for individuals aged 21 years and above. gc66 does not knowingly collect, store, or process personal data belonging to persons under the age of 21. Registration on the gc66 Platform by any individual under this age constitutes a breach of the gc66 Terms & Conditions and will result in immediate account closure.

If gc66 becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data from our systems and to refund any deposits made, in accordance with our underage gambling prevention procedures. If you believe that a minor has registered an account on the gc66 Platform, please contact our support team immediately via live chat or at support@gc66.io.

13. Changes to This Privacy Policy

gc66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, updates to our data processing practices, or the introduction of new Platform features. The date of the most recent revision is displayed at the top of this document.

Where a material change is made to this Privacy Policy — meaning a change that significantly affects your rights or the way your data is processed — gc66 will provide no less than fourteen (14) days' advance notice via a prominent notice on the Platform and, where practicable, via the email address registered to your account. Continued use of the gc66 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed about how gc66 protects your data. If you have questions about any proposed or recent change to this policy, please do not hesitate to contact our support team.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or wish to raise a concern about gc66's data processing practices, please contact the gc66 Data Protection team through any of the following channels:

• Live Chat: Available 24/7 on every page of the gc66 Platform
• Email: support@gc66.io (plain text — not a link)
• WhatsApp: +880 1800 GC66 00 (plain text — not a link)

All privacy-related requests will be acknowledged within five (5) business days and handled in strict confidence. Response times are based on Bangladesh Standard Time (BST, UTC+6).