Legal Document

gd666 Privacy Policy

We are committed to protecting your personal data. This policy explains what we collect, why we collect it and how it is kept secure on gd666.

Document Info

🗓 Effective Date: 1 January 2026 — Last Updated: 1 January 2026

This Privacy Policy ("Policy") describes how gd666 ("we", "us", "our") collects, uses, stores, discloses and protects personal data provided by players and visitors ("you", "your") when you access or use the gd666 platform at https://gd666.vip. This Policy forms part of the gd666 Terms and Conditions and should be read alongside them. By registering an account or using gd666, you confirm that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

gd666 respects the privacy of every player on its platform. We collect only the personal data that is necessary to deliver a safe, fair and legally compliant betting experience. We do not sell personal data to third parties for marketing purposes. All data processing is carried out in accordance with the principles of purpose limitation, data minimisation and storage limitation.

Section 1

Information We Collect

gd666 collects personal data in several categories, depending on how you interact with the platform. The categories and specific data points collected under each are set out below:

Identity & Contact Data

Full name, date of birth, gender, nationality, residential address, mobile number, and email address collected at registration and during KYC verification. Government-issued photo identification (such as a Bangladesh National Identity Card or passport) is collected when identity verification is required.

Financial & Transaction Data

Mobile wallet account identifiers (bKash, Nagad, Rocket, Upay) and bank account details used for deposits and withdrawals. Transaction history including deposit amounts, withdrawal amounts, dates and payment method references. We do not store complete card numbers, CVV codes or full banking credentials.

Device & Usage Data

Device type, operating system, browser type and version, mobile network operator, screen resolution, device language setting, and a device fingerprint used for fraud detection. Session duration, pages visited, games played, bets placed and in-platform navigation paths are recorded to improve platform performance and detect unusual activity.

Location & Network Data

IP address and coarse geolocation (country and city level) derived from IP lookup. gd666 does not request or use GPS-level precise location from your device. Location data is used to verify that you are accessing gd666 from a permitted geography and to support fraud and money laundering detection.

Section 2

How We Use Your Information

Personal data collected by gd666 is used only for the purposes listed below. We do not use your data for purposes incompatible with those for which it was originally collected without your explicit consent:

Account creation and management: to register your account, verify your identity, and maintain accurate account records in accordance with our KYC obligations.
Payment processing: to process deposits and withdrawals via bKash, Nagad, Rocket, Upay and Bangladeshi bank transfer, and to reconcile financial records.
Platform delivery and improvement: to operate gd666, resolve technical issues, personalise game recommendations, and improve performance based on aggregate usage analytics.
Regulatory compliance: to comply with anti-money laundering (AML) requirements, sanctions screening, age verification obligations, and any lawful requests from competent authorities.
Fraud and security: to detect, investigate and prevent fraudulent activity, money laundering, account takeover, bonus abuse and other prohibited conduct that could harm gd666 or its players.
Customer support and dispute resolution: to respond to your queries, investigate complaints and resolve disputes about bet settlement, account balances or platform functionality.

Section 3

Legal Basis for Processing

Each category of processing that gd666 carries out rests on one of the following legal bases. The table below maps the primary processing activity to its corresponding legal basis:

Processing Activity	Legal Basis
Account registration and KYC	Contractual necessity — required to perform the player agreement
Payment processing and transaction records	Contractual necessity and legal obligation
AML, sanctions screening and age verification	Legal obligation — compliance with applicable laws
Fraud detection and platform security	Legitimate interests — protecting players and the integrity of gd666

Section 4

gd666 does not sell, rent or trade your personal data to third parties for their own marketing or commercial purposes. Personal data is shared with third parties only in the following limited circumstances:

Service providers: payment processors (including mobile wallet gateways and banking partners), identity verification vendors, fraud detection services and cloud hosting providers who process data strictly on gd666's behalf and under binding data processing agreements.
Game providers: game studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe and Ezugi receive session tokens and game-result data necessary to operate their games within the gd666 platform. These providers do not receive your full identity data.
Regulatory and law enforcement authorities: gd666 will disclose personal data to competent authorities where required by law, court order or lawful regulatory instruction. gd666 will notify affected players of such disclosures to the extent permitted by law.
Business transfers: in the event of a merger, acquisition or sale of all or substantially all of gd666's assets, player data may be transferred to the successor entity. Players will be notified in advance of any such transfer and will be given the opportunity to close their accounts before the transfer takes effect.

All third parties with whom gd666 shares personal data are required to maintain appropriate technical and organisational security measures and to use the data solely for the purposes for which it was shared. gd666 does not authorise any third party to use your personal data for their own independent marketing purposes.

Section 5

Cookies & Tracking Technologies

gd666 uses cookies and similar client-side storage technologies to operate the platform, remember your preferences and detect fraudulent or automated access. The following categories of cookies are used:

Strictly Necessary Cookies

These cookies are essential for the platform to function. They manage your login session, maintain your account state, store your language preference and support security features including CSRF protection. These cookies cannot be disabled without breaking core platform functionality.

Analytics Cookies

These cookies collect anonymised data about how players navigate gd666 — pages visited, time spent per page, game categories accessed and error events. This data is used in aggregate to improve platform performance and content relevance. No individual player is identifiable from analytics data alone.

Fraud Detection Cookies

These cookies contribute to device fingerprinting and help gd666 identify unusual access patterns, detect automated bots and flag account takeover attempts. They are part of gd666's fraud prevention infrastructure and are treated as strictly necessary for platform integrity.

You may manage cookie preferences through your browser settings. Disabling analytics cookies will not affect your ability to use gd666. However, disabling strictly necessary or fraud detection cookies may impair platform functionality or trigger additional security checks on your account.

Section 6

Data Retention

gd666 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply:

Account and identity data (including KYC documents): retained for the duration of your active account plus a minimum of 5 years after account closure. This retention period reflects anti-money laundering record-keeping requirements.
Transaction and financial records: retained for a minimum of 5 years from the date of each transaction. Financial records may be retained for longer periods where required by a specific regulatory instruction or ongoing investigation.
Support and communications records: customer support tickets, chat logs and complaint records are retained for 2 years from the date of resolution. Records relating to unresolved disputes or legal claims are retained until the matter is fully concluded.

When personal data is no longer required, gd666 securely deletes or anonymises it so that it can no longer be linked to an identifiable individual. Anonymised or aggregated data that cannot be used to identify any person may be retained indefinitely for statistical and analytical purposes.

Section 7

Data Security

gd666 applies industry-standard technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include but are not limited to:

SSL Encryption in Transit

All data transmitted between your device and gd666 servers is protected using TLS 1.2 or higher encryption. This ensures that account credentials, payment details and personal information cannot be intercepted during transmission over the internet or mobile networks.

Access Controls & Encryption at Rest

Sensitive personal data including identity documents and financial records is stored in encrypted form on gd666's secure infrastructure. Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data receive regular data-protection training.

While gd666 applies robust security measures, no system connected to the internet is entirely immune to security threats. In the event of a personal data breach that poses a risk to the rights of affected players, gd666 will notify affected players as promptly as practicable and will take immediate steps to contain the breach and mitigate its effects.

Section 8

Your Rights

As a data subject, you have the following rights in relation to the personal data gd666 holds about you. To exercise any of these rights, please contact gd666 at the email address provided in Section 12 of this Policy:

Right of access: you may request a copy of all personal data that gd666 holds about you. gd666 will respond to access requests within 30 days of receipt.
Right to rectification: if any personal data gd666 holds about you is inaccurate or incomplete, you may request that it be corrected or updated. Corrections to identity data may require re-submission of supporting documents.
Right to erasure: you may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no overriding legal obligation requires its retention. Erasure requests are subject to mandatory retention periods under AML and financial record-keeping obligations.
Right to restriction of processing: you may request that gd666 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested or while a complaint is under investigation.
Right to data portability: you may request a copy of the personal data you provided to gd666 in a structured, commonly used and machine-readable format, where technically feasible.
Right to withdraw consent: where gd666 processes your personal data on the basis of your consent (for example, for optional marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

gd666 will respond to all rights requests within 30 calendar days. Where a request is complex or involves a large volume of data, this period may be extended by a further 60 days, in which case gd666 will notify you of the extension and the reason for it within the initial 30-day period. Rights requests submitted by email to [email protected] will be acknowledged within 48 hours of receipt.

Section 9

Children's Privacy

gd666 is strictly for adults aged 21 years and above. gd666 does not knowingly collect, process or retain personal data from individuals under the age of 21. If gd666 identifies or is notified that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed. If you are a parent or guardian and believe that a minor has registered on gd666, please contact us immediately at [email protected] so that we can take prompt action.

Section 10

Third-Party Links & Integrations

The gd666 platform integrates third-party game content from providers including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe and Ezugi. When you launch a game supplied by a third-party provider, your session data is transmitted to that provider's game server to operate the game. Each game provider operates under its own privacy practices. gd666 does not control the privacy practices of its game providers and is not responsible for their data handling. You are encouraged to review the privacy policies of any third-party service you interact with through gd666 if you have concerns about how your data is handled within their systems.

Section 11

Changes to This Privacy Policy

gd666 may update this Privacy Policy from time to time to reflect changes in our data processing activities, applicable law, or regulatory guidance. The revised Policy will be posted on this page with an updated "Last Updated" date. Where a change is material — meaning it significantly affects the way we process your personal data or your rights as a data subject — gd666 will notify active players via a platform notification at least 14 days before the change takes effect.

Your continued use of gd666 after any updated Privacy Policy takes effect constitutes your acceptance of the revised Policy. If you do not agree to a revised Policy, you may request account closure before the new Policy takes effect by contacting [email protected].

Section 12

Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or need to report a data protection concern, please contact the gd666 data protection team. All enquiries are handled confidentially and acknowledged within 48 hours of receipt.

Email: [email protected]