gh66 Privacy Policy
How We Handle Your Data

gh66 (referred to in this Privacy Policy as "gh66", "we", "us", or "our") is an internationally licensed online betting and casino platform operating at gh66.io. gh66 offers sports betting — with a particular focus on cricket markets relevant to Bangladeshi players, including BPL, IPL, T20 World Cup, and Bangladesh Tigers international fixtures — alongside a comprehensive live casino, slots library, and speciality games.

gh66 is operated by an internationally licensed entity. For the purposes of this Privacy Policy, gh66 acts as the data controller in respect of all personal data collected from registered players and visitors to gh66.io. As data controller, gh66 determines the purposes and means by which your personal data is processed.

If you have any questions about this Privacy Policy or about how gh66 handles your personal data, you may contact us at: [email protected]. Our support team is available 24 hours a day, seven days a week, including Bangladesh public holidays.

gh66 collects personal data from you in three principal ways: data you provide directly when registering or using the platform, data generated automatically through your use of the platform, and data received from third-party service providers who assist in operating our services.

Data you provide directly:

• Registration data: Full legal name, date of birth, email address, mobile phone number, and account username provided when creating a gh66 account.
• Identity verification data: Government-issued photo identification (such as a National ID card or passport), proof of address documents, and selfie photographs submitted as part of the Know Your Customer (KYC) verification process.
• Payment data: Mobile wallet identifiers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), and payment card details (Visa, Mastercard) provided when making deposits or requesting withdrawals. Full card numbers are not stored by gh66 — payment card data is tokenised by our PCI-DSS-compliant payment processors.
• Communications data: The content of messages you send to gh66 via live chat, email, or any other support channel, including support ticket histories.
• Responsible gaming data: Information you provide when setting deposit limits, loss limits, self-exclusion periods, or session time reminders through your account settings.

Data collected automatically:

• Technical data: IP address, device type, operating system, browser type and version, screen resolution, and time zone settings.
• Usage data: Pages visited on gh66.io, games played, bets placed (including stake amounts, markets selected, and outcomes), session duration, click paths, and feature interactions.
• Cookie and tracking data: Data collected via cookies and similar tracking technologies as described in Section 6 of this Policy.
• Transaction data: A complete record of all deposits, withdrawals, bonus claims, and wagering activity associated with your gh66 account.

Data received from third parties:

• Identity and age verification results from third-party KYC service providers.
• Fraud risk scores and transaction monitoring flags from payment processing partners.
• Self-exclusion status information from responsible gaming registries where gh66 participates.

gh66 uses the personal data it collects for the following defined purposes. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected without first obtaining your explicit consent.

• Account creation and management: To register your gh66 account, verify your identity and age (21+), maintain your account profile, and communicate important account-related notices to you.
• Service delivery: To allow you to access and use gh66's betting, live casino, slots, and speciality game products; to process bets and game rounds; and to display real-time odds, results, and account balances.
• Payment processing: To process deposits via bKash, Nagad, Rocket, Upay, and other supported Bangladeshi payment methods, and to execute withdrawal requests to your nominated payment account.
• Legal compliance: To fulfil our obligations under applicable anti-money-laundering (AML) and counter-terrorist financing (CTF) regulations, including KYC verification, transaction monitoring, and mandatory reporting to relevant authorities where required by law.
• Fraud prevention and platform security: To detect and investigate suspicious account activity, prevent bonus abuse, identify potential fraud or money laundering, and protect the integrity of gh66's platform and the broader player community.
• Responsible gaming: To enforce the player-set responsible gaming tools (deposit limits, loss limits, self-exclusion) stored in your account settings, and to identify patterns of play that may indicate problem gambling behaviour, allowing our team to intervene proactively and compassionately.
• Customer support: To respond to your queries, resolve disputes, and maintain a record of our communications with you for quality assurance and training purposes.
• Platform improvement: To analyse aggregate usage patterns, identify technical issues, test new features, and improve the overall player experience on gh66.io — using anonymised or pseudonymised data wherever possible.
• Marketing communications: To send you promotional offers, bonus notifications, and news about new games or features — but only where you have given your explicit consent to receive marketing communications, or where we have a legitimate interest in contacting existing players about directly relevant offers. You may withdraw consent or opt out of marketing at any time through your account settings or by contacting support.

gh66 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform our contract with you — i.e., to operate your gh66 account, process bets, and handle deposits and withdrawals. Without this processing, gh66 cannot provide its services to you.
• Legal obligation: Processing that is required to comply with applicable laws and regulations, including AML/CTF obligations, KYC verification requirements, and mandatory reporting duties.
• Legitimate interests: Processing carried out to pursue gh66's legitimate business interests, where those interests are not overridden by your privacy rights. This includes fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics for service improvement.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and for any non-essential cookies or tracking technologies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Where gh66 relies on legitimate interests as the legal basis for a processing activity, we have carried out a balancing assessment to confirm that our interests do not outweigh your fundamental rights and freedoms in the specific context of that activity.

gh66 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following defined circumstances, and only to the minimum extent necessary for the stated purpose:

• Payment processors: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These processors receive only the data required to complete the transaction and are bound by their own PCI-DSS compliance obligations.
• Identity verification providers: Third-party KYC service providers who assist gh66 in verifying player identity and age. These providers process identity document images and biometric data solely for verification purposes and are contractually prohibited from using that data for any other purpose.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi whose games are integrated into the gh66 platform. These providers may receive a pseudonymous player identifier and session token to facilitate game play; they do not receive your full name, contact details, or financial data.
• Fraud prevention and risk management services: Third-party platforms that assist gh66 in detecting and preventing fraudulent activity, money laundering, and bonus abuse. These services process technical and transactional data under strict data processing agreements.
• Cloud infrastructure providers: Hosting and data storage providers who maintain gh66's server infrastructure. All data stored with infrastructure providers is encrypted at rest and access is restricted to authorised gh66 personnel only.
• Regulatory and law enforcement authorities: gh66 will disclose personal data to competent authorities when required to do so by applicable law, court order, or regulatory direction. gh66 will notify affected players of such disclosures to the extent permitted by law.
• Professional advisers: Lawyers, auditors, and compliance consultants engaged by gh66 where disclosure is necessary for the provision of professional advice. All such advisers are bound by professional confidentiality obligations.

gh66 uses cookies and similar tracking technologies (including web beacons and local storage objects) on gh66.io to support the technical operation of the platform, to remember your preferences, and — where you have given consent — to analyse your usage patterns and deliver relevant content.

The categories of cookies used by gh66 are as follows:

• Strictly necessary cookies: These cookies are essential for you to navigate gh66.io and use its core features, such as maintaining your authenticated gh66 Login session, storing your account balance display preferences, and preserving responsible gaming settings between page loads. These cookies cannot be disabled without materially impairing your ability to use the platform.
• Functional cookies: These cookies remember choices you make on the platform — such as your preferred language, game display settings, and odds format — so that you do not need to re-enter these preferences each time you visit. They enhance your experience but are not essential to platform function.
• Analytics cookies: Where you consent, these cookies help gh66 understand how players use the platform in aggregate — which pages are most visited, where players encounter difficulties, and how navigation flows are performing. This data is used in anonymised form to improve the gh66.io user experience. gh66 uses privacy-respecting analytics tools that do not share raw player data with advertising networks.
• Security cookies: These cookies assist in fraud prevention and account security functions, including identifying unusual login patterns and detecting automated bot activity.

You may manage your cookie preferences at any time through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in to your gh66 account and use core platform features. Disabling functional or analytics cookies will not prevent you from using the platform but may reduce personalisation and limit gh66's ability to improve the service.

gh66 retains personal data for the minimum period necessary to fulfil the purposes described in this Privacy Policy, and no longer. The specific retention periods that apply to different categories of personal data are as follows:

Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted or anonymised so that it can no longer be associated with you as an individual. Anonymised aggregate data (from which all identifying information has been removed) may be retained indefinitely for statistical and service improvement purposes.

If you request account closure, gh66 will begin the process of deleting or anonymising your personal data promptly, subject to retaining the minimum data required to comply with legal obligations (as outlined in the table above) and to resolve any outstanding disputes or financial claims.

gh66 respects your rights over your own personal data. The following rights are available to all gh66 registered players and may be exercised by contacting our support team at [email protected]:

• Right of access: You have the right to request a copy of all personal data that gh66 holds about you, together with an explanation of how that data is being used. gh66 will provide this information in a clear, structured format within 30 calendar days of a verified request.
• Right to rectification: If any personal data gh66 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain data (such as your contact details) directly through your account settings; other corrections can be requested via support.
• Right to erasure: You have the right to request that gh66 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent (and no other legal basis applies), or where the processing was unlawful. This right is subject to gh66's legal data retention obligations described in Section 7.
• Right to restriction of processing: You have the right to request that gh66 restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: You have the right to receive the personal data you have provided to gh66 in a structured, commonly used, machine-readable format, and to have that data transferred to another service provider where technically feasible.
• Right to object: You have the right to object to gh66 processing your personal data on the basis of legitimate interests, and to object to the use of your data for direct marketing purposes at any time. gh66 will cease direct marketing processing immediately upon receipt of an objection.
• Right to withdraw consent: Where gh66 relies on your consent as the legal basis for processing (for example, marketing communications or non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

gh66 implements a comprehensive, layered approach to data security. The technical and organisational measures we maintain to protect your personal data include:

• Transport encryption: All data transmitted between your device and gh66's servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to gh66 Login sessions, game play, deposit and withdrawal flows, and all API communications.
• Storage encryption: Sensitive personal data stored in gh66's databases — including identity documents and financial account identifiers — is encrypted at rest using AES-256 encryption.
• Access controls: Access to gh66 production systems and player data is restricted to authorised personnel only, subject to role-based access controls and multi-factor authentication requirements. All access is logged and audited.
• Two-factor authentication (2FA): gh66 supports and strongly encourages the use of OTP-based two-factor authentication for all player accounts. Players who enable 2FA benefit from an additional layer of protection against unauthorised account access.
• Vulnerability management: gh66 conducts regular penetration testing and vulnerability scanning of its platform infrastructure. Critical security findings are remediated on a priority basis within defined service level objectives.
• Incident response: gh66 maintains a formal data breach response plan. In the event of a confirmed data breach affecting player personal data, gh66 will notify affected players and relevant authorities within the timeframes required by applicable law.

While gh66 employs robust security measures, no digital platform can guarantee absolute security against all threats. You play an important role in keeping your account secure by maintaining a strong, unique password for your gh66 account, enabling two-factor authentication, and reporting any suspected unauthorised access to our support team immediately.

gh66 operates an online gambling platform and enforces a strict minimum age requirement of 21 years for all registered players. gh66's services are not directed at, and must not be used by, any person under the age of 21.

gh66 does not knowingly collect personal data from individuals under the age of 21. All registration attempts are subject to age verification checks using date-of-birth data provided at registration, supplemented by identity document verification for players who request withdrawals or trigger enhanced due diligence thresholds.

If gh66 becomes aware that an account has been registered by or is being used by a person under the age of 21, that account will be suspended immediately, all bets and game rounds associated with the account will be voided, and any deposits will be returned to the source payment method. All personal data associated with the underage account will be securely deleted except to the extent required for legal record-keeping and fraud prevention purposes.

gh66 is operated by an internationally licensed entity and may store and process player data on servers located outside Bangladesh. By registering a gh66 account, you acknowledge that your personal data may be transferred to, stored in, and processed in countries other than Bangladesh, including countries whose data protection laws may differ from those in force in your home jurisdiction.

Where personal data is transferred to third-party service providers located outside Bangladesh, gh66 ensures that appropriate safeguards are in place to protect the transferred data. These safeguards may include:

• Contractual clauses that impose data protection obligations on the recipient equivalent to those described in this Privacy Policy.
• Transfers to countries or entities that maintain internationally recognised data protection standards equivalent to those applied by gh66.
• Transfers to service providers who participate in recognised international data privacy frameworks.

You may request further information about the international transfer safeguards applicable to specific processing activities by contacting gh66 support at [email protected].

gh66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. Where a material change is made to this Policy, gh66 will notify registered players via email or an in-platform notification prior to the change taking effect.

The revised Privacy Policy will be published at /privacy-policy with an updated effective date. We encourage you to review this Policy periodically so that you remain informed about how gh66 handles your personal data.

Your continued use of the gh66 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised version. If you do not accept the revised Policy, you must cease using the platform and may request account closure by contacting gh66 support.

Minor amendments — such as corrections of typographical errors or clarifications that do not alter the substance of any provision — may be made without prior notice and will be effective from the date of publication.

For all privacy-related enquiries, data rights requests, or concerns about how gh66 handles your personal data, please contact the gh66 data protection team using the details below:

• Email: [email protected] — subject line: "Privacy Enquiry" or "Data Rights Request"
• Support availability: 24 hours a day, 7 days a week, including Bangladesh public holidays
• Response target: Acknowledgement within 5 business days; full response within 30 calendar days
• Time zone: Bangladesh Standard Time (BST, UTC+6)

When submitting a data rights request, please include your registered account username, a clear description of the specific right you wish to exercise, and any relevant account or transaction references that will help us locate your data efficiently. gh66 may need to verify your identity before processing certain requests to ensure that personal data is not disclosed to or amended by unauthorised parties.

This Privacy Policy was last updated on 1 January 2026. This version supersedes all previous versions of the gh66 Privacy Policy.