gj666 Privacy Policy

1 Introduction

gj666 ("we", "us", "our", "the Platform") operates the online casino and sports betting platform available at gj666.io. We are committed to protecting the privacy and security of all personal information provided to us by players based in Bangladesh and elsewhere. This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of your personal data when you visit our website, create an account, place bets, make deposits or withdrawals, or interact with our customer support team.

This Policy applies to all data subjects who interact with gj666, including registered account holders, visitors who browse gj666.io without registering, and individuals who contact our support team. It covers all personal data processed by gj666 in connection with the operation of the platform, including data collected through desktop browsers, mobile browsers, and any associated applications.

We take our data protection responsibilities seriously. Our platform uses industry-standard technical and organisational measures to keep your information secure, and we work only with trusted third-party partners who meet equivalent data protection standards. This document is written in plain English to ensure every player can understand their rights and our obligations clearly.

2 Information We Collect

gj666 collects personal data through several channels, including information you provide directly during registration and account management, data generated automatically by your use of the platform, and information provided by third-party partners such as payment processors and identity verification providers. The categories of personal data we collect include:

Category	Examples	Source
Identity Data	Full legal name, date of birth, national ID or passport number	Provided by you at registration / KYC
Contact Data	Email address, mobile number, residential address (city, district, Bangladesh)	Provided by you at registration
Financial Data	bKash / Nagad / Rocket / Upay wallet numbers, bank account details, transaction history	Provided by you when making deposits or withdrawals
Account Data	Username, encrypted password, account balance, betting history, bonus activity	Generated by platform use
Technical Data	IP address, device type, operating system, browser type, session duration	Collected automatically via logs and cookies
Usage Data	Pages visited, games played, bets placed, features used, time on site	Collected automatically via analytics
Communications Data	Support ticket content, live chat transcripts, email correspondence	Generated when you contact support
Verification Data	Copies of government-issued ID, utility bills, selfie photographs for KYC	Provided by you during identity verification

We do not collect or process special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless explicitly required by law and with your separate, explicit consent.

3 How We Use Your Information

gj666 uses personal data only for specific, documented purposes. We do not repurpose your data for uses that are incompatible with the original purpose of collection without informing you and, where required, obtaining your consent. The primary purposes for which we use your data include:

• Account creation and management: To register your account, verify your identity, manage your profile, and maintain account security across all sessions.
• Service delivery: To process your bets, manage your account balance, credit winnings, handle deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank channels, and deliver all platform features.
• Identity verification (KYC): To comply with know-your-customer obligations, confirm that you are at least 21 years of age, and verify that you are not on any self-exclusion register.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct, and to protect the integrity of the gj666 platform.
• Customer support: To respond to your enquiries, resolve complaints, investigate disputes, and provide assistance through our 24/7 support channels.
• Responsible gaming: To monitor for signs of problem gambling, enforce self-exclusion requests, apply deposit limits and cooling-off periods, and connect at-risk players with appropriate resources.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates by email or SMS — only where you have provided consent and only via our registered domain at gj666.io.
• Platform improvement: To analyse usage patterns, test new features, measure performance, and continually improve the gj666 user experience for players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and beyond.
• Legal compliance: To comply with applicable laws, respond to lawful requests from regulatory authorities, and meet our record-keeping obligations.

4 Legal Basis for Processing

gj666 processes your personal data only where a valid legal basis exists under applicable data protection law. The legal bases we rely on include:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered player — including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate interests: Processing carried out for gj666's legitimate business interests — such as fraud prevention, platform security, and service analytics — where these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent at any time by contacting support or using the unsubscribe mechanism in our emails.

5 Sharing Your Information

gj666 does not sell or rent your personal data to any third party. We share your information only in the following limited circumstances, and only to the extent strictly necessary:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to process your deposits and withdrawals securely. These providers process only the financial data necessary to complete transactions and are bound by their own regulatory obligations.
• Identity verification providers: Third-party KYC and age-verification services used to confirm your identity and eligibility to use the gj666 platform. These providers receive only the minimum data necessary to complete verification.
• Game providers: Software and live casino providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive technical session data necessary to deliver their games within the gj666 platform. They do not receive your full personal profile.
• Fraud and security services: Specialist anti-fraud and AML screening services that help gj666 detect and prevent financial crime. Data shared with these providers is used solely for security screening purposes.
• Analytics providers: Anonymised or aggregated usage data may be shared with analytics platforms to help us understand how the platform is used. This data does not identify individual players.
• Legal and regulatory authorities: Where required by applicable law or a lawful regulatory request, gj666 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of gj666's assets, personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

6 Cookies & Tracking Technologies

gj666 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain your session, remember your preferences, and analyse how our site is used. A cookie is a small text file placed on your device when you visit a website.

The types of cookies used on gj666.io include:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery (CSRF). These cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and display options, so you do not need to re-enter them on each visit.
• Analytics cookies: Used to collect anonymised information about how visitors use gj666.io — including which pages are most visited, how long sessions last, and which features are most used. This data is used only to improve the platform.
• Security and fraud detection cookies: Used to identify and flag unusual session behaviour that may indicate fraudulent activity, account takeover attempts, or bot traffic.

You can control cookie preferences through your browser settings. Please note that disabling essential cookies will affect your ability to log in and use core platform features. gj666 does not use third-party advertising cookies or cross-site tracking cookies.

7 Data Security

gj666 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• Encryption in transit: All data transmitted between your browser and our servers is encrypted using 256-bit SSL/TLS encryption. Look for the padlock icon and "https" prefix in your browser address bar when using gj666.io.
• Encryption at rest: Sensitive data stored in our databases — including payment details and identity documents — is encrypted at rest using AES-256 encryption.
• Password security: Passwords are never stored in plain text. They are hashed using a strong one-way cryptographic algorithm. gj666 staff cannot view your password — only you know it.
• Access controls: Personal data is accessible only to gj666 staff and authorised partners who have a legitimate need for it. Access is role-based and subject to regular review.
• Security monitoring: Our systems are continuously monitored for suspicious activity, intrusion attempts, and anomalous behaviour patterns. Alerts are triaged by our security team 24/7.
• Incident response: gj666 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify affected players promptly in accordance with applicable law.

8 Data Retention

gj666 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. Our general retention guidelines are as follows:

• Account and identity data: Retained for the lifetime of your account and for a period of 5 years following account closure, to meet our AML record-keeping obligations and to handle any retrospective disputes or regulatory enquiries.
• Transaction records: Deposit and withdrawal records are retained for a minimum of 5 years from the date of the transaction, in accordance with financial record-keeping requirements.
• KYC and verification documents: Copies of identity documents submitted for verification are retained for 5 years from account closure or from the date of the last verified transaction, whichever is later.
• Support communications: Customer support tickets and live chat transcripts are retained for 2 years from the date of the interaction, to facilitate handling of any related follow-up queries or disputes.
• Analytics data: Anonymised usage analytics data may be retained indefinitely as it cannot be used to identify individual players. Individually identifiable session data is retained for 12 months.
• Marketing preferences: Records of your marketing consent or opt-out status are retained for the lifetime of your account and for 2 years following account closure.

When personal data is no longer required and the retention period has expired, it is securely deleted from our systems or irreversibly anonymised so that it can no longer be linked to you as an individual.

9 Your Rights

As a data subject, you hold a number of rights with respect to the personal data that gj666 holds about you. gj666 respects these rights and will respond to all valid requests promptly. Your rights include:

• Right of access: You may request a copy of all personal data gj666 holds about you. We will provide this in a clear, structured format within 30 days of receiving your verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You may also update certain details directly through your account profile settings.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that we may be required to retain certain data for legal compliance purposes even after an erasure request.
• Right to restrict processing: You may request that we restrict the processing of your personal data in certain circumstances, such as while a rectification request is being resolved or while you contest the legal basis for processing.
• Right to data portability: You may request a copy of your personal data in a machine-readable format for transfer to another service provider, where the data was provided by you and processed on the basis of consent or contract.
• Right to withdraw consent: Where processing is based on your consent — such as receipt of marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling. gj666 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

To exercise any of these rights, please contact our data protection team at [email protected] with the subject line "Data Rights Request". We will verify your identity before processing any request and will respond within 30 days. Complex requests may take up to 60 days, in which case we will notify you of the extension and the reason for it.

10 Minors & Age Verification

gj666 strictly prohibits the use of its platform by any person under the age of 21. The gj666 platform is intended for adults aged 21 and above only, in accordance with our responsible gaming policy and the 21+ age restriction applied across all services.

gj666 does not knowingly collect personal data from minors. All new registrations are subject to age verification as part of the KYC process. Where gj666 discovers or has reasonable grounds to believe that a registered user is under 21, the account will be immediately suspended, all data will be securely deleted (except where retention is required by law), and any deposits will be returned to the original payment method.

Parents and guardians who believe that a minor has accessed or registered on the gj666 platform are urged to contact us immediately at [email protected] so that we can take prompt action. We also encourage the use of parental controls and internet filtering tools to prevent underage access to online gambling platforms.

11 International Data Transfers

gj666 is an internationally operated platform serving players primarily in Bangladesh. In the course of providing our services, your personal data may be transferred to and processed in countries outside Bangladesh, including countries where our technology infrastructure, game providers, and support partners are based.

Where personal data is transferred internationally, gj666 ensures that appropriate safeguards are in place to protect it. These safeguards include contractual data processing agreements with receiving parties that incorporate standard data protection clauses equivalent to international best practices, and a requirement that all data recipients implement security measures consistent with those described in this Privacy Policy.

By using the gj666 platform and providing your personal data, you acknowledge and consent to the international transfer of your data for the purposes described in this Privacy Policy. If you have questions about the specific countries to which your data may be transferred, please contact us at [email protected].

12 Changes to This Policy

gj666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, we will notify registered players via the email address held on file and will display a prominent notice on gj666.io. The "Last Updated" date at the top of this page will be revised to reflect the date of the most recent amendment.

Your continued use of the gj666 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a revised Policy, you must stop using the platform and contact us to close your account before the changes take effect.

We encourage all players to review this Privacy Policy periodically. The current version is always available at gj666.io/privacy-policy.

13 Contact & Data Requests

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data gj666 holds about you, please contact our support and data protection team using the details below. All privacy-related correspondence is treated as confidential and handled by staff with appropriate data protection training.

• Email: [email protected] — use subject line "Privacy Enquiry" or "Data Rights Request" for faster routing.
• Live Chat: Available 24/7 via the in-platform chat widget when logged in to your gj666 account.
• Response Time: Privacy and data rights enquiries are acknowledged within 24 hours and fully responded to within 30 days.
• Identity Verification: To protect your data, we will verify your identity before processing any data rights request. You may be asked to confirm details associated with your registered account.