Your Privacy at gy666
At gy666, protecting the personal data of every player in Bangladesh is a responsibility we take seriously. This Privacy Policy explains exactly what information we collect, why we collect it, how we use it, and what rights you have over your own data.
SSL-Encrypted Transmission
Every piece of data exchanged between your device and gy666 is protected by 256-bit SSL encryption. Your login credentials, payment details, and personal information are never transmitted in plain text.
No Unauthorised Data Selling
gy666 does not sell, rent, or trade your personal information to third-party advertisers or data brokers. Your data is used solely to operate and improve your experience on the gy666 platform.
You Control Your Data
Registered players have the right to access, correct, export, and request deletion of their personal data. Submit a data request at any time by contacting gy666 support via live chat or email.
Payment Data Protection
bKash, Nagad, Rocket, Upay, and bank transfer credentials are handled exclusively through verified payment gateways. gy666 does not store your full mobile banking PIN or bank account passwords on its servers.
Defined Retention Periods
gy666 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Once the retention period expires, data is securely deleted or anonymised.
Marketing Opt-Out
You may opt out of promotional emails, SMS notifications, and marketing communications at any time by updating your account preferences or contacting our support team. Opting out does not affect transactional communications.
Information We Collect
gy666 collects personal information that is necessary to provide you with a safe, compliant, and enjoyable online gaming experience. We collect data in three primary ways: information you provide directly, information collected automatically, and information received from third-party partners.
1.1 Information You Provide Directly
When you register an account, make a deposit, contact support, or participate in a promotion on gy666, you may provide us with the following categories of personal information:
| Data Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID (NID) number, passport number | Registration & KYC verification |
| Contact Data | Mobile number, email address, city of residence (e.g., Dhaka, Chittagong, Sylhet) | Registration & account updates |
| Payment Data | bKash/Nagad/Rocket mobile number, DBBL/City Bank/BRAC Bank account reference, transaction IDs | Deposit & withdrawal requests |
| Verification Documents | Scanned NID card, passport photo page, utility bill, selfie for liveness check | KYC review process |
| Communications Data | Live chat transcripts, support email content, feedback submissions | Any support interaction |
1.2 Information Collected Automatically
When you visit gy666 or interact with the platform, certain technical and behavioural data is collected automatically through cookies, log files, and similar technologies. This includes:
- Device & Technical Data: IP address, device type (mobile/desktop), operating system, browser type and version, screen resolution, and device identifiers.
- Usage Data: Pages visited, games played, bet amounts, session duration, click patterns, and navigation paths within the gy666 platform.
- Location Data: Approximate geographic location derived from your IP address. gy666 does not access GPS-level location data from your device.
- Session Data: Login timestamps, session lengths, and logout events, used to support responsible gaming monitoring and account security.
1.3 Information Received from Third Parties
In limited circumstances, gy666 may receive personal data about you from trusted third-party sources, including:
- Payment Providers: bKash, Nagad, Rocket, Upay, and linked banks may confirm transaction status, account holder name, and mobile number to facilitate deposit and withdrawal verification.
- Identity Verification Partners: Third-party KYC service providers may cross-reference your submitted documents against national records to confirm authenticity.
- Fraud Prevention Services: Third-party fraud detection systems may share risk signals associated with known fraudulent accounts or devices to protect the integrity of the gy666 platform.
Minimum Data Principle: gy666 collects only the data that is strictly necessary for the purpose stated. We do not collect sensitive categories of data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by a legal obligation.
How We Use Your Data
gy666 uses your personal data for specific, legitimate purposes directly related to the operation of a safe and responsible online gaming platform serving players across Bangladesh.
2.1 Platform Operation & Account Management
The primary purpose for which gy666 processes your personal data is to operate the platform and manage your account. This includes creating and maintaining your player account, authenticating your identity at login, processing deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and supported banks, crediting bonuses and tracking wagering progress, and providing 24/7 English-language customer support.
2.2 Legal Compliance & Fraud Prevention
gy666 is required to process certain personal data to comply with its legal obligations, including:
- Age verification to ensure all players are 18 years of age or older;
- Anti-money laundering (AML) and Know Your Customer (KYC) checks;
- Detection, investigation, and prevention of fraud, collusion, and bonus abuse;
- Responding to lawful requests from courts, regulatory bodies, or law enforcement agencies.
2.3 Responsible Gaming Monitoring
gy666 uses session data, betting history, and account activity patterns to monitor for signs of problem gambling. Where automated systems or support agents identify patterns consistent with harmful gambling behaviour, gy666 may proactively reach out to offer responsible gaming tools, including deposit limits, cooling-off periods, and self-exclusion. This processing is carried out in the genuine interest of player welfare.
2.4 Platform Improvement & Analytics
Aggregated and anonymised usage data is used to analyse platform performance, identify popular games and features, improve the user interface, and optimise the experience for players across Bangladesh — including players accessing gy666 from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and other major cities. This analytics processing does not involve identifying individual players.
2.5 Marketing Communications
With your consent, gy666 may send you promotional emails or SMS notifications about new games, seasonal promotions (such as BPL cricket betting offers, Eid bonus events, or Pohela Boishakh specials), and personalised offers based on your gaming activity. You may withdraw your consent and opt out of marketing communications at any time without affecting your ability to use the platform.
Data Sharing & Disclosure
gy666 does not sell your personal data. We share player data only where strictly necessary and only with carefully selected partners who are bound by confidentiality and data protection obligations.
3.1 Service Providers
gy666 engages trusted third-party service providers who process data on our behalf in order to deliver specific platform functions. These include payment processing partners (bKash, Nagad, Rocket, Upay, DBBL, City Bank, BRAC Bank), KYC and identity verification providers, cloud hosting and infrastructure providers, and customer support platform vendors. All service providers are contractually required to process personal data only as instructed by gy666 and to maintain appropriate technical and organisational security measures.
3.2 Game Studio Partners
When you play games on gy666 from third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, limited technical data (such as a pseudonymous player session token and bet/win amounts) may be shared with the relevant studio to facilitate game session integrity and resolve disputes. Your full identity data is not transmitted to game studios.
3.3 Legal & Regulatory Disclosure
gy666 may disclose personal data to courts, law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or lawful regulatory request. In such cases, gy666 will disclose only the minimum data necessary to satisfy the legal requirement and will notify the affected player where permitted by law to do so.
3.4 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of gy666's business assets, player personal data may be transferred to the acquiring or successor entity as part of that transaction. In such circumstances, gy666 will provide advance notice to affected players and ensure that the successor entity is bound by privacy obligations no less protective than those in this Policy.
No Cross-Border Transfers Without Safeguards: gy666 does not transfer personal data to countries outside Bangladesh without ensuring that adequate data protection safeguards are in place, including contractual data processing agreements with all international service providers.
Data Security & Retention
gy666 implements robust technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or destruction.
5.1 Security Measures
gy666 employs the following security controls to protect player data at rest and in transit:
- 256-bit SSL/TLS Encryption: All data transmitted between your device and the gy666 platform is encrypted using industry-standard TLS 1.2 or TLS 1.3 protocols.
- Secure Password Storage: Account passwords are stored as salted cryptographic hashes. gy666 staff cannot view your password in plain text.
- Access Controls: Personal data is accessible only to gy666 staff and contractors who have a legitimate operational need. Access is role-restricted and logged.
- Infrastructure Security: gy666's hosting infrastructure employs firewalls, intrusion detection systems, and regular security audits to maintain a hardened server environment.
- Penetration Testing: gy666 commissions periodic third-party security assessments to identify and remediate vulnerabilities before they can be exploited.
5.2 Data Retention Periods
gy666 retains personal data for different periods depending on the category of data and the purpose for which it is held:
- Account & Identity Data: Retained for the lifetime of your active account plus 5 years following account closure, to comply with AML record-keeping obligations.
- Transaction Records: Retained for 7 years from the date of each transaction in accordance with financial record-keeping requirements.
- KYC Documents: Retained for 5 years following account closure or the conclusion of any related legal proceedings, whichever is later.
- Support Communications: Retained for 2 years from the date of the interaction, unless they relate to an ongoing dispute or legal matter.
- Analytics Data: Anonymised after 90 days and retained in aggregate form indefinitely for platform improvement purposes.
- Marketing Consent Records: Retained for the duration of the active marketing relationship plus 3 years to evidence consent compliance.
5.3 Data Breach Response
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, gy666 will notify affected players without undue delay, providing details of the nature of the breach, the data categories involved, the likely consequences, and the remedial measures taken. gy666 maintains an internal incident response plan to ensure rapid containment and communication in the event of a security incident.
Your Privacy Rights
As a registered player on gy666, you have meaningful rights over your personal data. gy666 is committed to honouring these rights promptly and transparently.
Right of Access
Request a copy of all personal data gy666 holds about you, along with information on how it is being used.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held on your account.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
Right to Restrict Processing
Request that gy666 temporarily suspend processing of your data while a dispute about its accuracy or lawfulness is resolved.
Right to Data Portability
Request an export of your personal data in a structured, machine-readable format so you can transfer it to another service.
Right to Object
Object to the processing of your data for marketing purposes or profiling at any time. gy666 will cease such processing upon receipt of a valid objection.
Right to Withdraw Consent
Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting prior processing.
Right Against Automated Decisions
Request human review of any significant decision made solely by automated systems, such as account suspension triggered by fraud detection algorithms.
To exercise any of these rights, contact the gy666 data support team via live chat or by emailing [email protected]. gy666 will respond to all valid data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, with prior notification to you.
Identity Verification Required: To protect your data, gy666 must verify your identity before processing any data rights request. You will be asked to confirm your registered email address, mobile number, and in some cases provide a copy of your NID or passport. This step is mandatory and is for your protection.
Third-Party Services
The gy666 platform integrates with a number of third-party services to deliver games, process payments, and maintain platform security. Each third party operates under its own privacy policy.
7.1 Game Providers
gy666 hosts games from leading international studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game, a secure session token is established between gy666 and the game provider. This token may carry pseudonymous identifiers (such as an internal player ID and currency code) to initialise your game session. Full personal identity data is not shared with game studios. Each game studio is contractually bound to process session data only for the purpose of delivering the game and resolving session-level disputes.
7.2 Payment Gateways
Deposits and withdrawals on gy666 are facilitated through integrated payment gateways connected to bKash, Nagad, Rocket, Upay, and supported Bangladeshi banks. When you initiate a payment transaction, your payment reference data is transmitted to the relevant gateway to authorise and confirm the transaction. gy666 does not store complete mobile banking PINs, card CVV numbers, or full bank account credentials on its own servers. Payment partners operate under their own privacy policies and are subject to Bangladesh Bank's regulatory framework for mobile financial services.
7.3 Analytics & Security Providers
gy666 uses third-party analytics and security services to monitor platform performance and detect fraudulent activity. These services process anonymised or pseudonymised data only. No personally identifiable information is shared with analytics providers beyond what is strictly necessary for security and performance monitoring purposes. gy666 does not use third-party behavioural advertising networks or share player data with social media advertising platforms.
7.4 Links to External Sites
The gy666 platform does not contain outbound links to third-party websites. However, if you independently navigate to third-party payment apps (such as the bKash or Nagad mobile app) to complete a transaction, your activity on those external platforms is governed by the respective provider's privacy policy, over which gy666 has no control or responsibility.
Policy Updates & Contact
gy666 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal obligations, or platform features. We will always keep you informed of material changes.
8.1 How We Notify You of Changes
When gy666 makes a material change to this Privacy Policy — such as introducing a new category of data collection, a new sharing arrangement with a third party, or a significant change to retention periods — registered players will be notified via email to their registered address and via an in-platform notification upon their next login. The updated Policy will be published on this page with a revised effective date. Continued use of the gy666 platform after the effective date of any update constitutes acceptance of the revised Privacy Policy.
8.2 Minor Updates
gy666 may make minor, non-material updates to this Policy at any time — for example, to improve the clarity of an existing explanation or to correct a typographical error. Minor updates will be reflected in the document with a revised effective date but will not trigger individual player notifications.
8.3 Contacting gy666 About Privacy
If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about how your personal data is being handled, please contact the gy666 privacy team using the details below. gy666 is committed to resolving all privacy inquiries promptly and transparently.
- Email: [email protected] — mark your subject line "Privacy Request"
- Live Chat: Available 24/7 via the gy666 platform — request to speak with a privacy team member
- Response Time: gy666 aims to acknowledge all privacy inquiries within 48 hours and to provide a substantive response within 30 days of receipt
- Time Zone: All response times are calculated in Bangladesh Standard Time (BST, UTC+6)
Questions About Your Privacy?
Our English-speaking support team is available around the clock to address any privacy concerns, help you exercise your data rights, or guide you through gy666's responsible gaming tools.