ga66 Privacy Policy — Your Data, Handled with Care

1.1 Registration data: When you create a ga66 account, we collect your mobile number and any additional registration information required to verify your eligibility and operate your account. 1.2 Identity verification data: Where KYC verification is required (for example, before processing a withdrawal above a specified threshold), we may collect a copy of a government-issued identity document and confirmation of the payment method you use. 1.3 Transaction data: We record all deposits, withdrawals, bets and casino wagers associated with your account. This data is retained for as long as your account remains active and for a period thereafter as required by applicable law or payment processing obligations. 1.4 Device and session data: We collect technical data about the device and browser you use to access ga66, including IP address, browser type, operating system and session duration. This data is used for security monitoring and to ensure the platform functions correctly on your device. 1.5 Communication data: If you contact our support team via live chat, we retain a record of that communication for the purpose of resolving your query and for quality assurance.

2.1 Account operation: Your registration data is used to create and maintain your ga66 account, authenticate your identity when you log in, and communicate with you about your account status. 2.2 Payment processing: Your transaction data and payment method details are used solely to process deposits and withdrawals via bKash, Nagad, Rocket and Upay. 2.3 Fraud prevention and security: Device and session data is used to detect unusual activity, prevent fraudulent use of the platform, and protect the integrity of player accounts. 2.4 Legal compliance: Where required by applicable law or by the requirements of our payment processing partners, we may use your data to fulfil regulatory obligations, including anti-money-laundering (AML) checks. 2.5 Platform improvement: Anonymised and aggregated usage data may be used to understand how ga66 is used, identify technical issues and improve the platform. This data cannot be used to identify individual players.

3.1 ga66 does not sell, rent or trade your personal data. 3.2 We share data with third parties only in the following limited circumstances: (a) Payment processors: We share the minimum data required with bKash, Nagad, Rocket and Upay to process your deposits and withdrawals. Each payment processor is subject to its own privacy policy and data protection obligations. (b) Game providers: Game providers such as Pragmatic Play, Evolution Gaming, Ezugi, Spribe and Microgaming receive only the technical session data necessary to deliver their games to your device. They do not receive your personal registration data or payment details. (c) Legal requirements: Where required by applicable law, a court order or a legitimate request from a competent authority, ga66 may be required to disclose certain player data. ga66 will not disclose more data than is strictly required to comply with any such obligation. 3.3 ga66 does not engage third-party advertising networks and does not share your data with marketing companies.

4.1 ga66 uses the following categories of cookies: (a) Essential cookies: These are strictly necessary for the platform to function. They include session cookies that maintain your logged-in state, remember your language preference and ensure platform features work correctly. You cannot opt out of essential cookies without ceasing to use the platform. (b) Analytics cookies: Where used, these collect anonymised, aggregated data about how the platform is used — for example, which sections are visited most frequently or where technical errors occur. This data does not identify individual players. 4.2 ga66 does not use third-party advertising cookies, retargeting pixels or cross-site tracking scripts. 4.3 Most mobile browsers allow you to control cookies through your browser settings. Blocking essential cookies may affect the functionality of ga66.

5.1 We retain your personal data for as long as your ga66 account remains active. 5.2 Following account closure, we retain your data for the period required by applicable law and by the record-keeping obligations of our payment processing partners. This retention period is typically five years from the date of account closure, reflecting standard financial record-keeping requirements. 5.3 Transaction data (deposit and withdrawal records, bet history) is retained for the same period for the purpose of resolving disputes, responding to regulatory enquiries and meeting our obligations under applicable financial regulations. 5.4 After the applicable retention period has expired, your personal data will be deleted or anonymised such that it can no longer be associated with you as an individual.

6.1 ga66 implements the following technical and organisational measures to protect your personal data: (a) SSL/TLS encryption for all data in transit between your device and ga66 servers. (b) Encryption at rest for stored personal data and financial records. (c) Industry-standard password hashing — your password is never stored in plain text. (d) Access controls ensuring that ga66 staff can only access player data where it is necessary for their role. (e) Session management controls to detect and respond to suspicious login activity. 6.2 While ga66 implements robust security measures, no online platform can guarantee absolute security. In the event of a data security incident that affects your personal data, we will notify you as required by applicable law. 6.3 You are responsible for keeping your ga66 account credentials secure. If you suspect that your account has been accessed without authorisation, contact our support team immediately via live chat.

7.1 You have the following rights in relation to the personal data ga66 holds about you: (a) Right of access: You may request a copy of the personal data ga66 holds about you. (b) Right to rectification: You may request correction of any inaccurate personal data we hold. (c) Right to erasure: You may request deletion of your personal data, subject to our legal retention obligations. (d) Right to object: You may object to our processing of your personal data where that processing is not required for the performance of our contract with you or for compliance with a legal obligation. (e) Right to data portability: You may request that we provide your personal data in a structured, machine-readable format. 7.2 To exercise any of these rights, contact our support team via live chat on ga66.cam. We will respond to all rights requests within a reasonable timeframe and in any event within 30 days of receipt.

8.1 ga66 is strictly for players aged 21 and above. ga66 does not knowingly collect personal data from individuals below the age of 21. 8.2 If ga66 determines that personal data has been collected from an individual who is under 21 years of age, that account will be immediately suspended, the data will be deleted, and any funds held in the account will be handled in accordance with our Terms & Conditions. 8.3 If you believe that a minor has registered a ga66 account, please contact our support team immediately via live chat so that we can investigate and take appropriate action.

9.1 ga66 reserves the right to update this Privacy Policy at any time. When we make material changes to this Policy, we will update the effective date at the top of this page. 9.2 We encourage you to review this Policy periodically. If you continue to use ga66 after a Policy update has been published, you are deemed to have accepted the revised Policy. 9.3 If changes to this Policy require us to process your personal data in a new way that is materially different from what was described at the time you provided that data, we will notify you via your registered contact details before implementing that change.

10.1 For all privacy-related queries — including requests to access, correct or delete your personal data — please contact our support team via live chat on ga66.cam. Our support team is available 24 hours a day, 7 days a week on Bangladesh Standard Time (UTC+6). 10.2 Please include the following information in your privacy request to help us process it efficiently: your registered mobile number, the nature of your request (access / correction / deletion), and any relevant context about the data you are asking about. 10.3 We aim to respond to all privacy requests within 30 days of receipt. Complex requests may take longer; in such cases we will notify you of the expected timeline within the initial 30-day window.