This Privacy Policy describes how GG66 — operated in gg66.cash — collects, uses, stores, and protects the personal data of registered users and visitors of the platform, in accordance with the Lei Geral de Proteção de Dados (LGPD — Lei 13.709/2018).
By creating a GG66 account, you confirm that you have read and understood this policy. If you have any questions about how your data is handled, our support team is available 24 hours a day via live chat or at suporte@gg66.cash.
GG66 is the controller of the personal data collected through the gg66.cash platform and its associated services. As the controller, we are responsible for determining the purposes and means of processing the personal data of the platform's Brazilian users.
To exercise any right under the LGPD or to ask questions about how your data is handled, please contact our Data Protection Officer (DPO) through the channels below:
- Email: suporte@gg66.cash
- Live chat: available 24 hours on the GG66 platform
GG66 is committed to responding to personal data requests within a maximum of 15 calendar days from the date of receipt, as required by the LGPD.
GG66 collects only the data necessary to operate the platform, process payments, and meet legal obligations. Below, we detail the categories of data collected and when collection takes place:
| Category | Data Collected | When |
|---|---|---|
| Identification | Full name, CPF, date of birth, RG or CNH | Registration / KYC |
| Contact | Email, mobile number, residential address | Registration |
| Financial | Pix key, card details (tokenized), deposit and withdrawal history | Payments |
| Platform Usage | Betting history, games accessed, session times, preferences | Ongoing use |
| Technical | IP address, device type, operating system, browser | Access |
| Communications | Chat and email support history, notification preferences | Support |
GG66 does not collect sensitive data relating to health, racial or ethnic origin, religious beliefs, political opinions, sexual orientation, or biometric data beyond what is strictly necessary for identity verification.
Credit or debit card data is never stored directly on GG66's servers. Card transactions are handled by PCI-DSS certified payment processors that tokenize financial information — GG66 receives only a reference token, never the full card details.
Every piece of data GG66 collects has a specific purpose. We do not use personal data beyond what is stated below without notifying the user and, where required, obtaining fresh consent:
- Identity Verification (KYC): confirm that the user is over 18, a resident of Brazil, and the holder of the payment method being used.
- Account operation: process deposits and withdrawals via Pix, boleto, card, PicPay, Mercado Pago, and TED; credit bonuses; record bets and results.
- Fraud and money laundering prevention: monitor usage patterns that indicate irregular activity, in compliance with applicable legal obligations.
- User support: responding to inquiries, resolving disputes, processing responsible gambling requests, and handling account closures.
- Platform communications: send notifications about transactions, terms updates, and, with your consent, information about GG66 promotions and bonuses.
- Platform improvement: aggregated and anonymized analysis of usage patterns to improve the experience, platform stability, and available products.
- Regulatory compliance: comply with legal and regulatory obligations in the Brazilian betting market, including reporting to authorities as required by law.
Marketing communications — such as emails about GG66 promotions, new games, and exclusive bonuses — are only sent if you give explicit consent during registration. You can withdraw that consent at any time through your account dashboard or by contacting support.
The LGPD requires that all processing of personal data have a specific legal basis. GG66 relies on the following legal bases for each category of processing:
- Contract performance (Art. 7, V): processing required to deliver the services contracted by the user — registration, betting, deposits, and withdrawals.
- Compliance with a legal obligation (Art. 7, II): identity verification (KYC), anti-money laundering compliance, and reporting to regulatory authorities in accordance with current Brazilian legislation.
- Legitimate interests (Art. 7, IX): fraud prevention, platform security monitoring, and aggregated usage analysis for service improvement, provided these activities do not harm the fundamental interests or rights of the data subject.
- Consent (Art. 7, I): sending marketing communications, collecting data beyond what is strictly necessary for operations, and processing data for non-essential personalization.
Where processing is based on consent, you may withdraw it at any time without affecting your account or your use of any GG66 services that do not depend on that specific processing.
GG66 does not sell, rent, or share personal data of users to third parties for commercial purposes. Data sharing occurs exclusively in the following situations, always under strict control by GG66:
- Payment processors: minimum financial data required to process transactions via Pix, boleto, credit/debit card, PicPay, Mercado Pago, and TED bank transfers. All partners are certified and contractually prohibited from using this data for their own purposes.
- Game providers: technical session identification (never full identity data) shared with providers such as Evolution, Pragmatic Play, and NetEnt to authenticate Live Casino and slots sessions.
- KYC services: specialized partners in identity verification who validate documents and confirm the ownership of registration data, operating as data processors under contract with GG66.
- Competent authorities: data shared when required by a court order or applicable legal or regulatory obligation in Brazil — such as requests from the Financial Activities Control Council (COAF) or the Ministry of Finance.
All third parties that receive personal data from GG66 users are contractually required to process that information in compliance with the LGPD and solely for the purposes for which the data was shared.
GG66 uses cookies and similar technologies to ensure the platform works correctly and to improve the user experience. The types of cookies used are:
- Essential cookies: required for the platform's basic operation — session authentication, bet slip management, and security preferences. These cannot be disabled without compromising your use of the platform.
- Functional cookies: store user preferences such as language and interface settings. They improve the experience without affecting functionality if disabled.
- Analytical cookies: collect aggregated, anonymized data about how users navigate GG66 — which pages get the most traffic, where errors occur, average session length. This data helps improve the platform and does not identify users individually.
- Marketing cookies (with consent only): used to personalize communications and, with explicit user consent, display relevant ads. Can be disabled via the privacy preferences panel.
You can manage your cookie preferences at any time through the privacy panel available in the platform footer. Disabling non-essential cookies does not affect betting, deposits, or withdrawals on GG66.
GG66 retains personal data for as long as necessary to fulfill the purposes for which it was collected or to meet legal obligations. General retention periods are:
- Registration and identity data: kept for the duration of the account and for up to 5 years after account closure, in accordance with regulatory requirements and anti-money laundering obligations.
- Financial transaction history: retained for 5 years from each transaction, in compliance with Brazilian tax and regulatory legislation.
- Betting history: retained for 3 years after each bet is placed.
- Support and service records: retained for 2 years after each ticket is closed.
- Browsing data and cookies: retained for a maximum period of 13 months, after which they are automatically anonymized or deleted.
Once retention periods expire, data is securely deleted or irreversibly anonymized. Data that has already been anonymized is not subject to the LGPD provisions relating to data subject rights.
GG66 implements robust technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, or improper destruction:
- SSL/TLS 1.3 Encryption: all communication between the user's device and GG66's servers is encrypted using the latest available protocols.
- Encrypted storage: sensitive data is stored with encryption at rest — no critical data is held in plain text in our databases.
- Role-based access control: only staff with a genuine operational need can access specific user data, with audit logs recorded for every access.
- Continuous monitoring: automated systems detect suspicious access attempts, brute-force attacks, and anomalous usage patterns in real time.
- Secure authentication: passwords are stored as salted hashes — GG66 never has access to your password in plain text. If you forget it, a new password must be created, not recovered.
- Regular security testing: periodic audits and penetration tests are conducted by specialist teams to identify and remediate vulnerabilities before they can be exploited.
In the event of a security incident that may affect users' personal data, GG66 will notify the National Data Protection Authority (ANPD) and the affected users within the timeframes established by the LGPD.
The LGPD grants you, as a data subject, the following rights regarding GG66's processing of your data. All rights can be exercised through live chat support or by emailing suporte@gg66.cash:
Request confirmation that your data is being processed and obtain a copy of the information we hold about you.
Request the correction of incomplete, inaccurate, or outdated information in your GG66 account.
Request the deletion of data processed on the basis of consent, except where retention is required by law.
Receive your data in a structured format for transfer to another controller, in accordance with ANPD regulations.
Request the temporary suspension of data processing when the data is unnecessary, excessive, or being processed in violation of the LGPD.
Withdraw any consent given at any time, at no cost and without affecting any processing previously carried out on the basis of that consent.
Be informed about the public and private entities with which GG66 has shared your data.
File a complaint against GG66 with the National Data Protection Authority (ANPD) if you believe your rights have been violated.
GG66 responds to all data subject rights requests within 15 calendar days. In cases requiring more detailed review, we will inform you of the extended timeframe and the reasons more time is needed.
GG66 is a platform intended exclusively for individuals who are 18 years or older. We do not intentionally collect or process personal data from minors.
The registration process includes date-of-birth verification and, at later stages, identity document verification to confirm legal age. Any account identified as belonging to a minor will be closed immediately, with collected data deleted in accordance with this policy and applicable legal obligations.
If you suspect that a minor has created a GG66 account, please contact us immediately via live chat or at suporte@gg66.cash. We will treat the matter as a priority.
Prohibited for users under 18. GG66 employs ongoing technical and procedural measures to prevent minors from accessing the platform and to protect their data from any unintentional collection.
Some of GG66's technical partners — such as cloud infrastructure providers and international game providers — may process data on servers located outside Brazil. GG66 takes the following measures to ensure adequate protection in these cases:
- International transfers occur only to countries or organizations that provide an adequate level of data protection, as recognized by the ANPD or through the application of appropriate safeguards set out in the LGPD.
- Data processing agreements with specific protection clauses are in place with all international partners that receive data from GG66's Brazilian users.
- Data transferred internationally is limited to the minimum necessary for the partner's specific function — full identity data is never transferred to game providers, for example.
GG66 prioritizes partners with infrastructure in Brazil wherever technically feasible and economically reasonable, minimizing the need for international transfers of personal data.
GG66 may update this Privacy Policy periodically to reflect changes to the platform, applicable legislation, or our data processing practices. The date of the last revision is always shown at the top of this page.
Material changes — especially those that expand data collection or alter processing purposes — will be communicated at least 7 days in advance by email to all users with an active GG66 account. For changes that require fresh consent, a dedicated notification will be sent requesting confirmation before the new processing begins.
Continued use of the GG66 platform after any updates to this policy take effect constitutes acceptance of those changes. If you do not agree with the updates, you may request account closure as described in the Terms and Conditions, and your data will be handled in accordance with the retention periods outlined in section 7.
We recommend reviewing this policy periodically. The current version is always available at gg66.cash/privacy-policy. Any questions about updates can be answered by our 24/7 support team in Portuguese.