Privacy Policy — How good1 Collects, Uses & Protects Your Data

good1, operating through the domain good1.io, acts as the data controller for all personal information collected from players, visitors, and prospective users of the Platform. As data controller, good1 determines the purposes and means by which personal data is processed.

All data-related enquiries, access requests, and complaints should be directed to the good1 support team using the contact details provided in Section 13 of this policy. We are committed to responding to all privacy-related communications promptly and in good faith.

good1 collects personal data that is necessary to operate a safe, compliant, and enjoyable betting and casino platform for players in Bangladesh. The categories of personal data we collect are set out in the table below:

good1 does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information) unless specifically required to comply with a legal obligation.

good1 collects personal data through the following methods:

• Direct Submission: Information you actively provide when creating an account, completing KYC verification, making a deposit or withdrawal, or contacting our support team via email or WhatsApp.
• Automated Technical Collection: Data collected automatically as you navigate the good1.io website, including IP address, device identifiers, browser fingerprint, and usage patterns via server logs and first-party analytics tools.
• Payment Processors: Transaction confirmation data relayed from bKash, Nagad, Rocket, Upay, and partnering banks (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank) to verify that a deposit or withdrawal has been completed successfully.
• Identity Verification Partners: Where good1 employs third-party identity verification services to assist with KYC compliance, those partners may return verification status information linked to the documents you submit.
• Game Providers: Gameplay session data (bets placed, game results, session timestamps) is recorded by good1's platform systems and, in the case of live casino games, by studio providers such as Evolution Gaming and Ezugi, whose systems communicate results back to the good1 wallet.

good1 does not purchase personal data from third-party data brokers or marketing list providers.

good1 processes your personal data only for defined, legitimate purposes. The table below maps each processing purpose to the data categories used and the legal basis for that processing:

good1 does not sell, rent, or trade your personal data to any third party for marketing purposes. Data is shared only with trusted partners where sharing is strictly necessary to operate the Platform, meet a legal obligation, or protect the security of the service. Third parties who receive your data are contractually bound to process it only for the specified purpose and to maintain appropriate security standards.

Categories of Third-Party Recipients

• Payment Service Providers: bKash, Nagad, Rocket, Upay, and partner banks receive the minimum transaction data necessary to process deposits and withdrawals. good1 does not share full identity documents with payment providers beyond what their own KYC requirements mandate.
• Identity Verification Services: Third-party KYC providers may receive copies of identity documents to verify their authenticity. These providers operate under strict data processing agreements and are prohibited from using the data for any purpose beyond verification.
• Game Studio Providers: Providers such as Evolution Gaming, Ezugi, Pragmatic Play, Spribe, Microgaming, and NetEnt receive a player session token and anonymised player identifier to launch game sessions and settle bet results. They do not receive your full identity or financial data.
• IT Infrastructure & Hosting Providers: good1's hosting, database, and content delivery infrastructure providers may process your data as part of their service. These providers are bound by data processing agreements and are not permitted to access your data beyond what is technically necessary.
• Law Enforcement & Regulatory Authorities: good1 may disclose personal data to competent authorities where required by applicable law, a court order, or a lawful regulatory request. good1 will notify affected users where legally permissible to do so prior to any such disclosure.
• Professional Advisers: Lawyers, auditors, and accountants retained by good1 may access personal data in the context of delivering professional advice, subject to professional confidentiality obligations.

good1 uses cookies and similar tracking technologies on the good1.io website to deliver a functional, personalised, and secure browsing experience. A cookie is a small text file placed on your device by the web server when you visit good1.io. Cookies do not execute programs or deliver viruses to your device.

Types of Cookies Used

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They manage your login session, maintain your shopping basket (wallet balance), and preserve security tokens. The Platform cannot function without these cookies and they cannot be disabled.
• Performance & Analytics Cookies: These cookies collect aggregated information about how visitors use good1.io — for example, which pages are visited most frequently and whether users encounter error messages. This information is used to improve the Platform. These cookies do not identify individual users.
• Functionality Cookies: These cookies remember your preferences, such as your preferred language setting, last game lobby visited, and display preferences, to provide a more personalised experience on return visits.
• Fraud Prevention Cookies: Certain cookies are used by good1's fraud detection systems to identify unusual or automated access patterns that may indicate account compromise or automated bot activity.

Managing Cookies

You may configure your web browser to refuse all or some cookies, or to alert you when a cookie is being placed. Please note that disabling strictly necessary cookies will prevent you from logging in to your good1 account and accessing the Platform's core features. Instructions for managing cookies are available in the help documentation of the major browsers (Chrome, Firefox, Safari, Edge).

good1 does not use cross-site advertising cookies or sell browsing data to third-party advertising networks.

good1 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Personal and financial data associated with an active Account is retained for the full duration of the account relationship and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction Records: Deposit, withdrawal, and betting transaction records are retained for a minimum of seven (7) years following the date of the transaction to support financial auditing and regulatory compliance.
• KYC & Identity Documents: Copies of identity documents submitted for KYC verification are retained for five (5) years following account closure or from the date of the last transaction, whichever is later.
• Support Communications: Records of customer support interactions, including email correspondence and chat transcripts, are retained for three (3) years from the date of the last interaction.
• Technical & Usage Logs: Server logs and analytics data are retained for a rolling period of thirteen (13) months and are then automatically deleted or anonymised.
• Marketing Preferences: Records of your consent or opt-out preferences for promotional communications are retained indefinitely to demonstrate compliance with consent requirements.

At the end of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be linked to an identifiable individual.

good1 takes data security seriously and applies industry-standard technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and good1's servers is encrypted using 256-bit SSL/TLS protocols, ensuring that data in transit cannot be intercepted or read by third parties.
• Encrypted Data Storage: Sensitive data fields — including financial account numbers and identity document references — are encrypted at rest using AES-256 encryption within good1's database infrastructure.
• Access Controls: Access to systems containing personal data is restricted to authorised good1 staff and contractors on a strict need-to-know basis. All staff with data access are subject to confidentiality agreements and regular security training.
• Two-Factor Authentication: Administrative access to good1's internal systems requires multi-factor authentication to prevent unauthorised internal access.
• Penetration Testing: good1's platform infrastructure is subject to periodic security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: good1 maintains an incident response plan to detect, contain, and investigate any potential data security breach. In the event of a breach that poses a material risk to affected players, good1 will notify those players via their registered contact details without undue delay.

As a player whose personal data is processed by good1, you hold the following rights in relation to your personal information. To exercise any of these rights, please contact [email protected] with the subject line "Privacy Rights Request" and your registered account username:

• Right of Access: You have the right to request a copy of the personal data good1 holds about you, along with information about how it is being used. good1 will respond to a valid access request within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Minor corrections (such as updating a mobile number) can often be made directly within your Account settings panel.
• Right to Erasure: You may request that good1 delete your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where you believe it has been unlawfully processed. Note that erasure requests cannot be fulfilled where good1 is required to retain data under a legal obligation (e.g., anti-money laundering record-keeping).
• Right to Restrict Processing: You may request that good1 temporarily restrict the processing of your personal data while a dispute about its accuracy or the legitimacy of its processing is being resolved.
• Right to Data Portability: Where processing is based on your consent or on performance of a contract and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where good1 processes your data on the basis of consent (e.g., for personalised promotional communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.
• Right to Object: You may object to the processing of your personal data where good1 relies on legitimate interest as the legal basis, unless good1 can demonstrate compelling legitimate grounds that override your interests.

good1 will acknowledge all privacy rights requests within 72 hours and provide a substantive response within 30 calendar days of receiving a valid, verifiable request.

The good1 Platform is strictly intended for adults aged 21 and above. good1 does not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you must not use the good1 Platform, create an account, or submit any personal information to good1.

If good1 becomes aware that personal data has been collected from an individual under the age of 21 — whether through underage registration, a complaint, or an internal review — good1 will immediately suspend the account, delete all associated personal data to the extent permitted by law, and where appropriate refer the matter to relevant authorities.

Parents and guardians who believe their child may have created a good1 account should contact [email protected] immediately with supporting details so that appropriate action can be taken without delay.

The good1.io website may reference third-party services such as payment providers (bKash, Nagad, Rocket, Upay) and game studio platforms (Evolution Gaming, Pragmatic Play, Spribe, etc.) in its content. Where navigation away from good1.io to such third-party platforms occurs, please be aware that those platforms are governed by their own independent privacy policies.

good1 has no control over the content, privacy practices, or data handling of third-party websites or applications. good1 accepts no responsibility or liability for the privacy practices of any third party. Players are strongly encouraged to read the privacy policy of any third-party platform before submitting personal data to it.

good1 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, operational practices, or the services offered on the Platform. When material changes are made, good1 will take reasonable steps to notify registered players by displaying a prominent notice on the good1.io homepage, sending a notification to the player's registered mobile number, or posting an update within the player's account dashboard.

The updated Privacy Policy will indicate the revised effective date at the top of the document. Your continued use of the good1 Platform following notification of a material change to this policy constitutes your acknowledgement of the updated terms. If you do not agree with any changes, you must cease using the Platform and may request account closure by contacting [email protected].

The current version of this Privacy Policy is always available at good1.io/privacy-policy. good1 recommends reviewing this page at least once every six months to stay informed of how your data is being handled.

If you have any questions, concerns, or requests regarding this Privacy Policy or the personal data good1 holds about you, please reach out to the good1 support team through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• WhatsApp: +880 1700-000000
• Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (BST, UTC+6)

When submitting a privacy-related request, please include your registered account username, a clear description of your request or concern, and any relevant dates or reference numbers so that our team can locate and process your data efficiently. All privacy requests are handled with strict confidentiality by trained support staff.

For general platform questions, game rules, and account management guidance, the FAQ page and Responsible Gaming page provide additional resources that may address your query without the need to contact support directly.