goodsbet
Privacy Policy

1. Data We Collect

goodsbet collects personal data from you in three primary ways: data you provide directly during registration and Account use, data generated automatically through your interaction with the Platform, and data received from third-party service providers such as payment processors. The categories of personal data we collect are set out below.

1.1 Registration & Account Data

When you register a goodsbet Account, we collect the following information:

• Full legal name
• Date of birth (for age verification — you must be 18 or older)
• Email address
• Mobile phone number (used for bKash, Nagad, or Rocket payment verification)
• Residential address (city, district, and postcode)
• Preferred currency (BDT by default)
• Username and encrypted password

1.2 Identity Verification (KYC) Data

To comply with our anti-money laundering obligations and to verify that you meet the 18+ age requirement, we may request the following documents at account registration or prior to processing withdrawals:

• Government-issued photo identification (National ID card, passport, or driving licence)
• Proof of residential address dated within the last three (3) months
• Screenshot or confirmation of your registered bKash, Nagad, Rocket, or Upay account number
• Selfie photograph alongside your government-issued ID, where enhanced verification is required

KYC documents are handled with the highest level of care. They are stored in encrypted form, accessible only to authorised compliance personnel, and are never used for any purpose beyond identity and age verification and AML screening.

1.3 Transaction & Betting Data

Every financial transaction and betting action on goodsbet generates a record, including:

• Deposit amounts, timestamps, and payment method references
• Withdrawal requests, amounts, and payment method details
• Bet placement records — event, market, stake, odds, and settlement outcome
• Bonus claims, wagering progress, and bonus settlement records
• Casino game session data — game title, provider, session duration, wager amounts, and results

These records are retained in accordance with our data retention obligations under our gaming licence and applicable anti-money laundering regulations. Transaction records are never deleted solely on request while regulatory obligations remain active.

1.4 Technical & Usage Data

When you access goodsbet, our systems automatically collect certain technical information, including:

• IP address and approximate geolocation (country and city level)
• Browser type, version, and operating system
• Device type (mobile, tablet, desktop) and screen resolution
• Pages visited, time spent on each page, and navigation path
• Referring website or search query that brought you to goodsbet
• Session login and logout timestamps

This data is used for fraud prevention, platform security monitoring, and improving the overall user experience. It is not used to build advertising profiles or shared with data brokers.

1.5 Communications Data

If you contact goodsbet via live chat, email, or any support channel, we retain a record of that communication, including the content of messages exchanged, timestamps, and the nature of the enquiry or complaint. These records are used to resolve disputes, monitor service quality, and fulfil our regulatory obligations to maintain complaint records.

2. How We Use Your Data

goodsbet processes your personal data only where we have a lawful basis to do so. The following table summarises the primary purposes for which we use your data and the corresponding legal basis for each:

Purpose	Data Used	Legal Basis
Account registration and management	Registration data, device data	Contractual necessity
Age and identity verification (KYC)	KYC documents, registration data	Legal obligation
Processing deposits and withdrawals	Transaction data, payment method details	Contractual necessity
Settling bets and casino game results	Betting data, transaction data	Contractual necessity
Anti-money laundering screening	Transaction data, KYC data, IP data	Legal obligation
Fraud prevention and platform security	Technical data, transaction data	Legitimate interest
Responsible gaming monitoring	Betting data, session data, account data	Legal obligation / legitimate interest
Customer support and dispute resolution	Communications data, account data	Contractual necessity / legal obligation
Sending transactional notifications	Email address, mobile number	Contractual necessity
Sending promotional communications	Email address, betting preferences	Consent (opt-in)
Platform analytics and improvement	Usage data, technical data	Legitimate interest

Where we rely on your consent as the legal basis for processing — particularly for promotional communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. You may update your marketing preferences from your Account dashboard or by contacting our support team at support@goodsbet.

3. Data Sharing & Disclosure

goodsbet does not sell or rent your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent necessary for the specified purpose.

3.1 Payment Service Providers

To process deposits and withdrawals, we share necessary transaction details with our integrated payment service providers, which include bKash, Nagad, Rocket, Upay, and card processing partners for Visa and Mastercard transactions. These providers receive only the data required to execute the specific transaction and are contractually prohibited from using your data for any other purpose.

3.2 Identity Verification Partners

Where automated KYC verification is employed, your identity documents may be processed by a third-party identity verification service operating under strict data processing agreements with goodsbet. These partners are bound to process your data solely for the purpose of identity and age verification and are not permitted to retain your documents beyond the period required to complete verification.

3.3 Game Content Providers

goodsbet integrates games from third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game from one of these providers, a session token and anonymised player identifier are transmitted to the provider's servers to facilitate gameplay. These providers do not receive your full name, email address, or payment details. Their own privacy policies govern the session data they process on their end.

3.4 Regulatory and Law Enforcement Authorities

goodsbet may be legally required to disclose personal data to regulatory bodies, law enforcement agencies, tax authorities, or financial intelligence units where such disclosure is required by applicable law, a court order, or a lawful regulatory request. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement.

3.5 Business Transfers

In the event that goodsbet or a substantial part of its business is acquired, merged with another entity, or transferred to new ownership, your personal data may form part of the transferred assets. You will be notified of any such transfer and of any material change to data processing practices that may result from it, with reasonable advance notice provided before the transfer takes effect.

4. Cookies & Tracking Technologies

goodsbet uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain session security, and analyse Platform usage. Below is a summary of the categories of cookies we use:

Cookie Category	Purpose	Duration
Strictly Necessary	Maintain your login session, prevent cross-site request forgery, load-balance server requests. These cookies are essential for the Platform to function and cannot be disabled.	Session / up to 24 hours
Functional	Remember your language preference, display settings, and last-visited game category so you do not need to re-select these on each visit.	Up to 30 days
Analytics	Collect anonymised usage data (pages visited, session duration, device type) to help us understand how players use the Platform and identify areas for improvement.	Up to 12 months
Security	Detect and flag suspicious login attempts, bot traffic, and potentially fraudulent activity patterns based on device fingerprinting and behavioural signals.	Up to 90 days

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging into your goodsbet Account and using the Platform. Disabling functional or analytics cookies will not affect your ability to bet or play but may result in a less personalised experience.

goodsbet does not use third-party advertising cookies or tracking pixels that report your behaviour to external advertising networks.

5. Data Retention

goodsbet retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, unless a longer retention period is required by law. The following retention periods apply:

• Account data and KYC documents: Retained for a minimum of five (5) years from the date of Account closure, in compliance with AML and gaming licence record-keeping obligations.
• Transaction and betting records: Retained for a minimum of five (5) years from the date of the transaction, for regulatory and dispute resolution purposes.
• Customer support communications: Retained for three (3) years from the date of the interaction, for dispute resolution and quality assurance purposes.
• Technical and usage data (logs): Retained for up to twelve (12) months for security monitoring and fraud prevention purposes.
• Marketing consent records: Retained until you withdraw consent and for one (1) year thereafter, to demonstrate compliance with consent-based marketing obligations.

When personal data is no longer required and no legal retention obligation applies, goodsbet deletes or anonymises the data using secure data disposal methods. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

6. Your Privacy Rights

As a player of goodsbet, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team via live chat or by email at support@goodsbet. We will respond to all verified requests within thirty (30) days.

6.1 Right of Access

You have the right to request a copy of the personal data that goodsbet holds about you, including account data, transaction history, and any KYC documents on file. This is sometimes called a Subject Access Request (SAR). We will provide this information in a structured, machine-readable format where technically feasible.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. Account details such as email address, mobile number, and postal address can typically be updated directly from your Account dashboard. For corrections to KYC documents or identity information, please contact our support team.

6.3 Right to Erasure

You may request that goodsbet delete your personal data. We will action erasure requests where no overriding legal retention obligation applies. Please note that transaction records, KYC documents, and betting history are subject to mandatory retention periods under our gaming licence and AML obligations, and these records cannot be deleted upon request during the applicable retention window. Erasure of these records will occur automatically at the end of the applicable retention period.

6.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of your data is under dispute, or while we are assessing a legitimate interest objection you have raised. During a restriction, we will retain your data but will not actively process it beyond what is necessary to maintain the restriction.

6.5 Right to Data Portability

Where processing is based on your consent or on a contract, and processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) so that you can transfer it to another service provider if you choose.

6.6 Right to Object to Marketing

You can opt out of receiving promotional communications from goodsbet at any time by updating your notification preferences in your Account dashboard, clicking the unsubscribe link in any marketing email, or contacting our support team. Opting out of marketing will not affect transactional communications such as deposit confirmations, withdrawal notifications, and security alerts.

7. Data Security Measures

goodsbet employs a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our key security measures include:

• TLS 1.3 encryption for all data in transit between your device and our servers
• AES-256 encryption for sensitive data fields stored in our databases, including identity document images and payment method references
• Bcrypt password hashing — no plain-text passwords are ever stored
• Two-factor authentication (2FA) available to all players for Account login
• Role-based access control (RBAC) ensuring that staff can only access data relevant to their operational role
• Full audit logging of all administrative access to player data
• Regular penetration testing and vulnerability assessments conducted by independent security professionals
• DDoS mitigation and web application firewall (WAF) protection on all public-facing infrastructure

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, goodsbet will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

8. Changes to This Policy

goodsbet reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the features and services we offer. When material changes are made, we will notify registered players by email and via an in-platform notification at least seven (7) days before the revised Policy takes effect. The "Last Updated" date at the top of this page will be revised to reflect the most recent update.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of goodsbet following the effective date of any revision constitutes your acceptance of the updated Policy. If you object to any change, you may contact our support team to request Account closure before the revised Policy comes into force.

9. Contact & Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our support team through any of the following channels:

• Live Chat: Available 24/7 via the goodsbet Platform — average response time 2–5 minutes
• Email: support@goodsbet

We will acknowledge all privacy-related enquiries within 48 hours (Bangladesh Standard Time, UTC+6) and aim to provide a full response within thirty (30) calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further thirty (30) days, in which case we will inform you of the extension and the reason for it.