Privacy Policy — good11 Platform

1 Who We Are and How to Contact Us

good11 operates the online casino and sports betting platform accessible at good11.ws ("the Platform"). For the purposes of data protection law, good11 is the data controller in respect of personal data collected through the Platform. All data-related enquiries, access requests, and erasure requests should be directed to our support team by email at [email protected]. We aim to respond to all privacy-related requests within five (5) business days of receipt.

This Privacy Policy applies to all personal data collected through the good11 website, any associated mobile interfaces, customer support communications, and account registration and verification processes. It does not apply to third-party websites or services that may be linked from the Platform — those services operate under their own separate privacy policies.

2 What Personal Data We Collect

good11 collects personal data in several ways — directly from you when you register, deposit, withdraw, or contact support; automatically when you interact with the Platform; and from third-party identity verification providers where required. The categories of personal data we may collect include:

• Identity data: Full legal name, date of birth, nationality, and government-issued identification numbers as provided during registration or verification;
• Contact data: Email address, mobile phone number, and city or region of residence;
• Financial data: Mobile wallet account details (bKash, Nagad, Rocket, Upay), transaction history, deposit and withdrawal records, and balance information;
• Technical data: IP address, browser type and version, device type and operating system, session duration, page interaction data, and referral source;
• Behavioural data: Games played, bet amounts, win/loss history, bonus usage, and time spent on the Platform;
• Communications data: Records of correspondence with our support team, including chat transcripts and email exchanges;
• Verification data: Copies of documents submitted for age or identity verification, such as National ID cards, passports, or utility bills.

We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information unless specifically required by law or responsible gaming obligations.

3 How and Why We Use Your Personal Data

good11 processes your personal data only where a lawful basis for processing exists. The lawful bases we rely upon are: performance of a contract (operating your account), compliance with a legal obligation, our legitimate interests as a business, and — where required — your explicit consent. The specific purposes for which we use your data are as follows:

• Account creation and management: To register your account, verify your identity and age, maintain accurate account records, and process login authentication;
• Transaction processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other security threats;
• Responsible gaming: To monitor gambling behaviour patterns and apply responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion where appropriate;
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance;
• Legal compliance: To meet our obligations under applicable laws, including anti-money laundering (AML) and know-your-customer (KYC) requirements;
• Platform improvement: To analyse usage patterns and improve the performance, design, and content of the Platform using aggregated and anonymised data;
• Marketing communications: With your consent only, to send you promotional offers, bonus notifications, and news about good11 products and services. You may withdraw consent at any time.

4 Sharing Your Personal Data

good11 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. We may share your data with third parties only in the following limited circumstances:

• Payment processors: Transaction data is shared with bKash, Nagad, Rocket, Upay, Visa, and Mastercard solely to facilitate deposits and withdrawals on your behalf;
• Identity verification providers: Where required to fulfil KYC obligations, we may share identity data with accredited third-party verification service providers operating under strict confidentiality agreements;
• Game software providers: Gameplay data may be shared with game studios such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi solely for the purpose of delivering and auditing game content;
• Legal authorities: We may disclose personal data to law enforcement, regulatory bodies, or courts where we are required to do so by applicable law, court order, or to protect the rights and safety of good11 or its users;
• Fraud prevention agencies: Where we reasonably suspect fraudulent activity or financial crime, we may share relevant data with specialist fraud prevention organisations.

All third parties with whom we share personal data are required to process that data in a manner consistent with this Privacy Policy and under appropriate data protection agreements.

5 Data Retention

good11 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account data: Retained for the duration of your account and for five (5) years following account closure, to satisfy our legal and regulatory obligations;
• Financial transaction records: Retained for a minimum of seven (7) years in compliance with financial record-keeping requirements;
• Identity verification documents: Retained for five (5) years following the completion of the verification process or account closure, whichever is later;
• Customer support records: Retained for three (3) years following the resolution of the relevant support case;
• Marketing preference data: Retained until you withdraw consent or request deletion, whichever occurs first;
• Technical and analytical data: Retained in aggregated, anonymised form indefinitely for Platform improvement purposes; identifiable technical data is deleted within 12 months of collection.

At the end of the applicable retention period, personal data is securely deleted or permanently anonymised. Where deletion is not immediately technically feasible, the data is isolated from active processing and destroyed at the earliest practicable opportunity.

6 Cookies and Tracking Technologies

good11 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. A cookie is a small text file stored on your device by your browser when you visit a website. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function correctly, including session management, login authentication, and security features. These cannot be disabled without impairing your ability to use the Platform;
• Analytics cookies: Used to collect anonymised data about how visitors use the Platform, including pages visited, time spent, and error messages encountered. This data helps us improve the Platform's performance and content;
• Preference cookies: Used to remember your settings and preferences, such as language or display options, to provide a more personalised experience.

You can control cookie settings through your browser at any time. Most browsers allow you to refuse or delete cookies. Please note that disabling strictly necessary cookies may affect the functionality of your good11 account. We do not use cookies for advertising or cross-site tracking purposes.

7 Security Measures

good11 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encrypted storage of sensitive data at rest, including identity verification documents and financial records;
• Multi-factor authentication options for account access;
• Regular security audits and vulnerability assessments carried out by qualified information security personnel;
• Strict access controls limiting staff access to personal data on a need-to-know basis;
• Incident response procedures to detect, report, and investigate any personal data breach without undue delay.

While we take all reasonable steps to protect your personal data, no system of transmission over the internet or electronic storage is entirely without risk. You play an important role in keeping your account secure — please use a strong, unique password and never share your login credentials with anyone.

8 Children and Minors

The good11 platform is strictly for adults aged 21 and above. We do not knowingly collect or process personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21 without parental or guardian consent, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child has registered an account on good11, please contact us immediately at [email protected]. We will investigate the matter promptly and, where confirmed, delete the minor's data without delay.

9 Marketing Communications

With your explicit consent at registration, good11 may send you promotional communications by email regarding bonuses, new games, seasonal offers (such as Eid specials, BPL cricket promotions, or Pohela Boishakh campaigns), and platform updates. Your consent to receive marketing communications is entirely voluntary and separate from the consent required to operate your account.

You may withdraw your consent to receive marketing communications at any time by contacting [email protected] with the subject line "Unsubscribe". We will process your request within five (5) business days. Withdrawing marketing consent will not affect your ability to use the Platform or the processing of your account data under other lawful bases.

10 Changes to This Privacy Policy

good11 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or the services we provide. When material changes are made, we will notify registered players by posting a prominent notice on the Platform and, where practicable, by sending an email to your registered address at least seven (7) days before the changes take effect.

Your continued use of the good11 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how we are protecting your data.

11 Exercising Your Rights and Contacting Us

To exercise any of the data rights described in this Privacy Policy — including access, rectification, erasure, restriction, portability, or objection — please contact our Data Privacy team at [email protected]. Please include your registered username and a clear description of the right you wish to exercise. We will acknowledge your request within 48 hours and provide a substantive response within 30 calendar days.

We will not charge a fee for processing any reasonable data rights request. However, where requests are manifestly unfounded, repetitive, or excessive, we reserve the right to charge a reasonable administrative fee or decline to act on the request, in which case we will provide written reasons.