good1 Privacy Policy

Data We Collect

good1 collects personal data from players and visitors in a number of ways — directly through the registration and account management process, automatically through your use of the Platform, and occasionally from trusted third-party sources where permitted by applicable law. The categories of personal data we may collect are described in detail below.

1.1 Data You Provide Directly

When you register for a good1 account, update your profile, make a deposit or withdrawal request, or contact our support team, you provide us with personal information. This includes:

1.2 Data Collected Automatically

When you access and navigate the good1 Platform, certain technical and behavioural data is collected automatically by our systems. This data is used for security monitoring, platform optimisation, fraud prevention, and responsible gaming purposes. Automatically collected data includes:

• Device and Technical Data: IP address, browser type and version, operating system, device model, screen resolution, and language settings.
• Usage and Behavioural Data: Pages visited, time spent on each page, bet history, game session data, deposit and withdrawal patterns, and login timestamps.
• Geolocation Data: Approximate geographic location derived from your IP address. good1 does not collect precise GPS-level location data unless explicitly enabled by you on your device.
• Cookie and Tracking Data: Session identifiers, authentication tokens, and preference settings stored via cookies and similar technologies. See Section 4 for full details.

1.3 Data From Third Parties

In certain circumstances, good1 may receive personal data about you from trusted third-party sources, including:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) who confirm transaction status and payment method ownership as part of our withdrawal verification process.
• Identity verification service providers who cross-reference the documents you submit against government-issued identity databases to confirm authenticity.
• Fraud detection and anti-money laundering (AML) screening providers who flag high-risk profiles based on aggregated databases of known fraudulent activity.

How We Use Your Data

good1 uses the personal data it collects only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was collected. The table below sets out our primary processing activities, the data categories used for each, and the legal basis on which we rely.

Where good1 relies on consent as the legal basis for processing — such as sending promotional emails about bonuses, seasonal offers, or new game releases — you have the right to withdraw that consent at any time by contacting [email protected] or by using the unsubscribe link included in any marketing communication. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

Data Sharing & Third Parties

3.1 Who We Share Data With

good1 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We share data only in the limited circumstances described below, and only with parties who are contractually obligated to process it in accordance with data protection principles.

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard processors receive the minimum financial data necessary to execute and verify your transactions. These providers operate under their own privacy policies and regulatory frameworks.
• Identity Verification Providers: Third-party KYC/AML platforms receive identity and document data to perform verification checks required by our compliance obligations. These providers are bound by strict confidentiality agreements.
• Game Studio Partners: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data (such as bet amounts and game results) necessary to operate their games on our platform. No personally identifiable information beyond what is strictly required for game session integrity is transmitted.
• IT Infrastructure and Cloud Service Providers: good1 uses reputable cloud hosting, database management, and cybersecurity providers to operate the Platform. These providers access data solely to perform technical services on our behalf and are bound by data processing agreements.
• Legal and Regulatory Authorities: good1 will disclose personal data to law enforcement agencies, courts, or regulatory bodies if required to do so by applicable law, a valid court order, or to protect the legal rights and interests of good1 or third parties.

3.2 International Data Transfers

Some of good1's service providers are based outside Bangladesh. Where personal data is transferred internationally, good1 ensures that appropriate safeguards are in place — such as standard contractual clauses or equivalent data protection mechanisms — to protect your data to a standard equivalent to that applied within Bangladesh.

Cookies & Tracking Technologies

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They enable the website to remember information about your visit — such as your preferred language, session status, and interface settings — making it easier to use the site on subsequent visits. good1 uses cookies and similar technologies including web beacons, pixel tags, and local storage objects.

4.2 Types of Cookies We Use

4.3 Managing Cookies

You may control or delete cookies through your browser settings at any time. Most browsers allow you to block all cookies, block third-party cookies only, or delete existing cookies. Please note that disabling strictly necessary cookies will impair your ability to log in and use key Platform features. Functional and analytics cookies can be disabled without affecting core functionality, though your preferences may not be saved between sessions.

good1 does not use cookies for third-party advertising, retargeting, or cross-site behavioural profiling. We do not share cookie data with social media platforms or advertising networks.

Data Security & Retention

5.1 Security Measures

good1 implements a layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Key measures include:

• SSL/TLS Encryption: All data in transit between your browser and our servers is encrypted using TLS 1.2 or higher. You will see the padlock indicator in your browser address bar when accessing good1.bid.
• Encryption at Rest: Sensitive data fields — including identity documents, financial account details, and password hashes — are encrypted at rest within our database infrastructure.
• Access Controls: Access to personal data within good1's systems is restricted on a strict need-to-know basis. Staff who handle player data are subject to confidentiality obligations and regular privacy training.
• Two-Factor Authentication: Player accounts can be protected with two-factor authentication (2FA) to reduce the risk of unauthorised access. We strongly recommend enabling 2FA.
• Penetration Testing: good1's infrastructure undergoes periodic security assessments and penetration tests conducted by independent cybersecurity specialists.
• Incident Response Plan: In the event of a data breach that presents a risk to your rights and freedoms, good1 will notify affected players without undue delay and take all necessary steps to contain and remediate the incident.

5.2 Data Retention

good1 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by law. Our standard retention schedules are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual. Where anonymisation is not technically feasible, the data is destroyed using secure deletion methods that prevent recovery.

Your Privacy Rights

As a player or visitor to the good1 Platform, you hold a number of rights in relation to your personal data. good1 is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights listed below, please email [email protected] with the subject line "Privacy Rights Request" and a description of your request. We will acknowledge your request within 5 business days and provide a full response within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data that good1 holds about you, along with information about how it is being used. This is sometimes referred to as a Subject Access Request (SAR).
• Right to Rectification: If any of the personal data good1 holds about you is inaccurate or incomplete, you have the right to request that we correct it. For straightforward corrections (such as updating a mobile number), you can often make changes directly in your account settings.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and there is no other legal basis for processing. This right is subject to overriding legal obligations, such as our AML record-keeping requirements.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while we investigate a complaint you have raised.
• Right to Data Portability: Where we process your data based on your consent or to perform a contract, and that processing is carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where good1 relies on legitimate interests as the legal basis. If you object to receiving marketing communications, we will stop sending them immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Children & Underage Users

The good1 Platform is strictly intended for individuals who are 18 years of age or older. good1 does not knowingly collect, process, or retain personal data from any person under the age of 18. If you are under 18, you must not register for an account, make a deposit, or use any service offered through good1.bid.

If good1 becomes aware — through its age-verification processes, a complaint, or any other means — that personal data has been collected from a person under 18, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage individual will be handled in accordance with Section 2 of the good1 Terms & Conditions.

Parents and guardians who are concerned that a minor in their household has accessed or registered on the good1 Platform should contact us immediately at [email protected]. We will treat all such reports with the highest priority. We also encourage households with minors to install parental control software that restricts access to online gambling websites.

Policy Updates & Contact

8.1 Updates to This Policy

good1 reserves the right to update or revise this Privacy Policy at any time. When we make material changes, we will notify registered players by email to the address associated with their account and/or display a prominent notice on the Platform for a reasonable period following the update. The effective date shown at the top of this document will be updated to reflect the date of the most recent revision.

We encourage you to review this Privacy Policy periodically to stay informed about how good1 handles your personal data. Your continued use of the Platform following any update constitutes your acknowledgement of the revised policy. If you do not agree with the changes, you should stop using the Platform and request account closure by contacting [email protected].

8.2 How to Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or good1's data handling practices, please contact our team using the details below. All privacy-related correspondence should include your registered email address and a clear description of your query.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data queries: "Privacy Rights Request" or "Privacy Policy Query"
• Support hours: 24/7, English-language support, Bangladesh Standard Time (BST, UTC+6)
• Response time: Acknowledgement within 5 business days; full response within 30 calendar days

good1 takes all privacy complaints seriously. If you are not satisfied with the response you receive, you may be entitled to escalate your complaint to a relevant data protection authority in your jurisdiction.