Privacy Policy

good999 collects personal data through several channels: directly from you when you register and use your account, automatically through your interaction with the Platform, and in limited cases from third-party identity verification and payment partners. The categories of data we collect are set out below.

1.1 Registration Data

When you create a good999 account, you are required to provide the following information:

• Full legal name as it appears on your government-issued identification
• Date of birth (used to verify that you meet the 18+ age requirement)
• Email address (used for account communications and security alerts)
• Mobile phone number registered in your own name (used for authentication and payment linking)
• Residential address (required for KYC verification and compliance purposes)
• Chosen username and encrypted account password

1.2 Identity Verification (KYC) Data

Before your first withdrawal can be processed, good999 requires completion of Know Your Customer (KYC) verification. As part of this process, you may be asked to submit:

• A copy of your National Identity Card (NID) or valid passport
• A recent utility bill, bank statement, or other document confirming your residential address
• A selfie or live photo to confirm that the document belongs to you

These documents are processed by our compliance team and, where applicable, by our regulated third-party identity verification partner. They are retained only for as long as required by applicable legal obligations or our data retention schedule — whichever is the longer period.

1.3 Financial Transaction Data

When you make a deposit or withdrawal through good999, we record the following transaction data:

• Payment method used (e.g., bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard)
• Registered mobile wallet number or masked card number associated with the transaction
• Transaction amounts in Bangladeshi Taka (৳ BDT)
• Transaction timestamps and reference identifiers
• Deposit and withdrawal history linked to your account

Full payment credentials (such as mobile banking PINs, full card numbers, or OTPs) are never transmitted to or stored by good999. These are handled exclusively by the relevant payment processor or mobile financial service provider.

1.4 Usage and Behavioural Data

When you use the good999 Platform, our systems automatically collect certain technical and behavioural data, including:

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser type and version
• Pages visited, features accessed, and time spent on different sections of the Platform
• Game play history, bet amounts, win/loss records, and session durations
• Referral source (how you arrived at the Platform)
• Error logs and crash reports to assist with technical support

1.5 Communication Data

If you contact good999 through our customer support channels, we retain records of that communication — including the content of messages, timestamps, and any attachments — for quality assurance, dispute resolution, and compliance purposes. Support interactions submitted by email are stored securely and accessible only to authorised support and compliance personnel.

good999 processes your personal data only for lawful, clearly defined purposes. The table below sets out the primary uses of each category of data we hold, along with the legal basis for that processing.

2.1 Marketing Communications

good999 will only send you promotional emails, SMS messages, or in-platform notifications about bonuses and offers if you have explicitly opted in to receiving such communications during registration or through your account preferences. You may withdraw consent for marketing communications at any time by updating your notification preferences in your account settings or by contacting our support team. Withdrawing marketing consent does not affect the processing of your data for operational or legal purposes.

2.2 Automated Decision-Making

good999 uses automated systems to assist with fraud detection, responsible gaming alerts, and bonus abuse monitoring. These systems may flag accounts for human review based on predefined risk criteria. Where an automated process results in a consequential decision — such as an account suspension or withdrawal hold — you have the right to request human review of that decision by contacting our support team.

good999 does not sell or rent your personal data to third parties under any circumstances. We do, however, share certain data with carefully selected third-party service providers and regulatory bodies where this is necessary to operate the Platform and meet our legal obligations. All third parties with whom we share data are contractually required to maintain appropriate data protection standards.

3.1 Payment Processors

To process deposits and withdrawals, good999 shares the minimum necessary transaction data with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and international card networks. These partners operate their own data processing infrastructure and are governed by their own privacy policies. good999 is not responsible for the privacy practices of third-party payment processors once data has been transmitted to them for the purpose of processing a specific transaction.

3.2 Identity Verification Partners

To fulfil our KYC obligations, good999 may use a regulated third-party identity verification service to process and verify identity documents submitted by players. These partners are bound by strict confidentiality and data security obligations and are permitted to use your data only for the specific purpose of identity verification — not for any other commercial purpose.

3.3 Game Technology Providers

Games available on good999 are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To deliver live dealer games and RNG-based games, your account identifier and game session data may be transmitted to these providers' systems. This data is used solely to run the game session and is not used by game providers for independent marketing purposes.

3.4 Legal and Regulatory Disclosure

good999 may disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities without prior notice to you where we are legally required or compelled to do so — for example, in response to a court order, or as part of an investigation into fraud, money laundering, or other illegal activity. We will disclose only the minimum data required to satisfy the specific legal request.

good999 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, and to analyse how players use the site so that we can improve the experience over time. By continuing to use good999 after being notified of our cookie practices, you acknowledge this use.

4.1 Types of Cookies We Use

4.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most modern browsers allow you to refuse cookies, delete existing cookies, or receive a warning before a cookie is stored. Please note that disabling essential cookies may significantly impair your ability to use good999 — for example, you may be unable to stay logged in or complete transactions. Disabling analytics or functional cookies will not prevent you from accessing core Platform features.

4.3 No Third-Party Advertising Cookies

good999 does not use third-party advertising networks or retargeting cookies. We do not allow external ad platforms to place tracking cookies on your device through our Platform. Any analytics tools we employ are configured to anonymise IP addresses and aggregate data before it is processed, minimising the personal data footprint of these operations.

good999 applies a layered security approach to protect the personal data we hold. Our security measures are reviewed and updated regularly to address emerging threats and vulnerabilities. While no system is completely immune to all risks, we take reasonable and proportionate steps to ensure your data is as secure as practicably possible.

5.1 Technical Security Measures

• TLS/SSL encryption on all data transmitted between your device and our servers
• AES-256 encryption at rest for sensitive personal and financial data stored in our databases
• Two-factor authentication (2FA) available to all account holders to secure account login
• Firewalls and intrusion detection systems monitoring our network perimeter continuously
• Access controls and role-based permissions limiting internal access to personal data to authorised personnel only
• Regular penetration testing and vulnerability assessments conducted by qualified security professionals

5.2 Organisational Security Measures

• Staff who handle personal data are subject to confidentiality obligations and receive regular data protection training
• Access to production databases is logged and audited; unusual access patterns trigger automatic alerts
• A documented incident response plan is maintained and tested annually to ensure rapid response to any data security event
• Third-party service providers are assessed for security compliance before being granted access to any personal data

5.3 Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and interests, good999 will notify affected players without undue delay after becoming aware of the breach. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps we are taking to address it. You are advised to contact our support team immediately at support@good999 if you believe your account has been compromised.

As a player on good999, you hold meaningful rights over your personal data. The following rights are available to you and can be exercised by contacting our support team at support@good999 with a clear description of your request. We will respond to verified requests within 30 days.

good999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following retention periods apply to the main categories of data we hold:

Once the applicable retention period has elapsed and no legal obligation requires continued storage, personal data is securely deleted or anonymised so that it can no longer be linked back to an individual. Anonymised, aggregated data — where no individual can be identified from it — may be retained indefinitely for statistical and business analysis purposes.

good999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made to this Policy, we will update the effective date shown at the top of this page and, where appropriate, notify active account holders by email.

Your continued use of good999 following the posting of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any changes to this Policy, you should discontinue use of the Platform and may request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how good999 is protecting your personal data. The most current version of this Policy will always be available on this page at /privacy-policy.

8.1 Contact Us About Privacy

If you have any questions, concerns, or complaints about this Privacy Policy or about the way good999 handles your personal data, please contact our dedicated support team. We are committed to resolving all privacy inquiries promptly and transparently.

Customer Support — available 24/7, Bangladesh Standard Time (UTC+6):

support@good999

All privacy-related correspondence is handled by authorised personnel only and is treated as strictly confidential.