good112 Privacy Policy

good112 collects personal data from players in Bangladesh through several channels: directly when you register an account, when you interact with our games and platform features, when you make financial transactions, and automatically through the technical operation of our website at good112.net. The categories of personal data we collect are as follows:

good112 does not collect sensitive personal data such as biometric data, political opinions, religious beliefs, or health records. Where identity verification requires submission of a government-issued ID document, the document image is used solely for KYC verification and is stored in an encrypted format accessible only to authorised compliance staff.

good112 processes your personal data only for clearly defined, legitimate purposes. We rely on the following legal bases for processing, depending on the nature of each activity:

• Contractual necessity: Processing required to create and manage your player account, execute financial transactions in BDT, deliver game services, and communicate important account updates.
• Legal obligation: Processing required to comply with anti-money laundering (AML) regulations, Know Your Customer (KYC) obligations, fraud reporting requirements, and data retention rules under applicable law.
• Legitimate interests: Processing carried out to protect the security of the good112 platform, detect and prevent fraud and abuse, improve platform performance, and conduct internal analytics — where those interests do not override your fundamental privacy rights.
• Consent: Where good112 sends you optional promotional communications (such as bonus offers, seasonal promotions for Eid or Pohela Boishakh, or new game announcements), we will do so only where you have explicitly opted in. You may withdraw this consent at any time by contacting [email protected].

Specifically, good112 uses your personal data to:

• Register and maintain your player account and verify your identity in compliance with 18+ age restriction requirements
• Process deposits from and withdrawals to your nominated bKash, Nagad, Rocket, Upay, or bank account in BDT
• Monitor your account activity to detect suspicious transactions, multi-accounting, bonus abuse, and other prohibited conduct as set out in our Terms & Conditions
• Provide 24/7 English-language customer support via email on Bangladesh Standard Time (UTC+6)
• Apply Responsible Gaming tools including deposit limits, cool-off periods, and self-exclusion, as detailed on our Responsible Gaming page
• Send transactional emails and SMS notifications regarding deposits, withdrawals, account verification status, and security alerts
• Comply with our legal obligations under applicable law and respond to lawful requests from authorities

good112 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review. Where automated systems flag an account for investigation (for example, due to suspected fraud), a trained compliance team member reviews all flagged cases before any account action is taken.

good112 does not sell, rent, or otherwise disclose your personal data to unaffiliated third parties for their own marketing or commercial purposes. Your data may be shared with the following categories of recipients, strictly as required to operate the good112 platform and meet our legal obligations:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive only the transaction data necessary to process your deposit or withdrawal request in BDT. These providers operate under their own privacy frameworks and are independent data controllers in respect of your payment data.
• Game technology providers: Studios and platform providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token or anonymous player identifier to facilitate gameplay. These providers do not receive your full name, contact details, or financial data.
• KYC and identity verification services: good112 may engage specialist identity verification providers to cross-reference submitted identity documents. These providers are contractually bound to process identity data solely for verification purposes and to delete submitted documents upon completion of the verification process.
• Fraud prevention and security services: Third-party cybersecurity and fraud-detection platforms may process technical data (IP address, device fingerprint, login patterns) to identify and prevent fraudulent activity on the good112 platform. No financial or identity data is shared with these providers.
• Legal and regulatory authorities: good112 may disclose personal data to law enforcement, financial intelligence units, or regulatory bodies where required by a valid legal obligation, court order, or government request. We will notify affected players of such disclosures where legally permitted to do so.

All third-party service providers engaged by good112 are required to sign data processing agreements that obligate them to apply appropriate technical and organisational security measures, process data only on good112's documented instructions, and not retain data beyond the period necessary to fulfil the contracted service.

good112.net uses cookies and similar technologies to ensure the platform functions correctly, maintain security, and improve the player experience. A cookie is a small text file stored on your device when you visit the good112 website. The following categories of cookies are used:

good112 does not deploy third-party advertising cookies, retargeting pixels, or behavioural tracking technologies that build profiles of your activity across other websites. All analytics data is processed internally or by contractually bound processors and is not shared with advertising networks.

You can manage or disable non-essential cookies at any time through your browser settings. Please note that disabling strictly necessary cookies may prevent certain platform features from functioning correctly, including maintaining your login session and processing game interactions.

good112 retains personal data only for as long as is necessary to fulfil the purpose for which it was originally collected, or for the minimum period required by applicable legal or regulatory obligations. The following retention periods apply to the main categories of data held by good112:

• Account and identity data: Retained for the duration of your active account plus a minimum of five years following account closure, to satisfy anti-money laundering audit requirements and to handle any retrospective legal claims or regulatory inquiries.
• Financial transaction records: All deposit and withdrawal records in BDT — including bKash, Nagad, Rocket, Upay, and bank transfer transactions — are retained for a minimum of seven years in accordance with standard financial record-keeping obligations.
• KYC documents: Copies of identity documents submitted during the verification process are retained for the duration of the account relationship plus five years. Upon expiry of the retention period, documents are securely deleted and are not recoverable.
• Support communications: Email correspondence and support chat transcripts are retained for three years from the date of the interaction, for quality assurance, training, and dispute resolution purposes.
• Technical and security logs: IP address logs, login history, and device fingerprint data are retained for up to 12 months, unless a specific security investigation requires extended retention, in which case the relevant records are preserved until the investigation is formally concluded.
• Analytics data: Aggregated, anonymised analytics data that cannot be linked back to an individual player may be retained indefinitely for platform development and performance benchmarking purposes.

Upon expiry of the applicable retention period, personal data is securely and permanently deleted from good112's systems or irreversibly anonymised so that it can no longer be linked to any individual. Where you request erasure of your data under the rights described in Section 7, good112 will action the request within 30 calendar days, subject to any mandatory legal retention obligations that override the right to erasure.

good112 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures designed to protect against unauthorised access, accidental loss, disclosure, or destruction. These measures include:

• Encryption in transit: All data exchanged between your browser or mobile device and good112's servers is encrypted using 256-bit TLS/SSL technology. The padlock icon visible in your browser address bar confirms that your connection is encrypted at all times during your session.
• Encryption at rest: Sensitive personal data stored in good112's databases — including identity documents, financial data, and hashed account credentials — is encrypted at the storage layer using AES-256 encryption.
• Access controls: Access to personal data held by good112 is restricted to authorised personnel whose roles require it — specifically, compliance, KYC, and finance team members. All staff with data access undergo background screening and are bound by confidentiality obligations.
• Multi-factor authentication: Internal good112 systems that store or process player personal data require multi-factor authentication for all staff login sessions, significantly reducing the risk of insider threats or credential compromise.
• Intrusion detection: good112's platform is monitored continuously by automated intrusion detection systems that alert the security team to anomalous traffic patterns, brute-force login attempts, and other indicators of attempted unauthorised access.
• Penetration testing: good112 conducts regular third-party penetration tests on its web application and underlying infrastructure to proactively identify and remediate security vulnerabilities before they can be exploited.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, good112 will notify impacted account holders by email to the address registered on their account without undue delay, and in any event within 72 hours of good112 becoming aware of the breach where technically feasible.

As a registered player on good112, you have the following rights in relation to your personal data. These rights can be exercised by contacting the good112 privacy team at [email protected] with the subject line "Privacy Rights Request":

• Right of access: You have the right to request a copy of all personal data held by good112 in relation to your account. good112 will provide this information in a structured, readable format within 30 calendar days of receiving your request.
• Right to rectification: If any personal data held about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update basic contact information directly in your account profile; requests for correction of identity or financial data should be directed to our support team.
• Right to erasure: You may request the deletion of your personal data held by good112. Please note that this right is subject to legal retention obligations — for example, transaction records required to be held for seven years under financial regulations cannot be deleted on request but will be retained only for the mandatory period and then securely destroyed.
• Right to restriction of processing: In certain circumstances — for example, while a dispute about the accuracy of your data is being resolved — you may request that good112 restrict processing of your data to storage only, suspending other processing activities until the matter is resolved.
• Right to data portability: You have the right to request a copy of the personal data you have provided to good112 in a structured, machine-readable format (such as CSV), which you may then transfer to another service provider if you wish.
• Right to object: You have the right to object to the processing of your personal data where good112 relies on its legitimate interests as the legal basis for processing. good112 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where good112 processes your data on the basis of your consent (for example, for optional promotional communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

good112 will respond to all privacy rights requests within 30 calendar days of receipt. In cases of complex or voluminous requests, this period may be extended by a further 60 days, in which case good112 will notify you of the extension and the reasons for it within the initial 30-day period.

If you have any questions, concerns, or requests relating to this Privacy Policy or to good112's handling of your personal data, please contact our privacy team using the details below. All privacy enquiries are handled in English by a dedicated team member available on Bangladesh Standard Time (UTC+6):

• Email: [email protected] (subject line: "Privacy Rights Request" or "Privacy Enquiry")
• Response time: Within 2 business days for general enquiries; within 30 calendar days for formal rights requests
• Availability: 24 hours a day, 7 days a week, including Eid, Victory Day (16 December), Independence Day (26 March), and all other Bangladeshi public holidays

Policy updates: good112 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or platform features. When material changes are made, good112 will post a notice on good112.net and update the effective date shown at the top of this document. Where changes are significant, we will also send a notification to your registered email address at least 14 days before the updated policy takes effect.

Your continued use of good112.net following publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree to a material change in how your data is processed, you have the right to close your account by contacting [email protected] before the updated policy becomes effective.

This Privacy Policy applies exclusively to personal data processed by good112 in connection with your use of good112.net. It does not cover the privacy practices of third-party payment providers (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank) or game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), each of which operates under its own privacy framework. We encourage you to review the privacy policies of those providers for information about how they handle your data.