good 111 Privacy
Policy

Data We Collect

good 111 collects personal data from players in Bangladesh for the purposes of operating a safe, fair, and legally compliant online casino and sports betting service. We collect only the data that is genuinely necessary to provide our services. The categories of data we collect are described in detail below.

Registration Data

When you create a good 111 account via the good 111 Login page, we collect the following information you provide directly:

• Full legal name as it appears on your government-issued identification.
• Date of birth (used to verify that you are 18 years of age or older).
• Email address — used for account communications, security alerts, and support correspondence.
• Mobile phone number registered in Bangladesh — used for account verification, two-factor authentication, and withdrawal confirmation.
• Residential address within Bangladesh — used for identity verification and compliance purposes.
• Chosen username and encrypted password — stored using one-way cryptographic hashing; good 111 staff cannot read your password in plain text.

Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process — required for withdrawals of ৳10,000 and above and for ongoing compliance reviews — we may collect copies of:

• National Identity Card (NID), passport, or other government-issued photo ID.
• Proof of address documents such as utility bills or bank statements issued within the last three months.
• Proof of payment method ownership (e.g., a screenshot of your bKash or Nagad account showing your registered mobile number).
• A selfie photograph holding your ID, if requested for enhanced verification.

Financial Transaction Data

We collect records of all financial transactions processed through your good 111 account, including deposit amounts, withdrawal requests, bonus credits, and wagering activity. For mobile financial service transactions (bKash, Nagad, Rocket, Upay), we record the mobile number and transaction reference number but do not store your full MFS PIN or password.

Technical & Device Data

When you access good 111, our servers automatically record certain technical information:

• IP address and approximate geographic location (country and city level).
• Browser type, version, and operating system.
• Device type (mobile, tablet, desktop) and screen resolution.
• Pages visited, time on page, click paths, and session duration.
• Referring URL (the page you visited immediately before landing on good 111).

Support & Communication Data

If you contact our support team via email at [email protected], we retain a record of your correspondence including your email address, the content of your messages, and any attachments you send. This record is used to resolve your query and to improve our support processes.

Data We Do Not Collect

How We Use Your Data

good 111 processes your personal data only for specific, legitimate purposes directly related to providing and improving our services. We do not use your data for purposes incompatible with those stated at the time of collection. The table below summarises the primary purposes for which we process your data and the legal basis for each.

Promotional Communications

good 111 may send you promotional emails or SMS messages about bonuses, new games, BPL season promotions, or Eid cashback offers — but only if you have opted in to receive such communications during registration or via your account settings. You may withdraw this consent at any time by emailing [email protected] or by updating your notification preferences in your account settings. Opting out of marketing communications will not affect the operational account emails you receive (such as deposit confirmations, withdrawal notifications, or security alerts).

Automated Decision-Making

good 111 uses automated systems to monitor for fraud, unusual wagering patterns, and potential problem gambling behaviour. These systems may flag accounts for manual review by our compliance team. Where an automated process results in a significant decision about your account — such as a withdrawal hold or a temporary suspension — you have the right to request that the decision be reviewed by a member of our human compliance team. To make such a request, contact [email protected].

Data Sharing & Disclosure

Service Providers & Technology Partners

good 111 works with a limited set of trusted third-party service providers to operate the platform. These partners process your data only on good 111's behalf and in accordance with our instructions. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing networks receive transaction reference data necessary to complete deposits and withdrawals. They do not receive your full good 111 account profile.
• Game studios: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive an anonymised session token to authenticate your game session. They do not receive your name, NID, or financial details.
• Identity verification services: Where enhanced KYC is required, we may use a third-party document verification service to authenticate your submitted ID documents. These services are bound by strict confidentiality agreements.
• Cloud infrastructure and hosting: good 111's platform data is hosted on secured cloud servers. Hosting providers are prohibited from accessing or using customer data for any purpose other than providing infrastructure services.
• Analytics providers: We use anonymised, aggregated analytics data to understand platform usage patterns. No personally identifiable data is shared with analytics providers.

Legal & Regulatory Disclosure

good 111 may be required to disclose your personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities in response to a lawful request, court order, or legal obligation. In such cases, we will disclose only the minimum data necessary to satisfy the specific legal requirement. Where permitted by law, good 111 will notify you of any such disclosure request before complying.

Business Transfers

In the event that good 111 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it, no less than 30 days before the transfer takes effect.

International Data Transfers

Some of good 111's technology and game studio partners operate servers outside Bangladesh. Where your data is transferred internationally — for example, to process a live casino game session hosted on European servers — good 111 ensures that appropriate contractual protections are in place to maintain a standard of data protection equivalent to that described in this Privacy Policy.

Cookies & Tracking

good 111 uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to understand how players use the site so we can continue improving it. This section explains what cookies we use, why, and how you can manage them.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your preferred language, login session status, or items in a shopping basket — so you do not have to re-enter that information on every page. Cookies cannot execute programmes or deliver viruses; they are simply data files stored on your browser.

Types of Cookies We Use

Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to view all stored cookies, block cookies from specific sites, or clear all cookies when you close the browser. Please note that disabling certain cookies — particularly essential and security cookies — may impair your ability to log in, complete transactions, or use certain features of the good 111 platform.

good 111 does not use third-party advertising cookies or behavioural retargeting pixels. We do not participate in cross-site ad networks, and no advertising technology provider has the ability to track your browsing behaviour across other websites via cookies placed by good 111.

Data Security

good 111 takes data security seriously and has implemented a layered set of technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, and destruction.

Technical Security Measures

• 256-bit SSL/TLS encryption on all data transmitted between your browser and our servers, ensuring that your login credentials, personal details, and financial information cannot be intercepted in transit.
• Password hashing using a strong one-way cryptographic algorithm — your password is never stored in plain text and cannot be retrieved even by good 111 staff.
• Two-factor authentication (2FA) available for all accounts, adding a second layer of protection beyond your password.
• Firewalls and intrusion detection systems monitoring network traffic for anomalous patterns associated with attack attempts.
• Regular security audits and penetration testing conducted by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
• Segregated data environments ensuring that production databases containing player data are isolated from development and testing environments.

Organisational Security Measures

• Access to player data is restricted on a strict need-to-know basis. Only authorised personnel with a specific operational requirement may access identifiable player records.
• All staff with access to player data are subject to confidentiality agreements and receive regular training on data protection obligations.
• Access logs are maintained and reviewed regularly to detect any unauthorised or anomalous access to player data.

Data Breach Response

In the unlikely event of a data security breach that poses a risk to your personal data, good 111 will take immediate steps to contain the breach, assess its scope, and mitigate harm. Affected players will be notified directly via their registered email address within 72 hours of good 111 becoming aware of the breach, where technically feasible. The notification will describe the nature of the breach, the data affected, and the steps good 111 is taking in response.

Data Retention

good 111 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or compliance obligations. The table below outlines our standard retention periods by data category.

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to an individual. Where retention periods are driven by legal obligations — such as anti-money laundering record-keeping requirements — good 111 is not able to delete data earlier than the legally required minimum retention period, even upon player request.

Your Privacy Rights

As a player on the good 111 platform, you have the following rights with respect to your personal data. good 111 is committed to honouring these rights promptly and without charge. All requests should be submitted in English to [email protected] from your registered email address.

Right of Access

You have the right to request a copy of all personal data that good 111 holds about you. Upon receiving a verified access request, good 111 will provide a structured summary of your data within 30 calendar days.

Right to Rectification

If any personal data held by good 111 is inaccurate or incomplete, you have the right to request that it be corrected. For most account details — such as your contact number or email address — you can update these directly via your account settings. For legally significant data such as your name or date of birth, please contact our support team with supporting documentation.

Right to Erasure

You may request the deletion of your personal data in certain circumstances — for example, if the data is no longer necessary for the purpose it was collected, or if you withdraw consent and there is no other legal basis for processing. Please note that good 111 may be required to retain certain categories of data for mandatory retention periods as described in Section 6, in which case erasure cannot be completed until those periods have elapsed.

Right to Restriction of Processing

In certain circumstances — such as where you contest the accuracy of your data or object to its processing — you may request that good 111 restrict processing of your data while the matter is under review. During a restriction period, good 111 will continue to store your data but will not actively process it for other purposes.

Right to Data Portability

Where processing is based on your consent or on contract performance, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider if you wish.

Right to Object

You have the right to object to the processing of your personal data where that processing is based on good 111's legitimate interests — for example, analytical processing or fraud monitoring. good 111 will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, or where the processing is necessary for the establishment, exercise, or defence of legal claims.

Right to Withdraw Consent

Where processing is based on your consent — such as receiving promotional emails or SMS notifications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal. To withdraw consent for marketing communications, update your preferences in your account settings or email [email protected].

Response Timelines

good 111 will acknowledge all data rights requests within 5 business days (Bangladesh Standard Time, UTC+6) and will complete the request — or provide a reasoned explanation for any delay — within 30 calendar days of receipt. Requests that are complex or numerous in volume may require an extension of up to an additional 30 days, in which case you will be informed of the extension and the reason for it.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how good 111 has handled your personal data, please contact our data protection team using the details below. All correspondence must be submitted in English.

Complaints Process

If you are not satisfied with good 111's response to a data rights request or a privacy complaint, you may escalate your complaint by emailing [email protected] with the subject line "Formal Privacy Complaint". good 111 will assign the complaint to a senior member of our team for review and will provide a final written response within 15 business days.

Changes to This Privacy Policy

good 111 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes, we will update the "last reviewed" date at the top of this page and, where the changes are significant, notify registered players directly via their registered email address. Your continued use of the good 111 platform following notification of any update constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your data.

This Privacy Policy was last reviewed and updated on 1 January 2026. It applies to all players accessing good 111 from Bangladesh. All references to "good 111", "we", "us", and "our" in this document refer to the good 111 platform operating at good-111.app.