goya99 Privacy
Policy

goya99 collects personal data only to the extent necessary to provide you with a safe, functional, and compliant online casino and sports betting experience. The categories of data we collect are described below. We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or biometric data beyond what is strictly required for identity verification purposes.

Registration Data: When you create a goya99 account, we collect your full legal name, date of birth, residential address within Bangladesh, email address, and mobile phone number. This information is required to open your account and is used to verify your identity in line with our Know Your Customer (KYC) obligations.

Identity Verification Documents: To satisfy our anti-money-laundering (AML) compliance obligations, we may request copies of government-issued identification documents such as your National ID card, passport, or driving licence. We may also request proof of address documents such as a utility bill or bank statement issued within the last three months.

Financial Data: We collect details of the payment methods you use to deposit and withdraw funds on goya99. This includes your bKash, Nagad, Rocket, or Upay mobile wallet number, or your bank account reference for Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, or Sonali Bank transfers. We do not store full card numbers for Visa or Mastercard transactions — these are handled via our secure payment processor.

Transaction and Gaming History: We maintain records of all deposits, withdrawals, wagers, game sessions, and bonus redemptions associated with your account. These records are essential for account management, dispute resolution, responsible gaming monitoring, and AML compliance.

Technical and Device Data: When you access goya99, we automatically collect certain technical data including your IP address, browser type and version, operating system, device type, screen resolution, and session timestamps. This data is used to ensure platform security, detect fraud, and optimise your user experience.

Communications Data: If you contact the goya99 support team via live chat, email, or any other channel, we retain records of that correspondence to ensure continuity of service and to train and improve our support team's quality of assistance.

goya99 uses the personal data it collects strictly for the purposes outlined below. We do not use your data for any purpose that is incompatible with those stated at the time of collection, and we do not engage in automated decision-making that produces legal or similarly significant effects without human oversight.

• Account creation and management: To register your goya99 account, verify your identity, maintain your account balance, process your deposits and withdrawals, and communicate with you about your account status.
• Platform delivery and improvement: To provide you with access to casino games, sports betting markets, live dealer tables, and all other platform features; to monitor platform performance, fix technical issues, and develop new features based on usage patterns.
• Fraud prevention and security: To detect and investigate suspicious activity, prevent unauthorised account access, identify bonus abuse and multi-accounting, and protect the integrity of the platform for all players.
• Regulatory and AML compliance: To fulfil our Know Your Customer (KYC) and anti-money-laundering obligations, including verifying the source of funds for large transactions and maintaining the required records for compliance review periods.
• Responsible gaming monitoring: To identify early indicators of problem gambling behaviour — such as rapid deposit escalation, extended session times, or self-exclusion requests — and to intervene appropriately in accordance with our responsible gaming policy.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and improve the quality and speed of our support service based on aggregated feedback data.
• Marketing communications (opt-in only): If you have provided explicit consent to receive marketing communications, we may send you information about new promotions, seasonal offers (such as BPL season bonuses, Eid promotions, or Pohela Boishakh offers), and platform updates. You may withdraw this consent at any time by contacting [email protected] or using the unsubscribe mechanism in any marketing email.

goya99 processes your personal data on one or more of the following legal grounds, depending on the specific activity and purpose involved:

• Contractual necessity: The majority of the personal data processing described in this Privacy Policy is necessary for goya99 to perform its contractual obligations to you as a registered player — including processing your deposits and withdrawals, maintaining your account balance, and delivering the games and betting services you have registered to use.
• Legal obligation: Certain processing activities — particularly identity verification, AML record-keeping, and the reporting of suspicious transaction patterns — are required by applicable law. goya99 is obligated to retain specific records for defined minimum periods regardless of your preferences in this regard.
• Legitimate interests: goya99 may process certain data where it has a legitimate business interest in doing so, provided that interest does not override your fundamental privacy rights. Examples include fraud detection, platform security monitoring, and aggregated analytics used to improve service quality.
• Consent: Where goya99 processes your data for purposes that are not strictly necessary (most notably, direct marketing communications), we do so only on the basis of your freely given, specific, and informed consent. You have the right to withdraw this consent at any time.

goya99 does not sell, rent, or otherwise trade your personal data to third parties for commercial or marketing purposes. We may, however, share specific categories of your data with carefully selected third-party service providers and, where legally required, with regulatory or law enforcement authorities. All third parties with whom goya99 shares data are contractually obligated to handle that data in accordance with applicable data protection standards.

The categories of third parties with whom your data may be shared are as follows:

• Payment processors: Your financial data is shared with the relevant payment service providers (such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card processing networks) solely to the extent necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and security standards.
• Identity verification providers: Where goya99 uses a third-party KYC service to verify your identity documents, your identification data is securely transmitted to that provider for the purpose of verification only. The provider does not retain your documents beyond the period required to complete the verification process.
• Game content providers: Casino game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session and gameplay data for the purpose of RNG certification, game integrity auditing, and technical dispute resolution. These providers do not receive your personally identifiable information.
• Analytics and platform infrastructure providers: goya99 uses third-party hosting, cloud infrastructure, and analytics tools to operate and improve the platform. These providers process technical and usage data on our behalf under strict data processing agreements and are prohibited from using that data for any other purpose.
• Legal and regulatory authorities: goya99 will disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities when required to do so by applicable law, court order, or formal regulatory request. goya99 will not notify you of such disclosures where doing so is prohibited by law or could compromise an ongoing investigation.

goya99 uses cookies and similar technologies (such as web storage and session tokens) to operate core platform functionality, maintain your login session, and collect anonymised analytics data about how the site is used. We do not use third-party advertising cookies, cross-site tracking pixels, or social media widgets that transmit your browsing behaviour to external platforms.

The following categories of cookies are used on the goya99 platform:

You may configure your browser to block or delete cookies at any time. Please note that blocking essential cookies will prevent you from logging in to your goya99 account and may cause certain platform features to function incorrectly. Blocking analytics or functional cookies will not prevent you from using the platform but may result in a reduced personalisation experience.

goya99 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated on a regular basis in line with industry best practice.

Key security measures in place at goya99 include:

• 256-bit SSL/TLS encryption for all data in transit between your device and goya99 servers.
• Encryption at rest for sensitive data fields including identity documents and payment method references stored on goya99 infrastructure.
• Access controls restricting access to personal data to authorised personnel only, on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Regular penetration testing and security audits conducted by independent third-party specialists to identify and remediate vulnerabilities.
• Intrusion detection and monitoring systems that alert the security team to unusual access patterns or potential breaches in real time.
• Secure password hashing — goya99 does not store your password in plain text. Passwords are stored using industry-standard one-way hashing algorithms with salting.

Data Retention: goya99 retains your personal data for as long as your account is active and for a defined period thereafter, in accordance with applicable legal and regulatory requirements. Specifically:

• Account registration and identity data is retained for a minimum of 5 years after account closure, in line with AML record-keeping obligations.
• Transaction records and gaming history are retained for a minimum of 5 years after the date of the transaction.
• Communications data (support correspondence) is retained for 3 years after the last interaction.
• Technical and device data (logs) are retained for a maximum of 12 months on a rolling basis, after which they are anonymised or deleted.

As a registered player on goya99, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact the goya99 data support team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and aim to resolve it within 30 days.

• Right of Access: You have the right to request a copy of all personal data that goya99 holds about you, along with information about the purposes for which it is processed and the categories of recipients to whom it has been disclosed. This is commonly referred to as a Subject Access Request (SAR).
• Right to Rectification: If any personal data that goya99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain data fields (such as your email address or residential address) directly by contacting the support team.
• Right to Erasure: In certain circumstances, you have the right to request that goya99 delete your personal data — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis for processing exists. Please note that this right is subject to goya99's legal obligations to retain certain data for AML compliance and regulatory purposes, which take precedence where applicable.
• Right to Restriction of Processing: You have the right to request that goya99 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you contest the legal basis on which data is being processed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests, including profiling. goya99 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where goya99 processes your data on the basis of consent (primarily for direct marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

goya99 reviews this Privacy Policy on a regular basis to ensure it remains accurate, complete, and reflective of current data processing practices. We may update this Privacy Policy from time to time in response to changes in applicable law, updates to our platform services, or improvements to our data handling processes.

Where material changes are made to this Privacy Policy — particularly those that affect the purposes for which your data is processed or the rights available to you — goya99 will notify registered players via the email address associated with their account at least 7 days before the revised policy takes effect. The updated Privacy Policy will also be published on this page with a revised effective date.

Your continued use of the goya99 platform following notification of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any material change, you have the right to close your account and request deletion of your personal data, subject to goya99's legal retention obligations as described in Section 06.

Contact Us: If you have any questions, concerns, or complaints regarding this Privacy Policy or goya99's data handling practices, please contact the support team using the details below. We are committed to resolving all privacy-related enquiries fairly and promptly.

goya99 takes all privacy complaints seriously. If you submit a complaint and are not satisfied with the resolution provided, you may escalate the matter through any applicable dispute resolution process available to you under the laws of Bangladesh. goya99 remains committed to handling all personal data with the highest standards of care, transparency, and respect for your rights as a player.