Privacy Policy — How goo11 Protects Your Data
goo11 is committed to handling your personal information with integrity and transparency. This Privacy Policy explains exactly what data we collect, why we collect it, how it is used, and the rights you hold as a goo11 account holder.
Our Six Privacy Principles
These principles govern every decision goo11 makes about how your personal data is collected, stored, and used.
Transparency First
goo11 tells you clearly what data is collected, what it is used for, and who it may be shared with — before you register, not in the fine print after the fact. This document is the single source of truth for our data practices.
Purpose Limitation
Data collected for one purpose — such as KYC verification — is not repurposed for unrelated uses such as marketing profiling. Every data point we hold has a documented purpose, and that purpose is the only permitted use.
Data Minimisation
goo11 collects only the data that is genuinely necessary to operate the platform, verify your identity, process payments, and comply with applicable regulations. We do not collect data speculatively or "just in case".
Security by Design
All personal data held by goo11 is protected by 256-bit SSL encryption in transit and AES-256 encryption at rest. Access to personal data is restricted to authorised personnel only, on a strict need-to-know basis.
Retention Limits
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Account data is held for a minimum of five years following account closure to satisfy regulatory obligations.
Your Rights Matter
You have the right to access, correct, and request deletion of your personal data, subject to legal retention requirements. goo11 provides a clear process for exercising these rights, detailed in Section 9 of this policy.
Who We Are
This Privacy Policy applies to the goo11 platform, accessible at goo11.io, and all associated services operated under the goo11 brand. When this document refers to "goo11", "we", "us", or "our", it means the operator and owner of the goo11 platform and its authorised representatives.
goo11 is an online casino and sports betting platform built specifically for Bangladeshi players. We provide cricket betting, live dealer casino games, slots, poker, and related gaming services, all denominated in BDT and accessible in English. Our platform processes personal data as part of providing these services, and we take that responsibility seriously.
Data Controller: goo11 acts as the data controller for all personal information collected through the goo11.io platform. For all data-related enquiries, contact us at [email protected].
This Privacy Policy is published in English and governs the collection, use, and protection of personal data provided by or collected from users located in Bangladesh. By creating an account or using the goo11 platform, you acknowledge that you have read and understood this policy.
Data We Collect
goo11 collects personal data across several categories, depending on how you interact with the platform. The table below summarises the main categories of data we hold and the context in which each is collected.
| Data Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, NID number, passport number | Registration & KYC verification |
| Contact Data | Email address, mobile number, city of residence | Registration & account updates |
| Financial Data | bKash/Nagad/Rocket account numbers, bank account details, transaction history | Deposits, withdrawals, KYC |
| Technical Data | IP address, device type, browser type, operating system, session timestamps | Every platform visit |
| Usage Data | Games played, bets placed, betting history, session duration, feature interactions | During active play sessions |
| Communication Data | Support tickets, live chat transcripts, email correspondence content | When contacting support |
| Document Data | Scanned NID, passport copy, selfie for liveness check | KYC verification process |
goo11 does not collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification purposes.
How We Collect Your Data
goo11 collects personal data through the following channels:
- Direct submission: Data you actively provide when you register an account, complete KYC verification, make a deposit or withdrawal request, contact support, or update your account profile.
- Automated technical collection: Data collected automatically when you visit the goo11 platform, including IP address, device identifiers, browser fingerprint, and session activity logs. This data is collected via server logs and analytics tools operated by goo11.
- Payment processors: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, or Mastercard, those payment providers confirm transaction status to goo11. goo11 does not store full payment instrument credentials; only transaction reference numbers and masked identifiers are retained.
- KYC verification partners: Where goo11 uses an authorised third-party identity verification service to authenticate documents submitted during the KYC process, that partner shares a verification result (pass/fail) and associated document metadata with goo11.
- Cookies and similar technologies: As described in Section 7 of this policy, goo11 uses cookies and similar tracking technologies to maintain session state, remember preferences, and analyse platform usage patterns.
How We Use Your Data
goo11 uses personal data collected from account holders for the following documented purposes:
- Account management: Creating and maintaining your goo11 account, verifying your identity, and ensuring your account reflects accurate registration details at all times.
- Service delivery: Processing bets and game outcomes, crediting winnings, settling sports betting markets, and operating live casino tables in real time.
- Payment processing: Executing deposit and withdrawal transactions via your chosen payment method, reconciling payment records, and investigating payment disputes.
- Identity and age verification: Confirming that all account holders are 21 years of age or older, and that the identity provided at registration matches the documents submitted during KYC.
- Fraud prevention and security: Detecting and preventing fraudulent account activity, collusion between players, bonus abuse, money laundering, and other prohibited conduct described in the goo11 Terms & Conditions.
- Regulatory compliance: Meeting obligations under applicable anti-money laundering (AML) frameworks, including record-keeping requirements and the reporting of suspicious transactions to relevant authorities where legally mandated.
- Customer support: Investigating and resolving account queries, bet disputes, payment issues, and complaints submitted through the goo11 support channels.
- Responsible gaming: Monitoring account activity for indicators of problem gambling behaviour and, where such indicators are identified, applying responsible gaming interventions including deposit limits, cooling-off periods, or self-exclusion.
- Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with the platform and to guide product development decisions.
- Direct communications: Sending transactional communications such as deposit confirmations, withdrawal notifications, account security alerts, and (where you have opted in) promotional offers relevant to your gaming preferences.
Marketing Communications: goo11 will only send promotional marketing communications to account holders who have explicitly opted in to receive them. You may withdraw consent for marketing communications at any time by contacting support at [email protected] or by updating your communication preferences within your account settings.
Legal Basis for Processing
goo11 processes personal data only where a valid legal basis exists. The primary legal bases on which goo11 relies are as follows:
- Contractual necessity: Processing required to perform the contract between goo11 and the account holder — specifically, operating the gaming platform, processing payments, and managing the account. Without this processing, goo11 cannot provide its services.
- Legal obligation: Processing required to comply with applicable legal requirements, including anti-money laundering regulations, identity verification obligations, and financial record-keeping requirements.
- Legitimate interests: Processing carried out in pursuit of goo11's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and aggregated analytics — provided those interests are not overridden by your rights and interests.
- Consent: Processing based on your freely given, specific, and informed consent — in particular, the sending of optional marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Sharing Your Data
goo11 does not sell personal data to third parties under any circumstances. Personal data may be shared with the following categories of recipients only where necessary and proportionate:
- Payment processing partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard receive the minimum data necessary to execute financial transactions on your behalf. Each payment partner operates under its own privacy policy and regulatory framework.
- KYC and identity verification providers: Where a third-party verification service is used to authenticate documents submitted during the KYC process, that provider receives the document images and personal details necessary to complete the verification. Verification partners are contractually bound to process data only for verification purposes.
- Game software providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session identifiers and bet data to operate their game engines and audit game fairness. These providers do not receive your full identity data.
- Regulatory and law enforcement authorities: goo11 will disclose personal data to regulatory bodies, law enforcement agencies, or financial intelligence units where required to do so by applicable law or by a valid legal order. goo11 will not disclose more data than is legally required in response to any such request.
- Internal group entities: Personal data may be shared within the goo11 group of companies for the purpose of operating the platform, provided that all group entities are bound by data handling standards consistent with this Privacy Policy.
No Data Sales: goo11 has never sold and will never sell personal data to data brokers, advertising networks, or any commercial third parties for their own marketing or profiling purposes.
Cookies & Tracking Technologies
The goo11 platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. The following categories of cookies are used:
- Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, preserve your game state, and ensure security tokens are passed correctly between pages. These cookies cannot be disabled without impairing platform functionality.
- Performance and analytics cookies: These cookies collect aggregated, anonymised data about how users interact with the goo11 platform — including which pages are visited most frequently, average session durations, and error rates. This data is used solely to improve the platform experience.
- Functional cookies: These cookies remember your preferences, such as your preferred language setting and notification preferences, so that you do not have to re-enter them on each visit.
- Security cookies: These cookies assist with fraud detection by flagging unusual session behaviour, such as logins from new devices or geographic locations significantly different from your registered address in Bangladesh.
goo11 does not use third-party advertising cookies or behavioural targeting cookies. Your browsing activity on the goo11 platform is not shared with advertising networks for the purpose of serving targeted advertisements on other websites.
You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your goo11 account and using core platform features.
Data Retention
goo11 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:
- Active account data: Retained for the duration of the account relationship and for a minimum of five years following account closure, to satisfy AML record-keeping obligations.
- KYC document data: Identity documents submitted for verification are retained for a minimum of five years from the date of submission, in accordance with applicable financial regulations.
- Transaction records: All deposit and withdrawal records are retained for a minimum of five years from the date of the transaction.
- Support communications: Live chat transcripts and email correspondence are retained for three years from the date of the interaction, or longer where the communication relates to an unresolved dispute or legal claim.
- Technical and usage logs: Server logs and session activity data are retained for 12 months, after which they are deleted or irreversibly anonymised.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Where anonymisation is applied, the resulting data may be retained indefinitely for statistical and analytical purposes.
Your Rights
As a goo11 account holder, you hold the following rights in respect of your personal data. To exercise any of these rights, contact goo11 at [email protected] with a clear description of your request. goo11 will respond within 30 days.
Right of Access
Request a copy of all personal data goo11 holds about you, along with an explanation of how it is used.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held in your account profile.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention requirements.
Right to Restriction
Request that goo11 temporarily restrict processing of your data while a correction or objection request is being investigated.
Right to Portability
Request a machine-readable export of personal data you have provided to goo11, in a structured and commonly used format.
Right to Object
Object to processing carried out on the basis of legitimate interests, including any profiling activity related to responsible gaming monitoring.
Please Note: Some rights are subject to exemptions. For example, goo11 cannot delete transaction records or KYC documents that are required by law to be retained for regulatory compliance purposes. Where an exemption applies, goo11 will explain the reason in its response to your request.
Data Security
goo11 implements robust technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:
- Encryption in transit: All data transmitted between your browser or device and the goo11 platform is encrypted using TLS 1.3 with 256-bit SSL certificates. The goo11.io domain enforces HTTPS across all pages.
- Encryption at rest: Personal data stored in goo11's databases is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the data they protect.
- Access controls: Access to personal data is restricted to goo11 personnel who require it to perform their specific job function. All internal access is logged, and access permissions are reviewed on a regular basis.
- Password security: Account passwords are stored as salted cryptographic hashes. goo11 staff cannot retrieve or view your password in plain text. If you forget your password, a reset process is initiated rather than a retrieval.
- Penetration testing: The goo11 platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.
- Incident response: goo11 maintains a documented data breach response procedure. In the event of a confirmed breach affecting your personal data, goo11 will notify affected account holders and relevant authorities within the timeframes required by applicable law.
While goo11 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and for notifying goo11 immediately if you suspect unauthorised access to your account.
Children's Privacy
The goo11 platform is strictly for adults aged 21 years and over. goo11 does not knowingly collect personal data from individuals under the age of 21. If goo11 discovers that personal data has been submitted by a person under 21, that data will be deleted immediately and the associated account will be permanently closed.
If you are a parent or guardian and have reason to believe that a person under 21 in your care has registered a goo11 account, please contact us immediately at [email protected]. We will investigate and take prompt action to close the account and remove all associated data.
Third-Party Links
The goo11 platform does not contain links to external third-party websites as a matter of policy. All navigation links on the platform direct users to pages within the goo11.io domain. In the event that any third-party content or embedded functionality is introduced in the future, this Privacy Policy will be updated to reflect the data-sharing implications of that addition.
goo11 is not responsible for the privacy practices of payment providers (such as bKash, Nagad, or Rocket) when you interact with their own apps or platforms outside of the goo11 payment flow. Those providers operate under their own published privacy policies, and goo11 encourages you to review them.
Changes to This Privacy Policy
goo11 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. The revised policy will be published at goo11.io/privacy-policy and the "Last Updated" date at the top of this document will be amended accordingly.
For material changes — those that significantly affect your rights or how your data is used — goo11 will notify registered account holders via the email address on file, providing at least 14 days' advance notice before the change takes effect. For minor clarifications that do not alter the substance of the policy, no advance notice is required.
Continued use of the goo11 platform after a revised Privacy Policy takes effect constitutes your acceptance of the updated terms. If you disagree with any changes to this policy, you should cease using the platform and request account closure before the revised policy takes effect.
Contact Us
For all privacy-related enquiries, data subject rights requests, or concerns about how goo11 handles your personal information, please contact the goo11 data team using the details below. All communications must be submitted in English and should include your registered account username to allow goo11 to locate your records efficiently.
Email: [email protected]
Subject Line: Privacy Request — [Your Username]
Response Time: Within 30 calendar days of receipt
Support Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)
If you are not satisfied with goo11's response to a privacy request or complaint, you have the right to escalate the matter through the appropriate dispute resolution channels described in the goo11 Terms & Conditions, available at goo11.io/terms-conditions.
Your Privacy Is Our Priority
Questions about how your data is used? Our support team is available around the clock. You can also explore the FAQ or review our full Terms & Conditions for more detail.