Privacy Policy for goalsbet

Data We Collect

When you interact with the goalsbet platform — whether you are browsing as a visitor, registering a new account, placing a bet, making a deposit, or contacting our support team — we may collect personal data about you. The categories of personal data we collect depend on the nature of your interaction with the platform and are detailed below.

1.1 Account Registration Data

When you create a goalsbet account, we collect the following information to set up and manage your player profile:

• Full legal name — as it appears on your government-issued identification document.
• Date of birth — used to verify that you meet the 18+ age requirement.
• Email address or mobile phone number — used for account login, security verification, and service communications.
• Residential address — including district and division within Bangladesh, collected during KYC (Know Your Customer) verification.
• Username and encrypted password — your chosen account credentials, stored in hashed form.

1.2 Identity Verification (KYC) Data

Before processing your first withdrawal, goalsbet is required to verify your identity. During the KYC process we collect:

• A copy of a valid government-issued photo ID — Bangladesh National Identity Card (NID), valid passport, or driving licence.
• Proof of address — a recent utility bill, bank statement, or similar official document dated within the last 90 days.
• Mobile wallet registration confirmation — where bKash, Nagad, Rocket, or Upay is used, confirmation that the wallet is registered in your name.

KYC documents are reviewed by our compliance team and stored securely. They are not shared with third parties except where required by applicable law or in response to a lawful authority request.

1.3 Financial Transaction Data

When you make deposits or request withdrawals on goalsbet, we record:

• Payment method type — bKash, Nagad, Rocket, Upay, Visa, or Mastercard.
• Transaction amounts in Bangladeshi Taka (৳ BDT), timestamps, and transaction reference numbers.
• Partial payment identifiers — such as the last four digits of a card number or the registered mobile number of a mobile wallet — sufficient to identify the payment source without storing full sensitive payment credentials.

goalsbet does not store full card numbers or full mobile banking PINs on our servers. Payment processing is handled via secure third-party payment gateway integrations.

1.4 Behavioural and Usage Data

As you use the goalsbet platform, we automatically collect technical and behavioural data to ensure platform performance and improve your experience:

• Device information — device type (mobile or desktop), operating system, browser type and version.
• IP address and approximate geographic location (city/district level, not precise GPS).
• Session data — pages visited, time spent on each page, game history, betting history, and navigation patterns within the platform.
• Cookie and tracking technology data — as described in the Cookies section below.

1.5 Communications Data

If you contact goalsbet via our support email (support@goalsbet), we retain a record of the communication, including your name, contact details, the content of your message, and our response. This data is used to resolve your query and to improve our customer service quality.

How We Use Your Data

goalsbet processes your personal data for the following purposes. For each purpose, we have identified the lawful basis on which we rely:

2.1 Marketing Communications

goalsbet will only send you promotional messages — such as bonus offers, BPL and IPL betting promotions, Eid and Pohela Boishakh seasonal campaigns, and new game announcements — if you have expressly opted in to receive such communications during registration or at a later point in your account settings. You may opt out of marketing communications at any time by updating your account notification preferences or by contacting support@goalsbet.

Data Sharing & Disclosure

goalsbet does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data in the limited circumstances described below.

3.1 Service Providers (Data Processors)

We engage trusted third-party service providers who process personal data on our behalf and under our instructions. These include:

• Payment processors — to facilitate secure deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard. These processors receive only the minimum data necessary to complete the transaction.
• KYC and identity verification providers — to perform document authentication and cross-reference checks as part of our age and identity verification process.
• Platform infrastructure and hosting providers — to maintain secure server environments that host the goalsbet platform and database systems.
• Customer support tools — to manage and record support communications between players and our support team.

All service providers are contractually required to process personal data only in accordance with our instructions, to implement appropriate technical and organisational security measures, and not to use your data for their own purposes.

3.2 Legal and Regulatory Disclosure

goalsbet may disclose personal data to law enforcement authorities, government bodies, or regulatory agencies where we are legally required or compelled to do so — for example, in response to a valid court order, regulatory investigation, or anti-money laundering enquiry. In such cases, we will disclose only the minimum data necessary to comply with the legal obligation.

3.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the goalsbet business, personal data held by us may be transferred to the acquiring entity as part of that transaction. In such an event, we will notify affected players via the email address registered to their account and will ensure that any successor entity is bound by privacy obligations no less protective than those set out in this Privacy Policy.

Cookies & Tracking Technologies

The goalsbet platform uses cookies and similar technologies (such as local storage and session storage) to operate correctly, remember your preferences, and understand how players use the platform. This section explains what cookies we use and why.

4.1 What Are Cookies?

Cookies are small text files that a website places on your browser or device when you visit. They allow the platform to recognise your browser on subsequent visits, retain session information, and deliver a consistent user experience. Cookies do not contain executable code and cannot access other files on your device.

4.2 Types of Cookies Used by goalsbet

4.3 Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored by any website. Note that disabling strictly necessary cookies will prevent you from logging in to your goalsbet account and using core platform features. Instructions for managing cookies in popular browsers are available through your browser's help documentation.

goalsbet does not use third-party advertising cookies or cross-site tracking pixels. We do not participate in ad exchange networks or retargeting programmes.

Data Retention

goalsbet retains personal data only for as long as is necessary for the purposes described in this Privacy Policy, or as required by applicable law. The following retention schedule applies to the main categories of personal data we hold:

Once a retention period expires, goalsbet will securely delete or anonymise the relevant personal data. Anonymised data (from which no individual can reasonably be identified) may be retained indefinitely for statistical and business analysis purposes.

5.1 Account Closure and Data Deletion Requests

If you close your goalsbet account or submit a data deletion request, we will begin the process of erasing your personal data, subject to the retention periods set out above which may require us to retain certain records for a defined period after account closure. We will confirm the outcome of any deletion request within 30 days of receipt.

Your Privacy Rights

As a registered player on goalsbet, you have a number of rights with respect to your personal data. These rights are described below, together with how to exercise them. goalsbet will respond to all privacy rights requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data that goalsbet holds about you. We will provide this information in a clear, structured format within 30 days of a verified request.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Most account details can be updated directly in your account settings; for KYC data, contact our support team.
• Right to Erasure ("Right to Be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent on which processing was based. Note that we may retain certain data for the minimum periods required by law even after an erasure request.
• Right to Restrict Processing: You may request that we limit how we use your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you have the right to receive your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object to Marketing: You may withdraw consent for marketing communications at any time by contacting support@goalsbet or updating your account notification preferences. Withdrawal of marketing consent does not affect the lawfulness of processing that occurred before the withdrawal.

Data Security Measures

goalsbet implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated regularly in line with industry best practice.

7.1 Technical Security Controls

• 256-bit SSL/TLS Encryption: All data in transit between your browser or mobile device and the goalsbet platform is encrypted using TLS 1.2 or higher. A valid SSL certificate is maintained at all times.
• Password Hashing: Account passwords are never stored in plain text. All passwords are hashed using industry-standard cryptographic algorithms before storage.
• Access Controls: Access to personal data within goalsbet systems is restricted on a strict need-to-know basis. Staff members access only the data necessary for their specific role.
• Secure Infrastructure: The goalsbet platform is hosted on secured servers with firewall protection, intrusion detection systems, and regular vulnerability scanning.
• Regular Security Audits: goalsbet conducts periodic internal and third-party security assessments to identify and remediate potential vulnerabilities in our platform and data processing systems.

7.2 Organisational Security Measures

• All staff with access to player personal data receive regular training on data protection obligations and secure data handling procedures.
• goalsbet maintains a documented data breach response procedure. In the event of a data breach that poses a risk to the rights and freedoms of players, we will notify affected individuals without undue delay and take immediate remediation steps.
• Service providers who process personal data on our behalf are subject to data processing agreements that require them to implement security measures equivalent to our own standards.

Contact & Data Controller

goalsbet is the data controller responsible for the personal data collected through the platform. If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have a concern about how your personal data is being handled, please contact us using the details below.

8.1 How to Contact Us

• Support and Privacy Enquiries: support@goalsbet — please include "Privacy" in the subject line of your message so it is routed to the correct team promptly.
• Response Time: We aim to acknowledge all privacy-related enquiries within 2 business days and to provide a full response within 30 calendar days.
• Operating Hours: Our support team is available 7 days a week, 09:00–23:00 Bangladesh Standard Time (BST, UTC+6).

8.2 Changes to This Privacy Policy

goalsbet reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, platform features, or applicable legal requirements. When we make material changes to this policy, we will notify registered players by email to the address on file, or by displaying a prominent notice on the goalsbet platform, at least 14 days before the changes take effect.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how goalsbet protects your personal data. Continued use of the platform after a notified policy update constitutes acceptance of the revised Privacy Policy.

If any proposed change to this Privacy Policy would materially reduce your rights or increase the ways in which we use your personal data, we will provide a 30-day advance notice period and, where the processing basis is consent, seek your fresh consent before the new processing begins.