Your Privacy Matters —
goya777 Data Protection Policy

When you register and use the goya777 platform, we collect certain categories of personal information. This collection is limited to data that is genuinely necessary to deliver our services, verify your identity, process payments, and meet our obligations as a responsible online gaming operator serving players in Bangladesh.

Information You Provide Directly

During account registration and ongoing use of goya777, you may provide the following categories of information:

• Identity Information: Full legal name, date of birth, and gender as required for age verification and account creation.
• Contact Information: Email address and, where applicable, mobile phone number linked to your bKash, Nagad, Rocket, or Upay wallet.
• Verification Documents: Copies of government-issued identification (National ID card, passport, or driving licence) submitted during the identity verification process.
• Financial Information: Mobile wallet identifiers (bKash, Nagad, Rocket, Upay) used to process deposits and withdrawals. goya777 does not store full card numbers or bank account credentials.
• Account Preferences: Your chosen username, language preference, responsible gaming settings (deposit limits, time-out periods), and communication preferences.
• Support Correspondence: Any messages, enquiries, or complaints you submit to the goya777 support team via live chat or email.

Information Collected Automatically

When you visit or use the goya777 platform, our systems automatically collect certain technical data to ensure platform security, detect fraud, and maintain service quality:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and connection type.
• Usage Data: Pages visited, games launched, bets placed, session duration, click paths, and feature interactions within the platform.
• Transaction Logs: A complete record of all deposits, withdrawals, bonus claims, and wagers associated with your account, including timestamps in Bangladesh Standard Time (BST, UTC+6).
• Cookie & Session Data: Session tokens used to keep you logged in, preference cookies, and anonymous analytics identifiers. See the Cookies section for full details.

Sensitive Data

goya777 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric identifiers. The only potentially sensitive data collected is age-verification documentation, which is handled under strict access controls and retained only for the minimum period required by our verification obligations.

goya777 uses the personal data it collects for specific, legitimate purposes directly related to the operation of the platform and the delivery of services to players in Bangladesh. We do not use your data for purposes that are incompatible with the original reason it was collected.

Marketing Communications

goya777 will only send you promotional communications — including bonus offers, seasonal promotions (such as Eid, Pohela Boishakh, or BPL cricket season campaigns), and platform news — if you have explicitly opted in to receive such communications during account registration or via your account settings. You may withdraw your consent and unsubscribe from marketing communications at any time by updating your notification preferences in your account dashboard or by contacting support.

Automated Decision-Making

goya777 uses automated systems to monitor account activity for patterns consistent with fraud, bonus abuse, underage gambling, or problem gambling behaviour. Where such a pattern is flagged, the automated system may trigger a temporary account restriction pending manual review by our compliance team. You have the right to request human review of any automated decision that materially affects your account status.

goya777 does not sell, rent, or trade your personal data to third parties. We share your information only in the limited circumstances described in this section, and only to the extent strictly necessary for the stated purpose.

Categories of Third-Party Recipients

• Payment Processors: bKash, Nagad, Rocket, and Upay receive the transaction data necessary to process your deposits and withdrawals. Each of these providers operates under its own privacy policy and applicable Bangladesh financial services regulations.
• Game Providers: Certified game studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, Hacksaw Gaming, Play'n GO, and Red Tiger receive a session token and anonymised player identifier necessary to load and record game sessions. They do not receive your full identity details.
• Identity Verification Services: Third-party KYC (Know Your Customer) verification providers may process identity documents on goya777's behalf solely for the purpose of age and identity verification. These providers are contractually bound to process data only as directed by goya777 and to apply equivalent data protection standards.
• Fraud Prevention Services: goya777 may share device fingerprint data, IP addresses, and transaction patterns with certified fraud detection platforms to identify and prevent financial crime across the platform.
• Analytics Providers: Anonymised, aggregated usage data may be shared with web analytics services to help goya777 understand platform performance. No personally identifiable information is included in these datasets.

Legal Disclosures

goya777 may disclose your personal data to law enforcement agencies, regulatory bodies, or other authorised authorities if we are legally required to do so, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of goya777, our players, or the public. In such cases, goya777 will disclose only the minimum data required to satisfy the legal obligation.

International Data Transfers

Some of goya777's third-party service providers — particularly game studios and fraud prevention platforms — may be based outside Bangladesh. Where your data is transferred to a provider in another jurisdiction, goya777 ensures that appropriate contractual safeguards are in place to protect your data to an equivalent standard as described in this Privacy Policy.

goya777 uses cookies and similar technologies to operate the platform effectively, remember your preferences, and generate anonymous usage analytics. This section explains what cookies we use, why we use them, and how you can manage them.

What Are Cookies?

Cookies are small text files stored on your device by your browser when you visit a website. They allow the website to recognise your device on subsequent visits and to maintain session state. Cookies set by goya777 are first-party cookies — they originate from goya777.net itself, not from external advertising networks.

Types of Cookies Used by goya777

Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your goya777 account and using core platform features. Disabling preference cookies will mean that your settings are not remembered between sessions. Disabling analytics cookies will not affect your ability to use the platform.

goya777 does not use advertising cookies, third-party tracking pixels, or cross-site behavioural profiling technologies of any kind. Your browsing activity outside of goya777.net is never tracked by goya777.

goya777 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required to meet our legal, regulatory, and operational obligations. The following retention schedules apply:

Data Deletion

When a retention period expires, goya777 will either securely delete your personal data or anonymise it so that it can no longer be linked to you as an individual. Anonymised data may be retained indefinitely for statistical and analytical purposes. If you request deletion of your account before a mandatory retention period has expired, goya777 will restrict processing of your data to the minimum necessary to meet the legal obligation and will delete it as soon as the retention period concludes.

Storage Security

All personal data held by goya777 is stored on secure servers protected by firewalls, access controls, and encryption at rest. Access to personal data is restricted to goya777 personnel and authorised contractors who have a legitimate business need to access it. All staff with access to personal data are trained in data protection obligations and are bound by confidentiality agreements.

As a goya777 player, you have a number of rights in relation to the personal data we hold about you. goya777 is committed to facilitating the exercise of these rights in a timely and transparent manner. To submit any data rights request, please contact us via live chat from your account dashboard or by emailing [email protected].

• Right of Access: You have the right to request a copy of the personal data goya777 holds about you, along with information about how it is being used and with whom it has been shared. We will respond to access requests within a reasonable timeframe.
• Right to Rectification: If any personal data held by goya777 is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information directly from your account settings page.
• Right to Erasure: Subject to applicable retention obligations described in Section 5, you may request that goya777 delete your personal data. This right applies where data is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where the data has been unlawfully processed.
• Right to Restrict Processing: In certain circumstances — for example, where you contest the accuracy of your data or object to its use — you may request that goya777 restrict processing of your personal data to storage only, pending resolution of the matter.
• Right to Data Portability: Where goya777 processes your data based on your consent or on contractual necessity, you may request a machine-readable copy of the data you have provided to goya777, for the purpose of transferring it to another service provider.
• Right to Object: You have the right to object to goya777's use of your data for marketing communications at any time. You may also object to processing carried out on the basis of legitimate interest where you believe your rights and interests override goya777's stated purpose.
• Right to Withdraw Consent: Where goya777 processes your data based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

goya777 takes the security of your personal data seriously and applies a layered set of technical and organisational measures to protect against unauthorised access, disclosure, alteration, or destruction. While no online platform can guarantee absolute security, goya777 maintains industry-standard protections appropriate for an online gaming platform serving players across Bangladesh.

Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your browser or app and goya777 servers is encrypted using SSL/TLS protocols. Look for the padlock icon in your browser address bar when using goya777.net.
• Encryption at Rest: Sensitive data stored on goya777 servers — including identity verification documents and financial records — is encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to systems containing personal data is restricted by role-based access control (RBAC). Only personnel with a verified business need can access specific data categories, and all access events are logged.
• Firewall & Intrusion Detection: goya777 servers are protected by enterprise-grade firewalls and continuous intrusion detection systems that monitor for anomalous access patterns and automatically alert the security team.
• Two-Factor Authentication (2FA): goya777 supports two-factor authentication for player accounts. We strongly encourage all players to enable 2FA from their account security settings to add an additional layer of protection against unauthorised login.

Organisational Safeguards

• All goya777 employees and contractors with access to personal data are bound by confidentiality obligations and receive regular training on data protection best practices.
• Third-party service providers that process personal data on goya777's behalf are subject to data processing agreements that require them to maintain equivalent security standards.
• goya777 conducts periodic internal reviews of data security practices and responds promptly to any identified vulnerabilities.

Data Breach Response

In the event of a confirmed personal data breach that poses a risk to affected players, goya777 will notify impacted players without undue delay via their registered email address. The notification will describe the nature of the breach, the categories of data involved, the likely consequences, and the steps goya777 is taking to address the incident. Players are encouraged to change their passwords and contact support immediately if they suspect their account has been compromised.

goya777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable laws or regulations, or enhancements to platform features that involve new data processing activities. The most current version of this Privacy Policy is always available at goya777.net/privacy-policy.

Where a material change is made to this Privacy Policy — for example, a change to how your data is shared with third parties or a new data processing purpose — goya777 will notify registered players via a prominent on-site notice or by email to the registered address on file. Your continued use of the goya777 platform after the effective date of an updated Privacy Policy constitutes your acknowledgement of and acceptance of the revised policy.

If you do not agree with the changes made to this Privacy Policy, you should cease using the goya777 platform and contact support to request account closure. Your personal data will continue to be handled in accordance with the version of the Privacy Policy that was in effect at the time of collection for data already gathered, until the applicable retention period expires.