Privacy Policy of
good777

1. Information We Collect

good777 collects personal information that is necessary to provide you with a safe, compliant, and personalised betting and casino experience. We collect data in three primary ways: information you provide directly, information generated automatically through your use of the platform, and information received from third parties such as payment processors and identity verification services.

Information You Provide Directly

When you register for a good777 account or interact with our support team, we collect the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, and nationality.
• Contact Data: Email address, mobile phone number, and residential address (including city, district, and postal code within Bangladesh).
• Identity Verification Documents: Copies of your National Identity Card (NID), passport, or driving licence submitted during the KYC process.
• Financial Data: Payment account details, including bKash or Nagad mobile numbers, Rocket wallet identifiers, bank account numbers, and transaction records associated with your good777 account.
• Account Credentials: Your chosen username and a hashed (never plain-text) representation of your password.
• Support Communications: The content of any messages, emails, or live chat conversations you have with the good777 support team.

Information Collected Automatically

When you access good777 through a web browser or mobile device, we automatically collect certain technical and behavioural data:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
• Usage Data: Pages visited, games played, bets placed, session duration, click patterns, and navigation paths within the platform.
• Location Data: Approximate geographic location derived from your IP address, used to verify compliance with eligibility requirements.
• Cookie & Tracking Data: Session identifiers, preference cookies, and aggregate analytics data. See the Cookies section below for full details.

Information from Third Parties

We may receive supplementary information about you from identity verification providers, fraud detection services, and payment processors operating in Bangladesh, including bKash, Nagad, and Rocket. This information is used exclusively to verify your identity, confirm the legitimacy of transactions, and prevent fraud. It is not used for marketing profiling.

2. How We Use Your Information

good777 processes your personal data only where we have a lawful basis to do so. The primary legal bases we rely on are: performance of a contract (providing the services you have registered for), compliance with a legal obligation (identity verification, AML compliance), legitimate interests (fraud prevention, platform security), and consent (marketing communications).

good777 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you, without providing you the opportunity to seek human review of that decision. Where we use automated tools to flag potentially fraudulent activity, a member of our compliance team reviews all significant account actions before they are enforced.

3. Sharing & Disclosure of Data

good777 does not sell or rent your personal data to third parties. We share personal information only in the limited circumstances described below, and only to the extent strictly necessary for the relevant purpose.

Service Providers and Technology Partners

We engage trusted third-party companies to provide technical and operational services on our behalf. These include game content providers (such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and Spribe), payment processing partners (bKash, Nagad, Rocket, Upay, and banking partners), identity verification and KYC services, customer support platform providers, and cloud infrastructure and data hosting providers. All such partners are bound by data processing agreements that restrict them from using your data for any purpose beyond the specific service they provide to good777.

Legal and Regulatory Disclosure

good777 may disclose your personal data to law enforcement agencies, regulatory authorities, or other government bodies when required to do so by applicable law, court order, or regulatory directive. We may also disclose data where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of good777, our players, or the public, including in connection with fraud investigations or AML reporting obligations.

Business Transfers

In the event that good777 undergoes a corporate restructuring, merger, acquisition, or sale of all or a portion of its business assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and of any material changes to how your data is processed as a result, prior to the transfer taking effect where reasonably practicable.

4. Cookies & Tracking Technologies

good777 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, and understand how players interact with our services. A cookie is a small text file stored on your device by your web browser when you visit a website.

Types of Cookies We Use

Managing Cookies

You may control cookie behaviour through your browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please note that blocking strictly necessary cookies will prevent certain features of good777 from functioning correctly, including the ability to log in and place bets. For instructions specific to your browser, refer to its official help documentation.

good777 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. Our analytics data is collected in aggregate form and is not linked back to individual player identities.

5. Data Security & Storage

Protecting your personal data is a core operational priority at good777. We implement a layered security architecture that combines technical controls, procedural safeguards, and staff training to minimise the risk of unauthorised access, loss, disclosure, or alteration of your data.

Technical Safeguards

• Encryption in Transit: All data transmitted between your device and good777 servers is encrypted using TLS 1.2 or higher.
• Encryption at Rest: Sensitive data fields — including identity document copies and financial account references — are encrypted at rest using AES-256 encryption.
• Password Hashing: User passwords are never stored in plain text. We use a strong one-way hashing algorithm with a unique per-account salt.
• Access Controls: Access to personal data within good777's internal systems is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access control (RBAC) and multi-factor authentication for administrative accounts.
• Penetration Testing: good777 conducts periodic security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.

Data Breach Response

In the event of a data security incident that is reasonably likely to result in risk to your rights or interests, good777 will notify affected players by email without undue delay, describing the nature of the incident, the categories of data affected, the steps we have taken to contain it, and the actions we recommend you take to protect yourself. We maintain an incident response plan that is reviewed and tested at least annually.

6. Your Privacy Rights

As a registered player on good777, you have a number of rights with respect to the personal data we hold about you. We are committed to honouring these rights in a timely and transparent manner. To exercise any of the rights listed below, please contact our support team at support@good777 with the subject line "Privacy Rights Request". We will verify your identity before processing any request and aim to respond within 30 calendar days.

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed, who it is shared with, and how long it is retained.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where you object to processing and there is no overriding legitimate interest for us to continue. Note that this right is subject to our legal obligations — for example, we are required to retain certain transaction records for AML compliance purposes, and these cannot be deleted on request.
• Right to Restriction: You may ask us to restrict the processing of your data in certain circumstances — for example, while a rectification request is being resolved, or where you contest the basis on which we are processing your data.
• Right to Data Portability: Where we process your data on the basis of consent or contract performance, and the processing is carried out by automated means, you may request that we provide your data to you in a structured, commonly used, machine-readable format.
• Right to Object to Marketing: You have an absolute right to object to the processing of your personal data for direct marketing purposes at any time. We will stop marketing processing immediately upon receipt of a valid objection.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

7. Data Retention Policy

good777 retains personal data for no longer than is necessary for the purposes for which it was collected, taking into account our legal obligations, dispute resolution needs, and legitimate operational requirements. The following table summarises our standard retention periods by data category.

At the end of the applicable retention period, personal data is either securely deleted from our systems or irreversibly anonymised so that it can no longer be linked to an individual. Anonymised aggregated data may be retained indefinitely for statistical and research purposes.

Where you request erasure of your data and we are unable to comply fully due to a legal retention obligation, we will inform you which data must be retained, for how long, and on what legal basis. All retained data will be restricted from further active use pending the expiry of the mandatory retention period.

8. Changes to This Privacy Policy

good777 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. The current version of the Privacy Policy is always available at good777/privacy-policy and is marked with an effective date at the top of the document.

Where we make a material change to this Privacy Policy — such as introducing a new purpose for processing, adding a new category of data, or changing how data is shared with third parties — we will notify registered players via email to the address on their account. The notification will describe the nature of the change and the date it takes effect. We will provide at least 14 days' notice before a material change comes into effect, giving you time to review the update and, where appropriate, withdraw consent or close your account if you do not agree to the new terms.

Minor changes — such as corrections to wording, formatting updates, or the addition of clarifying language that does not alter the substance of any provision — may be made without individual notice. Continued use of good777 after the effective date of any update constitutes your acceptance of the revised Privacy Policy.