goal90 Privacy Policy

This Privacy Policy ("Policy") applies to all personal data processed by goal90 ("the Company", "we", "us", "our") in connection with the operation of the goal90 Platform available at goal90.vip. It applies to all registered players, visitors to the Platform, and any other individual whose personal data is processed by goal90 in the course of providing its services to the Bangladesh market.

By creating a goal90 account or by continuing to use the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection, use, and processing of your personal data in the manner described herein. If you do not consent to this Policy, you should not use the Platform.

goal90 reserves the right to update this Policy from time to time to reflect changes in law, technology, or our operational practices. Material changes will be communicated to registered players via the contact details held on their account. The effective date at the top of this Policy indicates when it was last reviewed and updated.

Data We Collect

goal90 collects personal data from players through several channels: directly when you register an account or contact our support team, automatically when you use the Platform, and in some cases from third-party identity verification providers. The categories of personal data we collect are set out below.

1.1 Registration Data

When you create a goal90 account, we collect the information you provide during the registration process, which typically includes your full legal name, date of birth, mobile phone number, and any username or display name you choose. This information is required to establish and administer your account.

1.2 Identity Verification Data

As part of our Know Your Customer (KYC) obligations, goal90 may request and process copies of government-issued identity documents (such as your National Identity Card or passport), proof of address, and proof of ownership of any payment method used to deposit funds. This data is processed solely for identity verification and anti-fraud purposes.

1.3 Financial and Transaction Data

We collect and process data relating to deposits, withdrawals, bonuses, and betting or gaming activity on the Platform. This includes payment method details (such as the registered mobile number associated with your bKash, Nagad, Rocket, or Upay account), transaction amounts, timestamps, and transaction reference numbers. We do not store full card numbers or mobile wallet PINs.

1.4 Device and Technical Data

When you access the goal90 Platform, we automatically collect certain technical data about the device and connection used, including your IP address, browser type and version, operating system, device identifiers, and session activity data such as pages visited and time spent on the Platform. This data is used to maintain Platform security, detect fraud, and improve the user experience.

1.5 Communications Data

If you contact our customer support team by any channel, we retain records of those communications, including the content of messages, timestamps, and any supporting documentation you provide. This data is used to resolve your query and to improve our support services.

How We Use Your Data

goal90 processes personal data only where we have a lawful basis to do so. The purposes for which we use your data, and the corresponding lawful basis for each, are described below.

2.1 Account Administration

We use your registration and identity data to create, maintain, and administer your goal90 account. This includes verifying your identity, enforcing the one-account-per-player rule, and communicating important account-related information to you. This processing is necessary for the performance of our contract with you.

2.2 Payment Processing

We use your financial and transaction data to process deposits and withdrawals, to reconcile your account balance, and to detect and investigate potentially fraudulent transactions. Payments are facilitated through our integration with bKash, Nagad, Rocket, and Upay. These payment providers process data under their own privacy policies and as our data processors acting on our instructions.

2.3 Legal and Regulatory Compliance

goal90 is required by applicable law and internal policy to conduct KYC checks, retain transaction records, and report suspicious activity. We process identity and financial data to fulfil these obligations. This processing is necessary for compliance with legal obligations to which goal90 is subject.

2.4 Fraud Prevention and Platform Security

We analyse device data, IP addresses, and behavioural patterns to detect and prevent fraud, money laundering, account takeover, and the use of automated tools or bots. This processing is in our and your legitimate interest in maintaining a safe and fair platform environment.

2.5 Responsible Gaming

goal90 uses data about your gaming and betting activity — including session duration, frequency of play, and deposit patterns — to monitor for indicators of problem gambling and to provide you with appropriate responsible gaming interventions when triggered. For more information on our approach, please see our Responsible Gaming page.

2.6 Service Improvement and Analytics

Aggregated and anonymised data about how players use the Platform helps us identify areas for improvement, test new features, and ensure our products remain relevant and enjoyable. Where analytics are conducted on identifiable data, we rely on our legitimate interest in improving our services.

2.7 Marketing Communications

Where you have provided your consent, or where we are otherwise permitted to do so, we may send you promotional messages about new games, offers, and Platform updates. You may withdraw your consent to marketing communications at any time by contacting our support team at [email protected]. Withdrawal of marketing consent will not affect the lawfulness of any processing carried out prior to withdrawal.

Data Sharing & Disclosure

goal90 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the limited circumstances described in this section.

3.1 Payment Providers

To facilitate deposits and withdrawals, we share necessary transaction data with our payment partners — bKash, Nagad, Rocket, and Upay. Each of these providers operates under its own privacy policy and data protection framework. We share only the minimum data required to complete each transaction.

3.2 Identity Verification Services

goal90 may engage third-party KYC service providers to assist with document verification and identity checks. These providers act as data processors on our behalf and are contractually bound to process your data only for the purposes we specify and to maintain appropriate security standards.

3.3 Game and Software Providers

Some of our casino and sports products are delivered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive session identifiers and anonymised player data necessary to deliver the game experience. They do not receive your full name, identity documents, or payment details.

3.4 Legal Authorities

We may disclose personal data to law enforcement agencies, regulatory bodies, or other public authorities where we are legally required to do so, or where disclosure is necessary to prevent or investigate suspected illegal activity, including fraud and money laundering. We will inform you of such disclosures where we are legally permitted to do so.

3.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of goal90's business, personal data held by the Company may be transferred to the acquiring entity as part of that transaction. We will take reasonable steps to ensure that the recipient organisation maintains privacy standards consistent with this Policy.

Cookies & Tracking

goal90 uses cookies and similar tracking technologies on the Platform to provide core functionality, remember your preferences, analyse usage patterns, and support our security systems. This section explains what cookies we use and how you can manage them.

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to store information about your preferences and activity. Cookies may be session-based (deleted when you close your browser) or persistent (retained on your device for a set period).

4.2 Types of Cookies We Use

4.3 Managing Cookies

You can manage or delete cookies through your browser's settings at any time. Please note that disabling functional or analytical cookies may affect your experience on the Platform. Disabling essential or security cookies may prevent the Platform from operating correctly or may result in your account being temporarily locked for security reasons.

Data Security

Protecting your personal data is a core responsibility we take seriously. goal90 implements a range of technical and organisational measures designed to safeguard your data against unauthorised access, accidental loss, alteration, or destruction.

Data Retention

goal90 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account and registration data is retained for the duration of your account and for a minimum of five years following account closure, to comply with anti-money laundering record-keeping obligations.
• Transaction and financial records are retained for a minimum of five years from the date of the transaction to comply with financial record-keeping requirements.
• Identity verification documents are retained for the period required by applicable KYC regulations, which is typically five years following the end of the business relationship.
• Customer support communications are retained for a period of three years from the date of the communication to allow for dispute resolution and service quality review.
• Device and technical data such as IP logs and session records are typically retained for 12 months for fraud detection and security purposes, after which they are anonymised or deleted.
• Marketing consent records are retained for as long as necessary to demonstrate compliance with applicable laws, and for a period of three years following the withdrawal of consent.

When personal data is no longer required for any lawful purpose, goal90 will securely delete or anonymise it. Anonymised data — which can no longer be linked back to an individual — may be retained indefinitely for statistical and analytical purposes.

Your Privacy Rights

As a player on the goal90 Platform, you hold certain rights in relation to the personal data we hold about you. goal90 is committed to respecting and facilitating the exercise of these rights. The rights available to you are described below.

7.1 Right of Access

You have the right to request a copy of the personal data goal90 holds about you. Requests will be responded to within a reasonable timeframe. We may ask you to verify your identity before fulfilling an access request.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You can update certain account details directly within your account settings, or by contacting our support team.

7.3 Right to Erasure

In certain circumstances, you have the right to request the deletion of your personal data. This right is not absolute — where goal90 is legally required to retain data (for example, for KYC or financial record-keeping purposes), we will not be able to fulfil an erasure request for that data until our retention obligations have been met.

7.4 Right to Restriction of Processing

You may request that goal90 restricts the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved. During a restriction period, we will continue to store your data but will not actively process it beyond what is strictly necessary.

7.5 Right to Object

Where goal90 processes your personal data on the basis of legitimate interest (including for direct marketing purposes), you have the right to object to that processing. If you object to marketing, we will cease sending promotional communications immediately. Objections to other legitimate-interest processing will be considered on a case-by-case basis.

7.6 Right to Data Portability

Where we process your personal data on the basis of consent or contract, and that processing is carried out by automated means, you have the right to receive a structured, machine-readable copy of your data. You may also request that we transmit that data directly to another service provider where technically feasible.

Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or about the way goal90 handles your personal data, please contact our data protection team in the first instance. We take all privacy concerns seriously and will endeavour to resolve your query promptly and fairly.

You can reach us by email at: [email protected]. Please include "Privacy Concern" in the subject line so that your message is directed to the appropriate team.

goal90 aims to acknowledge all privacy-related enquiries within 48 hours (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 30 calendar days. Where a matter is particularly complex or requires investigation, we will keep you informed of our progress and expected response timeline.

If you are not satisfied with our response to a privacy complaint, you may have recourse to external dispute resolution mechanisms or relevant regulatory bodies. goal90 will cooperate fully with any such process.