Goodwin Privacy Policy — Protecting Your Personal Information

Goodwin ("we", "us", "platform") is a trusted online gaming platform for players in Bangladesh. We believe your personal data belongs to you, and protecting it is our foremost responsibility.

This Privacy Policy ("Policy") explains how Goodwin collects your information, why we collect it, how long we retain it, and who we may share it with — giving you full control over your personal data.

This policy applies to all of the following:

• While using the Goodwin website and mobile app.
• For account registration and login processes.
• During payment and withdrawal transactions.
• When contacting customer support.
• For receiving promotional emails or messages.

Goodwin only collects data that is necessary to provide you with the best experience and to meet our legal obligations. The table below outlines the types of data we collect and their purpose:

How We Collect Your Data

• Directly from you: Via registration forms, KYC submissions, and support chat.
• Automatically: Via cookies and log files during platform use.
• From Third Parties: From payment providers and identity verification agencies.

Goodwin uses your data solely for defined and legitimate purposes. We never use your information unnecessarily.

Primary Use Cases

• Account Management: Account registration, login verification, password recovery, and account security.
• Payment Processing: Processing deposits, sending withdrawals, and maintaining transaction records.
• Legal Compliance: Meeting KYC, AML (Anti-Money Laundering), and licensing authority requirements.
• Customer Support: Resolving your issues, processing complaints, and providing support.
• Security: Fraud detection, prevention of unauthorized access, and platform security.
• Personalization: Game recommendations and promotional offers tailored to your preferences.
• Responsible Gaming: Detecting unusual gaming behaviour to provide timely support.

We never sell your data to advertising third parties. Promotional messages are sent only with your consent, and you can unsubscribe at any time.

Goodwin may share your data with certain third parties in limited circumstances and under strict contractual agreements. Below is a clear breakdown of who we share it with and why:

• Payment providers (bKash, Nagad, Rocket): Only the data necessary to complete a transaction is shared.
• KYC & Identity Verification Providers: To verify age and identity.
• Legal Authorities: In compliance with court orders or government directives.
• Licensing Authority: To meet regulatory requirements.
• Technology Service Providers: Server hosting and security specialists — all bound by strict confidentiality agreements.

Beyond the cases listed above, we do not share your information with any third party without your explicit consent. In the event of a business merger or acquisition, you will be informed in advance.

Goodwin follows the highest industry standards to protect your data. Our security infrastructure is continuously updated.

Technical Security

• 256-bit SSL/TLS Encryption: Bank-grade encryption is applied to all data transmissions.
• Firewall & DDoS Protection: Our servers are protected against external attacks.
• Two-Factor Authentication (2FA): An additional layer of security at login.
• Encrypted Database: Stored data is also kept in an encrypted state.

Institutional Security

• Only authorized personnel can access your data.
• Staff receive regular security training.
• Regular security audits are conducted by independent third parties.
• In the event of a data breach, you will be notified within 72 hours.

Goodwin uses cookies and similar technologies on its website. Cookies are small files stored in your browser that help improve your experience.

Cookie Type

• Essential Cookies: Required for login sessions and security — these cannot be disabled.
• Functional Cookies: To remember your language preference and personalized settings.
• Analytics Cookies: To understand how the platform is used — collected anonymously.

You can manage cookies through your browser settings. However, disabling essential cookies may affect certain features of the platform.

Goodwin does not retain your data longer than necessary. Retention periods are determined by the type of data:

Once the retention period expires, your data is securely deleted or anonymized so you can no longer be identified.

Goodwin gives you full control over your data. You hold the following rights and can exercise them at any time:

To exercise these rights support@goodwin.bio-email us. We aim to respond within 30 days.

Goodwin strictly does not provide services to anyone under the age of 18. We do not knowingly collect or process personal data from minors.

• Age verification is required at the time of registration.
• Any account found to belong to a minor will be immediately suspended and all associated data will be permanently deleted.
• If you believe your child has registered on our platform, please contact us immediately.

As an international platform, Goodwin may store your data on servers located in different countries. Regardless of where it's stored, the same standard of protection is always maintained.

• All international data transfers are conducted through encrypted channels.
• Regardless of where data is stored, GDPR-equivalent protections apply.
• Legal protection agreements are in place before any data is transferred to third countries.