goya9 Privacy Policy

1 Introduction and Scope

This Privacy Policy describes how goya9 ("we", "our", "us") collects, uses, stores, and protects personal data relating to individuals who access or use the goya9 online casino and sports betting platform at goya9.bio (the "Platform"). goya9 is committed to handling your personal information responsibly, transparently, and in accordance with applicable data protection principles.

This policy applies to all users of the Platform regardless of location, and covers all personal data collected through account registration, gameplay, financial transactions, customer support interactions, and your general use of the goya9 website. By continuing to use goya9 after reviewing this policy, you confirm your acceptance of its terms.

2 Data We Collect

We collect the following categories of personal data about you. The table below summarises what we collect, why we collect it, and the legal basis on which processing is carried out:

3 How We Collect Your Data

goya9 collects personal data through the following channels:

• Directly from you — when you register an account, complete your player profile, make a deposit or withdrawal, contact our support team, respond to a survey, or participate in a promotion.
• Automatically — through cookies, web beacons, and server logs as you navigate and interact with the Platform. This includes your IP address, browser fingerprint, device identifiers, and session behaviour.
• From payment providers — when you transact via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, those providers may share transaction confirmation data with goya9 to verify and reconcile payments.
• From identity verification partners — where required for KYC compliance, goya9 may use third-party identity verification services to confirm the authenticity of documents you submit.
• From fraud and security services — goya9 may receive risk signals and device reputation data from anti-fraud technology partners to protect the integrity of the Platform.

4 How We Use Your Data

goya9 uses your personal data only for legitimate purposes directly connected to the provision of our services. Specifically, we use your data for the following purposes:

• Account management: To create, maintain, and secure your goya9 account, verify your identity and age, and keep your account details up to date.
• Service delivery: To provide access to games, process bets and winnings, handle deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment methods, and deliver customer support.
• Legal compliance: To comply with applicable anti-money-laundering (AML) requirements, fraud prevention obligations, and any lawful requests from competent authorities.
• Responsible gaming: To monitor gameplay patterns, apply deposit limits and cooling-off periods where requested, identify potential problem gambling behaviour, and enforce self-exclusion arrangements.

5 Data Sharing and Disclosure

goya9 does not sell, rent, or trade your personal data to third parties. We may share your data only in the following limited circumstances:

• Service providers: We share data with trusted third-party service providers who assist in operating the Platform — including payment processors, identity verification providers, game providers such as Pragmatic Play and Evolution Gaming, IT infrastructure providers, and fraud detection services. All such providers are bound by contractual data protection obligations.
• Legal obligations: We may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where we are legally required to do so, or where such disclosure is necessary to prevent fraud, money laundering, or other criminal activity.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of goya9's business, your personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent data protection commitments.

goya9 requires all third-party service providers who handle your data to implement appropriate technical and organisational security measures. We do not permit any service provider to use your data for their own commercial purposes.

6 Data Retention

goya9 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, and to resolve any disputes that may arise. Our standard retention periods are as follows:

• Active account data: retained for the duration of your account with goya9 and for a minimum period thereafter to meet our legal obligations.
• Financial transaction records: retained for a minimum of five years following the date of the transaction, in accordance with applicable AML and financial record-keeping requirements.
• KYC and identity verification documents: retained for the period required by applicable regulations, typically a minimum of five years after the end of the account relationship.
• Customer support communications: retained for a reasonable period to allow review and resolution of any outstanding complaints or disputes.

When your data is no longer required for any legitimate purpose, goya9 will securely delete or anonymise it. Where full deletion is not immediately practicable — for example, where data is held in backup archives — the data will be isolated and protected from further processing until deletion is possible.

7 Your Rights Over Your Data

You have the following rights in relation to the personal data that goya9 holds about you. To exercise any of these rights, please contact our support team at [email protected]:

• Right of access: You may request a copy of the personal data we hold about you at any time.
• Right of rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it.
• Right of erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligations.
• Right to restrict processing: You may ask us to restrict the processing of your data in certain circumstances, such as where you contest the accuracy of the data or object to our use of it.
• Right to object to marketing: You may withdraw consent to receive promotional communications from goya9 at any time, without affecting the lawfulness of any prior processing.
• Right to data portability: Where technically feasible and where processing is based on your consent, you may request that we provide your personal data in a structured, commonly used, machine-readable format.

8 Data Security

goya9 takes the security of your personal data seriously. We implement and maintain appropriate technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• SSL encryption on all data transmissions between your device and goya9's servers, so that your account credentials, payment details, and personal information are always transmitted in an encrypted form.
• Access controls restricting internal access to personal data on a need-to-know basis, with staff authorisation levels determined by role and responsibility.
• Regular security reviews and monitoring to identify and address vulnerabilities in our systems. In the event of a data breach that poses a risk to your rights, goya9 will notify affected users without undue delay.

While goya9 takes all reasonable steps to protect your data, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. We therefore encourage you to use a strong, unique password for your goya9 account and to keep your login credentials confidential at all times.

9 Cookies and Tracking

goya9 uses cookies and similar tracking technologies on the Platform to improve your user experience, maintain session state, and gather analytics data to help us understand how the Platform is used. The types of cookies we use include:

• Essential cookies — required for the Platform to function correctly, including session authentication cookies that keep you logged in during your visit.
• Analytics cookies — used to collect anonymised data about how users interact with the Platform, which pages are visited most frequently, and where users drop off, helping us improve the overall experience.
• Functional cookies — used to remember your preferences and settings, such as language preference and session continuity between visits.

Most web browsers allow you to control cookie settings through the browser's preferences or settings menu. You may choose to disable or restrict cookies; however, doing so may affect the functionality of the Platform and prevent certain features from working correctly.

10 Changes to This Privacy Policy

goya9 may update or revise this Privacy Policy from time to time to reflect changes in our data practices, operational requirements, or applicable law. When we make a material change to this policy, we will post a notice on the Platform and, where appropriate, notify registered users by email. The date of the most recent revision is displayed at the top of this page.

Your continued use of goya9 after any such update constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your data.

11 Third-Party Links and Services

The goya9 Platform integrates with third-party game providers and payment services. While goya9 takes care to work with reputable partners, we are not responsible for the privacy practices of those third parties. The following applies:

• Game providers such as Pragmatic Play, Evolution Gaming, Spribe, and others operate their game software under their own privacy and data terms. goya9 shares only the minimum data necessary with these providers for the purpose of delivering and authenticating gameplay.
• Payment providers such as bKash, Nagad, Rocket, and Upay process payment transactions under their own terms and privacy policies. We encourage you to review those policies directly with the relevant payment provider.
• goya9 is not responsible for the content or privacy practices of any third-party websites or services that may be referenced in connection with the Platform.
• Where third-party services are used for analytics or performance monitoring on goya9's Platform, such services are configured to anonymise data wherever possible and are not permitted to use that data for independent commercial purposes.

goya9 conducts periodic assessments of its third-party partners to ensure their data handling practices remain aligned with the standards set out in this Privacy Policy.

12 Children and Minors

goya9 is strictly an adults-only platform. We do not knowingly collect personal data from any individual under the age of 21. Our platform is not directed at, and must not be used by, minors. If you are under 21 years of age, you are not permitted to register for or use goya9 under any circumstances.

If goya9 becomes aware that personal data has been collected from a person under the age of 21 without appropriate verification, we will take immediate steps to close the associated account and delete the relevant data. If you believe that a minor has registered on goya9, please notify us immediately at [email protected].

13 Contact and Privacy Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way goya9 handles your personal data, please get in touch with our support team. We aim to respond to all privacy-related enquiries within a reasonable timeframe. Our contact details are: