Privacy Policy

Introduction

Goodjl operates online gambling platforms and related services (the Service). This Privacy Policy explains how Goodjl collects, uses, stores, discloses, and protects Personal Data in connection with the Service, and the rights of individuals whose data we process.

Scope and Definitions

For purposes of this Policy, the terms below have the following meanings: Personal Data means any information relating to an identified or identifiable individual. Data Controller means the entity that determines the purposes and means of processing Personal Data. Service means the online gambling platforms, software, applications, and related services offered by Goodjl. You and we, as used herein, refer to a user of the Service and Goodjl respectively.

What Personal Data We Collect

• Account information: registration details such as username, contact information, date of birth, and security credentials.
• Identity verification data: documents and information required to verify identity, age, and eligibility to participate in gaming activities.
• Payment and betting data: payment instruments, deposit and withdrawal history, wager details, and related financial records.
• Usage and activity data: login times, game history, bets placed, outcomes, and interactions with features of the Service.
• Technical and device data: device type, operating system, browser, IP address, language settings, and other metadata generated during use of the Service.
• Location data: approximate or precise location information where necessary to enable geo-restrictions or location-based features.
• Communications data: correspondence with the Goodjl support team, including chat messages and feedback submitted through the Service.
• Marketing preferences: consent status and opt-out choices for communications and promotions.
• Biometric authentication data: if you enable device-based biometric login, we receive only the authentication outcome, not the biometric data itself.

How We Collect Personal Data

We collect Personal Data directly from you when you create an account, deposit funds, or contact us. We collect data automatically through your use of the Service, including technical logs and usage patterns. We obtain data from third-party service providers that perform processing on our behalf for activities such as identity verification, payment processing, customer support, and fraud prevention. We also use cookies and similar technologies to collect information about your use of the Service.

Purposes and Legal Bases for Processing

• To provide and operate the Service: process and manage your account, wagers, and payments. Legal basis: performance of a contract.
• Identity verification and age compliance: ensure eligibility to participate in gaming activities. Legal basis: compliance with legal obligations and legitimate interests in preventing underage gambling and fraud.
• Payments and account administration: processing deposits, withdrawals, and refunds; maintaining accurate records. Legal basis: performance of a contract and legitimate interests in financial integrity.
• Communication and support: respond to inquiries, deliver notices, and provide customer support. Legal basis: performance of a contract and legitimate interests in servicing customers.
• Security, fraud prevention, and risk management: detect and prevent unauthorized access, fraud, and abuse. Legal basis: legitimate interests in protecting users and the Service.
• Analytics and service improvements: analyze usage to improve features and reliability. Legal basis: legitimate interests in enhancing the Service.
• Marketing and promotions (with consent or legitimate interest): inform you about offers, promotions, and updates. Legal basis: consent where required and legitimate interests for existing customers.

Automated Processing and Profiling

We may perform automated processing of Personal Data for purposes such as security monitoring and tailoring the Service. We do not make decisions that produce legal effects or similarly significant effects about you based solely on automated processing. If any decision with such significance is to be made, we will provide suitable human review and notification.

Data Retention

Personal Data is retained for the period necessary to provide the Service and fulfil contractual obligations, comply with legal requirements, and resolve disputes. For active accounts, data is retained for the duration of the relationship. Upon account termination, we retain Personal Data for up to six (6) years to meet regulatory, auditing, and dispute-resolution obligations, after which it is securely deleted or anonymised.

Security of Personal Data

We implement reasonable administrative, technical, and physical safeguards to protect Personal Data against loss, misuse, and unauthorized access. Data processed on our systems is protected using industry-standard security measures, including encryption in transit and encryption at rest where applicable, access controls, and monitored environments. Access to Personal Data is restricted to personnel with a legitimate business need and subject to confidentiality obligations.

Sharing Personal Data with Third Parties

We may disclose Personal Data to the following categories of recipients for the purposes described in this Policy:

• Service providers: hosting, IT services, customer support software, and other essential processors acting on our behalf.
• Payment processors and financial institutions: to process transactions and comply with financial regulations.
• Identity verification and fraud prevention partners: to verify identities and assess risk.
• Game content providers and software suppliers: to enable service functionality and compliance with licensing requirements.
• Auditors and compliance consultants: for regulatory audits and due diligence.
• Marketing partners and affiliates (with consent): to deliver promotions where permitted by law.
• Regulatory authorities and law enforcement: when required by law, regulation, or legal process.

All transfers are conducted under appropriate contractual safeguards to ensure data protection in line with this Policy and applicable law. We do not sell Personal Data to any third party.

International Data Transfers

Personal Data may be stored and processed in jurisdictions outside your residence country. Where such transfers occur, we implement safeguards to protect your data, including appropriate contractual clauses or other recognized transfer mechanisms, and assess the adequacy of the receiving country’s data protection regime.

Your Rights

You may exercise the following rights in relation to your Personal Data, subject to applicable law and with any limitations required by law:

• Access: obtain a copy of your Personal Data in a structured, commonly used format.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion where processing is no longer necessary or unlawful.
• Restriction: request suppression of processing under certain circumstances.
• Objection: object to processing based on legitimate interests or for direct marketing.
• Data portability: obtain your Personal Data for transfer to another service where feasible.
• Withdraw consent: withdraw consent where processing is based on consent.
• Complaint: lodge a complaint with a supervisory authority if you believe your rights have not been respected.

To exercise these rights, contact our privacy team at [email protected]. We will respond within a reasonable timeframe and in any event within the period required by applicable law. Some requests may be subject to exemptions under applicable law and may incur minimal administrative charges where permitted by law.

Cookies and Tracking Technologies

We use cookies and similar technologies to operate, secure, and improve the Service, as well as to deliver personalized content and advertising where allowed. You may manage cookies through your browser settings and through in-Service controls if available. We classify cookies into strictly necessary, performance, and targeting categories, and we retain data collected via cookies in accordance with this Policy and applicable law.

Children’s Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect Personal Data from anyone under 18. If we become aware of such data, we will take steps to delete it as quickly as possible and suspend the account as required by applicable law.

Changes to This Policy

We may update this Policy from time to time. We will notify users of material changes through the Service or other reasonable means and update the effective date at the top of this Policy.

Contact Us

If you have questions or concerns about this Policy or our data practices, please contact the Goodjl Privacy Team via the Service or at [email protected]. We will respond in accordance with applicable data protection laws and within a reasonable timeframe.

Effective Date

This Privacy Policy is effective as of 23 April 2026.