l89z Privacy Policy — How We Handle Your Data

Our Privacy Commitment

l89z operates as an online casino and sports betting platform for players in Bangladesh. In the course of providing our services, we collect and process certain personal data. We take this responsibility seriously. This Privacy Policy describes in plain terms what data we hold, how we use it, who we share it with, and what rights you can exercise at any time.

By registering an account or using the l89z Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we handle your data, please do not use the Platform and contact us to arrange deletion of any information you may have provided.

1. Data We Collect

We collect personal data in three ways: information you provide to us directly, information we collect automatically when you use the Platform, and information we receive from third-party payment and identity verification providers. The specific categories are described below.

Information You Provide Directly

When you register, verify your account, make a deposit or contact our support team, you provide us with:

• Full name, date of birth, and residential address (for KYC verification)
• Mobile phone number and email address (used as your login credential and for account communications)
• National ID card number, passport number or other government-issued identity document reference (for age and identity verification)
• Any information you submit voluntarily through our live chat, email support or feedback channels

Information Collected Automatically

When you visit or use the l89z Platform, we automatically collect certain technical and behavioural data including:

• IP address, device type, operating system and browser type
• Pages visited, time spent on each page, referring URL and navigation path through the Platform
• Session timestamps, bet history, game activity logs and deposit/withdrawal transaction records
• Cookies and similar tracking technologies (see Section 6 below for full details)

Information from Third Parties

We receive information from third-party service providers that support the operation of the Platform:

• Payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, Mastercard) — transaction confirmation, payment status and wallet identifiers
• Identity verification partners — confirmation of identity document validity and age verification outcome
• Fraud detection and anti-money laundering service providers — risk scoring and flagging of suspicious activity patterns

2. How We Use Your Data

l89z uses personal data only for the purposes described below. We do not use your data for any purpose that is incompatible with these stated purposes without first obtaining your consent:

• To create and manage your player account, including processing your registration, verifying your identity and handling KYC checks
• To process deposits and withdrawals via bKash, Nagad, Rocket and other supported payment methods, and to reconcile financial records
• To operate, maintain and improve the Platform, including testing new features, diagnosing technical issues and analysing usage patterns
• To deliver customer support via live chat and email, and to maintain a record of support interactions for quality assurance purposes
• To detect, prevent and investigate fraud, money laundering, account takeover, bonus abuse and other prohibited conduct as described in our Terms & Conditions
• To comply with applicable legal obligations, including responding to lawful requests from regulatory authorities, law enforcement agencies and courts
• To send you transactional communications — including deposit confirmation, withdrawal status updates and security alerts — that are essential to the operation of your account. Marketing communications are sent only with your explicit opt-in consent and you may opt out at any time

3. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract performance — processing that is necessary to register your account, execute transactions and deliver the services you have requested from l89z
• Legitimate interests — processing for fraud prevention, platform security, abuse detection, business analytics and service improvement, where those interests are not overridden by your rights
• Legal obligation — processing required to meet our KYC, anti-money laundering, age verification and tax reporting obligations under applicable law
• Consent — processing for optional marketing communications, where you have explicitly opted in. You may withdraw your consent at any time by contacting [email protected]

4. Sharing Your Personal Data

l89z does not sell, rent or trade your personal data to any third party for their own marketing or commercial purposes. We share your data only in the limited circumstances described below:

Service Providers

We share data with trusted third-party service providers who process data on our behalf to deliver the Platform. These include payment processing partners (bKash, Nagad, Rocket and others), identity verification providers, cloud hosting providers, game software providers (such as Evolution Gaming, Pragmatic Play, Microgaming, NetEnt and Spribe), customer support tools and fraud detection systems. All service providers are contractually bound to process your data only as instructed by l89z and to maintain appropriate security standards.

Legal and Regulatory Authorities

We may disclose your personal data to government authorities, law enforcement agencies, regulatory bodies or courts where required to do so by applicable law, court order or lawful regulatory directive. We will disclose only the minimum information required to satisfy the legal obligation and will, where legally permissible, notify you of any such disclosure.

Business Transfers

In the event that l89z undergoes a merger, acquisition, restructuring or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via the contact information on your account before your data is transferred to a new controller and becomes subject to a different privacy policy.

5. Payment Data and Financial Information

When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay or any other supported payment method, your transaction is processed directly by the relevant payment provider. l89z does not store your full bKash PIN, Nagad PIN, full card number or internet banking credentials on its servers. We receive only the transaction reference, the amount, the payment method used and the confirmation status.

Financial transaction records are retained for a minimum of five years in compliance with anti-money laundering record-keeping obligations. These records are securely stored and accessible only to authorised l89z compliance and finance staff and, where required by law, to regulatory authorities.

6. Cookies and Tracking Technologies

l89z uses cookies and similar technologies to make the Platform work correctly, to remember your preferences and to understand how players use the site so we can improve it. A cookie is a small text file placed on your device when you visit a website. Cookies do not contain your password or payment credentials.

Types of Cookies We Use

We use the following categories of cookies on the l89z Platform:

• Essential cookies — required for the Platform to function. These include session cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking the Platform.
• Analytics cookies — help us understand which pages are most visited, where players encounter errors and how navigation flows through the Platform. This data is aggregated and anonymised where possible.
• Preference cookies — store your settings such as language preference and responsible gaming limit configurations so you do not have to re-enter them on each visit.

You can control cookie settings through your browser. Disabling essential cookies will prevent the Platform from working correctly. Disabling analytics or preference cookies will not prevent you from using the Platform but may reduce the quality of your experience.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply: active player account data is retained for the duration of the account relationship plus five years after closure; KYC and identity verification documents are retained for five years from the date of verification or account closure, whichever is later; financial transaction records are retained for a minimum of five years; support interaction logs are retained for two years; analytical and behavioural data is anonymised or deleted after twelve months.

When the applicable retention period expires, we will securely delete or anonymise your personal data. If you request deletion of your account before the retention period expires, we will delete all data that we are not legally required to retain and mark the remainder as restricted — it will not be used for any further processing other than to meet our legal obligations.

8. Data Security

l89z implements industry-standard security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These measures include 256-bit SSL/TLS encryption for all data in transit between your device and our servers, AES-256 encryption for sensitive data stored at rest, strict role-based access controls ensuring only authorised staff can access personal data, regular security audits and penetration testing, and automatic session timeout after a period of inactivity.

Despite these protections, no data transmission over the internet or storage system can be guaranteed to be 100% secure. If you have reason to believe that your l89z account has been compromised, contact us immediately at [email protected] so we can suspend the account and investigate. l89z will notify affected players without undue delay in the event of a data breach that poses a risk to their rights and freedoms.

9. Your Data Rights

As a player on the l89z Platform, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and include your registered mobile number or email address for identification:

• 📋 Right of Access — Request a copy of all personal data we hold about you, including the categories of data, the purposes for which it is used and the third parties it has been shared with
• ✏️ Right to Rectification — Request correction of any inaccurate or incomplete personal data we hold about you. You may also update basic account details such as your contact number directly via account settings
• 🗑️ Right to Erasure — Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to processing. Note that some data must be retained to meet legal obligations and cannot be deleted on request
• ⏸️ Right to Restrict Processing — Request that we temporarily stop processing your data — for example while you contest its accuracy or while an objection is being considered — without deleting it
• 📦 Right to Data Portability — Request a copy of your personal data in a structured, commonly used and machine-readable format so that you can transfer it to another service provider where technically feasible
• 🚫 Right to Object — Object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, though we may be able to demonstrate that our legitimate interests override your objection in certain cases

10. Children and Minors

The l89z Platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If you are a parent or guardian and believe that a minor has registered on the Platform or provided us with personal data, please contact us immediately at [email protected]. Upon verification, we will promptly delete the account and all associated personal data. We conduct age verification checks at registration and reserve the right to conduct further checks at any time to ensure compliance with this requirement.

11. Changes to This Privacy Policy

l89z may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations or the services we offer. The updated policy will always be published on this page with a revised effective date. Where changes are material — for example, a change in the type of data we collect, a new purpose for which we use it, or a new category of third party we share it with — we will notify registered players via their registered contact details at least fourteen days before the change takes effect.

Your continued use of the l89z Platform after any update to this Privacy Policy constitutes acceptance of the revised policy. If you do not agree with the changes, you may request account closure as described in our Terms & Conditions and your data will be handled in accordance with the retention obligations described in Section 7 above.

12. Contact Our Data Team

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how we handle your personal data, please contact the l89z data support team. We are available 24 hours a day, 7 days a week.

Email: [email protected] (plain text — not a clickable link). We aim to acknowledge all data rights requests within 48 hours and resolve them within 30 days.