Privacy Policy — How l899 Collects, Uses, and Protects Your Data

Scope & Controller Identity

This Privacy Policy applies to all personal data processed by l899 in connection with the operation of the online casino and sports betting platform accessible at l899.asia and all associated subdomains and mobile browser interfaces. It governs data collected from registered players, prospective players who browse the platform without registering, and individuals who contact l899 via any support channel.

For the purposes of this Privacy Policy, l899 acts as the data controller — that is, the entity that determines the purposes and means by which personal data is collected and processed. If you have any questions about how your data is handled, or if you wish to exercise any of the rights described in Section 9, you may contact us at [email protected].

By creating an account on l899, depositing funds, placing a wager, or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data in the manner described herein. If you do not accept this Privacy Policy, you must not use the l899 platform.

Data We Collect

l899 collects personal data across several categories depending on how you interact with the platform. The following table provides a structured overview of the categories of data collected, the sources from which they originate, and examples of specific data points within each category.

Data You Are Not Required to Provide

Providing accurate identity and contact data is a condition of registration on l899. You are not required to provide optional profile data such as a profile picture or secondary contact number, but failure to provide mandatory data (full name, date of birth, address, email, and payment method details) will prevent account creation or the completion of KYC verification.

How We Use Your Data

l899 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent or being compelled to do so by a lawful requirement.

• Account Creation and Management: To register your account, verify your identity and age (21+ requirement), and maintain your account profile throughout the duration of your relationship with l899.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and internet banking channels. Financial data is shared with payment processors only to the extent necessary to complete the transaction.
• KYC and Fraud Prevention: To verify your identity, confirm your age and residential address in Bangladesh, and to detect, investigate, and prevent fraud, money laundering, account takeover, bonus abuse, and other forms of prohibited activity.
• Service Delivery: To make the full l899 platform available to you, including sports betting markets (BPL, IPL, T20 World Cup, and other cricket competitions), live casino games, slots, and crash games.
• Customer Support: To respond to your support requests, resolve account disputes, and communicate with you about your account status, transaction outcomes, or security alerts.
• Responsible Gaming: To monitor your gambling behaviour for signs of problem gambling, to administer responsible gaming tools you have activated (deposit limits, cooling-off periods, self-exclusion), and to contact you if our monitoring systems identify patterns that may indicate gambling harm.
• Legal and Regulatory Compliance: To comply with applicable laws and regulations, including anti-money laundering obligations, and to respond to lawful requests from regulatory authorities or law enforcement agencies.
• Platform Improvement: To analyse aggregated and anonymised usage data to improve the platform's functionality, performance, game selection, and user experience. This analysis does not involve profiling individual players for commercial targeting.
• Security: To detect and respond to security threats, unauthorised access attempts, and unusual account activity. Technical data including IP addresses and session logs are used for this purpose.
• Communications: To send you transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts. Promotional communications are sent only where you have opted in and may be withdrawn at any time.

Legal Basis for Processing

l899 processes personal data only where a lawful basis exists for doing so. The following bases apply to different categories of processing activity carried out by l899:

• Performance of a Contract: The majority of data processing by l899 is necessary for the performance of the contract between l899 and the registered player — specifically, the provision of online casino and sports betting services. This includes account management, payment processing, KYC verification, and service delivery.
• Legal Obligation: Certain processing activities are required by applicable law, including anti-money laundering checks, age verification, record-keeping obligations, and the reporting of suspicious transactions to relevant authorities.
• Legitimate Interests: l899 processes some data on the basis of its legitimate interests in operating a safe, secure, and commercially viable platform. This includes fraud detection, security monitoring, responsible gaming monitoring, and platform analytics. We apply a balancing test to ensure that our legitimate interests do not override your privacy rights.
• Consent: Where l899 seeks to process your data for purposes beyond those described above — such as sending you promotional communications about new games, tournaments, or bonus offers — we will first obtain your explicit consent. You may withdraw consent at any time by contacting support at [email protected].

Data Sharing & Disclosure

l899 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. Your data may be shared in the following limited and specific circumstances:

Payment Processors

To process deposits and withdrawals, l899 shares the minimum necessary financial data with regulated payment service providers including bKash, Nagad, Rocket, Upay, and card processing networks (Visa and Mastercard). These providers operate under their own privacy policies and are bound by financial data protection standards.

Game Studios and Content Providers

Some technical data (such as session tokens and game round identifiers) is shared with licensed game studios including Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, NetEnt, and Spribe solely for the purpose of delivering their game content to you. These providers do not receive your identity or financial data.

Identity Verification Services

To fulfil KYC requirements, l899 may use third-party identity verification services to validate your name, date of birth, and address against official records. These services receive only the specific data required for the verification check.

Legal and Regulatory Disclosure

l899 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, or where disclosure is necessary to protect the rights, property, or safety of l899, its players, or the public. In all such cases, l899 will disclose only the minimum data necessary to fulfil the legal obligation.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of l899's business assets, player data may be transferred to the acquiring entity as part of the transaction. Players will be notified via the email address registered on their account before any such transfer takes effect and will be afforded the opportunity to close their account and withdraw their balance prior to the transfer.

Data Retention

l899 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention schedules apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Self-excluded players' data is retained for the duration of the self-exclusion period plus an additional period necessary to prevent re-registration, after which it is deleted in accordance with the schedule above.

Cookies & Tracking Technologies

l899 uses cookies and similar technologies (including local storage and session tokens) to operate the platform, maintain your session, and improve your experience. The following categories of cookies are used on the l899 platform:

Strictly Necessary Cookies

These cookies are essential for the platform to function. They include session authentication tokens, CSRF protection tokens, and language preference cookies. Without these cookies, core features of the l899 platform — including logging in, maintaining a session, and placing bets — would not be operational. These cookies cannot be disabled.

Functional Cookies

Functional cookies remember your preferences and settings, such as your chosen game lobby view, responsible gaming limit configurations, and notification preferences. Disabling these cookies will not prevent you from using the platform but may result in a less personalised experience.

Analytical Cookies

l899 uses first-party analytical cookies to understand how players navigate the platform — which pages are visited most frequently, where users encounter difficulties, and how game lobby layouts perform. This data is collected in aggregate and anonymised form; it is not linked to individual player accounts for commercial profiling purposes.

Security Cookies

Security cookies are used to detect and prevent fraudulent activity, unauthorised login attempts, and bot traffic. These cookies analyse behavioural signals such as mouse movement patterns and typing cadence to distinguish legitimate players from automated systems. Security cookies are non-negotiable and cannot be disabled.

Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block third-party cookies, clear existing cookies, and receive a notification before a new cookie is set. Please note that disabling certain cookies may impair the functionality of the l899 platform. l899 does not use third-party advertising cookies or behavioural retargeting cookies of any kind.

Data Security

l899 employs a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, and unlawful processing. Key security controls include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and the l899 platform is encrypted in transit using TLS 1.2 or higher. This protects your login credentials, financial data, and personal information from interception.
• Encrypted Data Storage: Personal data held in l899's databases is encrypted at rest. Encryption keys are managed under strict access controls and rotated on a regular schedule.
• Access Controls: Access to personal data within l899 is restricted to staff whose role requires it, under a least-privilege policy. All access to sensitive data is logged and subject to periodic review.
• Two-Factor Authentication (2FA): All l899 staff with access to player data are required to use 2FA. Players are also strongly encouraged to enable 2FA on their accounts for an additional layer of protection.
• Security Monitoring: l899 operates continuous security monitoring systems that detect anomalous behaviour, unusual login patterns, and potential data breach attempts in real time. Alerts trigger an immediate incident response process.
• Regular Security Audits: The l899 platform and its data handling infrastructure are subject to periodic security reviews to identify and remediate vulnerabilities before they can be exploited.

Data Breach Response

In the event of a data breach that poses a risk to your rights and freedoms, l899 will notify affected players without undue delay via the email address registered on their account. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures l899 has taken or proposes to take to address the breach and mitigate its effects.

Your Rights Over Your Personal Data

As a player on the l899 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact the l899 support team at [email protected] with a clear description of your request. l899 will respond within 30 days of receiving a verified request.

• Right of Access: You have the right to request a copy of all personal data held by l899 about you, along with information about how it is being processed. This is sometimes referred to as a Subject Access Request (SAR).
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held about you is corrected or completed. You may update certain profile information directly through your account settings; for changes to identity or KYC data, please contact support.
• Right to Erasure: In certain circumstances, you have the right to request that l899 delete personal data held about you. This right is subject to overriding legal obligations — for example, l899 is required by anti-money laundering regulations to retain certain transaction records for a minimum period even following account closure.
• Right to Restrict Processing: You have the right to request that l899 restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing and a determination is pending.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you have the right to receive the personal data you have provided to l899 in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where l899 relies on legitimate interests as its legal basis. l899 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

Children & Minors

The l899 platform is strictly for adults aged 21 years and above. l899 does not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step in the account registration and KYC process.

If l899 becomes aware that personal data has been collected from an individual below the minimum age threshold — whether through a misrepresentation during registration or through parental or guardian notification — the affected account will be immediately suspended, all balances will be frozen pending investigation, and the personal data of the underage individual will be deleted from l899's records as soon as practically possible, subject to any overriding legal obligations.

If you believe that a minor has registered on l899 using false information, please contact us immediately at [email protected] with details of the account. l899 takes underage gambling with the utmost seriousness and will act swiftly on all verified reports.

Third-Party Services & External Links

The l899 platform integrates with a number of third-party service providers whose technology is necessary for the delivery of our services. These include:

• Game Studios: Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, NetEnt, Spribe, and other licensed providers whose games are available in the l899 lobby. Game sessions are delivered via secure iframes; these providers receive session tokens but not your full personal profile.
• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard network processors. Transactions are handled through encrypted payment gateways; l899 does not store full card numbers or mobile banking PINs.
• Analytics Services: First-party analytical tools used to monitor platform performance and player experience. No personally identifiable data is shared with third-party analytics providers.

l899 is not responsible for the privacy practices of third-party service providers. We encourage you to review the privacy policies of any third-party provider whose services you interact with directly — for example, your bKash or Nagad mobile banking application — as their data handling is governed by their own policies, not by this Privacy Policy.

The l899 platform does not contain links to external websites for general browsing purposes. All navigation within the platform remains within the l899 domain ecosystem.

Updates to This Privacy Policy

l899 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made, l899 will notify registered players via the email address on their account at least 14 days before the updated policy takes effect.

The effective date displayed at the top of this page will be updated to reflect the date on which the most recent version came into force. The version history of this policy is maintained internally by l899. Minor clarifications that do not alter player rights or our core processing activities may be published without prior notice.

Your continued use of the l899 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the changes. If you do not accept a revised policy, you must cease using the platform and contact support to arrange the closure of your account and withdrawal of any remaining balance.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how l899 has handled your personal data, please contact the l899 support team:

• Email: [email protected] (plain text — not a clickable link)
• Response Time: l899 aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days.
• Escalation: If you are not satisfied with l899's response to a privacy concern, you may escalate your complaint in writing to the l899 management team via the same email address, clearly marked as a privacy escalation.