l89666 Privacy
Policy

1 Introduction

l89666 ("we", "us", "our") operates the online gaming and sports betting platform available at l89666.app (the "Platform"). We understand that your personal data is important to you, and we take our responsibility to protect it seriously. This Privacy Policy describes how l89666 collects, uses, stores, discloses, and safeguards the personal information you provide when you register for an account, make transactions, or otherwise interact with the l89666 Platform.

This Policy applies to all users of the l89666 Platform, including registered players, visitors who browse the Platform without registering, and any individual whose data l89666 processes in connection with the provision of its services to players based in Bangladesh. By creating an account or continuing to use the l89666 Platform, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, which together form the complete framework governing your relationship with l89666.

2 Information We Collect

2.1 Information You Provide Directly

When you register an account or interact with the l89666 Platform, you provide us with personal information including but not limited to:

• Identity data: Full legal name, date of birth, gender, and national identification number (NID) or passport number provided during KYC verification.
• Contact data: Mobile phone number (registered in Bangladesh), email address, and residential address in Bangladesh (city, district, and division — e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar).
• Account credentials: Your chosen username and an encrypted hash of your password. l89666 does not store passwords in plain text under any circumstances.
• Financial data: Mobile wallet numbers for bKash, Nagad, Rocket, and Upay; bank account details for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and other supported institutions; and payment card details (Visa, Mastercard) where applicable.
• Verification documents: Copies of government-issued photo ID submitted during the KYC process, including NID cards, passports, and driving licences.
• Communications data: The content of messages you send to l89666's support team, including live chat transcripts, support ticket submissions, and email correspondence.

2.2 Information Collected Automatically

When you access and use the l89666 Platform, our systems automatically collect certain technical and behavioural data, including:

• Device and connection data: IP address, device type, operating system, browser type and version, device identifiers, and mobile network information.
• Usage data: Pages and games accessed, session duration, click patterns, search queries within the Platform, deposit and withdrawal history, bet history, game results, and bonus usage.
• Location data: General geographic location derived from your IP address (country and city level). We do not collect precise GPS-level location data.
• Cookie and tracking data: As described in Section 7 of this Policy.

2.3 Information from Third Parties

l89666 may receive information about you from third-party sources in limited circumstances, including: identity verification agencies used during the KYC process; payment service providers (bKash, Nagad, Rocket, Visa, Mastercard) who confirm transaction status; and fraud-prevention or anti-money-laundering databases where l89666 is legally required to perform checks.

3 How We Use Your Data

l89666 uses the personal data it collects for the following purposes:

4 Legal Basis for Processing

l89666 processes your personal data on the following legal grounds, depending on the specific purpose of the processing activity:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you accepted at registration — including account management, payment processing, game settlement, and customer support.
• Legal obligation: Processing required for compliance with applicable legal requirements, including KYC identity verification, AML transaction monitoring, and age verification obligations.
• Legitimate interests: Processing carried out for l89666's legitimate business interests, including fraud prevention, security monitoring, responsible gaming oversight, and Platform analytics — where such interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications. You may withdraw consent at any time by contacting [email protected] without this affecting the lawfulness of processing prior to withdrawal.

5 Data Sharing

5.1 Who We Share Data With

l89666 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the relevant purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to process deposits and withdrawals on your behalf. Only the minimum data necessary to complete the transaction is shared.
• Game providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe receive anonymised or pseudonymised session data necessary to deliver game content and settle results. These providers do not receive your full identity data.
• Identity verification providers: Third-party KYC and AML screening services may receive your identity documents and personal details solely for the purpose of age and identity verification required by l89666's compliance obligations.
• Legal and regulatory authorities: l89666 may disclose personal data to government bodies, law enforcement agencies, or courts in Bangladesh or other competent jurisdictions where required to do so by law, court order, or binding regulatory instruction.
• Platform technology providers: IT infrastructure, cloud hosting, and cybersecurity vendors who support the operation of the l89666 Platform may process limited technical data as data processors acting under strict contractual obligations to l89666.

5.2 No Third-Party Marketing

l89666 strictly prohibits the sharing of your personal data with third-party advertisers, affiliate marketers, data brokers, or any entity for the purpose of marketing to you on behalf of a party other than l89666 itself. All promotional communications you receive will originate exclusively from l89666.

6 Payment Data

l89666 takes a privacy-by-design approach to payment data. When you make a deposit or withdrawal via bKash, Nagad, Rocket, or any other supported payment method, your full payment credentials (mobile wallet PIN, card numbers, CVV) are entered directly on the payment provider's secure interface and are never transmitted to or stored on l89666's servers.

l89666 retains only the information necessary to maintain a record of your transaction history for account management, AML compliance, and dispute resolution purposes. This includes: the payment method type (e.g., bKash), the last four digits of a mobile number or card (where applicable as a reference), the transaction amount in BDT (৳), the date and time of the transaction in Bangladesh Standard Time (BST, UTC+6), and the transaction status.

7 Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device by websites you visit. l89666 uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) to operate and improve the Platform, maintain your session, personalise your experience, and collect analytics data.

7.2 Types of Cookies Used

• Essential cookies: Required for the Platform to function. These include session cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery (CSRF). These cannot be disabled without affecting Platform functionality.
• Analytics cookies: Used to collect anonymised data about how players navigate the l89666 Platform — including which pages are most visited, how long sessions last, and which game categories attract the most engagement. This data is used solely to improve the Platform.
• Preference cookies: Store your Platform preferences such as display settings and language configuration to improve your experience on return visits.
• Security cookies: Help l89666 identify and prevent fraudulent login attempts, detect bot activity, and enforce account security policies.

7.3 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Please note that disabling essential cookies will impair or prevent your ability to log in and use the l89666 Platform. Instructions for managing cookies in major browsers (Chrome, Firefox, Safari, and Edge) are available in each browser's help documentation.

8 Data Retention

l89666 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Active account data: Retained for the full duration of your active account with l89666, plus a minimum period of five (5) years following account closure to satisfy AML and regulatory record-keeping obligations.
• KYC verification documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with applicable financial record-keeping requirements.
• Customer support communications: Retained for a minimum of two (2) years from the date of the last communication, to support dispute resolution and quality assurance.
• Marketing consent records: Retained for the duration of your consent plus three (3) years, to provide an auditable record of consent status.
• Technical log data: Server logs and security event logs are retained for a minimum of twelve (12) months and a maximum of three (3) years, depending on the nature of the log data.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with l89666's data destruction procedures.

9 Data Security

l89666 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport encryption: All data transmitted between your device and the l89666 Platform is encrypted using TLS 1.2 or higher with 256-bit SSL certificates, consistent with industry-leading banking standards.
• Password security: Account passwords are stored exclusively as salted cryptographic hashes using industry-standard algorithms. Plain-text passwords are never stored or logged.
• Access controls: Access to personal data within l89666's systems is restricted on a strict need-to-know basis. All internal access is logged and audited.
• Infrastructure security: l89666's servers are hosted in data centres with physical security controls, redundant power systems, and 24/7 monitoring. Regular vulnerability assessments and penetration tests are conducted.
• Incident response: l89666 maintains a documented data breach response procedure. In the event of a breach that poses a material risk to players, affected users will be notified promptly in accordance with applicable legal requirements.

10 Your Rights

As a player on the l89666 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected]. l89666 will respond to all verifiable requests within thirty (30) days, and within a shorter timeframe where required by applicable law.

• Right of access: You have the right to request a copy of the personal data l89666 holds about you, along with information about how it is used and with whom it has been shared.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. You may update many details directly within your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer required for the purposes for which it was collected, subject to any legal retention obligations l89666 must fulfil (e.g., AML record-keeping requirements).
• Right to restrict processing: You may request that l89666 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to data portability: You may request a copy of the personal data you have provided to l89666 in a structured, machine-readable format, where technically feasible.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though l89666 may continue processing if there are compelling legitimate grounds.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

11 Minors

The l89666 Platform is strictly intended for adults aged 18 years and above. l89666 does not knowingly collect or process personal data from individuals under the age of 18. If you are a parent or guardian and believe that a minor has provided personal data to l89666, please contact us immediately at [email protected]. Upon receiving such a report, l89666 will promptly investigate, close the relevant account, and securely delete all associated personal data to the extent technically possible.

l89666 employs age verification as part of its registration and KYC processes specifically to prevent underage access to the Platform. Any account found to belong to a person under 18 years of age will be immediately suspended, and all funds in the account will be handled in accordance with applicable law and our Terms & Conditions.

12 International Data Transfers

The l89666 Platform serves players based in Bangladesh, and we aim to process and store data in infrastructure that serves this market. However, some of l89666's third-party service providers — including game content studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe), cloud infrastructure partners, and KYC verification providers — may be located in, or process data in, jurisdictions outside Bangladesh.

Where personal data is transferred internationally, l89666 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections described in this Privacy Policy. These safeguards include contractual data processing agreements with all third-party processors that impose binding data protection obligations consistent with l89666's standards.

13 Policy Changes

l89666 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, Platform features, legal requirements, or regulatory guidance. When material changes are made to this Policy, l89666 will notify registered players via their registered email address and/or by displaying a prominent notice on the l89666 Platform at least seven (7) days before the revised Policy takes effect.

The revised Privacy Policy will be published on this page with an updated "Last Updated" date at the top of the document. Your continued use of the l89666 Platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not accept the revised terms, you should cease using the Platform and contact [email protected] to request account closure.

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the manner in which l89666 processes your personal data, please contact our dedicated privacy support team using the details below. All privacy-related enquiries are handled confidentially and with priority.

Email: [email protected] (plain text — not a clickable link)

Response Time: Within 24 hours for urgent data rights requests; within 30 days for full data access or erasure requests.

Support Hours: 24 hours a day, 7 days a week, including all Bangladesh public holidays.

Platform: l89666.app