l69 Privacy Policy

1. Information We Collect

l69 collects personal data through several channels: directly from you when you register an account or interact with our platform, automatically through your use of our services, and — in limited circumstances — from trusted third-party sources as part of our verification obligations. The specific categories of data we collect are described below.

1.1 Registration and Account Data

When you create a player account on l69, we collect the information you provide during the registration process. This includes:

• Full legal name — as it appears on your government-issued identification document;
• Date of birth — to verify that you meet the 18+ age requirement;
• Email address — used as your primary communication channel and account identifier;
• Mobile phone number — a Bangladesh-registered number used for account verification and security alerts;
• Username and encrypted password — your chosen login credentials. Passwords are stored using industry-standard hashing and are never readable by l69 staff;
• Preferred currency — Bangladeshi Taka (BDT) for all transactions on l69.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer ("KYC") obligations, we may request copies of identity and address verification documents. These may include:

• National Identity Card (NID) — both sides;
• Passport (biographical data page);
• Driving licence;
• Proof of address: a recent utility bill, bank statement, or official letter dated within the last three months;
• Proof of payment method (e.g., a screenshot or confirmation of the bKash, Nagad, or Rocket account used to deposit).

KYC documents are processed by trained staff and, where applicable, through automated identity verification tools. They are stored securely and used solely for the purposes of verifying your identity and complying with anti-money-laundering requirements.

1.3 Financial Transaction Data

We record the details of all financial transactions made through your l69 account. This includes deposit amounts, withdrawal requests, payment method identifiers (such as mobile wallet numbers associated with bKash, Nagad, Rocket, or Upay), transaction timestamps, and transaction status. We do not store full card numbers for card-based transactions — only masked identifiers are retained.

1.4 Gaming and Betting Activity Data

l69 records all gaming and betting activity associated with your account, including the games played, bets placed, wager amounts, outcomes, bonus usage, and session durations. This data serves multiple purposes: it enables accurate account settlement, supports responsible gaming monitoring, and allows us to personalise your platform experience.

1.5 Technical and Device Data

When you access l69, our systems automatically collect certain technical information. This includes your IP address, browser type and version, operating system, device type (mobile, tablet, desktop), referring URL, pages visited within the platform, session duration, and time-zone setting. This data helps us maintain platform security, detect fraudulent access attempts, and improve overall user experience.

1.6 Communications Data

If you contact our support team via email, live chat, or any other channel, we retain a record of that correspondence, including the content of messages, timestamps, and any attachments you share. This helps us resolve disputes, maintain service quality, and ensure accountability in our support interactions.

2. How We Use Your Data

l69 processes your personal data only for clearly defined, legitimate purposes. We do not use your data for any purpose incompatible with those described at the point of collection. The primary purposes for which we process personal data are set out below.

Purpose	Data Categories Used	Legal Basis
Account creation and management	Registration data, KYC documents	Contract performance
Processing deposits and withdrawals	Financial transaction data, payment method identifiers	Contract performance
Identity verification and fraud prevention	KYC documents, technical data, transaction data	Legal obligation; legitimate interest
Responsible gaming monitoring	Gaming activity data, account data	Legal obligation; legitimate interest
Customer support	Communications data, account data	Contract performance; legitimate interest
Marketing and promotions	Account data, gaming activity data	Consent (opt-in only)
Platform security and abuse prevention	Technical data, transaction data, gaming data	Legitimate interest
Legal and regulatory compliance	All categories as required	Legal obligation

2.1 Marketing Communications

l69 will send you promotional communications — including bonus offers, free spin notifications, VIP tier updates, and seasonal promotions — only where you have explicitly opted in to receive such messages. You may withdraw your marketing consent at any time by contacting support at [email protected] or by updating your account notification preferences within the platform. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to that withdrawal.

2.2 Automated Decision-Making

l69 uses automated processes in certain areas of platform operation, including fraud detection, responsible gaming risk-scoring, and bonus eligibility assessments. Where a significant automated decision is made about your account — for example, a temporary withdrawal hold triggered by a fraud flag — you have the right to request human review of that decision. Please contact our support team to exercise this right.

3. Data Sharing & Disclosure

l69 does not sell your personal data. We share personal information with third parties only in the limited circumstances described in this section.

3.1 Service Providers and Technology Partners

We engage carefully selected third-party service providers to support specific operational functions. These providers act as data processors on l69's behalf and are contractually bound to process personal data only in accordance with our documented instructions. Examples of service provider categories include:

• Payment processors: facilitating transactions via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer channels;
• Identity verification providers: automated KYC and document authentication services;
• Game software providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified studios — who may receive pseudonymised game session data for settlement and audit purposes;
• Cloud infrastructure and hosting providers: providing secure server environments for data storage and platform delivery;
• Customer support tooling: platforms used to manage and log support interactions.

3.2 Legal and Regulatory Disclosure

l69 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are legally obliged to do so, where we receive a valid legal request, or where disclosure is necessary to protect the rights, property, or safety of l69, its players, or third parties. Such disclosures are made only to the extent required by the relevant legal obligation.

3.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of l69's business, personal data held by l69 may be transferred to the acquiring or successor entity as part of that transaction. Players will be notified of any such transfer and the privacy policy applicable to their data following the transfer.

4. Cookies & Tracking Technologies

l69 uses cookies and similar tracking technologies to operate certain platform functions, improve your experience, and gather aggregate analytics about how our platform is used. A cookie is a small text file placed on your device by a website you visit. It allows the website to remember certain information about your session or preferences.

4.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens that keep you logged in and security cookies that detect fraudulent activity. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Store your preferences such as language setting, timezone display (Bangladesh Standard Time), and notification preferences so you do not have to re-enter them on each visit.
• Analytics cookies: Collect aggregated, anonymised information about how players navigate the platform — which pages are visited most, where users exit, and how long sessions last. This data helps us improve the platform experience. Individual players are not identified in analytics reports.
• Security and fraud-detection cookies: Track device fingerprints and session patterns to identify and prevent multi-accounting, bot activity, and other forms of platform abuse.

4.2 Managing Your Cookie Preferences

You can manage cookie settings through your browser's privacy controls. Most modern browsers allow you to view, block, or delete cookies. Note that disabling strictly necessary cookies will prevent you from logging in or using core platform functions. For guidance on managing cookies in your specific browser, refer to the browser's built-in help documentation. l69 does not currently respond to browser-level "Do Not Track" signals, as there is no universally accepted standard for how platforms should interpret these signals.

5. Data Security Measures

l69 takes the security of your personal data seriously. We implement a layered set of technical and organisational controls designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure.

5.1 Technical Controls

• SSL/TLS encryption: All data in transit between your device and l69's infrastructure is encrypted using 256-bit SSL/TLS certificates.
• Password hashing: Passwords are stored using a strong, one-way hashing algorithm with salting. Plain-text passwords are never stored or accessible to l69 personnel.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their accounts. Certain high-value withdrawal requests may require 2FA confirmation regardless of account settings.
• Firewalls and intrusion detection: l69's server infrastructure is protected by network-level firewalls, intrusion detection systems, and real-time anomaly monitoring.
• Access controls: Internal access to player data is restricted on a strict need-to-know basis. Staff with legitimate operational reasons to access specific data categories are granted only the minimum level of access required to fulfil their role.

5.2 Organisational Controls

Beyond technical measures, l69 maintains internal data protection policies, conducts regular security awareness training for all staff who handle personal data, and carries out periodic reviews of our data handling practices. Any suspected internal data incident is treated as a priority matter and investigated without delay.

6. Data Retention Policy

l69 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The table below summarises the retention periods that apply to the main categories of personal data we hold.

Data Category	Retention Period	Basis for Retention
Account registration data	Duration of account + 5 years after closure	Legal obligation; dispute resolution
KYC identity documents	Duration of account + 5 years after closure	Anti-money-laundering legal obligation
Financial transaction records	7 years from transaction date	Financial record-keeping obligation
Gaming and betting activity logs	5 years from the date of activity	Dispute resolution; responsible gaming audit
Customer support communications	3 years from the date of the last interaction	Service quality and dispute resolution
Technical and device logs	13 months from collection	Security monitoring and fraud detection
Marketing consent records	Until consent is withdrawn + 1 year	Proof of consent

At the end of the applicable retention period, personal data is either securely and permanently deleted from l69's systems or, where deletion is not immediately practicable, anonymised such that re-identification is no longer possible. Anonymised data may be retained indefinitely for aggregate statistical analysis.

7. Your Privacy Rights

As a player on the l69 platform, you have a number of rights in relation to the personal data we hold about you. These rights are described below along with guidance on how to exercise them.

7.1 Right of Access

You have the right to request a copy of the personal data l69 holds about you, along with information about how that data is being processed. Submit your access request to [email protected] with the subject line "Data Access Request". We will respond within 30 days of receiving a valid, verifiable request.

7.2 Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating a phone number) can be made directly within your account settings. For corrections to KYC-verified data (such as your legal name or date of birth), please contact support with the relevant supporting documentation.

7.3 Right to Erasure

You may request that l69 delete your personal data where: the data is no longer necessary for the purposes for which it was collected; you withdraw consent and no other legal basis applies; or the data has been unlawfully processed. Note that erasure requests cannot be honoured where l69 is legally required to retain the data — for example, where financial transaction records must be kept for regulatory purposes. In such cases, we will explain which data must be retained and why.

7.4 Right to Restriction of Processing

You have the right to request that l69 restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold, or while a complaint about our processing practices is under investigation. During a restriction period, we will continue to store your data but will not process it for other purposes without your consent.

7.5 Right to Data Portability

Where l69 processes your personal data on the basis of your consent or the performance of a contract, and that processing is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format. Contact support to make a portability request.

7.6 Right to Object to Marketing

You have an unconditional right to object to the use of your personal data for direct marketing purposes at any time. Once you object, l69 will cease processing your data for marketing without requiring any justification from you. To exercise this right, contact support or update your notification preferences in your account settings.

8. Contact & Policy Updates

8.1 How to Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or l69's handling of your personal data, please contact our support team. The dedicated privacy contact channel is:

Email: [email protected] (plain text — not a clickable link)

Please use the subject line "Privacy Enquiry" so that your message is directed to the appropriate team. We aim to acknowledge all privacy-related enquiries within two business days (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 30 calendar days.

8.2 Children's Privacy

l69 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If you are a parent or guardian and believe that a minor has created an account on l69 or submitted personal data to us, please contact support immediately at [email protected]. We will investigate and, where confirmed, promptly close the account and delete the associated personal data.

8.3 Updates to This Privacy Policy

l69 reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, applicable law, or operational requirements. When we make material changes, we will notify registered players via their registered email address and post a prominent notice on the Platform for a minimum of 30 days. The effective date at the top of this document is updated each time a new version is published. We encourage you to review this policy periodically so that you remain informed about how your data is being protected.

Your continued use of the l69 platform after notification of a policy update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated terms, you should cease using the platform and contact support to initiate account closure.