l98 Privacy Policy

1. Introduction

l98 ("we", "us", "our") is committed to protecting the privacy and security of all users who access the l98 platform at https://l98.org ("Platform"). This Privacy Policy explains what personal data we collect from you, how we use it, the legal basis for processing it, how long we retain it, with whom we may share it, and what rights you have regarding your own information.

By registering an account or otherwise using the l98 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this policy, please discontinue use of the Platform immediately.

This policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2. Personal Data We Collect

l98 collects personal data through several channels: directly from you when you register or interact with the Platform, automatically through your use of our services, and in some cases from third-party verification partners. The categories of data we collect include:

3. How We Use Your Personal Data

We process your personal data for the following purposes:

• Account creation and management: To register your account, verify your identity, and maintain accurate records of your account status and preferences.
• Service delivery: To provide access to casino games, sports betting markets, slots, cricket wagering, fishing games, and all other features of the l98 Platform.
• Payment processing: To facilitate deposits and withdrawals through bKash, Nagad, Rocket, and other supported mobile financial services in Bangladesh.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, bonus abuse, and other illegal or prohibited activities.
• Legal compliance: To meet our obligations under applicable laws and regulations, including identity verification (KYC) and anti-money laundering (AML) requirements.
• Responsible gaming: To monitor gaming patterns and identify users who may need support or who have applied self-exclusion or deposit limits.
• Customer support: To respond to your queries, resolve disputes, and improve our support processes.
• Platform improvement: To analyse usage trends, test new features, and optimise the overall user experience on the l98 Platform.
• Marketing communications: Where you have given explicit consent, to send you promotional offers, bonus notifications, and platform updates via SMS or email. You may opt out at any time by contacting support.

4. Legal Basis for Processing

l98 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil the Terms & Conditions you agreed to when registering your account, including account management, game delivery, and payment processing.
• Legal obligation: Processing required to comply with applicable laws, including KYC identity checks, AML record-keeping, and responses to lawful requests from competent authorities.
• Legitimate interests: Processing carried out in the legitimate interests of l98 and our users, such as fraud detection, platform security, and service improvement, provided those interests are not overridden by your fundamental rights.
• Consent: Where we rely on your explicit consent, such as for direct marketing communications. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

5. Sharing Your Personal Data

l98 does not sell your personal data. We may, however, share your data with carefully selected third parties in the following circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, and other mobile financial service operators, to facilitate deposits and withdrawals on your account.
• Identity verification partners: Third-party KYC and age verification service providers who assist us in confirming your identity and age (21+) in accordance with our eligibility requirements.
• Game software providers: Studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming receive minimal session data necessary to deliver their game content within the l98 Platform. These providers operate their own data practices, which are governed by their respective privacy policies.
• Fraud and risk management services: Specialist providers who help us identify and prevent fraudulent account activity, collusion, and bonus abuse.
• Legal and regulatory authorities: Where required by law, court order, or a lawful request from a government authority, l98 will disclose the minimum necessary personal data in response to such requests.
• Business successors: In the event of a merger, acquisition, or sale of all or part of l98's business, your data may be transferred to the successor entity, subject to equivalent privacy protections.

All third parties with whom l98 shares personal data are contractually required to process that data only for the specified purpose and to maintain security standards consistent with this Privacy Policy.

6. Cookies and Tracking Technologies

The l98 Platform uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience. Cookies are small text files placed on your device when you visit the Platform.

• Essential cookies: Required for basic Platform functionality including maintaining your login session, remembering your language preference, and enabling secure payment flows. These cannot be disabled without impairing Platform operation.
• Analytics cookies: Used to collect aggregate, anonymised data about how users interact with the Platform, helping l98 identify areas for improvement. No personally identifiable information is extracted from analytics data.
• Preference cookies: Store your settings and preferences (such as notification preferences) so they are remembered between sessions.
• Security cookies: Help detect fraudulent activity and protect account integrity by monitoring for unusual session behaviour.

You may control cookie settings through your browser preferences. However, disabling essential cookies will affect your ability to use core Platform features including account login and payment processing.

7. Data Retention

l98 retains your personal data only for as long as it is necessary to fulfil the purposes for which it was collected, subject to any legal retention obligations that require us to keep certain records for a minimum period.

• Active account data: Retained for the duration of your account's active status and for a reasonable period thereafter to handle any post-closure queries or disputes.
• Financial and transaction records: Retained for a minimum of five (5) years following the date of the transaction, in compliance with applicable financial record-keeping requirements.
• Identity verification documents: Retained for the duration of your account relationship and for up to five (5) years after account closure for AML compliance purposes.
• Support communications: Retained for up to three (3) years from the date of the last communication, to assist with ongoing dispute resolution and quality assurance.
• Marketing consent records: Retained until you withdraw consent or for up to three (3) years from the date of last marketing interaction, whichever is earlier.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with you as an individual.

8. Your Data Rights

As a user of the l98 Platform, you hold the following rights in respect of your personal data:

To exercise any of these rights, please contact the l98 data team at [email protected] (plain text — not a clickable link). We will acknowledge your request within five (5) business days and aim to fulfil verified requests within thirty (30) days. In some cases, particularly complex or high-volume requests may require up to ninety (90) days, and you will be notified of any extension within the initial thirty-day window.

9. Data Security

l98 employs a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage of sensitive personal data at rest within our secure data infrastructure.
• Access controls restricting internal staff access to personal data on a strict need-to-know basis.
• Regular security audits and vulnerability assessments of Platform systems.
• Automated fraud and anomaly detection systems monitoring for unusual account behaviour in real time.
• Two-factor authentication options available to all registered users via OTP sent to your verified mobile number.

In the event of a data breach that poses a risk to your rights and freedoms, l98 will notify affected users without undue delay and take immediate remedial action to contain and investigate the incident.

10. Protection of Minors

The l98 Platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. If we discover that a user under the age of 21 has registered an account, we will immediately suspend the account, delete all associated personal data, and void any transactions. If you believe that a minor has registered on the Platform, please notify us immediately at [email protected] so that we can take prompt action.

11. Changes to This Privacy Policy

l98 reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where the changes are significant, we may notify registered users via SMS or email. Your continued use of the Platform after any such changes constitutes your acceptance of the revised policy. We encourage you to review this page periodically to stay informed about how l98 protects your personal data.

12. Contact and Data Enquiries

For all privacy-related queries, data access requests, or concerns about how l98 processes your personal information, please contact our support team:

[email protected] (plain text — not a clickable link)

Please include your registered username, the nature of your enquiry, and any relevant details to help us respond as efficiently as possible. All privacy enquiries are handled by dedicated staff and treated with strict confidentiality.