Legal Document · l89login · Bangladesh
Privacy Policy —
How l89login Protects Your Data
At l89login, your privacy is a fundamental commitment — not an afterthought. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you have over your information as a player based in Bangladesh.
Overview
Our Approach to Privacy at l89login
This Privacy Policy ("Policy") describes how l89login ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal data of individuals ("you", "your", "the Player") who register an account, visit the website, or use any service offered by l89login. This Policy applies to all players located in Bangladesh and to all interactions with the l89login platform, including via desktop browser and mobile device.
By creating an account on l89login or by continuing to use our platform after this Policy has been made available to you, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the platform and contact our support team to request account closure.
256-Bit SSL Encryption
All data transmitted between your device and l89login is protected by industry-standard 256-bit SSL encryption. This ensures that your personal details, payment information, and account credentials cannot be intercepted in transit.
No Data Selling
l89login does not sell, rent, or trade your personal data to third-party marketing companies under any circumstances. Your information is used solely for the purposes described in this Privacy Policy — nothing more.
Player-Controlled Data
You retain meaningful rights over your personal data at all times. You may request access to the data we hold, ask for corrections, request deletion, or object to specific uses — all through our 24/7 English support team.
Payment Data Protection
l89login does not store full payment card numbers or complete mobile banking credentials on our servers. Payment processing is handled by certified payment partners operating secure, encrypted environments — including bKash, Nagad, and Rocket.
KYC Compliance
Identity verification data collected during KYC checks is handled with strict confidentiality. Documents such as National Identity Cards and passports are processed solely for age and identity verification and are not shared beyond what is necessary for compliance purposes.
Policy Updates
When this Privacy Policy is updated, we publish the revised version on this page with a new effective date. Where changes are material, we will notify registered players via their registered email address. Continued use of the platform constitutes acceptance of the revised Policy.
Section 1
Data We Collect
l89login collects personal data that is necessary to provide our services, verify player identities, process financial transactions, prevent fraud, and comply with applicable legal and regulatory obligations. We collect data in three principal ways: information you provide to us directly, information generated automatically through your use of the platform, and information received from trusted third-party partners.
The categories of personal data we may collect include:
- Identity Data: Full legal name, date of birth, gender, and a copy of a government-issued photo identification document (such as a National Identity Card or passport) provided during KYC verification.
- Contact Data: Email address, mobile phone number registered in Bangladesh, and residential address including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or other).
- Account Data: Your chosen username, hashed password, account registration date, account status, and any self-imposed limits or restrictions applied to your account.
- Financial Data: Deposit and withdrawal transaction history, payment method types used (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and transaction reference numbers. We do not store complete card numbers or full mobile banking PINs.
- Gaming Activity Data: Games played, bets placed, wagers, wins, losses, bonus claims, and session duration. This data is used for account management, responsible gaming monitoring, and platform improvement.
- Technical Data: IP address, browser type and version, device type, operating system, screen resolution, referring URL, and pages visited on the l89login platform.
- Communications Data: Records of interactions with our customer support team, including chat logs and email correspondence, retained for quality assurance and dispute resolution purposes.
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity | Name, date of birth, NID/passport copy | Provided by player during registration or KYC |
| Contact | Email address, mobile number, city | Provided by player during registration |
| Financial | Transaction history, payment method type | Generated automatically on each transaction |
| Gaming Activity | Bets placed, games played, session times | Generated automatically during platform use |
| Technical | IP address, browser, device type | Collected automatically via cookies and server logs |
| Communications | Support chat logs, email exchanges | Collected when you contact our support team |
Section 2
How We Use Your Data
l89login processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we use personal data are set out below, together with the lawful basis on which each processing activity rests.
- Account Creation and Management: We use your identity and contact data to create and maintain your l89login player account, authenticate your identity on login, and communicate important account-related information to you.
- Identity and Age Verification: We process identity documents and date-of-birth data to verify that you meet the minimum age requirement of 18 years and to confirm that the account holder is who they claim to be.
- Payment Processing: Financial data is used to process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and supported bank transfer methods, and to maintain accurate transaction records.
- Responsible Gaming Monitoring: We analyse gaming activity data to identify patterns that may indicate problem gambling behaviour, in order to fulfil our responsible gaming obligations and intervene where necessary to protect vulnerable players.
- Fraud Prevention and Security: Technical and financial data is used to detect and prevent fraudulent activity, money laundering, collusion, bonus abuse, and other forms of platform misuse.
- Customer Support: Communications data is used to handle your support queries, investigate disputes, and improve the quality of our 24/7 English support service.
- Platform Improvement: Aggregated and anonymised technical and gaming activity data is used to understand how players use the platform and to develop new features and improve existing ones.
- Promotional Communications: With your consent, we may use your contact data to send you information about promotions, bonuses, seasonal offers (such as Eid or BPL season promotions), and platform updates. You may withdraw this consent at any time by contacting support.
Section 3
Data Sharing & Disclosure
l89login does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in limited, specific circumstances and only with parties who are bound by appropriate confidentiality and data protection obligations. The categories of third parties with whom we may share your data are as follows:
- Payment Processing Partners: When you make a deposit or request a withdrawal, relevant transaction data is shared with the applicable payment service provider (bKash, Nagad, Rocket, Upay, or the relevant card network) strictly to facilitate that transaction.
- Identity Verification Services: During KYC verification, your identity documents and personal details may be shared with a certified third-party identity verification provider in order to confirm your identity and age.
- Game Content Providers: When you play a game supplied by a third-party studio (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), limited technical data such as your player ID and session token is passed to that provider solely for the purpose of delivering the game to you and recording the game outcome.
- Legal and Regulatory Authorities: We may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where we are required to do so by applicable law, court order, or where disclosure is necessary to investigate suspected fraud or other unlawful activity.
- Professional Advisers: In the course of managing our business, we may share limited personal data with legal counsel, auditors, and financial advisers, all of whom are bound by strict professional confidentiality obligations.
In the event that l89login undergoes a business restructuring, merger, or acquisition, personal data held at that time may be transferred to the successor entity as part of the transaction. In such a case, players will be notified of the change and provided with an opportunity to close their accounts if they do not wish their data to be transferred.
Section 5
Data Security
l89login takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our key security measures include:
- SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS technology, ensuring that your personal and financial information cannot be read by third parties during transmission.
- Password Hashing: Account passwords are never stored in plain text. They are processed using a strong one-way cryptographic hashing algorithm so that even internal staff cannot retrieve your original password.
- Access Controls: Access to personal data within l89login is restricted on a strict need-to-know basis. Only authorised personnel who require access to perform their job functions are permitted to view player data, and all access is logged and audited.
- Secure Payment Processing: Full payment credentials (card numbers, mobile banking PINs) are not stored on l89login servers. Payments are processed by certified payment partners operating secure, independently audited infrastructure.
- Fraud Monitoring Systems: Automated systems monitor account activity and transaction patterns in real time to detect and respond to suspicious behaviour, including unauthorised login attempts and irregular financial activity.
- Regular Security Reviews: Our platform and security practices are reviewed on a regular basis to identify and address potential vulnerabilities. We apply security patches and updates promptly when they become available.
In the unlikely event of a data security incident that poses a significant risk to your rights and freedoms, l89login will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the incident.
Section 6
Data Retention
l89login retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. When personal data is no longer required for the purpose for which it was collected, it is securely deleted or anonymised so that it can no longer be linked to an individual player.
The following retention periods apply to the main categories of data we hold:
- Account and Identity Data: Retained for the full duration of your active account relationship with l89login, and for a period of five years following the closure of your account. This retention period supports our obligations under anti-money-laundering regulations and allows us to handle any disputes that may arise after account closure.
- Financial Transaction Records: Retained for a minimum of seven years from the date of each transaction, in accordance with standard financial record-keeping requirements.
- KYC Verification Documents: Retained for five years from the date of submission or from the date of account closure, whichever is later. Documents are stored in encrypted form and access is tightly restricted.
- Gaming Activity Data: Retained for five years from the date of each session or bet, primarily to support responsible gaming monitoring, dispute resolution, and regulatory compliance.
- Customer Support Correspondence: Retained for three years from the date of the last interaction, to support quality assurance and to allow reference in the event of a follow-up dispute.
- Technical and Log Data: Retained for up to twelve months, after which it is either deleted or anonymised and retained in aggregate form for analytical purposes.
Section 7
Your Privacy Rights
As a player on l89login, you have a number of rights in relation to the personal data we hold about you. These rights may be exercised at any time by contacting our 24/7 English support team. We will respond to all valid requests within a reasonable timeframe and at no cost to you in the majority of circumstances.
Right of Access
You have the right to request a copy of the personal data l89login holds about you, along with information about how and why it is being processed.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
Right to Erasure
In certain circumstances, you have the right to request that we delete your personal data. This right is subject to our legal obligations to retain certain records.
Right to Restrict Processing
You may request that we limit the way in which we use your data in specific circumstances — for example, while a dispute about its accuracy is being resolved.
Right to Data Portability
Where processing is based on your consent or a contractual relationship, you may request a copy of your data in a structured, machine-readable format.
Right to Object
You may object to our processing of your data where that processing is based on legitimate interests, including objecting to the receipt of marketing communications.
Section 8
Contact & Complaints
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about the way l89login handles your personal data, please contact our dedicated support team. We are available 24 hours a day, seven days a week, and all communications are handled in English.
You may reach us through the following channels:
- Email: — please include "Privacy Request" in the subject line of your email so that it is directed to the appropriate team promptly.
- WhatsApp: — available 24/7 for urgent privacy-related queries.
l89login aims to resolve all privacy-related queries and complaints within five business days. If your concern relates to a specific data processing activity, please provide as much detail as possible so that our team can investigate effectively and respond with the precision your query deserves.
This Privacy Policy was last updated on 1 January 2026. l89login reserves the right to update this Policy at any time. The most current version will always be available on this page. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.
Questions About Your Privacy?
Our 24/7 English support team is here to help with any data-related queries. You can also explore our FAQ, review our Terms & Conditions, or head straight to the platform. 18+ only.