Summary: l89com only collects the data that is necessary to operate a safe, compliant gambling platform for Bangladesh players. We do not sell your personal data to third parties. We use it to provide and improve our services, process payments, comply with legal obligations, and protect the platform from fraud and abuse.
Section 01
1. Introduction
This Privacy Policy ("Policy") sets out the data processing practices of l89com ("the Platform", "we", "us", "our"), the operator of the website accessible at https://l89com.win and all associated sub-domains and services. This Policy applies to all individuals who visit, register an account on, or otherwise interact with the l89com platform, including players based in Bangladesh and any other jurisdiction from which the platform is accessed.
l89com is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. By accessing or using l89com, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection, use, and processing of your personal data as described herein. This Policy should be read alongside the l89com Terms & Conditions and Responsible Gaming Policy.
If you do not agree with the practices described in this Policy, you should discontinue your use of l89com immediately and contact us at [email protected] to request that your account be closed and your personal data be reviewed for deletion subject to our legal retention obligations.
Section 02
2. Data We Collect
l89com collects personal data in the following categories. We collect only the data that is necessary for the specific purpose for which it is gathered, in line with the principle of data minimisation.
| Category |
Examples of Data Collected |
Purpose |
| Identity Data |
Full legal name, date of birth, national ID / passport number |
Account registration, age verification, KYC compliance |
| Contact Data |
Mobile number, email address, residential address (district, division) |
Account communication, support responses, fraud alerts |
| Financial Data |
bKash / Nagad / Rocket / Upay account reference, bank account name, transaction history |
Deposit and withdrawal processing, AML monitoring |
| Technical Data |
IP address, device type, browser, operating system, session timestamps |
Platform security, fraud prevention, performance analytics |
| Behavioural Data |
Games played, bet amounts, wagering history, session duration, bonus usage |
Responsible gaming monitoring, personalisation, platform improvement |
| Communications Data |
Support ticket contents, live chat transcripts, email correspondence |
Customer support, dispute resolution, quality assurance |
l89com does not intentionally collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless specifically required by applicable law or regulation for identity verification purposes.
Section 03
3. How We Collect Data
l89com collects personal data through the following channels:
- Direct submission: Information you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting our support team, or responding to a promotional survey.
- Automated collection: Technical data collected automatically when you access l89com, including IP address, device fingerprint, browser type, and session behaviour via cookies and server logs. See Section 7 for details on cookies.
- Third-party sources: Identity and address verification data received from our KYC (Know Your Customer) verification partners. Payment transaction data received from payment processors including bKash, Nagad, Rocket, and Upay. Fraud and risk-screening data from our compliance partners.
- Publicly available sources: In limited circumstances relevant to fraud prevention or AML compliance, l89com may cross-reference data against publicly available databases or official registers.
Section 04
4. How We Use Your Data
l89com processes your personal data for the following specific purposes:
- Account management: To create, maintain, and administer your l89com account, including verifying your identity and age (18+), processing deposits and withdrawals, and updating your account details.
- Service delivery: To provide access to sports betting markets, casino games, live dealer products, and all other features of the l89com platform.
- Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and other supported payment methods. Financial data is shared with payment partners only to the extent necessary to complete individual transactions.
- Legal compliance: To meet our obligations under applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and any court orders or regulatory directions we receive.
- Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account takeover attempts, multi-accounting, and other forms of abuse that could harm players or the platform.
- Responsible gaming: To monitor betting and gaming patterns that may indicate problem gambling behaviour, enforce player-requested limits and self-exclusion orders, and provide timely support interventions. See our Responsible Gaming Policy for full details.
- Customer support: To respond to your enquiries, resolve disputes, and improve the quality of our support service using anonymised interaction data.
- Platform improvement: To analyse aggregated, anonymised usage data in order to identify technical issues, optimise game performance, and develop new features that improve the player experience on l89com.
- Marketing communications: To send you promotional offers, bonus notifications, and relevant platform updates by email or SMS, where you have provided consent to receive such communications. You may withdraw marketing consent at any time by contacting [email protected].
No Data Selling: l89com does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Data is shared with partners only where necessary to deliver the l89com service or meet legal obligations, as described in Section 6.
Section 05
5. Legal Basis for Processing
l89com processes your personal data on the following legal bases:
- Contractual necessity: Processing required to perform our obligations under the l89com Terms & Conditions, including operating your account, processing transactions, and delivering gambling services.
- Legal obligation: Processing required to comply with AML regulations, KYC requirements, tax reporting obligations, and any applicable court orders or regulatory directions.
- Legitimate interests: Processing carried out to further l89com's legitimate business interests in fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided these interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.
Section 06
6. Data Sharing & Third Parties
l89com shares personal data with third parties only in the following strictly controlled circumstances:
- Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank (DBBL), and City Bank receive the minimum transaction data necessary to process deposits and withdrawals. These partners are bound by their own privacy frameworks and applicable financial regulation.
- Game providers: Providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token or anonymised player reference to deliver game content. These providers do not receive your full identity data.
- Identity verification partners: Accredited KYC service providers who assist l89com in verifying player identity and age. These partners operate under strict data processing agreements and may only use your data for the specific verification purpose.
- Fraud and risk-screening services: Specialist compliance vendors who help l89com detect suspicious account behaviour, multi-accounting, and AML red flags. Data shared is limited to the technical and transactional data needed for risk assessment.
- Legal and regulatory authorities: Law enforcement agencies, financial intelligence units, or courts when l89com is legally required to disclose data pursuant to a valid order, warrant, or applicable statutory requirement.
- Business transfers: In the event of a merger, acquisition, or sale of all or part of the l89com business, your personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections being maintained.
International Transfers: Some of the third parties listed above may be located outside Bangladesh. Where data is transferred internationally, l89com takes steps to ensure adequate protections are in place, including contractual safeguards and data processing agreements consistent with internationally recognised privacy standards.
Section 07
7. Cookies & Tracking Technologies
l89com uses cookies and similar tracking technologies to operate the platform, remember your session, and analyse how players interact with the site. The following categories of cookies are used:
- Strictly necessary cookies: Essential for the platform to function. These enable core features such as session authentication, account access, and bet placement. They cannot be disabled without impairing platform functionality.
- Performance and analytics cookies: These collect anonymised information about how players use l89com — such as which pages are visited most frequently and where technical errors occur. This data helps us improve the platform.
- Functional cookies: These remember your preferences such as language settings, display preferences, and recent game selections to provide a more personalised experience when you return to l89com.
- Security cookies: Used to detect fraudulent activity, prevent unauthorised access, and protect player accounts from takeover attempts.
You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from accessing your l89com account and using the platform. l89com does not use third-party advertising cookies or cross-site tracking cookies for external ad targeting purposes.
Section 08
8. Data Retention
l89com retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention principles apply:
- Active accounts: Personal data is retained for the full duration of your account relationship with l89com and for a minimum period of five (5) years following account closure, in line with standard AML record-keeping requirements.
- Transaction records: Financial transaction data, including deposit and withdrawal records, is retained for a minimum of six (6) years for regulatory and audit purposes.
- Support communications: Customer support correspondence is retained for three (3) years from the date of the interaction, unless the communication is relevant to an ongoing dispute or legal matter.
- Marketing data: Where you have consented to receive marketing communications, your contact details for this purpose will be retained until you withdraw consent or request deletion.
- Technical / server log data: IP address and session log data is retained for up to twelve (12) months for security and fraud investigation purposes.
When data is no longer required and no legal retention obligation applies, l89com will securely delete or anonymise it so that it can no longer be associated with any individual player.
Section 09
9. Data Security
l89com implements a layered approach to data security designed to protect your personal and financial information against unauthorised access, disclosure, alteration, and destruction. Our security measures include:
- SSL/TLS encryption: All data transmitted between your device and l89com.win is encrypted using industry-standard Transport Layer Security (TLS), indicated by the HTTPS protocol in your browser's address bar.
- Two-factor authentication (2FA): Available to all registered players to add an additional verification layer beyond a password when accessing accounts from new devices or locations.
- Access controls: Internal access to player data is restricted on a strict need-to-know basis. l89com staff who handle personal data are subject to confidentiality obligations and regular data protection training.
- Real-time fraud monitoring: Automated systems continuously scan for unusual account activity, including login anomalies, atypical transaction patterns, and multi-account indicators.
- Secure data storage: Personal data is stored on secured servers with firewall protection, regular vulnerability scanning, and controlled physical and logical access.
Your Responsibility: No security system is impenetrable. You are responsible for keeping your l89com username, password, and payment credentials confidential. Do not share your login details with any third party. If you suspect your account has been compromised, contact
[email protected] immediately.
Section 10
10. Your Rights Over Your Data
As a registered player on l89com, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact us at [email protected] with your full name and registered account details. l89com will respond to all verified data rights requests within a reasonable timeframe.
- Right of access: You may request a copy of the personal data l89com holds about you, along with information about how it is used and with whom it is shared.
- Right to rectification: You may request that inaccurate or incomplete personal data be corrected or updated.
- Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where you object to processing based on legitimate interests. This right is subject to overriding legal retention obligations, particularly our AML record-keeping requirements.
- Right to restriction of processing: You may request that l89com temporarily restrict the processing of your data while a rectification or objection request is being assessed.
- Right to data portability: Where processing is based on consent or contractual necessity, you may request a machine-readable copy of the personal data you have provided to l89com.
- Right to object: You may object to processing based on legitimate interests, including profiling for responsible gaming purposes. l89com will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
- Right to withdraw consent: Where processing is based on your consent (primarily for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
Section 11
11. Children's Privacy
l89com is strictly an adults-only platform. We do not knowingly collect personal data from any individual under the age of 18. The registration process includes age verification steps designed to prevent minors from creating accounts. If l89com discovers or is notified that a registered account belongs to an individual under 18 years of age, the account will be immediately closed, all funds will be returned to the originating payment method where possible, and all personal data associated with that account will be deleted from our systems.
If you are a parent or guardian and believe your child has registered an account on l89com, please contact us immediately at [email protected]. We take underage gambling extremely seriously and will act on all such reports without delay.
Section 12
12. Third-Party Links
The l89com platform may contain references to game providers, payment partners, and sports data services. While l89com takes care to work only with reputable partners, we are not responsible for the privacy practices or content of any third-party service. Each third-party partner operates under its own privacy policy, and we encourage you to review those policies before sharing any personal data with them directly.
Section 13
13. Changes to This Policy
l89com reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or business operations. Where changes are material, we will notify registered players via their registered email address or mobile number at least seven (7) calendar days before the updated Policy takes effect. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.
Continued use of l89com after any revision to this Policy constitutes your acceptance of the updated terms. It is your responsibility to review this Policy periodically. The current version of this Policy is always accessible at https://l89com.win/privacy-policy.
Section 14
14. Contact Us
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which l89com handles your personal data, please contact our data support team using the details below. All privacy-related correspondence will be handled with strict confidentiality.
- Email: [email protected] (plain text — not a clickable link)
- Response time: l89com aims to acknowledge all privacy-related requests within 48 hours and to resolve them fully within 30 calendar days (Bangladesh Standard Time, UTC+6).
- Availability: Our support team is available 24 hours a day, 7 days a week, 365 days a year.
For requests relating to responsible gaming, self-exclusion, or account deposit limits, please visit our dedicated Responsible Gaming page for targeted guidance and contact procedures.