l898 Privacy Policy — Your Data, Your Rights

l898 is an online betting and casino platform operated at l898.io, primarily serving players based in Bangladesh. We understand that when you share personal information with us — whether during registration, when making a deposit, or when contacting support — you are placing trust in us to handle that information with care, discretion, and professionalism.

This Privacy Policy sets out the principles that govern how l898 collects, processes, stores, protects, and, where appropriate, shares your personal data. It applies to all players, registered or unregistered visitors, who access l898.io from any device, browser, or application shortcut.

By using any part of the l898 platform, including browsing the website without registering, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you should discontinue use of the platform immediately.

This Policy is reviewed periodically and updated when our data practices change in a material way. The effective date displayed at the top of this page reflects the date on which the current version came into force.

l898 collects personal data through several channels — directly from you when you register or interact with the platform, automatically through your use of the site, and in some cases from third-party sources for the purposes of identity verification and fraud prevention.

Information you provide directly:

• Full legal name, date of birth, and residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or other).
• Mobile phone number and email address used for account registration and communication.
• Username and hashed password credentials.
• Government-issued identification documents where required for age or identity verification (e.g., National ID card, passport, driving licence).
• Payment method details sufficient to process transactions (e.g., bKash wallet number, Nagad account reference, Rocket number, bank account details). Full card numbers and full bank account credentials are never stored on l898 servers.
• Any information you voluntarily provide when contacting support via live chat or email.

Information collected automatically:

• IP address and approximate geographic location derived from IP.
• Device type, operating system, browser version, and screen resolution.
• Pages visited on l898.io, time spent on each page, and navigation path through the site.
• Game session data including games played, stakes placed, outcomes, and session duration.
• Cookie identifiers and local storage data — see § 7 for the full cookies policy.

Information from third parties:

• Identity verification results from third-party KYC (Know Your Customer) service providers.
• Fraud-risk signals from payment processors and anti-fraud networks.
• Age verification confirmation from authorised document validation services.

l898 uses the personal data we collect for the following purposes, each of which is grounded in a legitimate reason as described in § 4 (Legal Basis):

• Account creation and management: To register your account, verify your identity and age, and maintain a secure, accurate account record throughout your time as an l898 player.
• Payment processing: To receive deposits and process withdrawal requests via bKash, Nagad, Rocket, Upay, and local bank transfer channels securely and accurately.
• Customer support: To respond to queries, complaints, and requests received via live chat or email, and to maintain a record of those interactions for quality assurance purposes.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct as described in the l898 Terms & Conditions.
• Responsible gaming: To monitor gameplay patterns and identify players who may be exhibiting signs of problem gambling, so that appropriate support tools or intervention can be offered in a timely manner.
• Legal compliance: To meet our obligations under applicable anti-money laundering rules, data retention requirements, and any other legal or regulatory obligations to which l898 is subject.
• Platform improvement: To analyse how players use l898.io in aggregate, so that we can improve navigation, game offerings, load times, and the overall user experience.
• Promotional communications (consent only): To send you information about bonuses, promotions, new game launches, and seasonal offers — but only where you have given explicit consent to receive such communications.

l898 does not use automated decision-making or profiling in ways that produce legal or similarly significant effects on individual players without human review of the outcome.

Each of the data processing activities described in this Policy is carried out on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and l898 — for example, operating your account, processing deposits and withdrawals, and providing access to games.
• Legal obligation: Processing required to comply with applicable law — for example, retaining financial transaction records for anti-money laundering compliance, or sharing data with law enforcement agencies in response to a lawful request.
• Legitimate interests: Processing necessary for l898's legitimate business interests where those interests are not overridden by your privacy rights — for example, fraud detection, security monitoring, and platform analytics.
• Consent: Processing that relies on your freely given, specific, and informed consent — for example, sending you promotional emails or SMS messages. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Where l898 relies on legitimate interests as a legal basis, we have assessed that the processing is proportionate, that the data used is the minimum necessary, and that the processing does not unduly infringe on your privacy rights.

l898 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share data only in the limited circumstances described below, and in every case we ensure that appropriate data protection safeguards are in place.

Payment processors: Transaction data is shared with bKash, Nagad, Rocket, Upay, and banking partners solely to facilitate the processing of deposits and withdrawals. Each payment partner operates under its own data protection policy and is contractually prohibited from using your data for any purpose beyond the payment transaction.

Game providers: Where you access games provided by third-party studios such as Evolution Gaming, Ezugi, Pragmatic Play, or Spribe, limited technical data (such as a session token and stake values) is transmitted to that provider's systems to operate the game session. These providers do not receive your full identity data.

KYC and fraud prevention services: Identity document data and fraud-risk signals may be shared with authorised third-party verification services for the purpose of age verification, identity confirmation, and anti-money laundering screening.

Legal and regulatory authorities: l898 may disclose personal data to law enforcement agencies, courts, regulators, or other public authorities where required to do so by applicable law, a valid legal order, or a court judgment. We will, where permitted by law, notify you of any such disclosure.

Business transfers: In the event that l898 undergoes a merger, acquisition, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any changes to data processing that result from it.

l898 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, and no longer. The retention periods applied to different categories of data are summarised in the table in § 2 above.

In general terms, account data and identity verification records are retained for a period of five (5) years following the permanent closure of your account. Financial transaction records, including deposit and withdrawal histories, are retained for seven (7) years following the last transaction in order to comply with applicable financial record-keeping obligations.

Technical and behavioural data (such as server logs, session records, and IP address history) is retained on a rolling basis for up to two (2) years and then deleted or anonymised.

Where data is no longer required for any lawful purpose, l898 will securely delete or anonymise it in accordance with our internal data destruction procedures. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

If you request erasure of your personal data under § 9, l898 will delete the data that is not subject to a legal retention obligation and will confirm the scope of any data retained and the reason for its continued retention.

l898 uses cookies and similar tracking technologies on l898.io to operate essential platform functions, remember your preferences, analyse site performance, and — with your consent — deliver relevant promotional content. A cookie is a small text file placed on your device by a web server when you visit a website.

Essential cookies: These are strictly necessary for the platform to function. They enable secure login sessions, maintain your account state while you navigate the site, and support fraud prevention checks. Essential cookies cannot be disabled without breaking core platform functionality.

Performance and analytics cookies: These cookies collect aggregate, anonymised information about how players use l898.io — for example, which pages receive the most visits and where players encounter errors. This information helps us improve the platform experience. No individually identifiable information is collected via these cookies.

Functionality cookies: These remember your preferences such as language, display settings, and last-visited sections, so that your experience is consistent across sessions without requiring you to re-enter preferences each time.

Marketing cookies (consent required): Where you have given explicit consent, marketing cookies may be used to track your engagement with l898 promotional content so that we can measure the effectiveness of our campaigns. You may withdraw consent at any time via your browser settings.

You can control cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core l898 platform, though some features may operate with reduced functionality. Please note that clearing cookies will log you out of your current session.

l898 applies a layered approach to data security, combining technical controls, organisational procedures, and staff training to protect the personal data we hold against unauthorised access, disclosure, alteration, and destruction.

Technical safeguards in place include:

• 256-bit SSL/TLS encryption on all data transmitted between players' devices and l898 servers.
• One-way cryptographic hashing of all account passwords — l898 staff cannot view your password in plain text.
• Automated intrusion detection systems that monitor for unusual access patterns and flag potential security incidents in real time.
• Role-based access controls ensuring that internal staff can only access the personal data necessary for their specific job function.
• Regular security assessments and penetration testing of critical platform infrastructure.

Despite these measures, no digital platform can guarantee absolute security. In the unlikely event of a personal data breach that poses a risk to your rights, l898 will notify affected players and, where required by applicable law, the relevant authorities, within the timeframes stipulated by those obligations.

You are responsible for keeping your own account credentials confidential. l898 will never contact you via email, SMS, or live chat to ask for your password, full payment card number, or a one-time authentication code. If you receive any communication of this kind, treat it as a phishing attempt and contact our support team immediately at [email protected].

As an l898 player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with your registered account details and a clear description of your request. l898 will respond within 10 business days of verifying your identity.

• Right of access: You may request a copy of the personal data that l898 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to rectification: You may request correction of any personal data that is inaccurate or incomplete. Where possible, corrections to basic account details (such as email address) can be made directly within your account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data after your account has been permanently closed, subject to any legal retention obligations that require us to keep certain records for a defined period.
• Right to restrict processing: In certain circumstances — for example, while a dispute about the accuracy of your data is being resolved — you may request that l898 restricts its processing of your data to storage only.
• Right to data portability: You may request that l898 provides your personal data in a structured, commonly used, machine-readable format, or that it transfers that data directly to another data controller where technically feasible.
• Right to object: You may object at any time to processing of your personal data for direct marketing purposes. You may also object to processing carried out on the basis of legitimate interests, though l898 may continue such processing if it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where l898 processes your data on the basis of your consent (e.g., for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

l898 is strictly an adult platform. Access to and participation in any betting or gaming activity on l898.io is permitted only to individuals who are 21 years of age or older. l898 does not knowingly collect, store, or process personal data relating to individuals under the age of 21.

During the registration process, players are required to confirm that they meet the age requirement. l898 applies automated and manual age verification procedures to enforce this restriction. Where it is discovered that personal data belonging to an individual under 21 has been collected, that data will be permanently deleted without delay, and the associated account will be closed.

If you are a parent or guardian and have reason to believe that a person under 21 in your care has registered an account on l898, please contact our support team immediately at [email protected]. We take all such reports seriously and will investigate and act promptly.

l898 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will publish the revised Policy on this page and update the effective date shown at the top of the document.

Where the changes are significant — for example, if we introduce a new category of data processing or a new class of third-party data recipient — we will also send a notification to your registered email address at least 14 days before the changes come into effect.

Your continued use of the l898 platform after the effective date of any revised Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should stop using the platform and request account closure before the revised Policy takes effect.

The version of this Policy currently in force is always the version published on this page at l898.io/privacy-policy. Historical versions are available on request from our support team.

If you have any questions, concerns, or complaints regarding this Privacy Policy, or if you wish to exercise any of the data rights described in § 9, please contact the l898 data support team using the details below. We are committed to resolving all privacy-related queries promptly and professionally.

Email: [email protected]

Response time: 2–5 minutes via live chat on the platform / 2–4 hours by email.

Operating hours: Support agents are available 24 hours a day, 7 days a week. WhatsApp support operates between 8:00 AM and 11:00 PM Bangladesh Standard Time (BST, UTC+6).

Formal data rights requests should be submitted by email with the subject line "Data Rights Request" and should include your registered username and a clear description of your request to allow us to identify your account and process your query without unnecessary delay.