Privacy Policy — l67777

1 Information We Collect

l67777 collects personal data from you in the course of providing its online casino and betting services. The categories of personal data we collect are described below. We collect this data either directly from you (when you register, verify your identity, make deposits, or contact support) or automatically (through your use of the Platform).

Registration and account data:

• Full legal name, date of birth, and gender (where provided);
• Residential address, city, and postcode (e.g., Dhaka, Chittagong, Sylhet, Khulna);
• Email address and account username;
• Phone number (where provided for account recovery or two-factor authentication).

Identity verification (KYC) data:

• Government-issued photo identification (National ID card, passport, or driver's licence);
• Proof of address documents (utility bill, bank statement, or similar);
• Proof of payment method ownership (screenshot of bKash/Nagad wallet, bank statement header);
• Selfie or live photo for facial verification purposes, where required.

Financial transaction data:

• Deposit and withdrawal amounts, dates, and payment method identifiers (e.g., bKash wallet number, last four digits of a card);
• Transaction history and account balance records;
• Currency denomination (Bangladeshi Taka, BDT).

Technical and usage data collected automatically:

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser version;
• Pages visited, game sessions played, and time spent on the Platform;
• Referring URL and search terms (where you arrived via a search engine);
• Cookie identifiers and session tokens (see Section 5 for full cookie details).

2 How We Use Your Data

l67777 uses the personal data we collect for clearly defined purposes. We do not use your data for purposes incompatible with those listed below without first notifying you and, where required, obtaining your consent.

When l67777 sends you promotional communications — such as bonus offers tied to BPL season, Eid, or Pohela Boishakh — we do so based on your account preferences and, where applicable, your explicit consent. You may opt out of marketing communications at any time by updating your account notification preferences or by contacting our support team.

3 Legal Basis for Processing

l67777 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing is necessary to perform the contract between you and l67777 — specifically, to create and manage your account, process payments in BDT, and deliver gaming services.
• Legal obligation: Processing is required to comply with applicable legal obligations, including Anti-Money Laundering (AML) regulations, Know Your Customer (KYC) requirements, and record-keeping obligations.
• Legitimate interests: Processing is necessary for l67777's legitimate interests, including fraud detection, platform security, responsible gaming monitoring, and improving our services, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: For certain processing activities — such as sending personalised marketing communications or placing non-essential cookies — we rely on your freely given, informed, and specific consent. You may withdraw consent at any time without detriment to your account status.

4 Data Sharing & Third Parties

l67777 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

Categories of third parties with whom data may be shared:

• Payment processors: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Visa, or Mastercard, your transaction data is shared with the relevant payment provider to execute the transaction. Each provider processes data under their own privacy policy.
• Identity verification providers: We may use third-party KYC and identity verification services to validate the documents you submit during the verification process. These providers receive only the data necessary to perform the verification.
• Game software providers: Third-party game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive your account identifier and session data to facilitate gameplay. They do not receive your full personal profile or payment details.
• Analytics providers: Anonymised or aggregated usage data may be shared with analytics platforms to help us understand how players use the Platform and to identify areas for improvement. No personally identifiable information is shared in this context.
• Legal and regulatory authorities: l67777 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, valid legal process, or to protect the rights and safety of our players or the public.

5 Cookies & Tracking Technologies

l67777 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate the Platform, remember your preferences, and analyse usage patterns. The types of cookies we use are described in the table below.

Strictly necessary cookies are placed without requiring your consent, as they are essential to the operation of the Platform. All other cookie categories are placed only with your consent, which you may provide or withdraw at any time through your browser settings or account preferences.

6 Data Retention

l67777 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. The following general retention guidelines apply:

• Active account data: Retained for the full duration of your account relationship with l67777, plus a further period of up to 5 years following account closure, to comply with AML record-keeping requirements and to handle any post-closure disputes or regulatory inquiries.
• KYC and identity verification documents: Retained for a minimum of 5 years from the date of submission, in line with financial crime prevention obligations.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, as required for financial audit and AML compliance.
• Customer support communications: Retained for up to 3 years from the date of the last communication in a support thread.
• Marketing consent records: Retained for as long as the consent is active, plus 1 year following withdrawal of consent as evidence of lawful prior marketing activity.
• Anonymised analytics data: May be retained indefinitely, as it cannot be used to identify you.

When the applicable retention period has expired, l67777 will either securely delete your personal data or irreversibly anonymise it so that it can no longer be associated with you. We conduct periodic data audits to ensure compliance with these retention schedules.

7 Your Privacy Rights

As a player on the l67777 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our privacy team at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days of receiving a valid request.

• Right of access: You have the right to request a copy of the personal data l67777 holds about you, along with information about how it is processed.
• Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data held about you. For most account details, you can update these directly within your account settings.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent. Note that this right is subject to our legal retention obligations described in Section 6.
• Right to restrict processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about its accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Rights related to automated decision-making: l67777 may use automated systems to flag accounts for fraud investigation or responsible gaming intervention. You have the right to request human review of any significant decision made solely by automated means.

8 Data Security Measures

l67777 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include but are not limited to:

• 256-bit SSL/TLS encryption on all data in transit between your device and our servers;
• Encryption at rest for sensitive stored data including KYC documents and payment identifiers;
• Role-based access controls ensuring that only authorised l67777 personnel can access personal data, and only to the extent necessary for their specific job function;
• Regular security audits and vulnerability assessments conducted by qualified third-party security professionals;
• Intrusion detection and monitoring systems that operate around the clock to detect and respond to security incidents;
• Segregated player funds held in dedicated accounts separate from l67777's operational funds, reducing exposure in the event of a financial security incident;
• Staff training on data protection responsibilities, conducted upon onboarding and updated regularly.

Despite these measures, no system connected to the internet can be guaranteed to be completely secure. In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, l67777 will notify you without undue delay and will take all reasonable steps to contain and remediate the breach.

9 Contact Our Privacy Team

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way l67777 handles your personal data, please contact our privacy team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

• Privacy enquiries email: [email protected] — please include "Privacy Policy" or "Data Request" in your subject line
• Response time: We aim to respond to all privacy enquiries within 5 business days and to complete formal data rights requests within 30 calendar days
• Support hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

l67777 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will notify registered players via email and/or a prominent notice on the Platform. The "Effective Date" at the top of this page will be updated accordingly. Your continued use of the Platform following notification of changes constitutes acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically so that you remain informed about how l67777 is protecting your information. If you do not agree with any amendment to this Policy, you may close your account in accordance with the procedure described in our Terms & Conditions.