l8988 Privacy Policy

1. Introduction

1.1 This Privacy Policy applies to all personal data collected and processed by l8988 ("we", "us", "our") through the l8988 platform at https://l8988.io, including all sports betting, live casino, slots, and gaming services available to registered account holders.

1.2 l8988 is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection standards. This Policy is written in plain English and is designed to give every l8988 player in Bangladesh a clear and honest account of how their personal information is managed from the moment they register an account.

1.3 This Privacy Policy should be read alongside the l8988 Terms & Conditions, which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions on a privacy-related matter, this Privacy Policy will take precedence.

1.4 We may update this Policy periodically. The "Last Updated" date at the top of this page reflects the date of the most recent revision. Continued use of the l8988 platform following any update constitutes acceptance of the revised Policy.

2. Personal Data We Collect

2.1 l8988 collects personal data across several categories. The table below summarises the main categories of data we collect and the primary reason for collection.

Data Category	Examples	Primary Purpose
Identity Data	Full legal name, date of birth, national ID or passport number, photograph	Account registration, KYC age and identity verification
Contact Data	Email address, mobile phone number, residential address (including city — e.g., Dhaka, Chittagong, Sylhet)	Account communication, support, regulatory correspondence
Financial Data	bKash/Nagad/Rocket/Upay mobile wallet identifiers, Visa/Mastercard partial card numbers, transaction history, deposit and withdrawal amounts in BDT	Payment processing, withdrawal verification, AML monitoring
Account Activity Data	Bet history, game session logs, bonus redemption records, login timestamps, account balance history	Platform operation, responsible gaming monitoring, dispute resolution
Technical Data	IP address, device type, browser type and version, operating system, session cookies, referral URLs	Security monitoring, fraud prevention, platform optimisation
Communications Data	Live chat transcripts, email correspondence with support, feedback submissions	Customer support, quality assurance, dispute resolution
Preference Data	Responsible gaming settings, notification preferences, marketing opt-in/out status, self-exclusion records	Personalisation, responsible gaming compliance

2.2 l8988 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, unless specifically required by law (for example, where a self-exclusion request invokes a medical or clinical responsible gaming pathway). Where such data must be collected for a specific legal or regulatory purpose, we will seek your explicit consent separately.

3. How We Collect Your Data

3.1 Directly from you. The majority of personal data l8988 holds about you is provided directly by you during the account registration process, during identity verification, when you make a deposit or withdrawal, when you contact support via live chat, or when you update your account settings or communication preferences.

3.2 Automatically through platform use. When you use the l8988 platform, certain technical data is collected automatically via server logs, cookies, and analytics tools. This includes your IP address, the pages you visit within the platform, the duration of your sessions, and the device and browser you use. See Section 7 (Cookies & Tracking) for full details.

3.3 From third-party service providers. In specific circumstances, l8988 may receive personal data about you from authorised third-party service providers. These include:

• Identity and age verification providers (for KYC processing).
• Payment service providers including bKash, Nagad, Rocket, and Upay (transaction confirmation data only).
• Fraud detection and anti-money laundering screening services.
• Third-party game providers (e.g., session outcome data for dispute resolution purposes).

3.4 l8988 does not purchase personal data lists from data brokers or marketing lead providers.

4. How We Use Your Personal Data

4.1 l8988 uses the personal data we collect for the following purposes:

• Account creation and management: To register your account, maintain your account profile, and manage your relationship with l8988.
• Identity and age verification: To verify that you are at least 21 years of age and that the identity details you have provided are accurate, in compliance with our KYC obligations.
• Payment processing: To process BDT deposits and withdrawal requests through bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records of all transactions on your account.
• Platform delivery: To provide you with access to sports betting (including BPL, T20, and IPL cricket markets), live casino, slots, and all other gaming products available on the l8988 platform.
• Security and fraud prevention: To detect, prevent, and investigate fraudulent activity, unauthorised account access, collusion, match-fixing involvement, money laundering, and other prohibited conduct described in the Terms & Conditions.
• Responsible gaming: To monitor your account activity for indicators of problem gambling, to apply self-exclusion and deposit limit settings you have activated, and to comply with our responsible gaming obligations.
• Customer support: To respond to your support enquiries, resolve disputes, and maintain records of communications for quality and training purposes.
• Legal and regulatory compliance: To comply with applicable anti-money laundering (AML), counter-terrorist financing (CTF), and other legal and regulatory obligations that apply to the operation of the l8988 platform.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have explicitly opted in to receive such communications. See Section 13 for full details.
• Platform improvement: To analyse aggregate (anonymised) usage patterns, improve platform features, and optimise the user experience for players across Bangladesh.

4.2 l8988 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or without a clear legal basis for doing so.

5. Legal Basis for Processing

5.1 l8988 relies on the following legal bases to process your personal data:

• Contractual necessity: Processing required to perform the contract between you and l8988 — including account operation, payment processing, and platform delivery — is carried out on the basis that it is necessary to fulfil our contractual obligations to you as a registered account holder.
• Legal obligation: Certain processing activities — particularly KYC identity verification, AML transaction monitoring, and the retention of financial records — are carried out because l8988 is legally required to do so under applicable law.
• Legitimate interests: Processing activities such as fraud detection, security monitoring, responsible gaming oversight, and platform analytics are carried out on the basis of l8988's legitimate interests in operating a safe, fair, and compliant platform, provided that such interests are not overridden by your rights and interests.
• Consent: Where l8988 relies on your consent as the legal basis for processing — for example, for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent for marketing communications, use the unsubscribe link in any marketing email or update your preferences in the account dashboard.

6. Data Sharing & Disclosure

6.1 l8988 does not sell your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

6.2 Service providers. l8988 engages trusted third-party service providers to assist in the operation of the platform. These providers act as data processors on our behalf and are contractually required to process your data only on l8988's instructions and to implement appropriate security measures. Categories of service provider include:

• KYC and identity verification providers.
• Payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard processing networks).
• Fraud detection and AML screening services.
• Third-party game studios and platform providers (e.g., Evolution Gaming, Pragmatic Play, Ezugi, Spribe — for the purpose of delivering game services and resolving game-related disputes).
• Cloud infrastructure and data hosting providers.
• Customer support platform providers.

6.3 Legal and regulatory authorities. l8988 may disclose personal data to regulatory bodies, law enforcement agencies, financial intelligence units, or other governmental authorities where required to do so by applicable law, court order, or to protect the rights, property, or safety of l8988, its players, or the public.

6.4 Business transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of the l8988 business, personal data held by l8988 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via your registered email address in advance.

6.5 With your consent. l8988 may share your personal data with third parties in other circumstances where you have provided explicit prior consent for such sharing. You may withdraw this consent at any time.

7. Cookies & Tracking Technologies

7.1 l8988 uses cookies and similar tracking technologies (including pixel tags and session storage) to operate and improve the platform. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without preventing the platform from operating correctly.
• Functional cookies: Used to remember your preferences, such as your language setting, preferred payment method, and responsible gaming settings. Disabling these may affect your user experience.
• Analytics cookies: Used to collect anonymised data about how players navigate the platform, which pages are most visited, and where users encounter errors. This data is used solely to improve the l8988 platform and is never shared with advertising networks.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and other security threats.

7.2 l8988 does not use third-party advertising or retargeting cookies. You will not be tracked across other websites for advertising purposes based on your use of the l8988 platform.

7.3 You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from using core platform features including account login, betting, and payment processing.

8. Data Security

8.1 l8988 implements a multi-layered security framework to protect your personal data against unauthorised access, loss, destruction, or alteration. Security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and l8988 servers.
• AES-256 encryption for personal data stored at rest in our databases.
• Strict access controls and role-based permissions limiting data access to authorised personnel only.
• Regular security audits, penetration testing, and vulnerability assessments.
• Two-factor authentication (2FA) available to all account holders and mandatory for internal staff accounts.
• Automated intrusion detection and anomaly monitoring systems active 24 hours a day, 7 days a week.

8.2 In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, l8988 will notify affected account holders via their registered email address without undue delay, and will take immediate steps to contain and remediate the breach.

8.3 While l8988 takes all reasonable and technically appropriate steps to protect your personal data, no internet-based system can be guaranteed to be 100% secure. You are also responsible for maintaining the security of your own account credentials. If you suspect your account has been compromised, contact l8988 support immediately via live chat.

9. Data Retention

9.1 l8988 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, to satisfy applicable legal and regulatory obligations, and to resolve any outstanding disputes or claims. The following general retention periods apply:

• Active account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, to comply with financial record-keeping and AML regulatory obligations.
• KYC verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Transaction records: Retained for a minimum of seven (7) years to comply with applicable financial record-keeping requirements.
• Support communications: Retained for three (3) years following the closure of the relevant support case.
• Marketing preference records: Retained for three (3) years following the date of last consent update or opt-out, as evidence of your consent status.
• Technical/log data: Retained for up to twelve (12) months, after which it is anonymised or deleted.

9.2 When personal data is no longer required and no legal retention obligation applies, l8988 will securely delete or irreversibly anonymise the data so that it can no longer be attributed to you as an individual.

10. Your Data Rights

10.1 As an l8988 account holder, you have the following rights in relation to the personal data we hold about you:

• Right of access: You may request a copy of the personal data l8988 holds about you. We will respond to verified access requests within 30 days.
• Right to rectification: You may request that inaccurate or incomplete personal data held by l8988 be corrected. Minor corrections (e.g., contact number updates) can be made directly through your account dashboard settings.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing was unlawful. Please note that l8988 may be required by law to retain certain data (e.g., financial transaction records) even following a deletion request.
• Right to restrict processing: You may request that l8988 restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that l8988 provide your personal data to you in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing of your personal data carried out on the basis of legitimate interests, including profiling for direct marketing purposes. l8988 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Rights related to automated decision-making: Where l8988 makes decisions about your account solely by automated means (for example, automated fraud risk assessments) that produce significant effects on you, you have the right to request human review of that decision.

10.2 To exercise any of the rights listed above, please contact l8988 via live chat in your account dashboard or by emailing [email protected] (plain text — not a clickable link). We will verify your identity before processing any data rights request, and we will respond within 30 days of receiving a verified request. In complex cases this period may be extended by a further 60 days, with notice provided to you.

11. Children and Minors

11.1 The l8988 platform is strictly for adults aged 21 and above. l8988 does not knowingly collect personal data from any individual under the age of 21. If we discover or are notified that an account has been registered by or on behalf of an individual under 21, we will immediately suspend that account, delete all associated personal data to the extent not required for legal compliance, and void all associated transactions.

11.2 If you believe that a person under the age of 21 has registered an l8988 account, please contact us immediately via live chat or at [email protected] (plain text — not a clickable link).

12. Third-Party Links

12.1 The l8988 platform does not contain links to external third-party websites. In the event that any third-party content is referenced for informational purposes (for example, in the context of a sporting event or league), l8988 is not responsible for the privacy practices of any third-party operator and this Privacy Policy does not extend to any third-party service or website.

12.2 Third-party game providers (such as Evolution Gaming, Pragmatic Play, and Spribe) integrated within the l8988 platform operate their own privacy and data processing policies as game content providers. l8988 manages the player-facing data relationship; however, certain anonymised session data may be processed by these providers in the course of delivering game services. l8988 contractually requires all integrated game providers to implement appropriate data security standards.

13. Marketing Communications

13.1 l8988 will only send you promotional emails, SMS notifications, or in-platform marketing messages where you have explicitly opted in to receive such communications at the time of registration or via your account notification preferences.

13.2 You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email sent by l8988.
• Updating your notification and marketing preferences in your account dashboard settings.
• Contacting l8988 support via live chat and requesting removal from all marketing lists.

13.3 Withdrawal of marketing consent will not affect the delivery of transactional communications necessary for the operation of your account, including deposit confirmations, withdrawal notifications, security alerts, and account verification communications. These service messages are sent regardless of marketing preference settings because they are necessary for the performance of your account contract.

13.4 l8988 does not engage in SMS cold marketing, telephone cold calling, or postal marketing directed at individual account holders.

14. Changes to This Privacy Policy

14.1 l8988 reserves the right to update or revise this Privacy Policy at any time. When we make material changes — that is, changes that significantly affect how we collect, use, or share your personal data — we will notify you by posting a prominent notice on the l8988 platform and by sending an email notification to your registered email address at least 14 days before the changes take effect.

14.2 Minor or clarificatory changes that do not materially affect data processing practices will be updated with a revised "Last Updated" date without advance notice. We encourage you to review this Policy periodically.

14.3 Your continued use of the l8988 platform after any updated Privacy Policy takes effect constitutes your acceptance of the revised Policy. The most current version is always available at https://l8988.io/privacy-policy.

15. Contact Us

15.1 If you have any questions, concerns, or complaints about this Privacy Policy or about the way l8988 handles your personal data, please contact our support team in the first instance via the live chat facility inside your account dashboard, which is available 24 hours a day, 7 days a week in English.

15.2 For written privacy-related enquiries, you may contact us at the following email address (plain text — not a clickable link): [email protected]

15.3 l8988 aims to acknowledge all written privacy enquiries within 2 business days (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 30 days of receiving a verified request.