l8t9 Privacy Policy

1. Introduction

l8t9 is committed to protecting the privacy and personal data of every player who uses our Platform. We recognise that the information you share with us — whether during registration, during the course of normal play, or when contacting our support team — is sensitive, and we treat it with the highest degree of care and confidentiality.

This Policy sets out a clear and honest account of our data practices. We believe you have a right to understand precisely what information we hold about you, how it is used, who may access it, and how long we keep it. Our aim is to be transparent rather than to bury important information in legal language that is difficult to interpret.

l8t9 operates as the data controller for the personal data processed in connection with your account. This means we are the entity responsible for deciding how and why your personal data is used. Where we engage third-party service providers to process data on our behalf, those parties act as data processors under our instructions and are bound by strict contractual data protection obligations.

This Policy applies to all players who have registered an account with l8t9, all visitors who browse the Platform without registering, and all individuals who communicate with us via our support channels. It does not apply to third-party websites that may be linked from our Platform — those sites operate under their own privacy policies and l8t9 has no control over their data practices.

2. Data We Collect

l8t9 collects personal data through several channels: directly from you when you register or interact with our Platform, automatically as you use our services, and occasionally from trusted third-party verification partners. The categories of data we collect are described below.

2.1 Registration & Identity Data

When you create a l8t9 account, we collect the following information:

• Full legal name
• Date of birth (to verify you meet the 18+ age requirement)
• Email address
• Mobile phone number (used for account verification and security alerts)
• Residential address
• Username and encrypted password

2.2 Identity Verification (KYC) Documents

As part of our Know Your Customer (KYC) obligations, we may request copies of identity documents, including:

• National Identification Card (NID)
• Passport or other government-issued photo ID
• Proof of address (utility bill, bank statement dated within 90 days)
• Proof of payment method ownership (screenshot of bKash/Nagad/Rocket account registered in your name)

2.3 Financial & Transaction Data

To facilitate deposits and withdrawals in BDT, we collect and retain records of:

• Deposit amounts, timestamps, and payment method references
• Withdrawal requests, amounts, and processing outcomes
• Mobile wallet identifiers (bKash, Nagad, Rocket account numbers in your name)
• Bank account details where bank transfer is used
• Transaction history maintained for regulatory compliance purposes

2.4 Gameplay & Betting Data

We record all betting and gaming activity conducted through your account, including:

• Bets placed, amounts staked, markets selected, and outcomes
• Casino game sessions, game titles, wager amounts, and results
• Bonus activations, wagering progress, and bonus outcomes
• Responsible Gaming tool usage (deposit limits set, self-exclusion requests)

2.5 Technical & Usage Data

When you access the l8t9 Platform, we automatically collect certain technical information through our servers and analytics systems:

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Pages visited, time spent on each page, and navigation paths
• Session duration, login timestamps, and logout events
• Error logs and crash reports (used for technical diagnostics only)

2.6 Summary of Data Retention Periods

Data Category	Retention Period	Legal Basis
Registration & Identity Data	Duration of account + 5 years post-closure	Legal obligation (AML)
KYC Documents	Duration of account + 5 years post-closure	Legal obligation (KYC)
Financial & Transaction Data	7 years from transaction date	Legal obligation (financial records)
Gameplay & Betting Records	5 years from date of activity	Contractual / legitimate interest
Technical & Usage Data	13 months from collection	Legitimate interest (security/analytics)
Support Communications	3 years from date of communication	Legitimate interest (dispute resolution)

3. How We Use Your Data

l8t9 uses the personal data we collect only for the purposes described in this section. We do not use your data in ways that are incompatible with the purpose for which it was originally collected without first obtaining your explicit consent.

3.1 Account Management & Service Delivery

The primary purpose for which we process your personal data is to provide you with the l8t9 service. This includes creating and maintaining your account, processing your deposits and withdrawals in BDT, settling your bets and game outcomes, and providing you with access to the full range of sportsbook and casino features on the Platform. Without processing your personal data for this purpose, we cannot provide the service to you.

3.2 Identity Verification & Fraud Prevention

We are required by law and by our own internal risk management policies to verify the identity of all players before processing withdrawals above certain thresholds, and on a risk-based basis for other account activities. We use the identity data and KYC documents you provide to confirm that you are who you say you are, that you meet the 18+ age requirement, and that your account is not being used for fraudulent purposes, money laundering, or the financing of illegal activity.

3.3 Responsible Gaming Compliance

l8t9 uses your gameplay and transaction data to monitor for indicators of problem gambling behaviour, in fulfilment of our Responsible Gaming obligations. Where our systems detect patterns consistent with excessive or harmful gambling — such as rapidly escalating bet sizes, unusually long uninterrupted sessions, or frequent failed withdrawal reversals — we may proactively contact you with information about our Responsible Gaming tools or, in serious cases, apply protective account restrictions. This processing is in your vital interest and is a core part of our duty of care to our players.

3.4 Legal & Regulatory Compliance

l8t9 is required to process and retain certain categories of personal data to comply with its legal obligations, including anti-money-laundering (AML) regulations, know-your-customer (KYC) requirements, and financial record-keeping obligations. We may also be required to disclose personal data to law enforcement agencies or regulatory bodies when required to do so by law or by a valid legal process such as a court order. In such cases, we will disclose only the minimum data required and will document the disclosure internally.

3.5 Customer Support

When you contact our support team at [email protected] or via live chat, we process the information you provide — including your account details and the content of your communication — to resolve your query efficiently. Support communications are retained for three years to assist in the resolution of any future disputes related to the same matter.

3.6 Marketing Communications

Where you have given your explicit consent at the time of registration or at any subsequent time, l8t9 may use your email address and mobile number to send you information about promotions, bonuses, and new features that may be relevant to you. You may withdraw this consent at any time by updating your communication preferences in Account Settings or by contacting [email protected]. Withdrawing marketing consent does not affect the lawfulness of any marketing messages sent prior to withdrawal, and it does not affect your ability to use the Platform.

4. Data Sharing & Disclosure

l8t9 does not sell, rent, or trade your personal data to any third party. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for each purpose.

4.1 Payment Processing Partners

To facilitate deposits and withdrawals, l8t9 shares the necessary financial data with our payment processing partners, including the operators of bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These partners receive only the transactional data required to execute your payment instruction and are bound by their own data protection obligations as regulated financial institutions in Bangladesh.

4.2 Game Providers

l8t9 hosts games supplied by third-party game providers, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. When you play a game, your account identifier and relevant game session data are shared with the relevant provider to render the game, settle the outcome, and maintain game integrity. Game providers do not receive your full personal profile and are contractually prohibited from using game session data for any purpose beyond game delivery and audit.

4.3 Identity Verification Services

l8t9 may use third-party identity verification services to assist with KYC checks. Where this is the case, the minimum necessary personal data (typically name, date of birth, and document reference number) is shared with the verification provider under a data processing agreement. The results of verification checks are returned to l8t9 and the verification provider retains data only as permitted under their own regulatory obligations.

4.4 Legal & Regulatory Authorities

l8t9 will disclose personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts where we are legally required to do so. We will not notify you of such disclosure where doing so would itself constitute a breach of law (for example, where a legal order prohibits disclosure to the subject of an investigation).

4.5 Business Transfers

In the event that l8t9 undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Policy that result from it, with reasonable advance notice wherever possible.

5. Cookies & Tracking

l8t9 uses cookies and similar tracking technologies (collectively, "cookies") to ensure the Platform functions correctly, to improve your experience, and to analyse how our Platform is used. This section explains what cookies we use and how you can manage them.

5.1 What Are Cookies?

Cookies are small text files that are placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your session state, language preferences, and whether you are logged in — so that the site can function correctly and provide a more personalised experience on your next visit.

5.2 Types of Cookies l8t9 Uses

Cookie Type	Purpose	Duration
Strictly Necessary	Maintain your logged-in session, preserve account security tokens, enable core Platform functionality. These cannot be disabled without breaking the service.	Session / up to 24 hours
Functional	Remember your display preferences, language setting (English), and last-visited game category to improve navigation convenience.	Up to 30 days
Analytics	Collect anonymised data on page views, session lengths, and navigation paths using internal analytics tools. Helps us identify and fix usability issues.	Up to 13 months
Security	Detect suspicious login attempts, flag unusual geographic access patterns, and support fraud prevention systems.	Up to 12 months

5.3 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Most modern browsers allow you to block all cookies, accept only first-party cookies, or delete cookies on a per-site basis. Please note that disabling strictly necessary cookies will prevent you from logging in to your l8t9 account and using the Platform. l8t9 does not use third-party advertising or retargeting cookies.

6. Data Security

l8t9 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or alteration. While no system can guarantee absolute security, our measures reflect current industry best practice for online gaming platforms.

6.1 Technical Measures

• Transport Layer Security (TLS/SSL): All data transmitted between your device and our servers is encrypted using 256-bit TLS encryption. Our SSL certificate is valid and kept current at all times.
• Encryption at Rest: Sensitive data fields — including identity document scans, payment account references, and hashed passwords — are encrypted at rest using AES-256 encryption.
• Password Hashing: Account passwords are never stored in plain text. They are hashed using a strong one-way cryptographic algorithm with a unique salt per account.
• Firewalls & Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls and real-time intrusion detection systems that alert our security team to unusual access patterns.
• Regular Security Audits: l8t9 conducts periodic security assessments of its infrastructure and application layer to identify and remediate vulnerabilities before they can be exploited.

6.2 Organisational Measures

• Access to personal data is restricted on a strict need-to-know basis. Only staff members whose role requires access to player data are granted it.
• All staff with access to personal data receive mandatory data protection training and are bound by confidentiality obligations in their employment contracts.
• Access logs are maintained and reviewed regularly to detect any inappropriate or unauthorised access to player data.

6.3 Data Breach Response

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, l8t9 will notify affected players without undue delay and take immediate steps to contain the breach and mitigate its impact. Notifications will be sent to the email address registered on your account and will include a description of the breach, the data affected, the steps we have taken, and any action we recommend you take to protect yourself.

7. Your Privacy Rights

As a player of l8t9, you hold a number of rights with respect to the personal data we hold about you. These rights are set out below. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days of receiving your request. We may ask you to verify your identity before processing your request to prevent unauthorised access to another person's data.

Right of Access

You have the right to request a copy of the personal data we hold about you. This is sometimes called a "Subject Access Request" (SAR). We will provide you with a structured summary of your data in a readable format, free of charge, within 30 days of your request.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update many details directly in your Account Settings. For changes to identity-critical fields such as your legal name or date of birth, you will need to contact support and provide supporting documentation.

Right to Erasure

You may request that we delete your personal data. This right is not absolute — there are circumstances in which we are legally required to retain data (for example, to comply with AML and KYC retention obligations, or to preserve evidence in an ongoing dispute). Where we are unable to fulfil an erasure request in full, we will inform you of the specific reason and the data categories that must be retained.

Right to Restriction of Processing

You may request that we restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold, or while a dispute about the lawfulness of our processing is pending. During a restriction period, we will continue to store your data but will not process it for any other purpose.

Right to Withdraw Marketing Consent

Where we process your data for marketing purposes on the basis of your consent, you may withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of marketing communications sent before the withdrawal. You can unsubscribe from marketing emails via the unsubscribe link in any marketing email we send, or by contacting [email protected].

Right to Complain

If you believe that l8t9 has processed your personal data in a manner that does not comply with this Policy or applicable data protection principles, you have the right to raise a complaint directly with us. We take all privacy complaints seriously and will investigate and respond in good faith. If you are not satisfied with our response, you retain the right to escalate your complaint to the relevant data protection authority in your jurisdiction.

8. Contact & Data Controller

l8t9 is the data controller responsible for the personal data processed in connection with your use of the Platform. If you have any questions, concerns, or requests related to this Privacy Policy or to the data we hold about you, please contact us using the details below.

Platform: l8t9 — https://l8t9.net

Support Email: [email protected]

Support Hours: 24 hours a day, 7 days a week, in English

Response Time: Privacy-related enquiries are acknowledged within 24 hours and resolved within 30 calendar days of receipt.

Policy Updates

l8t9 reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where the changes are significant, we will notify you by email to your registered address or via a notification displayed in your account dashboard. Your continued use of the Platform following notification of a material change constitutes your acceptance of the revised Policy. If you do not agree to the revised Policy, you must cease using the Platform and request account closure.