Privacy Policy — l499

l499 ("we", "us", "our", or the "Platform") is committed to handling your personal data with integrity, transparency, and care. This Privacy Policy applies to all users who access or interact with the l499 website at https://l499.app, its mobile-optimised interface, and any related services including casino games, sports betting markets, and customer support channels. By creating an account on l499, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

This policy is written in plain, professional English so that every player on our platform — from Dhaka to Chittagong, Sylhet to Cox's Bazar — can clearly understand how their data is handled. Where technical or legal language is unavoidable, we have provided explanatory context alongside it.

01 Information We Collect

l499 collects personal data through several channels: directly from you when you register and use the platform, automatically as you interact with our website, and occasionally from trusted third-party sources during the verification process. The categories of data we collect are as follows:

Data You Provide Directly

• Identity Data: Full legal name, date of birth, gender, and nationality as provided during account registration or KYC verification.
• Contact Data: Mobile phone number, email address, and residential address (including district, division, and postal code within Bangladesh).
• Account Credentials: Username and a hashed (never plain-text) version of your password. We cannot and do not store your password in a recoverable format.
• Financial Data: Payment method details such as your bKash wallet number, Nagad account reference, Rocket account reference, Upay details, or the last four digits and card type of a Visa or Mastercard. Full card numbers are handled exclusively by PCI-DSS-compliant payment processors and are never stored on l499 servers.
• Identity Documents: Scanned or photographed copies of your National ID Card (NID), passport, or other government-issued photo identification submitted during KYC verification.
• Communications Data: The content of messages you send to our customer support team via live chat or email, including any attachments you voluntarily share.
• Responsible Gaming Data: Deposit limits, session limits, self-exclusion requests, and any other player protection settings you configure through your account.

Data Collected Automatically

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, games played, duration of sessions, betting history, deposit and withdrawal history, click patterns, and navigation paths through the platform.
• Transaction Data: Records of all deposits, withdrawals, bonus claims, wager amounts, game outcomes, and account balance changes.
• Location Data: Approximate geographic location derived from your IP address. We do not collect precise GPS coordinates.
• Cookie & Tracking Data: Session identifiers, preference cookies, analytics identifiers, and fraud-detection signals. See Section 04 for full details.

Data from Third Parties

• Identity Verification Providers: Third-party KYC and AML screening services may return verification status, risk scores, or watchlist matches associated with the personal data you submit.
• Payment Providers: Transaction status confirmations, reference numbers, and payer identity signals from bKash, Nagad, Rocket, Upay, and card processing networks.
• Fraud Prevention Services: Device fingerprint assessments and behavioural risk signals from fraud detection partners used to protect the integrity of the platform.

02 How We Use Your Data

l499 uses personal data only for the purposes described in this Privacy Policy. We do not sell your personal data to third parties for marketing purposes. The primary purposes for which we process your data are as follows:

Account Management & Service Delivery

We use your identity and contact data to create and maintain your player account, authenticate your login sessions, process deposits and withdrawals, deliver customer support, and notify you of changes to your account status or platform terms.

Identity Verification & Fraud Prevention

KYC verification is a mandatory step before we process any withdrawal from your account. We use your identity documents and third-party verification data to confirm that you are who you claim to be, that you meet the 18+ age requirement, and that your account is not being used for financial fraud or money laundering. Fraud prevention signals — including device fingerprinting and behavioural analytics — are applied continuously to protect both the platform and legitimate players.

Payment Processing

Financial data is used exclusively to facilitate deposits from and withdrawals to your verified payment methods. l499 applies a matched-payment-method policy: withdrawals are directed back to the same payment source as the most recent qualifying deposit. This is both an AML control and a player protection measure.

Legal & Regulatory Compliance

We are required to retain certain categories of data — including transaction records, KYC documentation, and communications — in order to comply with applicable anti-money laundering (AML) obligations and to respond to lawful requests from competent authorities. This data is retained for the minimum period required by law (see Section 06).

Responsible Gaming

Usage data and transaction data are analysed to monitor for indicators of problem gambling. If our systems detect patterns consistent with harmful gambling behaviour — such as rapidly increasing deposit frequency, late-night session spikes, or self-exclusion circumvention attempts — our responsible gaming team may proactively contact the player to offer support tools. Data processed for responsible gaming purposes is handled with particular sensitivity and is never used for commercial profiling.

Platform Improvement & Analytics

Aggregated, anonymised usage data is used to understand how players navigate the platform, which games are most popular among players in Dhaka and other cities, where technical friction points occur, and how to improve the overall experience. Individual player profiles are not used for A/B testing or commercial analytics without separate disclosure.

Marketing Communications

With your explicit consent, we may send you promotional communications about bonuses, seasonal offers (such as Eid or BPL cricket season promotions), and new game launches via email or SMS. You may withdraw your marketing consent at any time by updating your account notification preferences or by contacting our support team.

03 Legal Basis for Processing

Every processing activity carried out by l499 rests on one of the following legal bases:

• Contractual Necessity: Processing required to perform the services you have requested — including account creation, game access, and payment processing — is carried out on the basis that it is necessary to fulfil the contract between l499 and you as a registered player.
• Legal Obligation: Processing carried out to comply with AML regulations, identity verification requirements, and lawful authority requests is based on legal obligation.
• Legitimate Interests: Fraud prevention, platform security, responsible gaming monitoring, and internal analytics are processed on the basis of l499's legitimate interest in operating a secure, fair, and sustainable platform — provided that this interest is not overridden by your fundamental rights.
• Consent: Marketing communications and non-essential analytics cookies are processed only where you have provided explicit, freely given, and revocable consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

04 Cookies & Tracking Technologies

l499 uses cookies and similar tracking technologies to ensure the platform functions correctly, to keep you securely logged in during a session, to remember your preferences, and to help us understand how players interact with the site. The categories of cookies we use are as follows:

Strictly Necessary Cookies

These cookies are essential for the platform to function. They include session authentication tokens, security cookies that protect against cross-site request forgery, and load-balancing identifiers. These cookies cannot be disabled without significantly impairing your ability to use l499.

Functional Cookies

Functional cookies remember your preferences such as chosen language settings, last-visited game category, and responsible gaming configuration. Disabling these cookies will not prevent you from using the platform but may result in a reduced personalisation experience.

Analytics Cookies

With your consent, we use analytics cookies to collect aggregated, anonymised data about how players navigate the platform. This data helps us identify popular pages, measure the effectiveness of content changes, and understand typical player journeys from the lobby to live casino games and cricket betting markets.

Fraud Detection Cookies

Security and fraud detection cookies are used to generate device fingerprints and behavioural signals that help our systems identify unusual or potentially fraudulent account activity. These cookies are processed on the basis of l499's legitimate interest in maintaining platform integrity.

Managing Your Cookie Preferences

You may manage your cookie preferences through your browser settings at any time. Instructional guides for disabling cookies in all major browsers are available on the browser developers' official help pages. Please note that disabling strictly necessary cookies will prevent you from logging in to your l499 account.

05 Data Sharing & Third Parties

l499 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

Service Providers

We engage carefully selected third-party service providers to support the operation of the platform. These providers act as data processors under contract and may only process your data on our documented instructions. Current categories of processor include:

• KYC and identity verification service providers;
• Payment processing partners including bKash, Nagad, Rocket, Upay, Visa, and Mastercard network processors;
• Cloud infrastructure and hosting providers who store platform data on servers with physical and logical security controls;
• Fraud detection and cybersecurity service providers;
• Customer support software providers (live chat platform);
• Game content providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi) who deliver game streams and content to your device.

Legal Authorities

l499 will disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities when legally required to do so or when we have a good-faith belief that such disclosure is necessary to prevent fraud, financial crime, or harm to individuals. We will endeavour to notify the affected account holder of any such disclosure where legally permissible to do so.

Business Transfers

In the event that l499 undergoes a merger, acquisition, or sale of assets, player data held at the time of the transaction may form part of the transferred assets. In such an event, we will notify affected players by email and provide a reasonable period to review any updated privacy terms before the transfer takes effect.

Aggregate Data

We may share aggregated, fully anonymised statistical data (for example, total active players in Chittagong during the BPL season, or average session duration across game categories) with industry partners or in public communications. This data cannot be used to identify any individual player.

06 Data Retention

l499 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

At the end of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with any individual. Responsible gaming records (such as self-exclusion history) may be retained for longer periods where this is in the player's own interest and to prevent self-exclusion circumvention.

07 Data Security

l499 takes the security of your personal data seriously and implements a multi-layered set of technical and organisational controls to protect it against unauthorised access, disclosure, alteration, or destruction.

Technical Measures

• 256-bit SSL/TLS Encryption: All data transmitted between your device and l499 servers is encrypted in transit using industry-standard TLS 1.2 or higher. The padlock icon in your browser confirms this encryption is active.
• Encrypted Data at Rest: Sensitive data fields — including identity document images, payment references, and KYC records — are encrypted at rest on l499's servers using AES-256 encryption.
• Password Hashing: User passwords are stored exclusively as salted cryptographic hashes using bcrypt. Even l499 system administrators cannot recover a player's plain-text password.
• Access Controls: Access to player personal data within l499's internal systems is restricted to authorised personnel on a strict need-to-know basis. All internal data access is logged and auditable.
• Two-Factor Authentication: l499 supports two-factor authentication (2FA) for player accounts. We strongly encourage all players to enable 2FA to protect against unauthorised account access.

Organisational Measures

• Regular internal security reviews and vulnerability assessments of platform systems;
• Mandatory data privacy and security training for all staff with access to player data;
• A documented data breach response procedure, including a player notification protocol in the event of a breach that poses a risk to your rights and freedoms;
• Contractual data processing agreements with all third-party service providers that impose equivalent security standards.

08 Your Data Rights

As a player on l499, you hold a number of rights with respect to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact our privacy team at [email protected] with the subject line "Data Rights Request" and a description of your request. We will respond within 30 days of receipt.

• Right of Access: You have the right to request a copy of all personal data that l499 holds about you. We will provide this in a structured, readable format within 30 days of your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may update basic contact details directly within your account settings without needing to contact support.
• Right to Erasure: You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you have withdrawn consent and no other legal basis applies. Note that data subject to a legal retention obligation (such as AML transaction records) cannot be erased until the retention period expires.
• Right to Restriction: You may request that we restrict the processing of your personal data in specific circumstances, such as while a rectification request is pending, or where you have contested the legitimacy of our processing.
• Right to Data Portability: You have the right to receive personal data that you have provided to l499 in a machine-readable format (CSV or JSON), and to request that this data be transmitted directly to another service provider where technically feasible.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. l499 will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing emails or optional analytics cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

All data rights requests must be submitted by the verified account holder. We may ask you to provide proof of identity before processing a request to ensure that personal data is not disclosed to an unauthorised third party.

09 Minors & Privacy

l499 is strictly an 18+ platform. We do not knowingly collect, process, or store personal data from any person under the age of 18. Age verification is a mandatory step in the KYC process, and accounts found to belong to players under the age of 18 will be immediately suspended and all associated data deleted in accordance with our legal obligations.

If you are a parent or guardian and believe that a minor has registered an account on l499 or has provided us with personal data without your knowledge, please contact our support team immediately at [email protected]. We will investigate and take appropriate remedial action, including account closure and data deletion, without undue delay.

10 Updates to This Policy

l499 reserves the right to update or revise this Privacy Policy at any time. When we make material changes — meaning changes that significantly affect how we collect, use, or share your personal data — we will notify you via the email address associated with your account and/or display a prominent notice on the platform at least 14 days before the changes take effect.

The "Last Updated" date at the top of this document reflects when the most recent revision was made. We encourage you to review this Privacy Policy periodically so that you remain informed about how l499 protects your data. Your continued use of the platform after any update constitutes your acceptance of the revised policy.

For minor, non-material changes (such as typographical corrections, clarifications that do not change the substance of the policy, or updated contact details), we may update this page without issuing individual notifications. The revised date at the top of the page will always reflect the current version.

11 Contact Our Privacy Team

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, have a concern about how l499 has handled your personal data, or need to report a potential data security incident, please reach out to us through the following channel:

Privacy & Data Protection Contact: [email protected]

Subject Line for Data Requests: "Data Rights Request — [Your Account Username]"

Response Time Target: Initial acknowledgement within 24 hours; full response within 30 days.

Support Availability: 24/7, including Bangladesh public holidays, Eid periods, and BPL cricket season.

Please note that the email address above is provided as plain contact information only and is not a clickable link. Please copy and paste the address into your email client to compose your message.