l888 Privacy Policy
Your privacy matters to us. This Privacy Policy explains exactly what personal data l888 collects, why we collect it, how we use and protect it, and what rights you hold over your information as a player on our platform.
How l888 Approaches Your Data
Before diving into the full policy document, the cards below summarise the six core principles that guide every data decision l888 makes.
l888 only collects personal data for specific, clearly defined purposes: account operation, transaction processing, identity verification, fraud prevention, and regulatory compliance. Your data is never used for purposes beyond those stated in this policy.
All data transmitted between your device and l888 is protected by 256-bit SSL encryption. Account passwords are stored using industry-standard cryptographic hashing. l888 conducts regular security audits to identify and resolve vulnerabilities before they can affect players.
l888 does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. Data is shared with third-party service providers only to the minimum extent necessary to operate the platform and deliver services to you.
l888 applies a data minimisation approach — we only collect the information we genuinely need. If a piece of data is not necessary for account operation, regulatory compliance, or fraud prevention, we do not collect it. You will never be asked for superfluous personal details.
This Privacy Policy is written in plain, accessible English so that every player — regardless of technical background — can understand exactly what data l888 holds about them and why. When we update this policy, we notify registered players by email before the changes take effect.
l888 respects your rights over your personal data. You may request access to the data we hold about you, ask for corrections, request deletion where permitted, and object to certain processing activities. All such requests should be directed to [email protected].
1 Introduction
This Privacy Policy ("Policy") describes how l888 ("we", "us", "our") collects, processes, stores, and protects personal data relating to individuals ("you", "the Player") who access or use the l888 platform at https://l888.org, including all related sub-pages, mobile-optimised interfaces, and services operated under the l888 brand (collectively, the "Platform").
l888 is committed to protecting the privacy of every player and to handling personal data responsibly, transparently, and in accordance with applicable data protection standards. This Policy forms part of the broader contractual relationship between you and l888, and should be read alongside the l888 Terms & Conditions and the l888 Responsible Gaming Policy.
Acceptance: By registering an account on l888 or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, please cease using the Platform and contact [email protected] to request account closure.
This Policy applies to all players accessing the Platform from Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar, as well as any other jurisdiction from which the Platform is accessed.
2 Data Controller
For the purposes of this Privacy Policy, l888 acts as the data controller in respect of all personal data collected through the Platform. As data controller, l888 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.
All data protection enquiries, access requests, correction requests, and deletion requests should be directed to the l888 data protection contact at [email protected] with the subject line "Data Protection Enquiry". l888 aims to acknowledge all data protection requests within 3 business days and to provide a substantive response within 30 days.
3 Data We Collect
l888 collects the following categories of personal data from players. Not all categories apply to every player — the data collected depends on how you interact with the Platform.
3.1 Registration Data
When you create an l888 account, we collect the personal information you provide during the registration process:
- Full legal name
- Date of birth (to verify you are 21 years of age or older)
- Residential address (including city and division within Bangladesh)
- Mobile phone number
- Email address
- Username and hashed account password
3.2 Identity Verification (KYC) Data
To comply with anti-money laundering (AML) obligations and to verify player identity, l888 may collect:
- Government-issued photo identification (e.g., National Identity Card, passport, driving licence)
- Proof of residential address (e.g., utility bill, bank statement dated within the last 3 months)
- Proof of payment method ownership (e.g., screenshot of bKash, Nagad, or Rocket account registered in your name)
- Source of funds documentation where required by AML procedures
3.3 Financial Transaction Data
When you make deposits or withdrawals, l888 records the following transactional information:
- Payment method type (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard, bank transfer)
- Transaction amounts in Bangladeshi Taka (৳)
- Transaction timestamps and reference numbers
- Account identifiers associated with the payment method (e.g., mobile wallet number)
3.4 Betting and Gaming Activity Data
l888 maintains records of your activity on the Platform, including:
- Bet placement history, selections, stakes, and outcomes
- Casino game session data (game titles, session durations, results)
- Slot game play history
- Bonus and promotion usage history
- Account balance history
3.5 Technical and Device Data
l888's systems automatically collect certain technical data when you access the Platform:
- IP address and approximate geographic location derived from IP
- Device type, operating system, and browser version
- Session timestamps and duration
- Pages visited and navigation paths within the Platform
- Referring URL (the page you visited before arriving at l888)
3.6 Communication Data
When you contact l888 support or communicate with us through any channel, we retain records of those communications, including the content of messages, timestamps, and any resolution actions taken. This applies to email correspondence sent to [email protected].
| Data Category | Primary Purpose | Retention Period |
|---|---|---|
| Registration Data | Account creation and management | Duration of account + 5 years |
| KYC / Identity Data | Age and identity verification, AML compliance | Duration of account + 7 years |
| Financial Transaction Data | Payment processing, AML, audit trail | 7 years from transaction date |
| Betting & Gaming Activity | Fair play, dispute resolution, responsible gaming | Duration of account + 5 years |
| Technical & Device Data | Security, fraud prevention, platform optimisation | 13 months from collection |
| Communication Data | Support, complaints handling, record keeping | 3 years from last interaction |
4 How We Collect Data
l888 collects personal data through three primary channels:
4.1 Directly From You
The majority of personal data l888 holds is provided directly by you during account registration, identity verification, payment transactions, bonus redemptions, and communications with the support team. You choose what information to provide, though certain data is mandatory for account creation and legal compliance.
4.2 Automatically Through Platform Use
When you access and navigate the Platform, l888's systems automatically collect technical and behavioural data as described in Section 3.5 above. This data is collected through server logs, session tracking technologies, and cookies. See Section 10 for the full cookie policy.
4.3 From Third-Party Service Providers
In limited circumstances, l888 may receive data about you from third-party partners, including payment processors (such as bKash, Nagad, and banking partners) confirming transaction status, fraud prevention services flagging suspicious activity patterns, and identity verification providers assisting with KYC document validation. Data received from third parties is subject to the same protections described in this Policy.
5 How We Use Your Data
l888 uses your personal data for the following purposes:
- Account Management: Creating, maintaining, and securing your l888 account; processing your login and authentication; managing your account preferences and responsible gaming settings.
- Transaction Processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard, and other supported payment channels; maintaining accurate financial records.
- Identity and Age Verification: Confirming that you are at least 21 years of age; verifying your identity in accordance with KYC requirements; preventing underage gambling on the Platform.
- Legal and Regulatory Compliance: Meeting anti-money laundering (AML) obligations; responding to lawful requests from regulatory or law enforcement authorities; maintaining records required by applicable law.
- Fraud Prevention and Security: Detecting and preventing fraudulent account activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as defined in the Terms & Conditions.
- Responsible Gaming: Monitoring betting patterns to identify potential problem gambling behaviours; enforcing deposit limits, cooling-off periods, and self-exclusions set by the player; administering the responsible gaming programme.
- Platform Operation and Improvement: Diagnosing technical issues; analysing user behaviour in aggregate to improve Platform performance, navigation, and game offering; conducting internal analytics.
- Customer Support: Responding to support queries, complaints, and disputes; maintaining records of communications to ensure consistent service quality.
- Communications: Sending transactional notifications (deposit confirmations, withdrawal updates, security alerts) and, where you have opted in, promotional communications about relevant offers on l888.
Marketing Communications: l888 will only send promotional emails or notifications to players who have explicitly opted in to receive such communications during registration or through their account settings. You may opt out at any time by contacting [email protected] with the subject line "Unsubscribe".
6 Legal Basis for Processing
l888 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
- Contractual Necessity: Processing required to fulfil the contract between you and l888, including account operation, payment processing, and service delivery.
- Legal Obligation: Processing necessary to comply with applicable legal requirements, including AML obligations, age verification mandates, and responses to lawful authority requests.
- Legitimate Interests: Processing carried out in furtherance of l888's legitimate business interests, including fraud prevention, security monitoring, and platform analytics, where those interests are not overridden by your privacy rights.
- Consent: Processing based on your freely given, specific, and informed consent — for example, sending you marketing communications or using non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
7 Sharing Your Data
l888 does not sell your personal data. We share personal data only in the following limited circumstances:
7.1 Service Providers
l888 engages third-party service providers to assist with platform operation. These providers are granted access to personal data only to the extent necessary to deliver their specific services and are contractually required to process that data solely on l888's instructions and to maintain appropriate security standards. Categories of service providers include: payment processors (bKash, Nagad, Rocket, Upay, and banking partners), identity verification services, fraud detection providers, cloud infrastructure providers, and email delivery services.
7.2 Game Providers
Where you play games powered by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, limited session data (such as player identifiers and game session tokens) is shared with those providers as technically necessary to operate the games. These providers are contractually bound to data protection standards consistent with this Policy.
7.3 Legal and Regulatory Authorities
l888 may disclose personal data to government authorities, regulatory bodies, law enforcement agencies, or courts where required by applicable law, court order, or regulatory direction. Such disclosures are made only to the extent legally required and l888 will, where legally permitted, notify you of any such disclosure.
7.4 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of l888's business, personal data held by l888 may be transferred to the acquiring entity as part of that transaction. If such a transfer occurs, l888 will notify affected players by email prior to their data being transferred and will ensure that the acquiring entity is bound by privacy obligations no less protective than those set out in this Policy.
No Sale of Personal Data: l888 strictly prohibits the sale, rental, or commercial exchange of player personal data to third parties for marketing, profiling, or advertising purposes. Any arrangement that resembles such a sale is not permitted under this Policy.
8 Data Retention
l888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The indicative retention periods by data category are set out in the table in Section 3 above.
Following the closure of your l888 account — whether initiated by you or by l888 — certain categories of data (particularly financial transaction records and KYC documentation) are retained for a minimum of 7 years to satisfy AML record-keeping requirements. After the applicable retention period has expired, l888 will securely delete or anonymise your personal data so that it can no longer be attributed to you.
Data that has been anonymised and can no longer reasonably be used to identify an individual may be retained indefinitely for statistical and analytical purposes.
9 Security Measures
l888 applies a range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:
- Encryption in Transit: All data transmitted between your device and the l888 Platform is encrypted using 256-bit SSL/TLS protocols.
- Password Security: Account passwords are never stored in plaintext. l888 uses modern cryptographic hashing algorithms with appropriate salting to store password credentials.
- Access Controls: Access to personal data within l888's systems is restricted on a strict need-to-know basis. Staff members with access to player data are subject to confidentiality obligations.
- Security Audits: l888 conducts periodic security assessments to identify and address technical vulnerabilities in the Platform's infrastructure.
- Incident Response: l888 maintains a data breach response procedure. In the event of a breach that poses a risk to your rights or interests, l888 will notify affected players within a reasonable timeframe.
While l888 takes all reasonable precautions to protect your data, no internet-based service can guarantee absolute security. You are encouraged to use a strong, unique password for your l888 account, to enable two-factor authentication where available, and to log out of your account after each session, particularly when using a shared or public device.
10 Cookies & Tracking Technologies
10.1 What Are Cookies?
Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device, remember your preferences, and gather information about how you interact with the site. l888 uses cookies and similar tracking technologies (such as local storage and session tokens) on the Platform.
10.2 Types of Cookies Used by l888
- Essential Cookies: These are strictly necessary for the Platform to function. They enable features such as maintaining your login session, remembering your language and currency preferences, and securing your account. Essential cookies cannot be disabled without impairing Platform functionality.
- Performance Cookies: These cookies collect anonymised information about how players use the Platform — such as which pages are visited most frequently and where error messages are encountered. This data helps l888 improve Platform performance and user experience.
- Functional Cookies: These cookies allow the Platform to remember choices you make (such as your preferred sports or game categories) to provide a more personalised experience during your session.
- Analytics Cookies: l888 uses analytics tools to understand aggregate player behaviour on the Platform. Data collected through analytics cookies is anonymised and used solely for internal reporting purposes.
10.3 Managing Cookies
You may manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling essential cookies may prevent certain features of the l888 Platform from functioning correctly. For detailed guidance on managing cookies, refer to the help documentation for your specific browser.
11 Your Rights Over Your Personal Data
As a player on l888, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request" and specify which right you wish to exercise.
- Right of Access: You may request a copy of the personal data l888 holds about you. l888 will provide this information in a clear, readable format within 30 days of a valid request.
- Right to Rectification: If any personal data l888 holds about you is inaccurate or incomplete, you have the right to request correction. You may update certain details (such as your contact email or address) directly through your account dashboard.
- Right to Erasure: You may request that l888 delete your personal data where it is no longer necessary for the purposes for which it was collected and where no overriding legal obligation requires its retention. Please note that data subject to AML retention requirements (minimum 7 years) cannot be deleted during that period.
- Right to Restriction: You may request that l888 restrict processing of your data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing and a determination is pending.
- Right to Object: Where l888 processes your data on the basis of legitimate interests, you have the right to object to that processing. l888 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
- Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that l888 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
- Right to Withdraw Consent: Where l888 relies on your consent as the legal basis for processing, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
Response Timeframes: l888 aims to acknowledge all data rights requests within 3 business days and to provide a full response within 30 days. In cases of particular complexity, the response period may be extended by a further 30 days, and you will be notified of the extension with reasons.
12 Minors
The l888 Platform is strictly intended for adults aged 21 years and above. l888 does not knowingly collect, process, or retain personal data relating to individuals under the age of 21. If l888 becomes aware that an account has been registered by or on behalf of a person under 21, that account will be immediately suspended, all associated data will be reviewed, and appropriate action will be taken in accordance with applicable law.
If you believe that a minor may have registered an account on l888, please contact [email protected] immediately so that the matter can be investigated and resolved. Parents and guardians are encouraged to use parental control software to prevent minors from accessing gambling websites.
13 International Data Transfers
l888 primarily processes and stores personal data on infrastructure located in or serving the Bangladesh region. In certain circumstances, data may be transferred to or processed by service providers operating in other countries — for example, cloud infrastructure providers or game technology partners based outside Bangladesh.
Where such transfers occur, l888 takes steps to ensure that your personal data receives an equivalent level of protection to that described in this Policy, including through the use of contractual data processing agreements with international service providers that incorporate appropriate data protection safeguards.
14 Changes to This Privacy Policy
l888 reserves the right to update or revise this Privacy Policy from time to time to reflect changes in applicable law, platform operations, or data processing practices. Material changes to this Policy will be communicated to registered players via email at least 14 days before the revised Policy takes effect.
The date of the most recent revision is shown in the "Last Updated" notice at the top of this document. Players are encouraged to review this Policy periodically. Continued use of the Platform after the effective date of any revised Policy constitutes acceptance of the updated terms.
Previous Versions: If you would like to review a previous version of this Privacy Policy, please contact [email protected] with the subject line "Previous Privacy Policy Version" and we will provide a copy of the requested version where available.
15 Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or to the personal data l888 holds about you, please use the following contact details. All correspondence must be in English.
- Data Protection Enquiries: [email protected] — subject line: "Data Protection Enquiry"
- Data Rights Requests: [email protected] — subject line: "Data Rights Request"
- Security Incidents: [email protected] — subject line: "Security Incident"
- Support Hours: Daily 10:00 – 02:00 Bangladesh Standard Time (BST, UTC+6)
l888 takes all privacy-related communications seriously and commits to responding to all substantive enquiries within the timeframes specified in this Policy. Where a complaint cannot be resolved to your satisfaction through direct communication with l888, you may have the right to escalate the matter to a relevant data protection authority or seek other legal remedies available under applicable law.
Ready to Play at l888?
Now that you understand how l888 protects your data, explore the full range of games and betting markets available to Bangladeshi players — all backed by secure, encrypted infrastructure.
21+ only. Please gamble responsibly. Visit our Responsible Gaming page for tools and resources.