lol49 Privacy Policy — Your Data, Your Rights, Our Responsibilities

1 Who We Are

1.1 lol49 operates the online betting and casino platform accessible at lol49.lat (the "Platform"). In the context of this Privacy Policy, "lol49", "we", "us", and "our" refer to the operator of lol49.lat and its associated services.

1.2 lol49 is the data controller for all personal information collected through the Platform. As data controller, lol49 determines the purposes and means by which your personal data is processed.

1.3 lol49 primarily serves players located in Bangladesh. The Platform is operated in English and all data processing activities described in this policy are conducted in accordance with applicable data protection principles. If you have any questions about how your data is handled, please contact us at [email protected]. Our support team is available 24 hours a day, seven days a week, on Bangladesh Standard Time (BST, UTC+6).

2 Data We Collect

lol49 collects the following categories of personal data from players who register and use the Platform:

2.1 Sensitive Data. lol49 does not intentionally collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless a document submitted during KYC incidentally contains such information. Where this occurs, lol49 processes only the information strictly necessary for identity and age verification purposes and does not use such data for any other purpose.

3 How We Collect Your Data

lol49 collects personal data through the following means:

• Direct submission: Information you provide when you register an account, complete the KYC process, make a deposit or withdrawal, set responsible gaming limits, or contact the support team.
• Automated technical collection: When you visit or use the Platform, our servers automatically record technical data such as your IP address, device identifiers, browser type, pages visited, and session duration. This data is collected through server logs and, where applicable, cookies and similar tracking technologies (see Clause 9).
• Payment processors: When you deposit or withdraw funds using bKash, Nagad, Rocket, Upay, Visa, or Mastercard, lol49 receives transaction confirmation data (such as transaction reference numbers and partial account identifiers) from those payment service providers. lol49 does not receive or store full card numbers or mobile banking PINs.
• Third-party game providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may share game session data with lol49 for the purposes of bet settlement, dispute resolution, and responsible gaming monitoring.
• Identity verification services: Where lol49 uses a third-party KYC verification partner to authenticate identity documents, that partner may return verification results and risk scores to lol49 in order to complete the KYC process.

4 Why We Use Your Data

lol49 processes your personal data for the following purposes:

• Account management: To create, maintain, and administer your lol49 player account, including verifying your identity and age, processing login authentication, and enabling you to access Platform features.
• Payment processing: To facilitate BDT deposits and withdrawals via your chosen payment method, verify that funds originate from a payment method registered in your name, and maintain accurate financial records.
• Regulatory compliance and fraud prevention: To carry out Know Your Customer (KYC) checks, comply with applicable anti-money laundering obligations, detect and investigate suspected fraudulent or abusive activity, and maintain the integrity of the lol49 platform.
• Responsible gaming: To monitor player gaming activity for patterns that may indicate problem gambling, enforce deposit limits and self-exclusion restrictions, and contact players where lol49 has concerns about their welfare.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and maintain records of support communications for quality assurance purposes.
• Platform improvement: To analyse aggregate usage patterns, identify technical issues, improve game performance, and enhance the overall player experience on lol49.
• Marketing communications: Where you have provided consent, to send you promotional offers, bonus notifications, and seasonal campaigns relevant to your interests. You may withdraw marketing consent at any time by contacting [email protected].
• Security: To protect the Platform against unauthorised access, denial-of-service attacks, and other cyber threats, and to enforce the lol49 Terms & Conditions.

5 Legal Bases for Processing

lol49 relies on the following legal bases when processing your personal data:

• Contractual necessity: Processing your identity, contact, financial, and gaming data is necessary to provide the services you have requested when creating a lol49 account and accepting our Terms & Conditions.
• Legitimate interests: lol49 has a legitimate interest in protecting the Platform from fraud, abuse, and security threats, and in analysing usage data to improve services. We balance these interests against your privacy rights and process only the minimum data necessary.
• Legal obligation: lol49 is required to collect and retain certain identity and transaction data in order to comply with applicable anti-money laundering requirements and to cooperate with lawful requests from relevant authorities.
• Consent: Where lol49 processes data for direct marketing purposes or non-essential cookies, we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without detriment to your continued use of the Platform for non-marketing purposes.

6 Sharing Your Data

6.1 General Principle. lol49 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your data is shared only in the circumstances described in this clause.

6.2 Service Providers. lol49 engages trusted third-party service providers who process personal data on our behalf, including payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), KYC verification partners, IT hosting and infrastructure providers, and customer support platform operators. All such providers are contractually required to process data solely on lol49's documented instructions and to maintain appropriate security standards.

6.3 Game Providers. To deliver the casino and slots experience on lol49, certain gaming data (such as player session identifiers and wager records) is shared with game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers operate under their own privacy frameworks and are prohibited from using lol49 player data for purposes other than game delivery and settlement.

6.4 Legal and Regulatory Disclosure. lol49 may disclose personal data to relevant governmental authorities, law enforcement agencies, or courts where required to do so by applicable law, a valid court order, or in connection with the investigation of suspected fraud, money laundering, or other criminal activity.

6.5 Business Transfers. In the event that lol49 undergoes a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. lol49 will provide reasonable notice of any such transfer and ensure that the receiving entity is bound by privacy obligations no less protective than those set out in this policy.

6.6 No Cross-Border Transfers Without Safeguards. Where personal data is transferred to a third party located outside Bangladesh, lol49 will ensure that appropriate data transfer safeguards are in place before completing any such transfer.

7 Data Retention

7.1 Active Accounts. lol49 retains your personal data for as long as your account remains active and for such additional period as is necessary to fulfil the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, or enforce our Terms & Conditions.

7.2 Closed Accounts. Following account closure, lol49 retains identity, financial, and gaming records for a minimum of five years in order to satisfy anti-money laundering record-keeping requirements. Communications data and support records are retained for three years from the date of the last interaction.

7.3 Marketing Data. Where you have consented to receive marketing communications, we retain your contact data for this purpose until you withdraw consent or request erasure. Withdrawal of marketing consent does not affect the retention of data required for other purposes described in Clause 4.

7.4 Technical and Log Data. Server logs and session data are retained for a maximum of thirteen months from the date of collection, after which they are anonymised or deleted.

7.5 Secure Deletion. When personal data is no longer required and no legal obligation requires its retention, lol49 will securely delete or anonymise it so that it can no longer be associated with an identifiable individual.

8 Data Security

8.1 Technical Measures. lol49 uses industry-standard security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL/TLS encryption for all data transmitted between your browser and the lol49 servers, encrypted storage of sensitive data at rest, and multi-factor authentication controls for administrative access to player data systems.

8.2 Organisational Measures. Access to personal data within lol49 is restricted on a strict need-to-know basis. Staff who handle personal data are trained in data protection obligations and are bound by confidentiality agreements. lol49 conducts regular internal reviews of data access controls and security procedures.

8.3 Payment Security. lol49 does not store full mobile banking credentials (such as bKash or Nagad PINs), full card numbers, or card verification values (CVV/CVC). All payment transactions are processed through the relevant payment service provider's secure infrastructure.

8.4 Data Breach Response. In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, lol49 will take prompt steps to contain the breach, assess its impact, and notify affected players at their registered contact details without undue delay.

8.5 Player Responsibility. While lol49 implements robust security measures, the security of your account also depends on you maintaining a strong, unique password and keeping your login credentials confidential. lol49 is not responsible for unauthorised access resulting from a player's failure to maintain the security of their own credentials.

9 Cookies and Tracking Technologies

9.1 What Are Cookies. Cookies are small text files placed on your device by the lol49 Platform when you visit or interact with it. They allow the Platform to recognise your browser on subsequent visits, remember your preferences, maintain your logged-in session, and collect analytical data about how the Platform is used.

9.2 Types of Cookies Used by lol49.

• Strictly necessary cookies: Required for the Platform to function correctly. These include session authentication cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without affecting Platform functionality.
• Functional cookies: Store your preferences such as language settings, responsible gaming configurations, and display options to personalise your experience on lol49.
• Analytical cookies: Help lol49 understand how players navigate the Platform, which pages are most visited, and where technical errors occur. This data is used in aggregated, anonymised form to improve the Platform.
• Marketing cookies: Used only where you have given consent to receive personalised promotions. These cookies allow lol49 to tailor bonus offers and campaign communications to your interests and gaming activity.

9.3 Managing Cookies. You may control cookie settings through your browser's privacy settings. Disabling strictly necessary cookies will impair your ability to use the lol49 Platform. Disabling functional or analytical cookies will not prevent you from accessing the Platform but may reduce the personalisation of your experience. Marketing cookies can be disabled at any time without affecting your access to any lol49 service.

9.4 Third-Party Tracking. Some cookies on the lol49 Platform may be set by third-party service providers (such as analytics platforms or game providers) in connection with services they deliver on our behalf. lol49 does not permit third-party advertisers to set tracking cookies on the Platform without player consent.

10 Your Rights

As a player whose personal data is processed by lol49, you have the following rights in respect of your personal information:

• Right of access: You may request a copy of the personal data lol49 holds about you. lol49 will respond to verified access requests within thirty days.
• Right to rectification: If any personal data lol49 holds about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to lol49's legal retention obligations described in Clause 7.
• Right to restriction: You may request that lol49 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that lol49 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests on grounds relating to your particular situation.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact the lol49 support team at [email protected]. lol49 may need to verify your identity before processing a rights request to protect your data from unauthorised disclosure. All rights requests will be responded to within thirty days of receipt.

11 Children's Privacy

11.1 Age Restriction. lol49 is strictly a platform for adults aged 21 and above. lol49 does not knowingly collect, process, or store personal data relating to individuals under the age of 21.

11.2 Age Verification. lol49 uses KYC procedures to verify that all Players meet the minimum age requirement before they are permitted to deposit funds or access any real-money betting or gaming service on the Platform. Where lol49 discovers that a player is under 21 years of age, the account will be immediately closed, all deposits will be refunded where possible, and all gaming data associated with the minor will be deleted in accordance with our retention policy.

11.3 Parental Controls. lol49 encourages parents and guardians to make use of parental control software to prevent minors from accessing online gambling platforms. If you believe a minor has created an account on lol49, please contact [email protected] immediately so that we can investigate and take appropriate action.

12 Changes to This Privacy Policy

12.1 Right to Update. lol49 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. The effective date at the top of this document will be updated whenever a new version is published.

12.2 Notification of Changes. Where changes to this Privacy Policy are material — meaning they significantly affect the way lol49 processes your personal data or the rights available to you — lol49 will notify affected players via a prominent notice on the Platform and, where a registered email address is on file, by direct email. Minor clarifications or formatting updates may be made without individual notification.

12.3 Continued Use as Acceptance. Your continued use of the lol49 Platform following the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with the revised policy, you should cease using the Platform and may request account closure in accordance with the Terms & Conditions.

12.4 Contact Us. If you have any questions, concerns, or complaints regarding this Privacy Policy or the way lol49 handles your personal data, please contact our support team at [email protected]. We are available 24 hours a day, seven days a week, on Bangladesh Standard Time (BST, UTC+6), and we will do our best to address your query promptly and transparently.