l499 Privacy Policy
At l499, your privacy is treated as a core responsibility, not an afterthought. This Privacy Policy sets out exactly what personal data we collect, why we collect it, how it is used, who it may be shared with, and the rights you hold over your own information as a player based in Bangladesh.
Our Commitment
Your Privacy, Protected by l499
These six principles define how l499 approaches data privacy. They summarise the full policy below — reading the complete document is still strongly recommended.
SSL-Encrypted Transmission
All data exchanged between your device and l499 — including your l499 login credentials, deposit details, and personal information — is protected by industry-standard SSL/TLS encryption in transit.
No Sale of Personal Data
l499 does not sell, rent, or trade your personal data to third-party advertisers or data brokers. Your information is used solely to operate the platform and deliver the services you have signed up for.
You Control Your Data
Registered players on l499 have the right to access, correct, and request deletion of their personal data at any time by contacting our support team. Requests are handled promptly within 30 days.
Purpose-Limited Collection
l499 collects only the personal data that is strictly necessary for account registration, identity verification, payment processing, fraud prevention, and regulatory compliance. We do not collect data speculatively.
Defined Retention Periods
Your data is not kept indefinitely. l499 applies clear retention periods to each category of personal data. Account data is retained for as long as your account is active, plus a standard post-closure period required by applicable compliance obligations.
Secure Third-Party Partners
Where l499 shares data with third-party service providers — such as payment processors (bKash, Nagad, Rocket, Upay), identity verification services, and certified game suppliers — those partners are contractually required to maintain equivalent data security standards.
About This Policy
This Privacy Policy ("Policy") describes how l499, operating the online betting and casino platform at https://l499.io ("Platform"), collects, uses, stores, and protects the personal data of individuals who access or use the Platform ("you", "Player", "User"). It applies to all users of l499 regardless of location, with particular relevance to players based in Bangladesh.
This Policy should be read alongside the l499 Terms & Conditions, which govern the overall contractual relationship between you and l499. Where this Policy refers to defined terms such as "Account", "Services", or "Platform", those terms carry the meanings given to them in the Terms & Conditions unless otherwise stated here.
l499 is committed to handling personal data with transparency, fairness, and security. We process personal data only where there is a clear legitimate purpose for doing so, and we apply appropriate technical and organisational measures to protect that data from unauthorised access, loss, or misuse.
This Policy was last updated on 1 January 2026 and takes effect from that date. The most current version of this Policy is always available at https://l499.io/privacy-policy.
Data Controller
For the purposes of this Privacy Policy, l499 acts as the data controller in respect of personal data collected from Players and users of the Platform. As data controller, l499 determines the purposes and means of processing your personal data.
If you have any questions about how l499 processes your personal data, or if you wish to exercise any of your rights described in Section 10 of this Policy, please contact us using the details set out in Section 13.
Data We Collect
l499 collects personal data from you in the following ways: directly (information you provide to us), automatically (information generated by your use of the Platform), and from third parties (verification services and payment providers). The categories of personal data we collect are described below.
3.1 Registration and Account Data
When you create an l499 account, we collect the information you provide in the registration form, including:
- Full legal name
- Date of birth (used to verify that you are 21 years of age or older)
- Residential address (including city — e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)
- Email address
- Mobile phone number
- Username and encrypted password
- Preferred currency (Bangladeshi Taka / BDT)
3.2 Identity Verification (KYC) Data
To comply with anti-money laundering obligations and to verify your age and identity, l499 may request and collect:
- Copies of government-issued photo identification (National Identity Card, passport, or driving licence)
- Proof of residential address (utility bill, bank statement, or official correspondence dated within 3 months)
- Selfie or live video verification images for biometric identity matching, processed by our licensed KYC partner
- Source of funds documentation in cases where large deposits or withdrawals are made
3.3 Financial Transaction Data
When you make a deposit or withdrawal on l499, we collect:
- Payment method type (bKash, Nagad, Rocket, Upay, Visa, Mastercard)
- Transaction reference numbers and amounts in BDT
- Mobile wallet account numbers (partially masked for security)
- Card details (only the last four digits; full card numbers are never stored by l499)
- Deposit and withdrawal history associated with your account
3.4 Gameplay and Betting Data
l499 records data generated by your activity on the Platform, including:
- Bets placed, stakes, odds accepted, and outcomes on all sports and casino products
- Game session data including session start/end times, game titles played, and round results
- Bonus activations, wagering progress, and promotional participation history
- Account balance history and net win/loss records
3.5 Technical and Device Data
When you visit or use the l499 Platform, our systems automatically collect:
- IP address and approximate geographic location (country/city level)
- Device type, operating system, and browser type and version
- Pages visited, time spent on each page, and navigation paths within the Platform
- Referring URLs (the page you visited before arriving at l499.io)
- Cookie identifiers and session tokens (see Section 7)
3.6 Communications Data
When you contact l499 support or respond to our communications, we collect:
- The content of your emails, support chat messages, and submitted forms
- Records of support tickets, complaints, and their resolution status
- Your communication preferences (e.g., whether you have opted in to promotional emails)
How We Use Your Data
l499 uses the personal data we collect for the following purposes. In each case, we identify the data categories used and the legal basis relied upon (see also Section 5).
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account registration and management | Registration data, KYC data | Contract performance |
| Age and identity verification (21+ enforcement) | KYC data, date of birth | Legal obligation |
| Processing deposits and withdrawals | Financial transaction data, KYC data | Contract performance |
| Fraud prevention and anti-money laundering | All categories | Legal obligation, legitimate interest |
| Delivering betting and casino services | Gameplay data, account data | Contract performance |
| Customer support and complaint handling | Communications data, account data | Contract performance, legitimate interest |
| Responsible Gaming monitoring | Gameplay data, account data | Legal obligation, legitimate interest |
| Sending promotional communications (with consent) | Registration data, communications preferences | Consent |
| Platform analytics and improvement | Technical/device data, gameplay data | Legitimate interest |
| Legal compliance and regulatory reporting | All categories as required | Legal obligation |
l499 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing a fresh legal basis for the new processing activity.
Legal Basis for Processing
l499 processes your personal data only where there is a lawful basis for doing so. The legal bases we rely on are as follows:
- Contract Performance: Processing that is necessary to provide the services you have requested — including operating your account, processing transactions, and delivering betting and casino products — is carried out on the basis that it is necessary for the performance of the contract between you and l499.
- Legal Obligation: l499 is required by applicable law to carry out certain data processing activities, including age verification (21+ compliance), anti-money laundering (AML) checks, and record-keeping for regulatory audit purposes. Processing carried out to meet these obligations is mandatory and cannot be waived.
- Legitimate Interests: l499 processes certain data on the basis of its legitimate business interests, provided those interests are not overridden by your fundamental rights. Legitimate interest processing includes fraud detection, platform security monitoring, improving the user experience, and responsible gaming analytics. l499 conducts a balancing test before relying on this basis and will not use it where the impact on your privacy would be disproportionate.
- Consent: Where l499 relies on your consent for processing — for example, to send you promotional emails about new games, bonuses, or seasonal offers — you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal. To withdraw consent to marketing communications, contact [email protected].
Data Sharing
l499 does not sell your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.
6.1 Payment Service Providers
To process your deposits and withdrawals, l499 shares relevant transaction data with our payment partners, including bKash, Nagad, Rocket, Upay, and card processing networks (Visa, Mastercard). These providers receive only the data necessary to execute and confirm the transaction. They are prohibited from using your data for any other purpose and are required to maintain it securely.
6.2 Identity Verification (KYC) Partners
l499 uses licensed third-party identity verification services to carry out KYC checks. When you submit identity documents or complete a biometric verification, your data is shared with our KYC provider solely for verification purposes. The provider is contractually bound to process this data only as directed by l499.
6.3 Game Content Providers
The casino and slot games available on l499 are supplied by certified game providers including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi. These providers may receive anonymised or pseudonymised session data (such as game round IDs and bet outcomes) to enable game functionality and resolve disputes. They do not receive your full personal profile.
6.4 Legal and Regulatory Authorities
l499 may be required by applicable law or valid legal process to disclose your personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities. l499 will comply with such requirements and will, where legally permitted, notify you of any such disclosure.
6.5 Business Transfers
In the event that l499's business or any part of it is sold, transferred, or merged with another entity, your personal data may be transferred to the new owner as part of that transaction. You will be notified of any such transfer via the email address registered to your account, and your rights under this Policy will be preserved.
6.6 Professional Advisers
l499 may share personal data with its legal advisers, auditors, and accountants on a strictly need-to-know basis in connection with the provision of professional services. All such advisers are bound by confidentiality obligations.
Cookies & Tracking Technologies
l499 uses cookies and similar tracking technologies on the Platform to ensure core functionality, improve the user experience, and support fraud prevention and analytics. This section explains what cookies we use and how you can manage them.
7.1 What Are Cookies?
A cookie is a small text file placed on your device when you visit a website. Cookies allow the website to recognise your device on subsequent visits and to remember your preferences and session state. l499 uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a defined period).
7.2 Types of Cookies Used by l499
- Essential Cookies: These are strictly necessary for the Platform to function. They enable core services such as maintaining your logged-in session after l499 login, remembering items in your bet slip, and enforcing security measures. Essential cookies cannot be disabled without impairing platform functionality.
- Analytics Cookies: l499 uses analytics cookies to understand how users navigate the Platform — including which pages are most visited, how long sessions last, and where users encounter difficulties. This data is used in aggregate and anonymised form to improve the Platform.
- Fraud Prevention Cookies: These cookies help l499 identify suspicious behaviour patterns, detect multiple account attempts, and protect against automated bots and scripted attacks.
- Preference Cookies: These store your stated preferences such as language settings and notification choices so that you do not need to reconfigure them on each visit.
7.3 Managing Cookies
You can manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling cookies may affect the functionality of the l499 Platform — in particular, blocking essential cookies may prevent you from completing l499 login or accessing certain features. For detailed guidance on managing cookies, refer to your browser's help documentation.
Data Security
l499 applies a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security practices include:
- SSL/TLS Encryption: All data transmitted between your device and the l499 Platform is encrypted using SSL/TLS protocols. This applies to all pages, including the l499 login page, registration forms, and payment flows.
- Encrypted Password Storage: Passwords are never stored in plain text. l499 uses modern cryptographic hashing algorithms to store password credentials securely. Even in the unlikely event of a data breach, stored password hashes cannot be reversed to reveal your original password.
- Access Controls: Access to personal data within l499's internal systems is restricted on a strict need-to-know basis. Only authorised personnel whose job functions require access to specific data categories are granted that access.
- System Monitoring: l499's infrastructure is continuously monitored for anomalies, intrusion attempts, and suspicious activity. Security incidents are logged and investigated promptly.
- Third-Party Security Standards: All third-party service providers who handle personal data on behalf of l499 are contractually required to maintain security standards commensurate with those applied by l499.
Despite these measures, no internet-based platform can guarantee absolute security. l499 encourages you to use a strong, unique password for your account, to keep your l499 login credentials confidential, and to contact us immediately at [email protected] if you suspect any unauthorised access to your account.
Data Retention
l499 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and registration data | Duration of account + 5 years post-closure | Regulatory compliance |
| KYC / identity documents | Duration of account + 5 years post-closure | AML legal obligation |
| Financial transaction records | 7 years from transaction date | Financial record-keeping |
| Gameplay and betting history | Duration of account + 3 years post-closure | Dispute resolution, fraud prevention |
| Support communications | 3 years from resolution date | Legitimate interest |
| Technical / device logs | 12 months from collection | Security monitoring |
| Marketing consent records | Until consent is withdrawn + 3 years | Proof of consent |
Where data is retained beyond account closure for legal compliance purposes, it is held in a restricted state accessible only to authorised compliance personnel. It is not used for marketing, profiling, or any active processing purpose during that extended retention period.
Once a retention period expires, l499 will securely delete or irreversibly anonymise the relevant data.
Your Rights
As a data subject, you have the following rights in relation to the personal data that l499 holds about you. To exercise any of these rights, please contact [email protected] with "Privacy Request" in the subject line. l499 will respond to all verifiable requests within 30 days.
Your Rights at a Glance
What You Can Ask l499 To Do
Right of Access
Request a copy of the personal data l499 holds about you, including the purposes for which it is being processed.
Right to Rectification
Ask l499 to correct any inaccurate or incomplete personal data held in your account record without undue delay.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to overriding legal retention obligations.
Right to Restriction
Ask l499 to restrict the processing of your data in certain circumstances — for example, while a dispute about accuracy is being resolved.
Right to Portability
Receive a copy of the personal data you provided to l499 in a structured, machine-readable format where technically feasible.
Right to Object
Object to the processing of your personal data where l499 relies on legitimate interests as its legal basis, or object to receiving direct marketing communications.
Children's Privacy
The l499 Platform is strictly intended for adults aged 21 years and above. l499 does not knowingly collect personal data from any person under the age of 21. If you are under 21 years of age, you must not register an account on the l499 Platform or submit any personal data to l499.
If l499 becomes aware that it has collected personal data from an individual who is under 21 years of age, we will take immediate steps to delete that data from our records and close the associated account. If you believe that a person under the age of 21 has registered on l499, please notify us at [email protected] as soon as possible.
l499 enforces age verification at the point of registration and during KYC review as a core compliance requirement. Our 21+ policy is non-negotiable and applies to all players across Bangladesh and all other jurisdictions in which we operate.
Policy Updates
l499 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes to our data processing practices, new product features, or feedback from players and regulators. The effective date at the top of this Policy will be updated to reflect the date of the most recent revision.
Where a change is material — meaning it significantly affects how your personal data is processed or alters your rights — l499 will notify registered players via the email address associated with their account at least 14 days before the change takes effect. For minor clarifications or administrative updates that do not materially alter the scope of data processing, the updated Policy will be posted at https://l499.io/privacy-policy without prior individual notification.
Continued use of the l499 Platform after a Policy update has taken effect constitutes your acknowledgement of the revised Policy. If you do not agree with any changes, you should stop using the Platform and may request account closure by contacting our support team.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data that l499 holds about you, please contact our support team using the details below. We are committed to responding to all privacy-related enquiries promptly and transparently.
- Email: [email protected] — please include "Privacy Request" in your subject line
- Response Time: l499 aims to acknowledge all privacy requests within 3 business days (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 30 calendar days
- Identity Verification: To protect your personal data, l499 may ask you to verify your identity before processing any access, rectification, or erasure request
If you are not satisfied with l499's response to your privacy enquiry, you have the right to escalate your concern to the relevant data protection authority in your jurisdiction. l499 takes all privacy complaints seriously and will cooperate fully with any regulatory investigation.
Questions About Your Privacy on l499?
Our support team is available around the clock to answer any questions about how l499 handles your personal data. You can also review our full Terms & Conditions, explore our Responsible Gaming tools, or visit the FAQ for quick answers to the most common player questions.