Your Privacy Matters
at l89buzz

1. Information We Collect

l89buzz collects personal information through several channels: directly from you when you register an account or contact support, automatically through your use of the platform, and occasionally from third-party sources such as payment processors and identity verification services. The categories of personal data we collect are described below.

1.1 Information You Provide Directly

When you create an l89buzz account, make a deposit, request a withdrawal, or interact with our support team, you provide us with personal information. This includes:

• Identity data: Full legal name, date of birth, gender, and national identification details (e.g., Bangladesh National ID number or passport number) as required for age and identity verification.
• Contact data: Email address, Bangladesh mobile phone number (bKash or Nagad registered number), and residential address.
• Account credentials: Username and encrypted password hash. We never store your password in plain text.
• Financial data: Mobile Financial Service account numbers (bKash, Nagad, Rocket, Upay) and international card details (Visa, Mastercard) used for deposits and withdrawals. Full card numbers are handled exclusively by our payment processor and are not stored on l89buzz servers.
• Communications data: Records of messages sent to our support team via live chat or email, including the content of those messages and any attachments submitted.
• Verification documents: Copies of government-issued identification, utility bills, or other documents submitted in response to a Know Your Customer (KYC) or age verification request.

1.2 Information Collected Automatically

When you access the l89buzz platform — whether via a desktop browser, mobile browser, or any application — our systems automatically collect certain technical and behavioural data:

1.3 Information from Third Parties

We may receive personal information about you from third-party sources in limited circumstances, including:

• Payment processors: Transaction confirmation data, fraud screening results, and chargeback notifications from bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing partners.
• Identity verification providers: Results of automated identity and age checks conducted by our KYC service partners.
• Responsible gaming registries: Self-exclusion status records from third-party responsible gambling support organisations, to prevent excluded individuals from registering or maintaining an active account.

2. How We Use Your Data

l89buzz processes your personal data only for specific, legitimate purposes. Every processing activity is grounded in at least one lawful basis. The table below sets out our primary processing purposes and the corresponding lawful basis for each.

Marketing Communications

If you have opted in to marketing communications during registration or at a subsequent point, l89buzz may send you promotional emails or notifications regarding new games, bonus offers, seasonal promotions (including Pohela Boishakh, Eid, BPL season, and IPL campaigns), and platform updates. You may withdraw your consent and unsubscribe at any time by contacting our support team at [email protected] or by using the unsubscribe mechanism included in every marketing email.

3. Data Sharing & Third Parties

l89buzz does not sell your personal data to any third party under any circumstances. We share your data only in the limited situations described below, and only to the extent necessary for the stated purpose.

3.1 Service Providers & Data Processors

We engage carefully selected third-party service providers who process personal data on our behalf under strict contractual data processing agreements. These providers are permitted to use your data only as instructed by l89buzz and for no other purpose. Categories of data processors we use include:

• Payment processors: bKash, Nagad, Rocket, Upay, and international card processing partners for the purpose of executing financial transactions.
• Identity verification services: Third-party KYC providers who assist with age verification and identity document validation.
• Game software providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session data and bet information necessary to operate their games on our platform. Each provider operates under its own data protection obligations.
• Cloud infrastructure providers: Secure hosting and data storage services used to operate the l89buzz platform.
• Analytics providers: Aggregated, anonymised platform usage analytics to help us understand performance and improve user experience.
• Customer support platforms: Live chat and email ticketing systems that process support correspondence.

3.2 Legal & Regulatory Disclosures

l89buzz may disclose your personal data to government authorities, law enforcement agencies, or regulatory bodies where we are required to do so by applicable law, court order, or regulatory direction. In such cases, we will disclose only the minimum information required and will, where legally permitted, notify you of the disclosure request.

3.3 Business Transfers

In the event that l89buzz undergoes a merger, acquisition, asset sale, or other corporate restructuring, your personal data may be transferred to the successor entity as part of that transaction. We will notify you via your registered email address before your data becomes subject to a materially different privacy policy as a result of such a transfer.

4. Cookies & Tracking Technologies

l89buzz uses cookies and similar tracking technologies (including web beacons and local storage) to operate the platform, maintain your session, prevent fraud, and gather anonymised analytics data. A cookie is a small text file placed on your device when you visit our platform. Cookies do not contain executable code and cannot access other data on your device.

4.1 Categories of Cookies We Use

4.2 Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to block all cookies, block third-party cookies only, or delete cookies when you close the browser. Please note that disabling essential cookies will prevent you from logging in to your l89buzz account and will impair core platform functionality. Disabling performance or functionality cookies will not prevent you from using the platform but may result in a degraded experience.

Instructions for managing cookies in commonly used browsers are available on the support pages of Google Chrome, Mozilla Firefox, Apple Safari, and Microsoft Edge. l89buzz does not currently respond to browser-based "Do Not Track" signals as there is no universally accepted standard for their interpretation.

5. Data Security & Storage

l89buzz applies a layered approach to data security, combining technical controls, organisational policies, and staff training to protect your personal information against unauthorised access, accidental loss, destruction, or disclosure.

Technical Security Measures

• SSL/TLS encryption: All data in transit between your device and l89buzz servers is encrypted using TLS 1.2 or higher.
• Password hashing: Account passwords are stored exclusively as salted cryptographic hashes. No member of the l89buzz team can view your actual password.
• Database encryption: Sensitive data fields — including financial account identifiers and identity document references — are encrypted at rest within our database systems.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Staff can access only the data categories required for their specific role.
• Intrusion detection: Automated monitoring systems scan for anomalous access patterns and alert our security team to potential intrusions in real time.
• Regular security audits: Our platform undergoes periodic security assessments and vulnerability scans to identify and remediate potential weaknesses.

Organisational Security Measures

All l89buzz staff who handle personal data are trained in data protection principles and the specific obligations imposed by this Privacy Policy. Staff are bound by confidentiality agreements and are subject to disciplinary action if they breach data protection obligations. Access privileges are reviewed periodically and revoked promptly when a staff member changes role or leaves the organisation.

Data Breach Response

Despite our robust security measures, no platform can guarantee absolute immunity from security incidents. In the event of a personal data breach that poses a risk to affected individuals, l89buzz will assess the breach promptly, contain the incident, and notify affected users via their registered email address within a reasonable timeframe. We will provide clear information about what data was affected, the likely consequences of the breach, and the steps we are taking to mitigate any harm.

6. Your Rights Over Your Data

As a player on the l89buzz platform, you hold several rights in relation to your personal data. l89buzz is committed to facilitating the exercise of these rights promptly and without unnecessary friction. To submit a data rights request, contact us at [email protected] with the subject line "Data Rights Request" and the specific right you wish to exercise.

• Right of Access: You have the right to request a copy of the personal data that l89buzz holds about you, along with information about how it is processed. We will respond to access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. For account-level details such as your mobile number or email address, you may also update these directly via your account profile.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other lawful basis applies), or where the data has been unlawfully processed. This right is subject to overriding legal obligations — for example, l89buzz is required to retain certain financial transaction records for a minimum period for anti-money laundering compliance purposes.
• Right to Restriction of Processing: You may request that l89buzz restricts the processing of your data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format (e.g., CSV or JSON).
• Right to Object: You may object at any time to the processing of your personal data on the basis of legitimate interests, including profiling for fraud detection. l89buzz will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

7. Data Retention Policy

l89buzz retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with applicable legal obligations, and to resolve any disputes that may arise. The following retention periods apply to the main categories of data we hold:

At the end of the applicable retention period, personal data is either securely deleted from all active systems and backups or anonymised in a manner that makes re-identification impossible. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

8. Contact & Privacy Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or to l89buzz's handling of your personal data, please contact our privacy team using the details below. We are committed to responding to all privacy enquiries within 10 business days and to resolving data rights requests within 30 calendar days.

When contacting us about a data rights request, please include your registered username or email address so that we can locate your account. Do not include your password or full payment account numbers in any correspondence — our team does not require this information to process a privacy request.

Updates to This Privacy Policy

l89buzz may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made, we will notify registered players via their registered email address and update the "Last updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your data. Continued use of l89buzz following a policy update constitutes your acknowledgement of the revised terms.

This Privacy Policy was last reviewed and updated on 1 January 2026 and applies to all players using the l89buzz platform at l89buzz.net, regardless of their location within Bangladesh — including players from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh.