l89l Privacy Policy – How We Handle Your Data

2. Information We Collect

l89l collects two categories of personal information: information that you provide directly, and information that is generated automatically when you use the platform.

Information you provide directly:

• Registration details, including your chosen username, mobile phone number, and date of birth. This information is required to create your account and to verify that you meet the minimum age requirement of 21 years.
• KYC (Know Your Customer) documentation where requested, including a copy of a government-issued identity document such as your National ID card or passport, and in some cases proof of mobile wallet ownership. KYC is required before certain withdrawals are processed.
• Deposit and withdrawal transaction records, including the mobile wallet numbers or card details used to fund your account. Full card numbers are never stored by l89l; only masked identifiers are retained for transaction reference purposes.
• Communications you send to the l89l support team, including support ticket content, chat transcripts, and email correspondence. These records are retained to help resolve ongoing or future disputes and to improve the quality of our support service.

Information collected automatically:

• Device and connection data, including your IP address, device type and model, operating system version, mobile browser type, and general geographic location derived from your IP address. This data is used for platform security monitoring, fraud prevention, and to optimise the platform for the devices most commonly used by our players.
• Session and gameplay data, including login timestamps, session duration, game titles played, bet amounts, wagering history, and withdrawal request history. This information is used to administer your account, to manage responsible gaming obligations, and to detect irregular or prohibited behaviour.
• Cookie and tracking data as described in Section 7 of this policy. This includes session cookies required for platform functionality and, where consented to, analytics cookies that help us understand how players navigate the platform.

4. Legal Basis for Processing

l89l processes personal data only where a valid legal basis exists for doing so. The legal bases applicable to our data processing activities are:

• Contractual necessity: the processing of your registration details, identity verification data, and transaction records is necessary to fulfil the contract between you and l89l — namely, the Terms and Conditions you accepted at account registration. Without this processing, we cannot operate your account.
• Legal obligation: processing required to meet applicable legal obligations, including anti-money laundering (AML) obligations, KYC requirements, age verification obligations, and tax and financial reporting requirements where applicable.
• Legitimate interests: processing carried out for fraud prevention, platform security monitoring, and responsible gaming analytics, where l89l has determined that these interests are not overridden by the privacy interests of individual players.
• Consent: where l89l relies on your consent as the basis for processing — for example, in relation to optional marketing communications or non-essential analytics cookies — you may withdraw that consent at any time by contacting us at [email protected]. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

6. Data Sharing and Third Parties

l89l does not sell, rent, or otherwise commercially exploit your personal data. We share data with third parties only in the following specific and limited circumstances:

• Game and technology providers: l89l's platform integrates games from certified providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and others. For gameplay to function correctly, your player session identifier and account status may be passed to a game provider's server. Game providers do not receive your full personal profile and are contractually prohibited from using any data passed to them for purposes outside of game delivery.
• Payment processors: when you make a deposit or withdrawal, your transaction is routed through a payment processor. The data shared with a payment processor is limited to what is strictly necessary to complete the transaction — typically a transaction amount, a masked account reference, and a transaction ID. Payment processors are bound by their own security and data protection obligations.
• Legal and regulatory authorities: l89l will disclose personal data to law enforcement agencies, financial regulators, or other governmental authorities where required to do so by applicable law, court order, or formal legal process. l89l will not tip off a player that a disclosure has been made where doing so would be prohibited by law.
• Fraud prevention and security services: where l89l uses a third-party fraud detection or identity verification service, limited data — typically device fingerprint data, IP address, and account identifiers — may be shared with that service to assess transaction risk. Such services are contracted to use data only for the purpose of providing their service to l89l.

In all cases where data is shared with a third party, l89l takes reasonable steps to ensure that the recipient has appropriate technical and organisational security measures in place and that any data shared is limited to the minimum necessary for the stated purpose.

8. Data Retention

l89l retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply: active account data is retained for the duration of your account's active life plus a minimum of five years following account closure; KYC documentation is retained for a minimum of five years from the date of submission; payment transaction records are retained for a minimum of five years from the transaction date; support correspondence is retained for three years from the date of the last communication in a given thread.

When data is no longer required for any retention purpose, l89l will securely delete or anonymise it in a manner that prevents reconstruction of the original personal data. Anonymised aggregate data — which cannot be used to identify any individual — may be retained indefinitely for statistical and platform improvement purposes.

10. Your Privacy Rights

As a player on l89l, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with a clear description of your request. We will respond within a reasonable timeframe and in any event within 30 days.

• Right of access: you may request a copy of the personal data that l89l holds about you. We will provide this in a commonly used electronic format within 30 days of receiving a valid request, subject to identity verification.
• Right to rectification: if any personal data held about you is inaccurate or incomplete, you may request that it be corrected. Where the inaccuracy affects account functionality — for example, an incorrect registered mobile number — correction will be prioritised.
• Right to erasure: in certain circumstances you may request that l89l delete the personal data it holds about you. This right is subject to limitations — for example, l89l cannot delete transaction records that are subject to mandatory retention obligations, or data that is required to resolve an ongoing dispute or legal claim.
• Right to object: you may object to the processing of your personal data where l89l relies on legitimate interests as the legal basis. l89l will cease the processing unless it can demonstrate compelling legitimate grounds that override your interests or where the processing is required for legal claims.
• Right to restrict processing: in certain circumstances — for example, where you contest the accuracy of data held about you or have objected to processing — you may request that l89l restrict the processing of your data while the matter is being investigated or resolved.

l89l will not charge a fee for responding to privacy rights requests made in good faith. Where a request is manifestly unfounded or excessive, l89l reserves the right to charge a reasonable administrative fee or to decline to respond, and will explain the basis for doing so.

12. Changes to This Privacy Policy

l89l reviews this Privacy Policy periodically and reserves the right to update it at any time. Where changes are material — meaning they significantly affect the way in which your personal data is collected, used, or shared — l89l will publish the updated policy on this page and update the effective date displayed at the top of the page.

Your continued use of the l89l platform following publication of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with the changes, you should stop using the platform and may contact [email protected] to request account closure. Historical versions of this policy are available on request.