l78 Privacy Policy

l78 collects personal data through several channels: directly from you during registration and KYC, automatically through your use of the platform, and in limited cases from trusted third-party verification partners. The categories of data we collect are set out in the table below.

Data you choose not to provide: Certain data fields are mandatory for account registration and KYC. If you choose not to provide mandatory data, l78 may be unable to open your account, process withdrawals, or provide certain services. Optional data fields are clearly indicated during the registration and profile update process.

Data from minors: l78 does not knowingly collect data from individuals under the age of 18. If we become aware that a registered account belongs to a person under 18, we will immediately close the account, delete the associated personal data (subject to any legal retention obligations), and forfeit any remaining balance in line with our age verification policy. Parents and guardians who believe a minor has registered on l78 should contact [email protected] immediately.

l78 processes your personal data only for specific, legitimate purposes directly connected to the operation of the platform and the provision of services to you. We do not process your data for purposes incompatible with those stated below.

• Account creation and management: Your identity, contact, and financial data are used to create and maintain your l78 account, verify your identity during KYC, and manage your account settings.
• Payment processing: Financial data is used to facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank partners. Transaction records are maintained for accounting and dispute resolution purposes.
• Platform service delivery: Gaming activity data is used to deliver sports betting markets, live casino games, slots, and table games, and to record bet outcomes and account balance changes accurately.
• Responsible gaming compliance: Gaming activity and session data are used to monitor for signs of problem gambling behaviour, enforce self-exclusion periods, and apply deposit limits set by the player. l78 takes its responsible gaming obligations seriously and this processing is conducted in the player's interest.
• Fraud prevention and security: Technical data, financial data, and gaming activity data are used to detect and investigate suspected fraudulent activity, money laundering, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
• Age and identity verification: Identity data including NID or passport details are verified against submitted documents to enforce the 18+ age restriction on all accounts. This processing is a legal and operational necessity.
• Customer support: Support data is used to respond to your queries, resolve complaints, process withdrawal requests that require manual review, and improve the quality of the l78 support service.
• Marketing communications: Where you have opted in to receive marketing communications, contact data and marketing preference data are used to send you promotional offers, bonus notifications, and tournament announcements relevant to your gaming activity. You may opt out at any time through your account settings.
• Platform analytics and improvement: Anonymised and aggregated technical and gaming activity data are used to analyse platform usage patterns, identify performance issues, and improve the l78 user experience over time.
• Legal compliance: Where required by applicable law or a valid legal process, l78 may process and disclose personal data to comply with regulatory requirements, court orders, or law enforcement requests.

l78 does not sell, rent, or trade your personal data to any third party. Data is shared with external parties only in the specific, limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

• Payment service providers: To process your deposits and withdrawals, l78 shares relevant financial data with your chosen payment provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, or Mastercard. This data transfer is governed by the respective provider's own privacy terms and is strictly limited to what is needed to complete the transaction.
• KYC and identity verification partners: To comply with age verification and anti-fraud obligations, l78 may use third-party identity verification services to cross-check the authenticity of submitted NID or passport documents. These partners are bound by strict data processing agreements and are prohibited from using your data for any purpose other than identity verification.
• Game content providers: Live casino games provided by Evolution Gaming and Ezugi, and other game content from providers such as Pragmatic Play, NetEnt, Microgaming, and Spribe, may involve the provider's systems recording session data (e.g., bet outcomes, round IDs) for game integrity and RNG certification purposes. This is a technical requirement of the game delivery infrastructure.
• Legal and regulatory disclosure: l78 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by a valid legal request, court order, or applicable law. l78 will, where legally permitted, notify the affected player of such a request prior to disclosure.
• Business succession: In the event of a merger, acquisition, or transfer of substantially all assets of the l78 platform, player data may be transferred to the acquiring entity as part of the transaction, subject to the acquiring entity agreeing to honour this Privacy Policy or providing players with adequate notice and choice prior to any material change in data handling.

l78 uses cookies and similar browser-based technologies to operate the platform, maintain your logged-in session, and gather anonymised analytics data that helps us improve the site. The following categories of cookies are used on l78.club:

What l78 does NOT use: l78 does not use cross-site tracking cookies, behavioural advertising cookies, social media tracking pixels, or retargeting cookies that follow you across other websites after you leave l78.club.

Managing your cookies: You can control and delete cookies through your browser settings at any time. Please note that disabling essential cookies will prevent you from logging into your account or using core platform features. Instructions for managing cookies vary by browser — consult your browser's help documentation for specific guidance. For mobile players in Bangladesh using Chrome on Android, the cookie settings are accessible under Settings → Site Settings → Cookies.

l78 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure. Key security measures include:

• Transport Layer Security (TLS 1.2+): All data in transit between your browser or mobile device and the l78 servers is encrypted using a minimum of 256-bit TLS. The l78.club domain enforces HTTPS on all pages — no unencrypted HTTP connections are permitted.
• At-rest encryption: Sensitive data stored in our databases — including identity documents, payment method details, and account credentials — is encrypted at rest using industry-standard encryption algorithms. Plain-text storage of passwords is strictly prohibited; passwords are stored as salted cryptographic hashes.
• Access controls: Access to personal data within l78's internal systems is restricted on a need-to-know basis. Role-based access controls ensure that customer support staff, finance personnel, and technical teams each have access only to the data categories required for their specific functions.
• Two-factor authentication (2FA): l78 offers 2FA for player accounts as an additional security layer. Players in Bangladesh are encouraged to enable 2FA via their account security settings. Internal l78 systems with access to player data require mandatory 2FA for all staff logins.
• Regular security audits: l78 conducts periodic internal security reviews and engages third-party security specialists to perform penetration testing and vulnerability assessments on the platform infrastructure.
• Incident response: In the event of a confirmed personal data breach that poses a risk to affected players, l78 will notify affected users via their registered email address or mobile number within a reasonable period of becoming aware of the breach, describing the nature of the incident and the steps taken to mitigate it.

l78 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods applicable to each data category are set out below.

Upon expiry of the applicable retention period, personal data is either securely deleted from l78's systems or anonymised in a manner that permanently prevents re-identification. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and platform improvement purposes.

Dormant accounts: If your l78 account has been inactive for 12 consecutive months, l78 will contact you at your registered email address or mobile number to notify you of the dormant status and your options, including closing the account and withdrawing any remaining balance. Data associated with a dormant account is retained in accordance with the standard retention periods above, not deleted simply due to inactivity.

As a player on the l78 platform, you hold a set of rights with respect to the personal data we hold about you. l78 is committed to honouring these rights promptly and without charge. To exercise any of the rights described below, contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and complete it within 30 calendar days.

• Right of access: You have the right to request a copy of all personal data l78 holds about you. We will provide this in a structured, commonly used, and machine-readable format (typically JSON or CSV) upon request.
• Right to rectification: If any personal data l78 holds about you is inaccurate or incomplete, you have the right to request correction. For account-level data such as contact details and address, you may update these directly through your account profile settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where you close your account. Note that this right is subject to our legal retention obligations — data that must be retained for AML, tax, or dispute resolution purposes cannot be deleted ahead of the applicable retention period.
• Right to restrict processing: You may request that l78 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of the data is being resolved.
• Right to data portability: You have the right to receive personal data you have provided to l78 in a portable format, and to request that it be transmitted directly to another service provider where technically feasible.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of a valid objection to marketing processing, l78 will cease all marketing communications within 5 business days.
• Right to withdraw consent: Where data processing is based on your consent (such as opt-in marketing communications), you may withdraw that consent at any time via your account settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

l78 reviews this Privacy Policy periodically and may update it to reflect changes in platform operations, applicable law, or data processing practices. When material changes are made to this Policy, l78 will notify registered players via their registered email address or via a prominent notice on the l78.club homepage at least 14 days before the updated Policy takes effect.

Continued use of the l78 platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a material change, you may close your account by contacting support prior to the effective date of the change, and any remaining verified balance will be returned to your registered payment method.

The version of this Privacy Policy currently displayed on l78.club is the version that governs your use of the platform. Prior versions are available on request by contacting our support team.

Contact for privacy matters: All privacy-related queries, data rights requests, and concerns regarding l78's data handling practices should be directed to our support team. We aim to resolve all privacy queries within 5 business days. Support hours are 08:00–24:00 Bangladesh Standard Time (BST, UTC+6), seven days a week.

Contact: [email protected]