a669l Privacy Policy — How We Handle Your Personal Data

1 Introduction

This Privacy Policy ("Policy") describes how a669l ("the Platform", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of individuals ("you", "User", "Player") who register for and use the services available at a669l.io, including sports betting, live casino, slots, and all associated features and communications.

By creating an account on a669l, making a deposit, or otherwise using our services, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. This Policy is incorporated into and forms part of our Terms and Conditions. If you disagree with any part of this Policy, please discontinue use of the Platform and contact us to close your account.

2 Data Controller

a669l acts as the data controller for all personal information collected through the Platform. As data controller, a669l determines the purposes and means by which your personal data is processed. All enquiries relating to data protection, access requests, correction requests, or deletion requests should be directed to our support team at the contact details provided in Section 14 of this Policy.

Where a669l engages third-party processors — such as payment processors, identity verification providers, or analytics partners — those parties act as data processors under written agreements that require them to handle your data solely in accordance with a669l's documented instructions and this Policy.

3 Information We Collect

a669l collects personal information through a number of channels, including the registration form, the cashier, customer support interactions, and automatic technical collection during your use of the Platform. The categories of information we collect include:

We do not collect special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity liveness verification during the KYC process.

4 How We Use Your Data

a669l processes your personal data for the following clearly defined purposes:

• To register and maintain your a669l player account and verify your eligibility to use the Platform, including confirming that you meet the minimum age requirement of 21 years.
• To process deposits and withdrawals in Bangladeshi Taka (BDT) via your registered payment method, including bKash, Nagad, Rocket, Upay, and approved Bangladeshi bank accounts.
• To conduct identity verification (KYC) and anti-money-laundering (AML) checks as required by applicable financial regulations.
• To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, and other prohibited activities described in our Terms and Conditions.
• To personalise your experience on the Platform, including game recommendations and promotional offers relevant to your betting history, where you have consented to marketing communications.
• To provide customer support and resolve account disputes, complaints, or withdrawal queries.
• To comply with legal obligations, including responding to lawful requests from Bangladeshi regulatory or law enforcement authorities.
• To monitor responsible gaming indicators and, where necessary, apply account safeguards in line with our Responsible Gaming commitments.
• To improve the Platform through anonymised analytics covering performance, navigation patterns, and error reporting.

5 Legal Basis for Processing

For each category of personal data processing carried out by a669l, we rely on one or more of the following legal bases:

• Contractual necessity — processing required to perform the player agreement between you and a669l, including account management, payment processing, and customer support.
• Legal obligation — processing required for a669l to comply with applicable laws, including KYC/AML obligations and responses to lawful authority requests.
• Legitimate interests — processing carried out for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, provided that your fundamental rights and interests are not overridden.
• Consent — processing for marketing communications and non-essential cookies, where your freely given, specific consent has been obtained. You may withdraw consent at any time by contacting support or updating your account preferences.

6 Data Sharing and Disclosure

a669l does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. We may share your personal data only in the following tightly controlled circumstances:

• Payment processors — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and other approved Bangladeshi financial institutions receive only the transactional data necessary to execute your deposit or withdrawal instruction.
• Identity verification providers — third-party KYC service providers who assist in verifying your identity documents and conducting liveness checks. These providers are contractually bound to use your data solely for verification purposes.
• Game studios — providers such as Evolution Gaming, Pragmatic Play, Ezugi, and Spribe may receive a session token and anonymised player identifier to deliver live casino and slot game sessions. No financial data is shared with game studios directly.
• Regulatory and law enforcement authorities — where a669l is under a legal obligation to disclose data to competent Bangladeshi or international authorities, we will comply with such requests. We will notify you of any such disclosure unless prohibited by law from doing so.
• Business transfers — in the event of a merger, acquisition, or sale of substantially all of a669l's assets, player data may be transferred to the successor entity, subject to equivalent privacy protections. You will be notified of any such transfer in advance.

7 Payment Data

All payment transactions on a669l are denominated in Bangladeshi Taka (BDT) and processed exclusively through PCI-compliant payment service providers. a669l does not store full payment credentials — such as complete bKash PINs, full Nagad wallet numbers, or bank account passwords — on its own servers at any point during or after a transaction.

Transaction records, including the amount, timestamp, method (e.g., bKash, Nagad, Rocket), and anonymised reference identifier, are retained in our systems for a minimum of five (5) years in accordance with Bangladeshi financial record-keeping requirements. These records are used for dispute resolution, fraud investigation, and regulatory compliance and are accessible only to authorised a669l compliance personnel.

8 Cookies and Tracking Technologies

a669l uses cookies — small text files placed on your device — and similar tracking technologies to support the secure, reliable, and personalised operation of the Platform. The categories of cookies we deploy are as follows:

• Strictly necessary cookies — required for core Platform functions including session authentication, login state management, and security token validation. These cannot be disabled without impairing your ability to use the Platform.
• Functional cookies — store your in-platform preferences such as display language (English), selected game category, and responsible gaming limit settings, so your preferences persist between sessions.
• Analytics cookies — collect anonymised data on page visits, session duration, and game engagement to help us understand how the Platform is being used and identify areas for improvement. No personally identifiable data is included in analytics reports.
• Security cookies — assist our fraud detection systems in identifying unusual login patterns, device changes, or geographic anomalies that may indicate unauthorised access to your account.

a669l does not use advertising cookies, retargeting pixels, or cross-site tracking technologies that monitor your activity on unaffiliated third-party websites. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will affect your ability to log in and use the Platform.

9 Data Retention

a669l retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention schedule is as follows:

• Active account data (identity, contact, payment method references) is retained for the duration of your account plus five (5) years following account closure, in line with Bangladeshi AML record-keeping obligations.
• Transaction records in BDT are retained for a minimum of five (5) years from the date of the transaction.
• KYC verification documents are retained for five (5) years from the date of verification or account closure, whichever is later.
• Customer support communications are retained for three (3) years from the date of resolution.
• Anonymised analytics data is retained indefinitely in aggregated form, as it contains no personally identifiable information.
• Marketing consent records are retained for three (3) years from the date of your last interaction with a marketing communication.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised using industry-standard data destruction procedures.

10 Your Rights

As a data subject, you hold the following rights in relation to the personal data that a669l processes about you. To exercise any of these rights, please contact our support team using the details in Section 14:

• Right of access — you may request a copy of all personal data a669l holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification — if any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to restrict processing — you may request that we limit the processing of your data while a dispute regarding its accuracy or lawfulness is being resolved.
• Right to data portability — you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent — where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object — you may object to processing carried out on the basis of a669l's legitimate interests, including direct marketing.

a669l will respond to all data rights requests within thirty (30) calendar days. Where a request is complex or numerous, we may extend this period by a further thirty (30) days, and will notify you accordingly.

11 Children's Privacy

a669l is strictly an adults-only platform. We do not knowingly collect or process personal data from individuals under the age of 21. All registration submissions are subject to age verification checks, and accounts where the registered user is found to be under 21 will be immediately closed and all associated data deleted, save where retention is required by applicable law.

12 Data Security

a669l employs a layered approach to data security that is proportionate to the sensitivity of the personal information we hold. Our technical and organisational security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption at rest for all databases containing personal and financial data.
• Role-based access controls ensuring that only authorised personnel can access specific categories of personal data.
• Multi-factor authentication requirements for all a669l administrative systems.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Continuous server monitoring for anomalous access patterns, intrusion attempts, and data exfiltration signals.
• Formal data breach response procedures, including notification to affected players within seventy-two (72) hours of a confirmed breach where there is a risk to their rights and interests.

Despite these measures, no internet-connected platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your a669l account credentials and for notifying us immediately if you suspect any unauthorised access to your account.

13 Changes to This Privacy Policy

a669l reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When material changes are made, we will publish the revised Policy on this page with an updated effective date and, where practicable, send an in-platform notification to registered players.

Your continued use of the a669l Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically. If you do not agree with any material change, you have the right to close your account and request deletion of your personal data subject to our legal retention obligations.

14 Contact Us

For all privacy-related enquiries, including data access requests, correction requests, deletion requests, or complaints about our data practices, please contact the a669l data protection team through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, via the in-Platform support widget
• Response time: Within 30 calendar days of receipt, Bangladesh Standard Time (BST, UTC+6)

When submitting a data rights request by email, please include your registered mobile number and a brief description of your request to help us locate your records promptly and process your request within the required timeframe.