lv999 Privacy Policy

1Introduction

lv999 ("lv999", "we", "us", or "our") operates the online gaming platform available at lv999.ws. This Privacy Policy explains how lv999 collects, uses, stores, and protects personal information provided by users ("you", "your", or "Player") when you access or use the lv999 platform, including when you register an account, make deposits or withdrawals, place bets, or contact our support team.

This Privacy Policy should be read together with the lv999 Terms & Conditions. By registering an account or using the lv999 platform, you consent to the data practices described in this Privacy Policy. If you do not agree with any part of this policy, you should not use the platform.

2Information We Collect

lv999 collects personal information in the following categories when you register and use the platform. We collect only what is necessary to provide our services, comply with legal obligations, and maintain platform security:

• Registration information — your mobile number (used as your primary account identifier), your chosen username, and your date of birth (collected for age verification to confirm you are 21 years of age or older).
• Identity verification documents — where KYC (Know Your Customer) verification is required, lv999 may collect a copy of a government-issued photo identification document (such as a National Identity Card, passport, or driving licence) and a selfie photograph for document matching purposes.
• Payment information — your bKash, Nagad, Rocket, or Upay mobile number associated with your payment account, and basic transaction records including deposit amounts, withdrawal amounts, dates, and statuses. lv999 does not store full card numbers; card payment data is handled directly by the card processor.
• Gaming activity data — records of games played, bet amounts, game outcomes, session durations, and win/loss history. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.
• Device and technical data — your IP address, device type, operating system, mobile browser type and version, screen resolution, and general geographic location (derived from IP address, not GPS). This data is used for platform security, fraud detection, and service optimisation.
• Support communications — records of any support tickets, live chat conversations, or email exchanges with the lv999 support team. These records are retained to ensure consistency in support service delivery and for quality assurance purposes.

lv999 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond the document photographs collected solely for KYC identity matching purposes.

3How We Use Your Information

lv999 uses the personal information collected from players for the following purposes. Each use is tied to a specific operational, legal, or security requirement:

• Account creation and management — to register your lv999 account, verify your identity, process your login, maintain your balance, and manage account settings including responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion.
• Transaction processing — to process BDT deposits from bKash, Nagad, Rocket, Upay, Visa, and Mastercard; to process withdrawal requests to your registered mobile payment account; and to maintain accurate accounting records of all financial activity on your account.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent transactions, account compromise, money laundering, bonus abuse, and other prohibited activities. lv999 uses automated systems and manual review processes for this purpose, and may share data with payment providers and law enforcement where required by law.
• Responsible gaming — to monitor gaming patterns that may indicate problematic gambling behaviour; to apply responsible gaming tools when requested by the player or triggered by lv999's safeguarding systems; and to ensure compliance with the lv999 responsible gaming commitments set out in the Terms & Conditions.
• Customer support — to respond to support tickets, resolve account disputes, investigate complaints, and maintain records of support interactions for quality assurance and training purposes.
• Platform improvement — to analyse aggregated, anonymised usage data to improve the performance, usability, and reliability of the lv999 platform for players in Bangladesh. This analysis never involves individually identifiable player data.

4Legal Basis for Processing Your Data

lv999 processes personal data only where there is a valid legal basis to do so. The legal bases on which lv999 relies when processing your personal information are:

• Contractual necessity — the majority of data processing at lv999 is necessary for the performance of the contract between lv999 and the player, namely the delivery of the online gaming service including account management, transaction processing, and game provision.
• Legal obligation — lv999 is required to collect and retain certain data to comply with anti-money laundering (AML) obligations, KYC requirements, and other applicable legal and regulatory requirements. Data processed under this basis cannot be deleted on request during the retention period required by law.
• Legitimate interests — lv999 processes certain data based on its legitimate business interests, including fraud prevention, platform security, and responsible gaming safeguarding. Where lv999 relies on legitimate interests, we have assessed that our interests do not override the privacy rights of our players.
• Consent — where lv999 sends optional promotional communications (such as bonus offers or seasonal promotions), this is done on the basis of your consent. You may withdraw your consent to receive promotional messages at any time by contacting [email protected].

5Payment Data and Financial Information

lv999 treats financial data with the highest level of care. All deposits and withdrawals are processed in Bangladeshi Taka (BDT) via bKash, Nagad, Rocket, Upay, Visa, and Mastercard. lv999 retains only the minimum financial data necessary to process transactions, maintain account balances, support withdrawal requests, and comply with AML record-keeping obligations.

lv999 does not store complete card numbers on its servers. When a player uses Visa or Mastercard, the card transaction is processed directly by the payment gateway provider, which handles all card data in accordance with PCI DSS (Payment Card Industry Data Security Standard) requirements. lv999 receives only a tokenised reference and transaction status from the payment gateway.

6Cookies and Tracking Technologies

lv999 uses a small number of first-party cookies and local storage entries to provide a functional and secure platform experience. lv999 does not use advertising cookies, third-party tracking pixels, or social media tracking scripts. The cookies lv999 uses fall into three categories:

• Session cookies — strictly necessary cookies that keep you logged in during a single browsing session. These are deleted automatically when you close your browser. They cannot be disabled without breaking the platform's core functionality.
• Security cookies — short-lived cookies used to verify that requests to the platform originate from a legitimate authenticated session and not from a cross-site request forgery (CSRF) attack. These are required for platform security and cannot be disabled.
• Preference cookies — optional cookies that remember your platform preferences such as language setting, so you do not need to re-select them each time you visit. These may be cleared by clearing your browser cache or using your browser's cookie management settings.

lv999 does not use Google Analytics, Facebook Pixel, or any other third-party analytics or advertising tracking service on its platform. All performance data is collected and analysed using lv999's own first-party systems exclusively.

7Sharing Your Information

lv999 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment processing partners — lv999 shares the minimum information necessary with payment service providers (bKash, Nagad, Rocket, Upay, and card payment processors) to process your deposit and withdrawal transactions. These partners are contractually bound to use the shared data only for transaction processing purposes.
• Game studio providers — lv999 shares a session token and a pseudonymised player identifier with certified game studio providers (such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, and Microgaming) to enable authenticated access to their game content. No personally identifiable information such as your mobile number, real name, or payment details is shared with game providers.
• Law enforcement and regulatory authorities — lv999 will disclose personal data to police, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or regulatory direction. lv999 will disclose only what is legally required and will, where legally permitted, notify the affected player.
• Professional advisors — lv999 may share data on a confidential basis with its legal advisors, accountants, or auditors where necessary for the provision of professional services. All such advisors are bound by professional confidentiality obligations.

lv999 requires all third parties with whom data is shared to maintain appropriate technical and organisational security measures and to use the shared data only for the specified purpose. lv999 does not permit third parties to use your data for their own marketing purposes.

8Data Security

lv999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. The principal security measures in place include:

• SSL/TLS encryption — all data transmitted between your device and the lv999 platform is encrypted using industry-standard SSL/TLS protocols. This protects your account credentials, payment information, and personal data from interception during transmission.
• Access controls — access to personal data within lv999's systems is restricted to authorised personnel only, on a need-to-know basis. All staff with access to player data are subject to confidentiality obligations and receive data handling training.
• Password hashing — account passwords are never stored in plain text. lv999 uses strong one-way cryptographic hashing to store password credentials so that even lv999 personnel cannot read your password.
• Intrusion detection and monitoring — lv999 operates continuous automated monitoring of its platform infrastructure to detect and respond to suspicious activity, attempted breaches, and anomalous traffic patterns in real time.

While lv999 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. In the unlikely event of a data breach that is likely to result in a risk to your rights, lv999 will notify affected players without undue delay and will take all steps necessary to contain and remediate the breach.

9Data Retention

lv999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting obligations. The following retention periods apply: active account data is retained for the duration of the account relationship; financial transaction records are retained for a minimum of five years from the date of the transaction to comply with AML record-keeping requirements; KYC identity documents are retained for a minimum of five years from the date of account closure; and support communications are retained for two years from the date of the interaction.

When a player account is closed and all applicable retention periods have expired, lv999 will either securely delete or irreversibly anonymise the personal data associated with that account. Anonymised data (which can no longer be linked to any individual) may be retained indefinitely for statistical and platform improvement purposes.

10Your Data Rights

As a player on the lv999 platform, you have the following rights regarding the personal data we hold about you. To exercise any of these rights, please contact the lv999 support team at [email protected] with your registered mobile number and a description of your request:

• Right of access — you have the right to request a copy of the personal data lv999 holds about you. lv999 will provide this information within 30 days of receiving a valid access request, free of charge.
• Right to rectification — if you believe that any personal data lv999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. Corrections to account registration data may require identity verification.
• Right to erasure — you may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (where consent is the legal basis), or where the data has been unlawfully processed. Note that lv999 may be required to retain certain data despite an erasure request where a legal retention obligation applies.
• Right to restriction — you may request that lv999 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing based on legitimate interests and the objection is pending assessment.
• Right to object — you have the right to object at any time to the processing of your personal data where lv999 relies on legitimate interests as the legal basis. You also have the right to object to receiving direct marketing communications from lv999 at any time, without giving any reason.

lv999 will respond to all data rights requests within 30 days. Where a request is complex or where lv999 receives a high volume of requests, this period may be extended by a further 60 days, in which case lv999 will notify you of the extension and the reason for it within the initial 30-day period.

11Children's Privacy

lv999 is an online gaming platform strictly for adults aged 21 and above. lv999 does not knowingly collect personal data from any person under the age of 21. If lv999 discovers that personal data has been collected from a person under 21 — whether through a false date of birth provided during registration or any other means — lv999 will immediately close the associated account, void any balance and gaming history, and delete all personal data associated with that account.

12Third-Party Services and Links

The lv999 platform integrates with certified third-party game studio providers to deliver casino games, live dealer games, crash games, and sports betting content. These providers operate their game content under their own data processing terms, which are governed by their agreements with lv999. As noted in Section 7 above, lv999 shares only a pseudonymised player token with game providers — no personally identifiable information is shared.

The lv999 platform does not contain links to external websites. All navigation on lv999.ws remains within the lv999 domain. lv999 is not responsible for the privacy practices of any third-party game studio or payment provider, and players are encouraged to review the privacy policies of those providers directly where relevant.

13Changes to This Privacy Policy

lv999 reserves the right to update or revise this Privacy Policy at any time. When changes are made, lv999 will update the "Last Updated" date at the top of this page. Where changes are material — for example, where lv999 begins processing personal data for a new purpose or sharing data with a new category of third party — lv999 will provide notice to registered players via the platform prior to the changes taking effect.

Your continued use of the lv999 platform following the posting of any revised Privacy Policy constitutes your acceptance of the updated policy. We recommend reviewing this page periodically so that you are always aware of the data practices in effect when you use the platform.

14Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how lv999 handles your personal data, please contact the lv999 Data Support team. We are available 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6).

Email: [email protected]