lol49 Privacy Policy
This Privacy Policy explains what personal data lol49 collects from players in Bangladesh, how that data is used, how it is protected, and what rights you hold over your information.
Privacy at a Glance
How lol49 Handles Your Data
The following cards summarise the most important aspects of how lol49 handles your personal information. These summaries are for orientation only — the binding policy text is in the detailed sections below.
Registration details (name, date of birth, contact information), identity verification documents, payment transaction records, device and browser data, and platform usage logs.
To operate your lol49 account, process BDT deposits and withdrawals via bKash and Nagad, verify your identity, detect fraud, comply with legal obligations, and personalise your experience.
All data transmitted between your device and lol49 is encrypted via SSL. Sensitive account data is stored in encrypted form. Access to player data is restricted to authorised personnel only.
Payment processors (bKash, Nagad, Rocket, Upay), certified game providers (Pragmatic Play, Evolution Gaming, Spribe), KYC verification partners, and where legally required, regulatory or law enforcement authorities.
lol49 uses essential session cookies to keep you logged in, performance cookies to monitor platform health, and optional analytics cookies. You can manage cookie preferences via your browser settings.
You have the right to access, correct, and request deletion of your personal data held by lol49. You can also opt out of marketing communications at any time by contacting lol49 support.
Section 1
Data We Collect
lol49 collects personal data from players in Bangladesh in order to operate the platform, process payments in BDT, verify player identities, prevent fraud, and comply with applicable legal and regulatory obligations. We collect only the data that is necessary for these purposes — we do not collect data speculatively or beyond what we have a legitimate basis for holding.
Data Provided Directly by You
When you register an account, interact with lol49 support, or complete identity verification procedures, you provide us with the following categories of personal data:
- Registration data: Full name, date of birth, email address, and mobile phone number.
- Identity verification documents: National ID card, passport, or other government-issued identification submitted to complete KYC (Know Your Customer) verification.
- Payment data: Mobile wallet numbers (bKash , Nagad, Rocket, Upay account references), transaction IDs, deposit and withdrawal amounts in BDT, and payment timestamps. lol49 does not store full card numbers or mobile banking PINs.
- Support communications: Messages, emails, and chat transcripts exchanged with the lol49 support team.
- Responsible gaming data: Self-exclusion requests, deposit limit settings, and session time preferences you configure through the lol49 platform.
Data Collected Automatically
When you access and use the lol49 platform, certain technical and behavioural data is collected automatically by our systems:
- Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
- Session and usage data: Pages visited, games launched, bet amounts placed, session start and end times, and in-platform navigation paths.
- Cookie data: Identifiers stored by session, performance, and analytics cookies placed on your device. See the Cookies section for full details.
- Geolocation data: Approximate location derived from IP address, used to apply geographic access controls and present market-appropriate content for Bangladesh players.
Data Collected from Third Parties
In limited circumstances, lol49 may receive personal data about you from third parties, including identity verification agencies conducting KYC checks, payment providers confirming transaction statuses, and fraud prevention services flagging suspicious activity patterns associated with your account.
Section 2
How We Use Your Data
lol49 processes your personal data only where we have a lawful basis for doing so. The primary purposes for which we use the data we collect are set out below, together with the legal basis on which each processing activity rests.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Registration data, identity documents | Contractual necessity |
| Processing BDT deposits and withdrawals | Payment data, identity documents | Contractual necessity |
| Age and identity verification (KYC) | Identity documents, date of birth | Legal obligation |
| Fraud detection and prevention | Device data, session data, payment data | Legitimate interests |
| Responsible gaming monitoring | Gameplay data, session data, self-exclusion preferences | Legal obligation / legitimate interests |
| Customer support | Support communications, account data | Contractual necessity |
| Marketing and promotional communications | Email address, mobile number, gameplay preferences | Consent |
| Platform analytics and performance | Usage data, cookie data | Legitimate interests |
Automated Decision-Making
lol49 uses automated systems to flag accounts for fraud review, to apply responsible gaming interventions (such as automatically pausing deposit processing when a player-set limit is reached), and to personalise game recommendations based on your play history. Where an automated decision has a significant effect on your account — such as a suspension pending fraud review — you have the right to request a manual review by a member of the lol49 team.
Section 3
Data Sharing and Third Parties
lol49 does not sell your personal data to third parties. We share data only where it is necessary to deliver our services, meet legal obligations, or protect the integrity of the platform. The categories of third parties with whom your data may be shared are described below.
Payment Processors
To process your BDT deposits and withdrawals, lol49 shares the minimum necessary payment reference data with the relevant payment provider — bKash, Nagad, Rocket, or Upay. lol49 does not share your full name, date of birth, or identity documents with payment providers beyond what those providers independently require for their own regulatory compliance purposes.
Game Providers
When you launch a game hosted by a third-party provider such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, a unique session token — not your personal registration data — is passed to the game provider's servers to initialise your game session. Game providers receive bet amounts and game outcomes for settlement purposes. No identity documents are passed to game providers.
KYC and Fraud Prevention Partners
To complete identity verification, lol49 may share copies of the documents you submit with accredited KYC verification partners. These partners process your data under strict data processing agreements and are not permitted to use your data for any purpose other than completing the verification task instructed by lol49.
Legal and Regulatory Disclosure
lol49 may disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, court order, or legal process. lol49 will notify affected players of such disclosures where it is legally permitted to do so.
Section 4
Cookies and Tracking Technologies
lol49 uses cookies and similar tracking technologies on the platform. Cookies are small text files stored on your device that help the platform function correctly, enable us to recognise returning players, and allow us to analyse how the platform is used so that we can improve it.
Types of Cookies We Use
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential | Maintain your login session, remember your language preference, and keep your account secure during a browsing session. Without these cookies the platform cannot function. | No — required for core functionality |
| Performance | Monitor page load times, server response errors, and game launch reliability. Data is aggregated and does not identify individual players. | Yes — via browser settings |
| Analytics | Track how players navigate the platform, which games are most popular, and where players encounter difficulties. Used to guide product improvement decisions. | Yes — via browser settings |
| Fraud Prevention | Identify devices associated with previously flagged fraudulent activity. These cookies are part of lol49's security infrastructure and cannot be opted out of without losing platform access. | No — required for security |
Managing Your Cookie Preferences
You can control and delete cookies through your web browser settings. Most modern browsers allow you to block third-party cookies, clear cookies on browser close, or receive a notification before a cookie is stored. Please note that disabling essential or fraud-prevention cookies will affect your ability to use the lol49 platform normally.
lol49 does not use advertising or retargeting cookies that track your activity across third-party websites outside of the lol49 platform.
Section 5
Data Security and Retention
lol49 takes the security of your personal data seriously and maintains a range of technical and organisational measures designed to protect against unauthorised access, disclosure, alteration, or destruction of the data we hold.
Security Measures
- SSL/TLS encryption: All data transmitted between your device and lol49 servers is encrypted using industry-standard SSL/TLS protocols.
- Data encryption at rest: Sensitive personal data, including identity document copies and payment references, is stored in encrypted form.
- Access controls: Access to player personal data is restricted to authorised lol49 personnel and third-party processors who have a legitimate need to access it for the purposes described in this policy.
- Security monitoring: lol49's infrastructure is monitored continuously for anomalous activity, unauthorised access attempts, and data breach indicators.
- Password hashing: Account passwords are stored as cryptographic hashes — lol49 staff cannot retrieve your password in plain text.
Data Breach Response
In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected players, lol49 will notify affected players as soon as reasonably practicable after becoming aware of the breach. Notifications will be sent to the email address registered on the affected account.
Data Retention Periods
lol49 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:
- Account and transaction data: Retained for a minimum of five years following account closure, to satisfy anti-money-laundering record-keeping obligations.
- Identity verification documents: Retained for a minimum of five years following the completion of the KYC verification, or five years following account closure, whichever is later.
- Support communications: Retained for three years following the resolution of the relevant support interaction.
- Analytics and session data: Retained in aggregated, anonymised form indefinitely. Raw session logs are purged after 13 months.
- Marketing preference records: Retained for two years following the last update to your marketing preferences, or until account closure, whichever is sooner.
Section 6
Your Privacy Rights
lol49 respects your rights over the personal data we hold about you. The following rights are available to players. To exercise any of these rights, contact lol49 support at the email address displayed in the footer of this page, clearly stating the right you wish to exercise and providing sufficient information for us to identify your account.
Right of Access
You have the right to request a copy of the personal data lol49 holds about you, together with information about how it is used, who it is shared with, and how long it is retained. lol49 will respond to access requests within 30 days of receipt.
Right to Rectification
If any personal data lol49 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Where possible, you can update certain account details (such as your contact email or phone number) directly through your lol49 account settings.
Right to Erasure
You may request the deletion of personal data lol49 holds about you where that data is no longer necessary for the purposes for which it was collected, or where you withdraw consent on which processing was based. Please note that this right is subject to overriding legal retention obligations — lol49 cannot delete transaction or identity records that it is legally required to retain.
Right to Restriction of Processing
In certain circumstances — for example, where you contest the accuracy of data we hold, or where you have objected to processing and we are assessing whether our legitimate interests override your objection — you may request that we restrict processing of your data to storage only, pending resolution.
Right to Object to Marketing
Where personal data is processed on the basis of your consent for direct marketing purposes, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn. See the Marketing Communications section for opt-out instructions.
Section 7
Marketing Communications
With your consent, lol49 may send you marketing communications about promotions, bonuses, new games, seasonal offers (including BPL season promotions, Eid offers, and other Bangladesh market events), and platform news. These communications may be delivered via email or SMS to the contact details registered on your account.
Opting In
Marketing consent is collected during the account registration process. By ticking the relevant consent checkbox during registration, you agree to receive marketing communications from lol49. You are not required to provide marketing consent as a condition of registering an account or using the platform.
Opting Out
You may withdraw your consent to receive marketing communications from lol49 at any time by contacting lol49 support at the email address displayed in the footer of this page and requesting to be removed from the marketing list. Once your opt-out request has been processed, you will no longer receive promotional emails or SMS messages from lol49. Please allow up to 5 business days for the opt-out to take effect across all communication channels.
Transactional Communications
Please note that opting out of marketing communications does not affect transactional or service communications, such as deposit confirmation messages, withdrawal notifications, account security alerts, or responses to your support queries. These communications are necessary to the operation of your account and cannot be opted out of while your account remains active.
Section 8
Policy Updates and Contact
lol49 reviews this Privacy Policy on a regular basis and updates it where necessary to reflect changes to our data processing activities, changes in applicable law, or feedback from players and privacy regulators. The most current version of this Privacy Policy is always available at lol49.bio/privacy-policy.
Notification of Changes
Where we make material changes to this Privacy Policy — meaning changes that significantly affect how we use your data or the rights available to you — we will notify registered players by email to the address held on their account prior to the changes taking effect. Minor clarifications and non-material updates will be published on this page without individual notification.
Governing Version
The version of this Privacy Policy published on this page at the time of any data processing activity is the version that governs that activity. If you access the lol49 platform following an update to this policy, your continued use of the platform constitutes acceptance of the updated policy.
Contact lol49 About Privacy
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to raise a concern about how lol49 has handled your personal data, please contact the lol49 support team at the email address displayed in the footer of this page. All privacy-related enquiries are handled on Bangladesh Standard Time (BST, UTC+6).
This Privacy Policy was last updated in January 2026. lol49 is committed to transparency in data handling and will continue to update this policy as our platform and obligations evolve.
Questions About Your Data or Account?
Explore our FAQ for quick answers, review our Terms & Conditions, or log in to manage your lol49 account preferences.