l677 Privacy Policy — How We Protect Your Personal Data
At l677, your privacy is a core commitment, not an afterthought. This Privacy Policy explains in plain, formal English exactly what personal data we collect from Bangladesh players, how we use it, who we share it with, and what rights you have over it. We handle all data in accordance with our security obligations and best-practice data governance standards.
Six Privacy Principles We Live By
These principles summarise l677's approach to data protection. They reflect our obligations to every player across Bangladesh and form the foundation of this Privacy Policy.
Purpose Limitation
We collect only the personal data that is strictly necessary for operating your l677 account, processing transactions, verifying identity, and improving the platform experience. We do not collect data speculatively or for undisclosed purposes.
Data Minimisation
l677 applies strict data minimisation practices. We limit the personal information we hold to what is required at each stage of your relationship with us — from registration through to account closure — and do not retain data beyond its useful lifecycle.
Security by Design
All data transmitted between your device and l677 servers is protected by TLS 1.3 encryption. Data at rest is stored in encrypted form on access-controlled infrastructure. Security reviews are conducted regularly to identify and remediate vulnerabilities.
Player Rights
Every l677 player has the right to access, correct, and request deletion of their personal data. We respond to all data rights requests within 30 days of receipt. Requests may be submitted to [email protected] with the subject line "Data Rights Request".
No Data Selling
l677 does not sell, rent, or trade your personal data to any third party for commercial purposes. Data is shared only with trusted service providers who assist us in running the platform, and only under strict contractual data-protection obligations.
Transparency
We keep this Privacy Policy up to date and communicate material changes to registered players before they take effect. This document is written in plain English so that every player in Bangladesh can understand precisely how their data is handled.
Categories of Personal Data We Process
The following table summarises the categories of personal data l677 collects, the purpose for which each category is used, and how long we retain it.
| Data Category | Examples | Primary Purpose | Retention Period |
|---|---|---|---|
| Identity Data | Full name, date of birth, national ID number, passport number | Account registration, KYC verification, age verification (21+) | Duration of account + 5 years after closure |
| Contact Data | Mobile number, email address, residential address | Account communication, transaction notifications, support | Duration of account + 3 years after closure |
| Financial Data | bKash/Nagad/Rocket wallet numbers, transaction history, deposit and withdrawal records | Payment processing, fraud prevention, AML compliance | 7 years (regulatory requirement) |
| Technical Data | IP address, device type, browser type, operating system, session logs | Security monitoring, fraud detection, platform optimisation | 12 months from collection |
| Usage Data | Game history, betting history, pages visited, session duration | Responsible gaming monitoring, personalisation, product improvement | Duration of account + 2 years after closure |
| Communications Data | Support chat logs, email correspondence, complaint records | Dispute resolution, quality assurance, compliance | 3 years from the date of communication |
| Verification Documents | Scanned copies of national ID, utility bills, bank statements | KYC identity and address verification | Duration of account + 5 years after closure |
1 Introduction
l677 ("we", "us", "our") operates the online betting and casino platform accessible at l677.io, including any associated mobile applications and web-based interfaces (collectively, the "Platform"). We are committed to protecting and respecting the privacy of all players and users who interact with the Platform, including players based throughout Bangladesh in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.
This Privacy Policy sets out the basis on which any personal data we collect from you — or that you provide to us — will be processed by l677. Please read this document carefully to understand our practices regarding your personal data and how we will treat it. This policy is written in formal English and is the authoritative statement of our data practices.
By registering an account on the l677 Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you must not use the Platform.
2 Personal Data We Collect
2.1 Data You Provide Directly
We collect personal data that you actively provide to us when you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, or participate in promotional activities. This includes: your full legal name; date of birth; residential address; mobile phone number; email address; national ID card number or passport number; and mobile financial service wallet numbers (bKash, Nagad, Rocket, or Upay).
2.2 Data Collected Automatically
When you access and use the l677 Platform, certain technical data is collected automatically by our systems. This includes your IP address, device identifiers, browser type and version, operating system, referring URLs, pages visited on the Platform, session timestamps, and geolocation data derived from your IP address. This data is used primarily for security monitoring, fraud prevention, and improving Platform performance.
2.3 Data from Third Parties
l677 may receive personal data about you from third-party sources in limited circumstances. These include identity verification service providers who confirm the validity of documents you submit; payment processors who confirm the ownership status of your mobile wallet; and fraud detection partners who cross-reference transactional data to identify suspicious patterns. We use such third-party data only to supplement our own records for the purposes stated in this Policy.
3 How We Collect Your Data
l677 collects personal data through the following channels and mechanisms:
- Account Registration Forms: When you create an l677 account, you complete a registration form that captures your identity and contact details.
- KYC Document Uploads: During the verification process, you upload copies of identity documents and proof of address directly to the Platform's secure document portal.
- Deposit and Withdrawal Transactions: Payment data is captured and recorded each time you initiate a financial transaction on the Platform via bKash, Nagad, Rocket, or Upay.
- Cookies and Tracking Technologies: The Platform uses cookies, pixel tags, and similar technologies to collect technical and usage data automatically during your sessions. See Section 7 for full details.
- Customer Support Interactions: When you contact l677's support team by email or live chat, the content of those communications is recorded and stored.
- Promotional Participation: When you opt into or claim a bonus or promotion, data relating to that participation is recorded and linked to your account profile.
4 Legal Basis for Processing
l677 processes your personal data on the following legal bases, depending on the nature of the processing activity:
- Contractual Necessity: Processing is necessary for the performance of the contract between you and l677 — specifically, to create and manage your account, process deposits and withdrawals, settle bets and games, and provide customer support.
- Legal Obligation: Certain processing activities are required to comply with applicable legal obligations, including anti-money laundering (AML) checks, age verification (21+), and the retention of financial records for statutory periods.
- Legitimate Interests: l677 processes certain data on the basis of its legitimate business interests, which include fraud prevention, security monitoring, Platform improvement, and responsible gaming enforcement — provided these interests are not overridden by your fundamental rights and freedoms.
- Consent: Where we rely on consent as a legal basis — for example, for sending you promotional communications — you have the right to withdraw that consent at any time by contacting [email protected] or adjusting your account notification preferences.
5 How We Use Your Personal Data
l677 uses the personal data we collect for the following purposes:
- To create, verify, and maintain your l677 player account and ensure it is operated in accordance with our Terms and Conditions.
- To process your deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to maintain accurate records of all financial transactions associated with your account.
- To verify your identity and age (21+) in compliance with our KYC obligations, and to confirm the ownership of the payment methods registered to your account.
- To detect, investigate, and prevent fraudulent transactions, money laundering, account compromise, and other forms of financial crime or platform abuse.
- To monitor your betting and gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling behaviour, and to apply responsible gaming tools where appropriate.
- To communicate with you regarding your account, including transaction confirmations, security alerts, policy updates, and responses to your support enquiries.
- To send you promotional communications about l677 bonuses, new game releases, BPL cricket betting opportunities, and seasonal offers — but only where you have consented to receive such communications or where we have a legitimate interest to do so.
- To analyse aggregated, anonymised usage data for the purpose of improving the Platform's functionality, design, and game offering.
- To comply with any legal or regulatory obligation that requires us to collect, retain, or disclose personal data.
6 Data Sharing and Disclosure
6.1 Trusted Service Providers
l677 shares personal data with a limited number of trusted third-party service providers who assist in the operation of the Platform. These include identity verification and KYC service providers; payment processing partners (bKash, Nagad, Rocket, Upay); fraud detection and anti-money-laundering screening services; game software providers (including Evolution Gaming, Pragmatic Play, NetEnt, and Microgaming) where game-specific player data is required for gameplay; customer support platform providers; and cloud hosting and data storage infrastructure providers.
All third-party service providers are bound by contractual data-protection obligations and are prohibited from using your personal data for any purpose other than the specific service they provide to l677. We conduct due diligence on all service providers before engaging them and review those relationships regularly.
6.2 Legal and Regulatory Disclosure
l677 may disclose your personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by law, court order, or lawful governmental request. Such disclosures are made only to the extent required and, where legally permissible, we will notify you of any such disclosure.
6.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of l677's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify registered players of any such transfer and the applicable privacy terms before it takes effect.
7 Cookies and Tracking Technologies
7.1 What Are Cookies
Cookies are small text files placed on your device when you visit a website. l677 uses cookies and similar technologies (including pixel tags and local storage) to distinguish you from other users, maintain your session while you are logged in, remember your preferences, and collect usage data for analytics and security purposes.
7.2 Types of Cookies We Use
- Strictly Necessary Cookies: These are essential for the Platform to function. They enable core features such as session management, login authentication, and security token verification. These cookies cannot be disabled.
- Functional Cookies: These cookies remember your preferences such as language settings, display options, and previously visited sections of the Platform. Disabling them may affect Platform functionality.
- Analytics Cookies: We use anonymised analytics data to understand how players navigate the Platform, which pages are most visited, and where technical errors occur. This data helps us improve the Platform experience.
- Security Cookies: These cookies support our fraud detection systems by recording session fingerprints and identifying anomalous login behaviour.
7.3 Managing Cookies
You may control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and receive warnings before cookies are stored. Please note that disabling strictly necessary or security cookies may prevent you from logging into your l677 account or using core Platform features. Refer to your browser's help documentation for instructions on managing cookies.
8 Data Security
l677 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- TLS 1.3 encryption for all data transmitted between your device and l677 servers.
- AES-256 encryption for personal data stored in our databases at rest.
- Role-based access controls ensuring that only authorised personnel with a demonstrated business need can access personal data.
- Multi-factor authentication requirements for all internal staff accessing production systems.
- Regular penetration testing and security audits conducted by independent third-party security specialists.
- Intrusion detection systems and 24/7 security monitoring of Platform infrastructure.
- A documented incident response procedure for identifying, containing, and notifying affected parties in the event of a data breach.
9 Data Retention
l677 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law. The retention periods applicable to each category of data are summarised in the table in the preceding section of this page. As a general rule:
- Identity and verification data is retained for the duration of your account plus five years following account closure, to comply with anti-money-laundering regulatory requirements.
- Financial transaction records are retained for seven years in accordance with statutory financial record-keeping obligations.
- Technical and session log data is retained for twelve months from collection for security and fraud detection purposes.
- Marketing and communications preferences are retained until you withdraw your consent or close your account.
When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be associated with an individual player. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.
10 Your Data Rights
As a player on the l677 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request — [Your Username]".
- Right of Access: You have the right to request a copy of the personal data l677 holds about you, along with information about how it is processed.
- Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by l677 be corrected or updated without undue delay.
- Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
- Right to Restriction of Processing: You have the right to request that l677 restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
- Right to Data Portability: You have the right to receive a copy of the personal data you have provided to l677 in a structured, machine-readable format, and to request that it be transmitted to another service provider where technically feasible.
- Right to Object: You have the right to object to the processing of your personal data where l677 relies on legitimate interests as its legal basis, including for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
l677 will respond to all data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, with notification provided to you before the original deadline expires.
11 Children's Privacy
The l677 Platform is strictly intended for adults aged 21 years and above. l677 does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from an individual under the minimum age requirement, we will take immediate steps to delete that data and close the associated account.
Parents and guardians who believe that a minor may have registered an account on l677 are encouraged to contact us immediately at [email protected] with the subject line "Under-Age Account Report" so that we can investigate and take appropriate action. l677 supports the use of parental control software and other tools to prevent minors from accessing online gambling platforms.
12 Third-Party Links
The l677 Platform may contain links to third-party websites or services for informational purposes, such as links to game providers' information pages or payment service documentation. l677 has no control over the content, privacy practices, or data-handling policies of those third-party sites and accepts no responsibility for them. We encourage you to read the privacy policy of any third-party site you visit via a link from l677.io. This Privacy Policy applies solely to data collected by the l677 Platform itself.
13 Changes to This Privacy Policy
l677 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform operations. When material changes are made, we will provide notice to registered players via the Platform interface or via the email address associated with your account at least 7 days before the changes take effect.
The "Effective" date at the top of this document will be updated each time a new version is published. We recommend that you review this Privacy Policy periodically to remain informed of how we protect your personal data. Your continued use of the Platform following the publication of changes constitutes your acceptance of the revised Privacy Policy.
14 Contact Us
If you have any questions, concerns, or complaints regarding this Privacy Policy or the manner in which l677 processes your personal data, please contact our support team using the details below. All correspondence must be submitted in English.
Email: [email protected]
Subject Line for Data Enquiries: Data Rights Request — [Your Username]
Response Time: l677 aims to acknowledge all privacy-related enquiries within 5 business days and to provide a substantive response within 30 calendar days, in accordance with applicable data rights obligations. Response times are measured in Bangladesh Standard Time (BST, UTC+6).
Your Data Is Safe. Now Enjoy the Games.
Now that you know how l677 protects your privacy, log in and explore cricket betting, live casino, slots, and card games — all from Bangladesh's most trusted platform.