Privacy Policy
100l5 Data Protection

1. Information We Collect

100l5 collects personal data from you in several ways: directly when you register an account or interact with our services, automatically when you use the platform, and occasionally from third-party sources such as payment providers. Below is a detailed breakdown of the categories of data we collect.

1.1 Registration and Account Data

When you create a 100l5 account, we collect the following information:

• Full legal name as it appears on your government-issued identity document;
• Date of birth — used to verify that you meet the 18+ age requirement;
• Mobile phone number — used for account authentication and OTP verification;
• Email address — used for account notifications and support correspondence;
• Username and hashed password — stored in encrypted form, never in plaintext;
• Preferred currency (Bangladeshi Taka — ৳ / BDT).

1.2 Identity Verification (KYC) Data

To comply with our anti-money laundering obligations and to protect the integrity of the platform, 100l5 requires identity verification before processing withdrawals above specified thresholds. KYC data we may collect includes:

• Bangladesh National Identity Card (NID) — front and back image;
• Valid passport — biographical data page image;
• Proof of payment method ownership (e.g., a screenshot of the player's bKash or Nagad account screen confirming name and mobile number match);
• Selfie photograph in some cases, for liveness verification.

All KYC documents are handled by authorised 100l5 compliance personnel only. They are stored in encrypted, access-controlled storage systems and are never shared with advertising or marketing partners.

1.3 Financial Transaction Data

When you make deposits or withdrawals, 100l5 records:

• Transaction amount and currency (৳ BDT);
• Payment method used (bKash, Nagad, Rocket, Upay, or bank transfer);
• Transaction reference number provided by the payment provider;
• Transaction date, time (Bangladesh Standard Time, UTC+6), and status.

Important: 100l5 does not store full card numbers, bKash PINs, or Nagad PINs. Payment credentials are processed directly by the respective payment provider and are not transmitted through or stored on 100l5 infrastructure.

1.4 Gameplay and Betting Data

As a natural part of operating a sports betting and casino platform, 100l5 records all betting and gaming activity associated with your account, including:

• All wagers placed, including stake amount, odds, market, and outcome;
• Casino game sessions — game title, session duration, rounds played, bet amounts, and results;
• Crash game participation records;
• Bonus claims, wagering progress, and bonus settlement history.

This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance. It is retained for the periods described in Section 6 of this policy.

1.5 Technical and Device Data

When you access the 100l5 platform, we automatically collect technical information including:

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Session duration, page views, and navigation paths within the platform;
• Referring URL (the site or search result that directed you to 100l5);
• Cookie identifiers and similar tracking technologies (see Section 4).

2. How We Use Your Data

100l5 processes your personal data only where we have a lawful basis to do so. The table below sets out our primary processing purposes and the legal basis for each.

100l5 does not use your personal data for automated decision-making processes that produce significant legal effects on you without human review. Where automated systems flag an account for fraud or bonus abuse investigation, a qualified member of our compliance team reviews the case before any action is taken.

3. Data Sharing and Disclosure

100l5 does not sell your personal data. We may share your information with the following categories of third parties only where strictly necessary:

3.1 Payment Processors

To facilitate deposits and withdrawals, 100l5 shares necessary transaction details with payment providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. Each of these providers operates under its own privacy terms and applicable Bangladeshi financial regulations. 100l5 shares only the minimum data required to complete the transaction.

3.2 Game Technology Providers

Casino and slot games available on 100l5 are supplied by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others. These providers may receive session-level technical data to deliver game functionality. Game providers do not receive your full identity information, KYC documents, or financial account details.

3.3 Fraud Prevention and Security Partners

100l5 works with specialised fraud detection and cybersecurity providers. These partners may process device fingerprint data, IP addresses, and behavioural session data to identify suspicious activity. All such partners are contractually bound to use this data only for fraud prevention purposes on behalf of 100l5.

3.4 Legal and Regulatory Disclosure

100l5 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, a valid legal order, or to protect the rights, safety, or property of 100l5, its players, or the public. We will notify you of any such disclosure where we are legally permitted to do so.

4. Cookies and Tracking Technologies

100l5 uses cookies — small text files stored on your device — along with similar technologies such as web beacons and local storage, to operate and improve the platform. The following table describes the categories of cookies we use.

You can control non-essential cookies through your browser's settings panel. Most modern browsers allow you to block, delete, or receive alerts about cookies. Disabling strictly necessary cookies will impair your ability to log in and use the 100l5 platform. Disabling analytics or functional cookies will not affect your ability to place bets or access your account.

100l5 does not use cookies to serve third-party advertisements on external websites or to track your browsing activity across sites other than 100l5.net.

5. Data Security Measures

Protecting your personal data against unauthorised access, disclosure, alteration, and destruction is a core responsibility at 100l5. We implement a layered security architecture that includes:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and 100l5 servers is encrypted using industry-standard TLS 1.3 protocols, equivalent to 256-bit SSL protection.
• Encrypted data storage: Personal data and KYC documents at rest are stored using AES-256 encryption on access-controlled servers.
• Access controls: 100l5 staff access to personal data is role-based and strictly limited to those who require it to perform their job function. All access events are logged and audited.
• Two-factor authentication (2FA): Players are strongly encouraged to enable OTP-based 2FA on their 100l5 accounts. All internal 100l5 administrative systems require multi-factor authentication.
• Regular security assessments: 100l5 conducts periodic vulnerability assessments and penetration testing to identify and remediate security weaknesses before they can be exploited.
• Incident response plan: In the event of a data breach affecting player information, 100l5 has a documented incident response procedure that includes notification to affected players without undue delay.

While 100l5 takes all reasonable and practical steps to protect your data, no online platform can guarantee absolute security. You are also responsible for keeping your login credentials secure and for using a strong, unique password on your 100l5 account.

6. Data Retention Policy

100l5 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active account data: Retained for the full duration of the account relationship and for a period of 5 years following account closure, to comply with anti-money laundering record-keeping requirements.
• KYC documents: Retained for 5 years from the date of account closure or the date of the last transaction, whichever is later.
• Financial transaction records: Retained for a minimum of 5 years from the transaction date, in accordance with financial record-keeping obligations.
• Customer support correspondence: Retained for 3 years from the date of the most recent interaction.
• Analytics and technical logs: Retained in anonymised or aggregated form only after 12 months; raw session logs are purged after 90 days.
• Marketing consent records: Retained for 3 years from the date consent was given or withdrawn, as evidence of lawful processing.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is not technically feasible, data is rendered inaccessible and scheduled for deletion at the next feasible purge cycle.

7. Your Privacy Rights

As a player on the 100l5 platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team with a clear description of your request. We aim to respond to all privacy rights requests within 30 days.

• Right of access: You may request a copy of all personal data that 100l5 holds about you, including account details, transaction history, and any KYC records on file.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Some data (such as your registered legal name) may require updated KYC documentation to amend.
• Right to erasure: You may request deletion of your personal data. This right is subject to limitations where retention is required by law (e.g., financial records), where an account has an unresolved balance or active investigation, or where the data is needed to protect a legitimate legal claim.
• Right to restrict processing: In certain circumstances, such as where you contest the accuracy of data or have objected to processing pending verification, you may request that 100l5 temporarily restrict use of your data.
• Right to data portability: You may request a machine-readable export of the personal data you provided to 100l5 directly (e.g., registration data), where technically feasible.
• Right to withdraw marketing consent: Where you have opted in to receive promotional communications from 100l5, you may withdraw that consent at any time via your account notification settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to 100l5 processing your personal data on the basis of legitimate interests, including for profiling purposes related to responsible gaming monitoring, where you feel your individual circumstances warrant an exception.

8. Updates to This Policy

100l5 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, legal obligations, or regulatory requirements. When material changes are made, we will notify registered players via the email address on file and/or through a prominent notice on the platform.

The effective date at the top of this document indicates when the current version was last revised. We encourage you to review this Privacy Policy periodically. Your continued use of the 100l5 platform following notification of an update constitutes your acceptance of the revised policy.

If any proposed change to this Privacy Policy would materially reduce your privacy rights, 100l5 will provide at least 14 days' advance notice before the change takes effect, giving you the opportunity to review the update and, if you do not agree, to close your account and withdraw any available balance before the changes apply.

The current version of this Privacy Policy is always available at 100l5.net/privacy-policy. Previous versions are available on request by contacting our support team.