lb99 Privacy Policy — Your Data, Your Rights

1 Information We Collect

When you use lb99, we collect personal data in several ways — directly from you during registration and account activity, automatically through your use of the platform, and in some cases from third parties involved in payment processing or identity verification. The categories of data we collect are described below.

1.1 Information You Provide to Us

• Registration data: Full name, date of birth, email address, mobile phone number, and residential address submitted when you create an lb99 account.
• Identity verification documents (KYC): Copies of government-issued photo identification (such as a National Identity Card or passport), proof of address documents, and payment method ownership evidence submitted during the Know Your Customer verification process.
• Payment information: Mobile wallet numbers (bKash, Nagad, Rocket, Upay) and card details (Visa, Mastercard) entered when making deposits or requesting withdrawals. Note that full card numbers are processed directly by certified payment processors and are not stored on lb99 servers.
• Support communications: Records of any messages, emails, live chat transcripts, or other communications you send to lb99 customer support.
• Responsible gaming submissions: Any information you voluntarily provide when requesting deposit limits, loss limits, cool-off periods, or self-exclusion through the responsible gaming tools.

1.2 Information Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage and session data: Pages visited, time spent on pages, navigation paths, session start and end times, game sessions played, bet placement history, and feature interactions.
• Location data: General geographic location derived from IP address. lb99 does not collect precise GPS location data.
• Cookies and tracking technologies: Data collected via cookies, local storage, pixel tags, and similar technologies as described in Section 4 of this policy.

1.3 Information from Third Parties

• Identity verification providers: Results and risk scores from third-party identity verification and age verification services used as part of lb99's KYC process.
• Payment processors: Transaction confirmations, payment status updates, and flagged transaction notifications from bKash, Nagad, Rocket, Upay, and card payment processors.
• Fraud and AML screening services: Risk data from third-party anti-fraud and anti-money laundering monitoring services used to protect the platform and its players.

2 How We Use Your Data

lb99 uses the personal data we collect for specific, defined purposes. We do not use your data in ways that go beyond the purposes described below, and we do not use your data for purposes that would be incompatible with the reason it was originally collected.

lb99 does not use automated decision-making processes that produce legal or similarly significant effects on players without human review. Where automated systems flag an account for review (for example, AML screening or responsible gaming triggers), a human reviewer assesses the case before any material action is taken.

3 Legal Basis for Processing

lb99 processes personal data only where a valid legal basis exists for doing so. The legal bases we rely on are explained below:

• Contract performance: Processing necessary to fulfil the terms of the agreement between you and lb99 — for example, operating your account, processing payments, and delivering the gaming and betting services you have requested.
• Legal obligation: Processing required to comply with applicable laws and regulations — including anti-money laundering obligations, age verification requirements, and any directions from relevant authorities.
• Legitimate interests: Processing carried out for lb99's legitimate business interests, provided those interests do not override your own privacy rights. This includes fraud prevention, platform security, business analytics, and responsible gaming monitoring. We conduct a balancing test when relying on legitimate interests to ensure your rights are appropriately weighted.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications. Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

4 Cookies and Tracking Technologies

lb99 uses cookies and similar client-side storage technologies to operate the platform and improve your experience. Cookies are small text files stored on your device by your browser when you visit lb99. They serve several important functions described below.

4.1 Types of Cookies Used

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit, security tokens that protect against cross-site request forgery, and cookies that remember your language and currency preferences. These cookies cannot be disabled without breaking core platform functionality.
• Analytical cookies: Used to understand how players use lb99 — which pages are visited most frequently, where users encounter errors, and how navigation paths flow. This data is collected in aggregated, anonymised form and is used solely to improve the platform. lb99 uses first-party analytics rather than third-party tracking platforms.
• Functional cookies: Used to remember your personal preferences, such as your preferred lobby view, game filter settings, and notification preferences, so that your experience is consistent across sessions.
• Performance cookies: Used to measure page load times, API response performance, and server-side rendering metrics to help lb99's technical team identify and resolve performance bottlenecks.

4.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings at any time. Most modern browsers allow you to block, delete, or selectively accept cookies. Please note that disabling strictly necessary cookies will prevent lb99 from functioning correctly — you may be unable to log in, maintain a session, or use the cashier. Blocking analytical and functional cookies will not prevent platform access but may affect the quality of your experience.

4.3 Local Storage and Similar Technologies

In addition to traditional cookies, lb99 may use browser local storage and session storage to persist lightweight application state (such as your in-progress game state or UI preferences) within a single session. This data is stored locally on your device and is not transmitted to lb99's servers except where explicitly necessary for game integrity purposes.

5 Data Sharing and Disclosure

lb99 does not sell, rent, or trade your personal data. We share your information only in the limited circumstances described below, and only with recipients who are bound by appropriate data protection obligations.

5.1 Payment Processors

To process deposits and withdrawals, lb99 shares necessary payment details with certified payment service providers including bKash, Nagad, Rocket, Upay, and the card payment processors handling Visa and Mastercard transactions. These providers receive only the minimum data required to execute the specific transaction and are bound by their own regulatory data protection requirements.

5.2 Identity Verification Providers

During the KYC verification process, lb99 shares identity document images and associated personal data with accredited third-party identity verification service providers. These providers process your data solely for verification purposes and are contractually prohibited from using it for any other purpose.

5.3 Fraud Prevention and AML Services

lb99 uses third-party fraud prevention and anti-money laundering monitoring services. Certain transactional and behavioural data points may be shared with these services for risk scoring purposes. These providers are bound by strict data processing agreements and may not use lb99 player data for purposes outside the contracted service scope.

5.4 Game Providers

When you play a game supplied by a third-party game provider (such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, or Ezugi), a session token and a limited player identifier are shared with the relevant provider's game server to authenticate your session and record the game outcome. Full personal data (such as your name, address, or payment details) is not shared with game providers.

5.5 Legal and Regulatory Disclosures

lb99 may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or regulatory direction. lb99 will, where legally permissible, notify the affected player before making such a disclosure.

5.6 Business Transfers

In the event of a merger, acquisition, or sale of all or part of lb99's business, personal data held by lb99 may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer that materially affects their privacy rights, and the acquiring entity will be required to honour this Privacy Policy or provide equivalent protections.

6 Data Retention

lb99 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The table below summarises the standard retention periods applied to the main categories of personal data held by lb99.

When the applicable retention period expires, personal data is securely deleted or anonymised. Where full deletion is not immediately possible due to backup systems, the data is isolated and protected until it can be permanently removed in accordance with lb99's data destruction schedule.

7 Your Privacy Rights

As a player on lb99, you hold a number of rights regarding your personal data. lb99 is committed to honouring these rights promptly and without undue restriction. Your rights include:

• Right of access: You may request a copy of all personal data lb99 holds about you. Requests will be fulfilled within 30 days of verification of your identity. No fee is charged for a standard access request.
• Right to rectification: If any personal data lb99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account information directly from your account dashboard, or by contacting support for changes that require manual review.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where processing has been unlawful. Note that lb99 may be required to retain certain data for legal and regulatory compliance purposes even following a deletion request — in such cases, we will explain what data must be retained and why.
• Right to restrict processing: You may request that lb99 restrict processing of your personal data in certain circumstances — for example, while a rectification request is under review, or where you contest the lawfulness of processing.
• Right to data portability: Where processing is based on your consent or on a contractual basis, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another service provider.
• Right to object: You have the right to object to processing based on legitimate interests. lb99 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms. You may also object at any time to processing for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the rights described above, please contact lb99 support at [email protected]. lb99 will verify your identity before acting on any rights request. We will respond substantively within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by up to a further 30 days, with notice provided to you within the initial 30-day window.

8 Data Security

lb99 implements a layered set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and lb99's servers is encrypted using TLS 1.2 or TLS 1.3 protocols. The lb99 platform is accessible only via HTTPS.
• Data-at-rest encryption: Sensitive personal data stored on lb99's database servers is encrypted at rest using AES-256 encryption. Database access is restricted to authenticated internal services only.
• Access controls: Access to personal data by lb99 staff is governed by the principle of least privilege — employees are granted access only to the data categories required for their specific job function. Access rights are reviewed periodically and revoked upon role changes or departures.
• Two-factor authentication (2FA): All lb99 administrative system access requires two-factor authentication. Players are also strongly encouraged to enable 2FA on their own accounts via account security settings.
• Audit logging: All access to and modifications of personal data within lb99's systems are logged. Logs are retained for security audit and incident investigation purposes.
• Vulnerability management: lb99 conducts regular security assessments and penetration testing. Identified vulnerabilities are triaged and remediated according to a risk-based prioritisation schedule.
• Data breach response: lb99 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to player rights and freedoms, affected players will be notified promptly, and any required reporting to relevant authorities will be completed within applicable timeframes.

While lb99 takes all reasonable steps to secure your personal data, no online platform can guarantee absolute security. You play an important role in keeping your account secure by using a strong, unique password, enabling two-factor authentication, and not sharing your login credentials with others. If you suspect any unauthorised access to your lb99 account, contact support immediately at [email protected].

9 Third-Party Services

The lb99 platform integrates with a number of third-party service providers to deliver its full range of features. While lb99 carefully selects and contracts with third parties who meet appropriate data protection standards, it is important that players understand the role of these parties and their own privacy practices.

9.1 Game Providers

Games on lb99 are supplied by third-party providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Play'n GO, Hacksaw Gaming, Spribe, and Ezugi. These providers operate their own game servers and may process limited session and game data necessary to deliver the game. Each provider maintains its own privacy policy governing the data processed on its systems. lb99 does not transmit full player personal data to game providers beyond the session token required for game authentication.

9.2 Payment Service Providers

Payments via bKash, Nagad, Rocket, Upay, Visa, and Mastercard are processed by the respective payment service providers, each of which operates under its own privacy and data handling policies. lb99 recommends that players review the privacy policies of the payment methods they use. lb99 is not responsible for the data handling practices of independent payment providers.

9.3 Links to Other Websites

The lb99 website does not contain links to external third-party websites. This Privacy Policy applies solely to the lb99.win domain and its subdomains. lb99 accepts no responsibility for the privacy practices of any external website that a player may navigate to independently.

10 Updates to This Policy

lb99 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform operations. When material changes are made — meaning changes that significantly affect how we collect, use, or share your personal data — lb99 will notify registered players via the email address associated with their account in advance of the changes taking effect.

Non-material changes (such as minor editorial clarifications or administrative updates) may be made without advance notice. The "last updated" date at the top of this page will always reflect when the most recent revision was made. The current version of this Privacy Policy is always accessible at https://lb99.win/privacy-policy.

Continued use of the lb99 platform following notification of a material policy update constitutes your acceptance of the revised Privacy Policy. If you do not agree to the updated policy, you should cease using lb99 and contact support to arrange account closure.

10.1 Contact and Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way lb99 handles your personal data, please contact us at: [email protected]. Privacy-related enquiries will receive a dedicated response from our privacy team within 5 business days.

lb99 takes all privacy complaints seriously. Where a complaint relates to a potential data breach or unauthorised disclosure of personal data, our security team will initiate an internal investigation and provide a substantive response within 72 hours of acknowledgement. Players who remain unsatisfied with lb99's response to a privacy complaint may escalate the matter through appropriate legal channels available in their jurisdiction.