Privacy Policy — How lv44 Collects, Uses, and Protects Your Personal Data
At lv44, your privacy is not a formality — it is a core operating principle. This Privacy Policy explains in plain English exactly what personal data we collect when you use lv44.io, why we collect it, how we store and protect it, who we may share it with, and the rights you hold over your own information. Please read it alongside our Terms & Conditions for a complete picture of how we operate.
- 1. Introduction & Scope
- 2. Data Controller
- 3. Data We Collect
- 4. How We Collect Data
- 5. How We Use Your Data
- 6. Legal Basis for Processing
- 7. Data Sharing & Third Parties
- 8. International Data Transfers
- 9. Data Retention
- 10. Security Measures
- 11. Cookies & Tracking
- 12. Your Data Rights
- 13. Children & Minors
- 14. Changes to This Policy
- 15. Contact & Complaints
Introduction & Scope
This Privacy Policy applies to all personal data processed by lv44 in connection with the lv44 Platform, including the website at lv44.io, any mobile-optimised versions of that site, and all associated services such as account management, deposits and withdrawals via bKash, Nagad, Rocket, and other Bangladeshi payment channels, sports betting, cricket betting, live casino, slot games, and customer support communications.
By registering an account on lv44 or by continuing to use lv44.io after the effective date shown above, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.
This Policy should be read alongside the lv44 Terms & Conditions. Where any conflict exists between this Policy and the Terms & Conditions on a privacy-related matter, this Policy takes precedence.
Data Controller
For the purposes of this Privacy Policy, lv44 acts as the data controller in respect of all personal data collected from users of lv44.io. As data controller, lv44 determines the purposes for which and the means by which personal data is processed.
All enquiries regarding data rights, data access requests, deletion requests, and privacy complaints should be directed to the lv44 Privacy team using the contact details set out in Section 15 of this Policy.
Data We Collect
lv44 collects the following categories of personal data in the course of providing the Platform and related services:
| Category | Specific Data Points | Collected At |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID or passport number, selfie/photo for KYC | Registration & KYC verification |
| Contact Data | Bangladeshi mobile number, email address, residential address (city, district) | Registration |
| Financial Data | bKash / Nagad / Rocket wallet number, bank account reference, deposit and withdrawal history, transaction amounts in BDT | First deposit & ongoing transactions |
| Gaming Activity Data | Bet history, game sessions, win/loss records, bonus usage, wagering patterns, session timestamps (BST UTC+6) | Ongoing Platform use |
| Technical Data | IP address, device type, operating system, browser type and version, device fingerprint, screen resolution | Each site visit |
| Behavioural Data | Pages visited, click patterns, time on page, navigation paths, search queries within the Platform | Each site visit |
| Communications Data | Live chat transcripts, support email content, complaint records, promotional opt-in status | Customer support interactions |
| Responsible Gaming Data | Self-exclusion status, deposit limit settings, cooling-off periods, problem gambling assessment responses | Account Settings & support requests |
How We Collect Data
lv44 collects personal data through the following means:
- Directly from you: when you complete the registration form, submit KYC documentation, make a deposit or withdrawal request, contact support, or update your account profile.
- Automatically: through cookies, pixel tags, server logs, and device fingerprinting technologies when you visit or interact with lv44.io. See Section 11 for full details on cookies and tracking.
- From payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and City Bank provide lv44 with transaction confirmation data (amount, timestamp, wallet reference) to enable deposit crediting and withdrawal processing.
- From identity verification providers: lv44 uses third-party KYC services to cross-check the identity documents you submit against official databases. These providers return a verification status (pass/fail) and a risk score; they do not retain a copy of your documents on lv44's behalf.
- From fraud detection partners: lv44 may receive risk signals from third-party fraud prevention services to assist in detecting account takeover, bonus abuse, and money laundering patterns.
How We Use Your Data
lv44 processes your personal data for the following purposes:
- Account creation and management: to register your account, authenticate your identity at login, and maintain your account profile.
- Service delivery: to process deposits and withdrawals via Bangladeshi MFS channels and banks, settle bets, credit casino winnings, and apply bonuses.
- Identity and age verification (KYC): to confirm that you are at least 21 years of age and are the authorised holder of the payment method used, in compliance with our anti-money-laundering obligations.
- Fraud prevention and security: to detect, investigate, and prevent fraudulent transactions, bonus abuse, account takeover, and other prohibited conduct as defined in the Terms & Conditions.
- Responsible gaming: to monitor gaming patterns for signs of problem gambling, enforce self-exclusion orders and deposit limits, and deliver proactive responsible gaming communications where appropriate.
- Customer support: to respond to your enquiries, resolve complaints, and maintain a record of your support history to ensure continuity of service.
- Marketing and promotions: to send you information about relevant promotions, new games, seasonal offers (such as Eid or BPL special promotions), and platform updates — but only where you have opted in to receive such communications. You may opt out at any time by contacting [email protected].
- Platform improvement: to analyse aggregated and anonymised usage data to improve site performance, game selection, and the overall user experience on lv44.io.
- Legal compliance: to meet our obligations under applicable anti-money-laundering legislation, respond to lawful requests from regulatory or law enforcement authorities, and maintain records required for audit purposes.
Legal Basis for Processing
lv44 processes your personal data on the following legal bases:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and service delivery | Contract performance — necessary to fulfil the agreement between you and lv44 |
| KYC / age verification / AML checks | Legal obligation — required to comply with applicable anti-money-laundering and know-your-customer obligations |
| Fraud prevention and security monitoring | Legitimate interests — to protect lv44, its users, and the integrity of the Platform |
| Responsible gaming monitoring | Legitimate interests & legal obligation — to protect vulnerable players and meet player protection standards |
| Marketing communications | Consent — you have opted in to receive promotional communications from lv44 |
| Platform analytics and improvement | Legitimate interests — to improve service quality using anonymised and aggregated data |
Data Sharing & Third Parties
lv44 does not sell, rent, or trade your personal data. We share personal data only with the following categories of third parties, and only to the extent necessary for the stated purpose:
- Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and City Bank receive transaction data (amount, reference, account identifier) to process your deposits and withdrawals. These providers are independently responsible for their own data practices.
- KYC and identity verification providers: receive your identity documents and return a verification result. These providers are contractually prohibited from using your data for any purpose other than completing the verification request from lv44.
- Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified studios receive your account identifier and session data to facilitate game play and resolve disputes. No payment data is shared with game providers.
- Fraud prevention and cybersecurity partners: receive technical and behavioural data (IP address, device fingerprint, session patterns) for the purpose of detecting and preventing fraudulent activity.
- Cloud infrastructure providers: lv44's Platform is hosted on secure cloud infrastructure. Infrastructure providers operate under strict data processing agreements and may not use your data for their own purposes.
- Legal and regulatory authorities: lv44 may disclose personal data to law enforcement, financial intelligence units, or other regulatory bodies where required by law or in response to a valid legal process.
International Data Transfers
Some of lv44's third-party service providers (including cloud infrastructure, KYC, and fraud detection partners) may be located outside Bangladesh. Where personal data is transferred internationally, lv44 takes steps to ensure an adequate level of protection is in place, including:
- Executing data processing agreements that incorporate internationally recognised data protection principles equivalent to those applied within Bangladesh.
- Requiring that any recipient of your data implements security measures no less stringent than those described in Section 10 of this Policy.
- Minimising the scope of data transferred to only what is strictly necessary for the specific service being provided.
By using lv44.io, you acknowledge and consent to your personal data being transferred to and processed in countries outside Bangladesh where lv44's service providers are located, subject to the safeguards described above.
Data Retention
lv44 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to the following retention guidelines:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and identity data | Duration of account + 5 years after closure | AML record-keeping obligations |
| Financial and transaction data | 7 years from transaction date | Financial audit and compliance requirements |
| Gaming activity data | 5 years from last activity date | Dispute resolution and responsible gaming monitoring |
| Support communications | 3 years from last communication | Quality assurance and complaint resolution |
| Technical and behavioural data | 13 months from collection | Platform analytics and fraud detection |
| Marketing consent records | Duration of consent + 3 years after withdrawal | Proof of consent for regulatory purposes |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.
Security Measures
lv44 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our primary technical and organisational measures include:
- 256-bit SSL/TLS encryption on all data transmitted between your device and lv44.io — the same standard used by major Bangladeshi banks including Dutch-Bangla Bank and BRAC Bank.
- Encryption at rest for all personally identifiable data stored on lv44 servers, including identity documents and financial records.
- Role-based access control (RBAC) ensuring that lv44 staff can only access personal data that is strictly necessary for their job function.
- Two-step verification (2SV) available for all user accounts and mandatory for all lv44 staff accounts with access to user data.
- Continuous intrusion detection and monitoring of network traffic for anomalous patterns indicative of unauthorised access attempts.
- Regular independent security audits conducted by certified third-party cybersecurity professionals to identify and remediate vulnerabilities.
- Penetration testing carried out on a scheduled basis and following any significant platform update.
Cookies & Tracking Technologies
lv44.io uses cookies and similar tracking technologies to deliver, maintain, and improve the Platform. A cookie is a small text file placed on your device when you visit a website. The following categories of cookies are used on lv44.io:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your authenticated session, remember your login state, enable secure transactions | Session / up to 24 hours |
| Functional | Remember your language preferences, game lobby filters, and responsible gaming settings | Up to 12 months |
| Analytics | Measure page views, session duration, navigation paths, and feature usage to improve the Platform (data aggregated and anonymised) | Up to 13 months |
| Security / Fraud Detection | Device fingerprinting to detect duplicate accounts, bot activity, and fraudulent login attempts | Up to 6 months |
lv44 does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings at any time; however, disabling strictly necessary cookies will prevent you from logging in to your lv44 account.
Your Data Rights
As a user of lv44.io, you hold the following rights in respect of your personal data. To exercise any of these rights, please submit a written request to [email protected]. lv44 will respond within 30 days of receiving a valid request.
Your Rights Over Your Personal Data
Submit any of the following requests in writing to [email protected]. lv44 will acknowledge within 48 hours and respond in full within 30 days.
Request a copy of all personal data lv44 holds about you, along with information about how it is being processed and on what legal basis.
Request correction of any inaccurate or incomplete personal data held by lv44. You may also update most account details directly from Account Settings.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations that may require us to retain certain records.
Request that lv44 restricts processing of your data — for example, while you contest its accuracy or object to its use — without requiring full deletion.
Receive a structured, machine-readable copy of the personal data you have provided to lv44, suitable for transfer to another service provider.
Object to processing carried out on the basis of legitimate interests, including direct marketing. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
Six Pillars of lv44 Privacy Protection
Every measure below is active on your account from the moment you register on lv44.io — no additional steps required.
All data transmitted between your device and lv44.io travels through 256-bit SSL/TLS encryption — the same standard applied by Dutch-Bangla Bank and BRAC Bank for their internet banking portals. Every login, every deposit via bKash or Nagad, and every withdrawal request is protected in transit.
lv44 operates a mandatory Know Your Customer process for all accounts. Identity verification confirms your legal name, date of birth, and that you are at least 21 years of age before any withdrawal is processed. This protects the entire player community from fraud and ensures only legitimate account holders access their funds.
Personal data stored on lv44 servers — including identity documents, financial records, and gaming history — is encrypted at rest using AES-256 standards. Even in the unlikely event of a server breach, your raw personal data cannot be read without the decryption keys, which are stored separately and rotated on a regular schedule.
lv44 does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing networks — under any circumstances. The only parties who receive any portion of your data are those directly involved in delivering the lv44 service, such as payment processors and KYC providers, under strict contractual obligations.
lv44 staff access to user data is governed by role-based access control. A customer support agent can view your account status and recent transactions but cannot view your full identity documents or payment details. Sensitive data is accessible only to the specific team members whose job function requires it, and all access is logged and audited.
In the event of a personal data breach that poses a risk to your rights, lv44 commits to notifying affected users within 72 hours of confirming the breach — via the email address or mobile number registered on your account. Our incident response team operates around the clock (BST UTC+6) to detect, contain, and communicate any security incidents promptly.
Children & Minors
lv44 is strictly an adults-only platform. Access to and use of lv44.io is permitted only for individuals who are 21 years of age or older. lv44 does not knowingly collect personal data from anyone under the age of 21.
During the KYC verification process, lv44 verifies the date of birth of every registered user. Any account found to belong to a person under 21 years of age will be immediately suspended, all balances will be returned to the original payment source, and all personal data associated with that account will be deleted without delay.
Changes to This Policy
lv44 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will:
- Update the "Last updated" date at the top of this Policy and on the lv44.io Privacy Policy page.
- Send a notification to the email address registered on your lv44 account at least 14 days before the new version takes effect, where the changes materially affect how your data is used.
- Display a prominent notice on the lv44.io homepage for a period of no less than 14 days following the update.
Your continued use of lv44.io after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you must cease using the Platform and may request account closure and data deletion by contacting [email protected].
We encourage you to review this Privacy Policy periodically. The current version is always accessible at lv44.io/privacy-policy and is the authoritative version governing the processing of your personal data.
Contact & Complaints
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a complaint about the way lv44 handles your personal data, please contact the lv44 Privacy team using the details below:
| Contact Type | Contact Details | Response Time |
|---|---|---|
| Privacy Enquiries | [email protected] | Within 48 hours |
| Data Access / Deletion Requests | [email protected] — subject line: "Data Request" | Within 30 days |
| General Support | [email protected] | Under 4 minutes (live chat) / within 2 hours (email) |
| Responsible Gaming & Safety | [email protected] | Within 24 hours |
| Support Hours | 24 hours / 7 days (BST UTC+6) | Always available |
lv44 takes all privacy complaints seriously. Upon receiving a complaint, we will acknowledge it within 48 hours, investigate thoroughly, and provide a written response within 30 days. If you are not satisfied with lv44's handling of your complaint, you may escalate the matter to the relevant data protection authority in your jurisdiction.
Questions About Your Privacy on lv44?
Browse our FAQ for quick answers, review the Responsible Gaming page for player protection tools, or contact the lv44 Privacy team directly at [email protected]. 21+ only — please gamble responsibly.