5l2t Privacy Policy

Who We Are

5l2t operates the online casino and sports betting platform accessible at https://5l2t.io. For the purposes of this Privacy Policy, 5l2t acts as the data controller in respect of all personal data collected from Members and visitors through the Platform. This means 5l2t determines the purposes and means by which your personal data is processed.

The 5l2t Platform is designed specifically for the Bangladesh market, with all services, support, and communications delivered in English. Our platform serves Members located across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's B azar.

If you have any questions about how 5l2t handles your personal data, or if you wish to exercise any of the rights described in this Policy, please contact our Data Support team via live chat on-platform or by email at [email protected].

Data We Collect

5l2t collects only the personal data that is necessary to provide you with a safe, functional, and compliant gaming experience. The categories of personal data we collect are set out in the table below.

2.1 Data You Are Not Required to Provide

Certain data fields during registration are optional — for example, providing a secondary contact method. Where a data field is optional, this will be clearly indicated. Declining to provide optional data will not affect your ability to register an Account, but may limit access to certain promotional features or personalisation options.

2.2 Sensitive Data

5l2t does not intentionally collect any special categories of sensitive personal data — such as racial or ethnic origin, religious beliefs, health data, or biometric data — through its Platform. Where KYC identity documents incidentally disclose such information (for example, a national ID that includes religion), this information is not extracted, stored separately, or used in any way by 5l2t beyond the minimum necessary to complete identity verification.

How We Collect Your Data

3.1 Directly From You

The majority of personal data we hold is provided directly by you during the course of using the 5l2t Platform. This includes:

• Completing the Account registration form (name, contact details, date of birth).
• Submitting KYC documents for identity and age verification.
• Making a deposit or requesting a withdrawal via bKash, Nagad, Rocket, or Upay.
• Contacting 5l2t support via live chat or email.
• Participating in promotions, tournaments, or surveys.
• Updating your Account profile or responsible gaming settings.

3.2 Automatically From Your Device

When you visit the 5l2t website or use the Platform, certain technical and usage data is collected automatically by our systems. This includes your IP address, device identifiers, browser information, referring URL, and in-session activity logs. This automated collection takes place regardless of whether you are logged in to an Account and is necessary for platform security and performance.

3.3 From Third Parties

In certain circumstances, 5l2t may receive personal data about you from third parties, including:

• Payment providers (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank) — confirming transaction status and account holder name for deposit and withdrawal verification.
• Identity verification services — where 5l2t uses a third-party KYC verification partner to cross-check document authenticity.
• Game studio providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — sharing session-level gameplay data necessary for game round settlement and dispute resolution.
• Fraud prevention services — providing risk scores or alerts where there is reasonable suspicion of account fraud or money laundering activity.

How We Use Your Data

5l2t uses the personal data it collects only for clearly defined, lawful purposes. The principal uses of your data are set out below:

• Account management: Creating, maintaining, and securing your registered Account, including verifying your identity and age at registration and during KYC.
• Service delivery: Processing your deposits and withdrawals, crediting winnings, applying bonuses, settling wagers, and providing access to the game library.
• Responsible gaming: Monitoring gameplay patterns to identify potential indicators of problem gambling and proactively offering self-management tools such as deposit limits and cooling-off periods.
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent transactions, account takeover attempts, money laundering, bonus abuse, and other prohibited conduct.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining a record of your interaction history with the 5l2t support team.
• Platform improvement: Analysing aggregate usage data to improve platform performance, game selection, interface design, and the overall Member experience.
• Marketing communications: Where you have given consent, sending you promotional offers, tournament announcements, and seasonal campaign notifications (for example, BPL season offers, Eid promotions, and Pohela Boishakh bonus events) via your registered contact method. You may withdraw consent to marketing communications at any time by contacting support.
• Legal and regulatory compliance: Meeting obligations that may arise under applicable anti-money laundering (AML) frameworks, responding to lawful requests from competent authorities, and enforcing our Terms & Conditions.

Legal Basis for Processing

5l2t processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing that is required to enter into, perform, or enforce the contract between you and 5l2t (the Terms & Conditions). This covers Account registration, KYC, payment processing, game settlement, and support.
• Legitimate interests: Processing that is in 5l2t's or a third party's legitimate interests, provided those interests are not overridden by your rights. This includes fraud prevention, security monitoring, and platform analytics.
• Legal obligation: Processing required to comply with applicable laws — for example, retaining transaction records for anti-money laundering purposes or responding to a valid legal order from a competent authority.
• Consent: Processing for which 5l2t has obtained your explicit consent. This currently applies only to direct marketing communications. You have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

5l2t shares your personal data only with the limited categories of recipients described below, and only to the extent strictly necessary for the stated purpose:

6.1 Payment Processing Partners

To process your deposits and withdrawals, 5l2t shares the minimum necessary transaction and identity data with your designated payment provider — bKash, Nagad, Rocket, Upay, or a supported bank (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank). These partners act as independent controllers of data they receive and are subject to their own privacy and security obligations.

6.2 Game Studio Providers

To deliver our game library, 5l2t shares a session-level player token with game studio providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. This token allows the game to load and record the outcome of your game session for settlement purposes. Game providers do not receive your full name, contact details, or financial data.

6.3 Identity Verification Services

Where 5l2t uses a third-party KYC service provider to verify your identity documents, the minimum necessary document data is shared with that provider under a data processing agreement that requires them to handle your data securely and exclusively for the purpose of identity verification on 5l2t's behalf.

6.4 Legal Disclosures

5l2t may disclose personal data to law enforcement agencies, courts, or other competent authorities where required to do so by applicable law, court order, or lawful regulatory request. Where legally permissible, 5l2t will notify you of such a disclosure before it occurs.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 5l2t's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material change to how your data is handled before the transfer takes effect.

Cookies & Tracking Technologies

5l2t uses cookies and similar tracking technologies on its Platform to provide a functional, secure, and personalised experience. Cookies are small text files placed on your device by your browser when you visit the Platform.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in, security tokens that protect against cross-site request forgery, and load-balancing cookies. These cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences — such as your language setting, preferred deposit method, and responsible gaming limit configurations — so you do not need to re-enter them each session.
• Analytics Cookies: Help 5l2t understand how Members navigate the Platform by collecting aggregate, anonymised usage data (pages visited, session duration, game categories explored). This data is used to improve the Platform experience.
• Security & Fraud Detection Cookies: Used by our fraud prevention systems to build a technical fingerprint of your device session, helping identify and block suspicious access attempts.

7.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to alert you when cookies are being set. Please note that disabling strictly necessary cookies will prevent you from logging in to your 5l2t Account and accessing Platform services. For guidance on cookie management specific to your browser, please refer to your browser provider's help documentation.

Data Retention

5l2t retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain your Account, and to comply with applicable legal obligations. The following retention periods apply:

• Active Account data: Retained for the full duration of your active Account membership, plus a minimum of 5 years following Account closure — to meet anti-money laundering record-keeping requirements and to resolve any post-closure disputes.
• KYC documents: Retained for a minimum of 5 years following Account closure or the completion of the verification process, whichever is later.
• Transaction records: Financial transaction logs (deposits, withdrawals, wagers, winnings) are retained for a minimum of 5 years from the date of the transaction.
• Support communications: Live chat transcripts and email records are retained for 3 years from the date of the interaction.
• Marketing consent records: Records of your consent (or withdrawal of consent) to receive marketing communications are retained for as long as your Account is active, plus 2 years following closure.
• Technical and usage logs: Anonymised or aggregated analytics data may be retained indefinitely. Identifiable technical logs (such as IP address logs) are retained for 12 months.

When personal data is no longer required and no legal obligation requires its continued retention, 5l2t will securely delete or anonymise that data in a manner that makes re-identification impossible.

Data Security

5l2t implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security programme includes the following controls:

• SSL/TLS Encryption: All data transmitted between your device and the 5l2t Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. You can confirm this by the padlock icon in your browser's address bar when accessing https://5l2t.io.
• Data-at-Rest Encryption: Sensitive personal data stored on 5l2t's servers — including KYC documents and financial records — is encrypted at rest using AES-256 standard encryption.
• Access Controls: Access to personal data within 5l2t's systems is restricted on a strict need-to-know basis. Staff members access only the data necessary to perform their specific role. All internal access is logged and subject to regular audit.
• Secure Payment Processing: 5l2t does not store full payment credentials on its servers. Payment transactions are processed directly through the APIs of certified payment providers (bKash, Nagad, Rocket, Upay), which maintain their own PCI-compliant security environments.
• Two-Factor Authentication: 5l2t offers optional two-factor authentication (2FA) on Member Accounts to provide an additional layer of protection against unauthorised login attempts. Members are strongly encouraged to enable 2FA via their Account security settings.
• Penetration Testing & Audits: 5l2t's platform undergoes regular security assessments, including penetration testing and vulnerability scans, to identify and remediate potential security weaknesses before they can be exploited.

Your Privacy Rights

As a Member of the 5l2t Platform, you hold a set of rights in relation to your personal data. 5l2t is committed to honoring these rights promptly and transparently. Your rights include:

• Right of Access: You have the right to request a copy of the personal data that 5l2t holds about you, including information on how it is being used and with whom it has been shared. Requests will be fulfilled within 30 days of receipt.
• Right to Rectification: You have the right to request that any inaccurate or incomplete personal data 5l2t holds about you be corrected or updated. You can update most of your account information directly via the Account settings panel. For changes to registered identity information, please contact support.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and no other legal basis applies. This right is subject to 5l2t's legal obligations to retain certain data (see Section 8).
• Right to Restriction of Processing: You have the right to request that 5l2t restricts its processing of your data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Object: You have the right to object to processing of your personal data that is based on 5l2t's legitimate interests, including profiling. You also have an unconditional right to object to the use of your data for direct marketing purposes at any time.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where 5l2t processes your data based on your consent (currently, marketing communications only), you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact the 5l2t Data Support team via live chat on-platform or by email at [email protected]. We will respond to all rights requests within 30 days. In complex cases this period may be extended by a further 60 days, in which case we will inform you of the extension and the reason for it.

Children's Privacy

The 5l2t Platform is strictly intended for individuals aged 21 years and above. 5l2t does not knowingly collect, process, or store personal data from any individual under the age of 21. If you believe that a person under 21 has registered an Account or submitted personal data to 5l2t, please contact our support team immediately via live chat or email. Upon confirmation, 5l2t will immediately and permanently close the Account and delete all associated personal data, returning any deposited funds to the verified payment source.

Age verification is conducted at registration and as part of the KYC process. 5l2t uses identity document checks to confirm that all Members meet the minimum age requirement before any withdrawal is processed. We take our responsibility to prevent underage gambling extremely seriously and continuously invest in improving our age verification controls.

Third-Party Links

The 5l2t Platform may contain references to or integrations with third-party services — most notably the game studio providers whose games are accessible through the Platform's game library (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others). When you launch a game, you interact with content delivered by these third-party providers under their own separate privacy and security frameworks.

5l2t is not responsible for the privacy practices of any third-party service provider. We recommend reviewing the privacy policies of any third-party service you interact with through the Platform. This Policy applies solely to data processed by 5l2t in connection with your use of https://5l2t.io.

Policy Updates

5l2t reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or Platform functionality. Where changes are material — meaning they meaningfully affect how your personal data is used or the rights available to you — 5l2t will notify you via the Platform's on-site notification system or via your registered contact method prior to the changes taking effect.

The effective date displayed at the top of this Policy indicates when the current version came into force. Your continued use of the 5l2t Platform after any update to this Policy constitutes your acknowledgement of the revised terms. We encourage you to review this page periodically to stay informed about how your data is protected.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 5l2t handles your personal data, please reach out to us through one of the following channels:

• Live Chat: Available 24/7 directly on the 5l2t Platform. Average response time: 2–5 minutes. This is the fastest way to reach our support and data handling teams.
• Email: [email protected] — for formal data subject access requests, erasure requests, or written privacy complaints. We will acknowledge all email submissions within 48 hours and provide a substantive response within 30 days.

When submitting a rights request or privacy complaint, please include your registered Account username and a brief description of your request so we can locate your records promptly and respond as efficiently as possible. All privacy-related communications are handled in English.