ku99 Privacy Policy — How We Protect Your Personal Data

This Privacy Policy ("Policy") describes how ku99 ("the Platform", "we", "us", "our") collects, uses, stores, and discloses personal information relating to individuals ("you", "Player", "User") who visit and use the ku99 website at https://ku99.win and any associated services, applications, or communications channels operated by ku99.

This Policy applies to all personal data processed in connection with the registration and operation of a ku99 player account, the placement of bets, the use of live casino or slot games, the processing of deposits and withdrawals in Bangladeshi Taka (BDT), and any contact you make with our customer support team.

By registering an account with ku99 or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and use of your personal information as described herein. This Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference.

ku99 is the data controller responsible for the personal information collected through the Platform. As data controller, ku99 determines the purposes for which, and the manner in which, your personal data is processed.

If you have any questions, concerns, or requests relating to the way your personal data is handled, you may contact the ku99 Data Privacy team at any time using the contact details set out in Section 14 of this Policy. We are committed to responding to all privacy-related enquiries within a reasonable timeframe.

The categories of personal data that ku99 may collect and process are set out in the table below. We collect only the minimum data necessary for the stated purposes.

ku99 collects personal data through several channels, depending on how you interact with the Platform:

• Direct submission: Information you provide when creating your account, completing identity verification, making a deposit or withdrawal, contacting our support team, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically through cookies, log files, and analytics tools as you navigate the Platform. This includes your IP address, device identifiers, and session activity.
• Payment providers: Transaction confirmation data shared by payment processors including bKash, Nagad, Rocket, Upay, Visa, and Mastercard when you initiate a deposit or withdrawal.
• Identity verification providers: Results of identity and age verification checks conducted by our KYC partner services when you submit verification documents.
• Fraud prevention services: Risk scoring and device fingerprint data provided by our fraud detection partners to help protect your account and the integrity of the Platform.
• Publicly available sources: In limited circumstances, and only where relevant to fraud prevention or compliance, we may reference publicly available information to verify details you have provided.

ku99 uses the personal data it collects for the following specific purposes. We process your data only where we have a lawful basis to do so — typically because it is necessary to perform the contract with you (your account agreement), because we have a legitimate business interest, or because you have given your consent.

• Account management: Creating and maintaining your player account, authenticating your login sessions, and managing account preferences and communication settings.
• Payment processing: Processing BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; reconciling transactions; and issuing withdrawal payments to your nominated account.
• Identity and age verification: Confirming that you are at least 21 years of age and that the identity details you provided during registration are accurate, in accordance with our Terms & Conditions.
• Fraud and security: Detecting, investigating, and preventing fraudulent activity, money laundering, collusion, multi-accounting, and other conduct prohibited under our Terms & Conditions.
• Responsible gaming: Monitoring your gaming activity to identify potential indicators of problem gambling behaviour and, where appropriate, applying responsible gaming interventions such as deposit limits or account restrictions.
• Platform improvement: Analysing aggregated usage patterns to improve the design, performance, and content of the ku99 Platform and the games offered on it.
• Customer support: Responding to enquiries, complaints, and disputes submitted through our support channels.
• Legal and regulatory compliance: Meeting obligations under applicable anti-money laundering, counter-terrorism financing, and data protection laws and regulations.
• Marketing communications: Sending you promotional offers, bonus notifications, and news about ku99 — but only where you have opted in to receive such communications. You may unsubscribe at any time.

ku99 may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy. All third-party recipients are required to handle your data securely and in accordance with applicable data protection standards.

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard — to execute deposit and withdrawal transactions in BDT.
• Identity verification providers: KYC and AML compliance service providers who assist in verifying your identity, age, and the source of your funds where required.
• Game and technology providers: Certified game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — to deliver the gaming content available on the Platform. These providers may receive aggregated technical session data but do not receive your full identity profile.
• Fraud detection services: Third-party risk and fraud intelligence providers who help ku99 identify suspicious account activity and protect the integrity of the Platform.
• Cloud and infrastructure providers: Hosting, database, and security infrastructure providers who process data on behalf of ku99 under strict data processing agreements.
• Legal and regulatory authorities: Government bodies, law enforcement agencies, or regulatory authorities where ku99 is required by law to disclose information, or where disclosure is necessary to protect the rights, property, or safety of ku99, its players, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the ku99 business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer via the email address registered on your account.

ku99 does not share your personal data with third parties for their own independent marketing or advertising purposes.

To deliver the Platform and its associated services, your personal data may be transferred to and processed in countries outside Bangladesh. Some of our technology infrastructure providers, game studios, and payment processors operate internationally.

Where personal data is transferred outside Bangladesh, ku99 takes reasonable steps to ensure that such transfers are conducted securely and that the receiving party applies data protection standards that are at least equivalent to those described in this Policy. This may include the use of contractual data protection clauses, approved frameworks, or the selection of partners who maintain recognised security certifications.

ku99 retains your personal data for as long as your account is active and for a defined period thereafter, as set out below. Retention periods are determined by the nature of the data and the purpose for which it was collected.

• Account data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, to satisfy anti-money laundering and dispute resolution obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with financial record-keeping requirements.
• Identity verification documents: Retained for the duration of the account relationship and for five (5) years after closure, or longer if required by applicable law.
• Support and communication records: Retained for two (2) years from the date of the last interaction, unless related to an ongoing dispute or investigation.
• Marketing consent records: Retained until you withdraw your consent or close your account, whichever is earlier.
• Technical and usage logs: Typically retained for up to twelve (12) months in identifiable form, then anonymised or deleted.

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to an individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

ku99 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security programme includes, but is not limited to, the following:

• Encryption in transit: All data transmitted between your browser or device and the ku99 Platform is encrypted using 256-bit SSL/TLS protocols.
• Password security: Account passwords are stored using industry-standard cryptographic hashing algorithms. Passwords are never stored in plain text and are not accessible to ku99 staff.
• Access controls: Access to personal data within ku99 is restricted on a need-to-know basis. Staff who handle personal data are subject to confidentiality obligations and data handling training.
• Fraud monitoring: Automated systems monitor account activity in real time to detect suspicious login attempts, unusual transaction patterns, and potential account takeover activity.
• Secure infrastructure: The ku99 Platform is hosted on enterprise-grade infrastructure with regular security patching, vulnerability assessments, and penetration testing.
• Incident response: ku99 maintains documented procedures for responding to personal data breaches, including timely notification to affected players where required.

The ku99 Platform uses cookies and similar tracking technologies to support the functionality of the site, maintain your session security, and understand how players use the Platform so we can continue to improve it. A cookie is a small text file placed on your device by a website server. Cookies cannot execute code or deliver viruses to your device.

The types of cookies used by ku99 are described below:

• Essential cookies: Strictly necessary for the Platform to function. These cookies maintain your login session, remember your language preference, and protect against cross-site request forgery. They cannot be disabled without affecting Platform functionality.
• Analytics cookies: Used to collect anonymous information about how visitors navigate the Platform — such as which pages are visited most frequently and how long players spend on each section. This data is used only in aggregated, non-identifiable form to improve the Platform.
• Security cookies: Used to detect and prevent fraudulent activity, including bot access attempts and suspicious device behaviour.

ku99 does not use advertising or third-party tracking cookies to serve targeted advertisements or to track your activity across websites outside of ku99.win. You can control or delete cookies through your browser settings at any time. Note that disabling essential cookies may affect the functionality of your ku99 account.

As a registered player on the ku99 Platform, you hold a number of rights in relation to the personal data we hold about you. You may exercise any of the rights listed below by submitting a request to [email protected]. We will acknowledge your request promptly and aim to respond in full within 30 days, subject to identity verification.

Please note that some rights are subject to limitations. For example, we may be unable to delete data that we are legally required to retain for anti-money laundering or dispute resolution purposes. Where we are unable to fulfil a request in full, we will explain the reason clearly in our response.

The ku99 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you must not register an account, access the Platform, or submit any personal information to ku99.

If ku99 becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a minor has registered an account on the Platform, please notify us immediately at [email protected].

ku99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or changes in the services we offer. Where any update is material — meaning it substantially affects your rights or the way we use your personal data — we will provide advance notice via the email address registered on your account or through a prominent notice on the Platform, at least 7 days prior to the change taking effect.

Minor updates, such as corrections to wording or structural clarifications that do not affect the substance of the Policy, may be made without prior notice. The "Last Updated" date at the top of this page will always reflect when the most recent revision was made.

Your continued use of the ku99 Platform following any update to this Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how we protect your personal information.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ku99 handles your personal data, please contact our Data Privacy team. Support is available 24 hours a day, 7 days a week, in English.

Email: [email protected]

When contacting us regarding a privacy matter, please include your registered username and the nature of your request so our team can assist you as efficiently as possible. For data access, correction, or deletion requests, please include "Privacy Request" in the subject line of your message.

ku99 is committed to handling all privacy enquiries with care and to responding within a reasonable timeframe. If you are not satisfied with our response, you retain the right to escalate your concern in accordance with applicable law.