kuk9 Privacy Policy

Who We Are

kuk9 is an online betting and casino platform operated at kuk9.io, designed specifically for players in Bangladesh. In this Privacy Policy, references to "kuk9", "we", "us", or "our" mean the operator of the kuk9 platform. References to "you" or "your" mean any individual who accesses or uses the kuk9 platform, whether as a registered account holder or as an unregistered visitor.

kuk9 acts as the data controller in respect of the personal data collected through the platform. This means we determine the purposes and means by which your personal data is processed. Where we engage third-party service providers to process personal data on our behalf, those parties act as data processors and are bound by contractual obligations that meet applicable data protection standards.

Personal Data We Collect

kuk9 collects personal data in two broad categories: data you provide directly, and data collected automatically through your use of the platform. The table below summarises the categories of personal data we collect and the primary reason for collecting each category.

kuk9 does not collect or process special categories of sensitive personal data (such as biometric data, health data, or political opinions) unless you voluntarily disclose such information in the course of a support interaction, in which case it is handled with heightened care and deleted as soon as the interaction is resolved.

How We Collect Your Data

kuk9 collects personal data through the following channels:

• Direct registration: When you create a kuk9 account, you provide identity, contact, and financial data directly via the registration form.
• Account activity: Your usage data — including bets placed, casino games played, and deposit and withdrawal requests — is recorded automatically each time you interact with the platform while logged in.
• Payment transactions: When you deposit or withdraw funds via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the relevant payment provider shares transaction reference data with kuk9 to confirm the completion of the transaction.
• KYC documentation: When we request identity verification, you upload documents directly through the secure document upload feature within your account dashboard.
• Cookies and tracking technologies: Technical and usage data is collected automatically via cookies and server-side logging when you visit or use the kuk9 platform. See Section 9 of this policy for full details.
• Support communications: When you contact the kuk9 support team by email or live chat, we record the content of those communications for quality assurance and dispute resolution purposes.
• Third-party identity verification providers: Where kuk9 engages a third-party KYC provider to verify your identity documents, that provider may share the results of their verification check with kuk9, including a pass/fail status and any flags raised during the check.

How We Use Your Personal Data

kuk9 uses your personal data only for purposes that are consistent with the reason the data was originally collected. The following list describes the specific purposes for which your data is used:

• Account creation and management: To set up and maintain your kuk9 account, including verifying your identity and age (21+ requirement) and managing your account preferences and responsible gaming settings.
• Processing deposits and withdrawals: To initiate, process, and confirm financial transactions in BDT via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and to maintain an accurate record of your transaction history.
• Fraud and security monitoring: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multiple-account creation, and other prohibited conduct as defined in the kuk9 Terms & Conditions.
• Responsible gaming obligations: To monitor betting and gaming patterns that may indicate problem gambling behaviour, to enforce self-imposed deposit limits and cooling-off periods, and to apply self-exclusion restrictions when requested.
• Legal and regulatory compliance: To meet our obligations under applicable anti-money laundering regulations, including maintaining transaction records for the required retention period and responding to lawful requests from competent authorities.
• Customer support: To respond to your queries, resolve disputes, process complaints, and improve the quality of our support services based on interaction history.
• Platform communications: To send you transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — that are necessary for the operation of your account. We do not send unsolicited promotional email without your consent.
• Platform improvement: To analyse aggregated, anonymised usage data in order to identify performance issues, improve navigation, and optimise the kuk9 platform experience for all Bangladeshi players.

Legal Basis for Processing

kuk9 processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and kuk9 — for example, creating your account, processing deposits and withdrawals, and providing access to betting and casino services.
• Legal obligation: Processing required to comply with applicable laws — for example, retaining transaction records for anti-money laundering reporting purposes and conducting identity verification checks.
• Legitimate interests: Processing carried out in pursuit of kuk9's legitimate business interests — for example, fraud detection, security monitoring, and platform performance analysis — provided those interests are not overridden by your rights and interests.
• Consent: Where kuk9 processes personal data on the basis of your consent — for example, sending optional promotional communications — you may withdraw that consent at any time by contacting the support team or updating your communication preferences within your account dashboard. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

Sharing Your Personal Data

kuk9 does not sell, rent, or trade your personal data to any third party. We may share your personal data with the following categories of recipient only where necessary and subject to appropriate safeguards:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard and their respective processing networks receive transaction data necessary to execute deposits and withdrawals. These providers are subject to their own privacy policies and applicable financial data protection regulations.
• Identity verification providers: Third-party KYC providers engaged by kuk9 receive copies of identity documents submitted by players for age and identity verification purposes. These providers operate under strict data processing agreements and may not use the data for any purpose other than the verification service.
• Fraud prevention and security services: kuk9 may share technical data (including IP addresses, device fingerprints, and transaction patterns) with specialist fraud prevention service providers to identify and block fraudulent activity.
• Game content providers: Game studios including Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, NetEnt, and Spribe may receive a player session token and account tier reference necessary to load and authenticate game sessions. These providers do not receive full identity or financial data.
• Legal and regulatory authorities: kuk9 may disclose personal data to competent governmental or regulatory authorities where required to do so by applicable law, court order, or lawful regulatory request. We will notify you of any such disclosure where legally permitted to do so.
• Professional advisers: Lawyers, auditors, and compliance consultants engaged by kuk9 may have access to personal data on a strictly need-to-know basis and are bound by professional confidentiality obligations.

International Data Transfers

kuk9 primarily processes and stores player data using infrastructure located within or close to the South Asia region, chosen in part to minimise latency for players accessing the platform from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and other locations across Bangladesh.

Where personal data is transferred to or accessible by service providers located outside Bangladesh — for example, a KYC provider or cloud infrastructure operator with servers in another country — kuk9 ensures that appropriate contractual safeguards are in place to protect the data to a standard at least equivalent to that required under applicable Bangladeshi data protection norms. Where the recipient country does not offer an equivalent level of data protection, kuk9 implements additional technical and contractual controls.

By registering a kuk9 account and accepting the Terms & Conditions, you acknowledge that your personal data may be transferred to and processed in countries outside Bangladesh for the purposes described in this policy.

Data Retention

kuk9 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data (identity, contact, and financial data) is retained for the duration of your account and for a minimum of five years following account closure, in order to meet anti-money laundering record-keeping requirements.
• Transaction records (deposit and withdrawal history in BDT) are retained for a minimum of five years following the date of each transaction.
• KYC verification documents are retained for a minimum of five years following the completion of the verification process or account closure, whichever is later.
• Support communications (email and live chat transcripts) are retained for two years following the close of the relevant support interaction.
• Technical and usage data (server logs, IP addresses, session data) is retained for a maximum of twelve months following collection, after which it is either deleted or anonymised for aggregate analysis purposes.

Where you exercise your right to erasure (see Section 10), kuk9 will delete or anonymise your personal data subject to any overriding legal obligation to retain it. In such cases, kuk9 will inform you of the specific legal basis for retaining the data beyond your erasure request.

Cookies & Tracking Technologies

kuk9 uses cookies — small text files stored on your device — and similar technologies to operate the platform securely and effectively. The following categories of cookie are used on the kuk9 platform:

• Strictly necessary cookies: Essential for the operation of the platform. These cookies maintain your login session, preserve your account preferences, and protect the platform against cross-site request forgery attacks. They cannot be disabled without impairing core platform functionality.
• Functional cookies: These cookies remember choices you make — such as your preferred currency display (BDT) and your responsible gaming settings — so that you do not need to re-enter them on each visit.
• Analytics cookies: kuk9 uses first-party analytics cookies to collect aggregated, anonymised data about how players navigate the platform. This data is used solely to identify usability issues and improve platform performance. kuk9 does not use third-party analytics platforms that share data with advertising networks.
• Security cookies: Used to detect and prevent fraudulent login attempts, identify unusual transaction patterns, and flag device fingerprints associated with previously banned accounts.

kuk9 does not use advertising cookies, retargeting cookies, or any tracking technology that tracks your behaviour across third-party websites. You may configure your browser to refuse or delete cookies, but doing so may affect your ability to log in to your kuk9 account or use certain platform features.

Your Privacy Rights

Subject to applicable law, you have the following rights in respect of the personal data that kuk9 holds about you. To exercise any of these rights, please contact the kuk9 support team using the details in Section 15.

• Right of access: You have the right to request a copy of the personal data kuk9 holds about you, together with information about how it is being processed. kuk9 will respond to verified access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating a contact email address) can be made directly within your account dashboard.
• Right to erasure: You may request that kuk9 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where you object to processing based on legitimate interests and your interests override ours. This right is subject to kuk9's legal obligations to retain certain records.
• Right to restriction of processing: In certain circumstances — for example, while the accuracy of data is being contested — you may request that kuk9 restrict the processing of your personal data to storage only.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object at any time to the processing of your personal data for direct marketing purposes. You also have the right to object to processing based on legitimate interests on grounds relating to your particular situation.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Children's Privacy

kuk9 is strictly an adult platform. The minimum age to register a kuk9 account and use any betting or casino service is 21 years. kuk9 does not knowingly collect personal data from individuals under the age of 21.

Where kuk9 discovers or has reasonable grounds to suspect that personal data has been provided by or on behalf of a person under the age of 21, we will immediately suspend the associated account, investigate the circumstances, and delete all personal data associated with the underage user as soon as reasonably practicable. Any deposits received from an underage account will be returned to the originating payment method. If you are the parent or guardian of a person under 21 who you believe has registered a kuk9 account, please contact our support team immediately at [email protected].

Security Measures

kuk9 takes the security of your personal data seriously and implements the following technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure:

• SSL/TLS encryption: All data transmissions between your browser and the kuk9 platform are encrypted using industry-standard SSL/TLS protocols.
• Access controls: Access to personal data within kuk9's internal systems is restricted on a strict need-to-know basis and protected by role-based access control and multi-factor authentication for all administrative accounts.
• Data pseudonymisation: Where technically feasible, personal data used for analytics and platform improvement purposes is pseudonymised or anonymised to reduce exposure risk.
• Regular security assessments: kuk9 conducts periodic security reviews of its platform infrastructure, including vulnerability assessments, to identify and remediate potential weaknesses.
• Incident response: In the event of a personal data breach that poses a risk to player rights and interests, kuk9 will notify affected players and relevant authorities in accordance with applicable requirements and without undue delay.

No security system is entirely impenetrable, and kuk9 cannot guarantee the absolute security of your personal data. You are encouraged to use a strong, unique password for your kuk9 account and to enable any two-factor authentication options available in your account security settings.

Third-Party Links

The kuk9 platform may contain references to third-party payment services (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and game studio brands (Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, NetEnt, Spribe). These references are informational and do not constitute links to external websites from within the kuk9 platform itself.

kuk9 is not responsible for the privacy practices of third-party organisations. If you visit or interact with any third-party service — for example, accessing your bKash app to complete a deposit — you do so subject to that third party's own privacy policy and terms of service. kuk9 encourages you to review the privacy policies of any third-party service providers you use in connection with your kuk9 account.

Changes to This Privacy Policy

kuk9 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. Where changes are material — meaning they significantly affect your rights or the way your personal data is used — kuk9 will provide at least 14 days' advance notice via the email address associated with your registered account or via a prominent notice on the platform.

Non-material amendments (such as typographical corrections or clarifications that do not alter the substantive content of the policy) may take effect immediately upon publication. The effective date at the top of this policy will always reflect the date of the most recent update. We encourage you to review this policy periodically so that you remain informed about how kuk9 protects your personal data.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kuk9 processes your personal data, please contact the kuk9 privacy team using the details below. All privacy-related correspondence is handled by a dedicated team member and is treated as strictly confidential.

When submitting a privacy rights request, please include your registered kuk9 account username, your full name as registered on the account, and a clear description of your request. kuk9 will verify your identity before acting on any request relating to your personal data.