ku9a Privacy
Policy
At ku9a, protecting your personal information is a foundational commitment, not an afterthought. This Privacy Policy explains exactly what data we collect, why we collect it, how we use it, and the rights you have over your information as a ku9a account holder in Bangladesh.
How ku9a Approaches Your Privacy
Six core principles guide every decision we make about personal data at ku9a — from the moment you register through every transaction you place.
Minimal Collection
ku9a collects only the personal data that is strictly necessary for the specific purpose for which it is gathered. We do not collect data speculatively or in excess of what our services require.
Confidentiality
Your personal data is never sold to third parties. Access within the ku9a organisation is restricted on a strict need-to-know basis, and all personnel handling data are bound by confidentiality obligations.
Security First
All data transmitted between your device and ku9a servers is protected by 256-bit SSL encryption. Player data at rest is stored on hardened, access-controlled infrastructure with regular security reviews.
Purpose Limitation
Data collected for one purpose — such as account verification — will not be repurposed for an unrelated activity without your explicit consent. Each data use is tied to a clearly stated, legitimate reason.
Your Rights
You retain the right to access, correct, export, or request deletion of the personal data ku9a holds about you. All data-related requests are handled promptly by our dedicated support team.
Transparency
We keep this Privacy Policy current and notify account holders of any material changes. The "Last Updated" date is always visible at the top of this document so you always know you are reading the latest version.
Summary: ku9a collects personal data necessary to operate a safe, fair, and compliant online betting platform for players in Bangladesh. We do not sell your data. We protect it with industry-standard encryption. You can request access to or deletion of your data at any time by contacting [email protected]. For the complete and legally binding details, please read the full Policy below.
Introduction
This Privacy Policy ("Policy") describes the information practices of ku9a ("ku9a", "we", "us", "our") in relation to the ku9a online betting and casino platform accessible at ku9a.io (the "Platform"). It explains what categories of personal data we collect from users ("you", "your", "Player"), the purposes for which we use that data, the parties with whom we may share it, the security measures we apply to protect it, and the rights available to you regarding your personal information.
By creating a ku9a account, making a deposit, placing a bet, or otherwise using the Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy forms part of the ku9a Terms and Conditions and should be read alongside that document.
ku9a directs its services primarily at the Bangladesh market. All amounts referenced in the context of player accounts are expressed in Bangladeshi Taka (৳). References to customer support availability are given in Bangladesh Standard Time (BST, UTC+6).
Personal Data We Collect
ku9a collects data across several categories depending on how you interact with the Platform. The categories and specific data points we may collect include:
| Category | Data Points | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, National Identity Card (NID) number, passport number, gender | Account registration & KYC verification |
| Contact Data | Email address, mobile phone number, residential address (district/city) | Account registration & profile updates |
| Financial Data | bKash/Nagad/Rocket/Upay mobile wallet number, Visa/Mastercard details (masked), transaction history, deposit and withdrawal amounts | Deposit and withdrawal processing |
| Technical Data | IP address, device type, operating system, browser type, session timestamps, cookie identifiers | Each platform visit and session |
| Usage Data | Pages visited, games played, bet history, wager amounts, odds accepted, session duration | Active use of the Platform |
| Communications Data | Support chat transcripts, email correspondence, submitted feedback and complaint records | Any interaction with customer support |
| Verification Documents | Scanned copies or photographs of identity documents submitted for KYC purposes | KYC and source-of-funds checks |
We do not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, biometric data, or health information. If any such data is incidentally disclosed in communications with our support team, it will not be processed or retained beyond what is strictly necessary to resolve the relevant enquiry.
How We Collect Your Data
ku9a collects personal data through the following means:
- Direct Provision: Data you submit voluntarily when registering an account, updating your profile, completing identity verification, making a deposit or withdrawal request, or contacting customer support.
- Automated Technologies: Data collected automatically when you access the Platform, including cookies, web beacons, pixel tags, server logs, and similar tracking technologies that capture device, browser, and session information.
- Payment Processors: Transaction confirmation data, including masked payment method references and settlement amounts, received from our payment processing partners (bKash, Nagad, Rocket, Upay, Visa, and Mastercard networks) when you execute a deposit or withdrawal.
- Identity Verification Providers: Results and data points returned by third-party identity and age verification services when we are conducting KYC checks on your account.
- Third-Party Game Providers: Aggregated bet and game-session data supplied by game studios (such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, and Spribe) that power the live casino and slot games available on the Platform.
How We Use Your Personal Data
ku9a uses the personal data it collects for the following clearly defined purposes:
- Account Management: To create, maintain, and administer your ku9a account, including processing registration, authenticating your identity at login, and updating account settings at your request.
- Age and Identity Verification (KYC): To verify that you are at least 21 years of age and that the identity details provided at registration are accurate, in accordance with responsible gambling obligations.
- Transaction Processing: To process deposits and withdrawal requests, record transaction histories, and reconcile financial records associated with your account.
- Service Delivery: To make sports betting markets, live casino games, slot games, and all other Platform features available to you during your sessions.
- Customer Support: To respond to your enquiries, handle complaints, and provide assistance with account, payment, or game-related issues.
- Responsible Gaming: To monitor betting patterns and account activity for indicators of problem gambling, and to apply any deposit limits, cooling-off periods, or self-exclusion restrictions you have activated on your account.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, identity theft, multi-accounting, bonus abuse, and any other conduct prohibited under our Terms and Conditions.
- Legal and Regulatory Compliance: To fulfil obligations under applicable anti-money-laundering, counter-terrorism-financing, and data protection regulations, including producing records for regulatory inspection where lawfully required.
- Platform Improvement: To analyse aggregated usage data, identify technical issues, and improve the performance, features, and user experience of the Platform over time.
- Marketing Communications (with consent): To send you promotional offers, bonus notifications, and platform updates by email or SMS, where you have opted in to receive such communications. You may withdraw consent at any time by emailing [email protected].
Legal Basis for Processing
ku9a processes your personal data on the following legal grounds:
- Contractual Necessity: Processing required to fulfil the agreement between you and ku9a, including account management, transaction processing, and service delivery.
- Legitimate Interests: Processing carried out for the legitimate interests of ku9a, such as fraud prevention, security monitoring, and platform improvement, provided those interests are not overridden by your fundamental rights and freedoms.
- Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC, anti-money-laundering procedures, and data retention obligations.
- Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of optional marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Data Sharing & Disclosure
ku9a does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data with the following categories of recipients, strictly for the purposes described in this Policy:
- Payment Service Providers: bKash, Nagad, Rocket, Upay, and card network processors (Visa, Mastercard) receive only the data required to authorise and settle your deposit or withdrawal transaction. These providers operate under their own privacy policies and are independently regulated.
- Identity Verification Services: Third-party KYC and age-verification providers receive identity document data to perform verification checks on behalf of ku9a. These providers are contractually prohibited from using your data for any purpose other than verification.
- Game Software Providers: Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, Spribe, and other studio partners receive a session token and wager data necessary to run the games you play. They do not receive your full identity profile.
- IT Infrastructure and Security Providers: Cloud hosting, DDoS protection, and content delivery network (CDN) providers that underpin the technical operation of the Platform may process data on our behalf under strict data processing agreements.
- Legal and Regulatory Authorities: Where required by law, court order, or regulatory obligation, ku9a may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities. We will, where legally permitted, notify you of any such disclosure.
- Business Transfers: In the event of a merger, acquisition, or sale of all or part of ku9a's business, your personal data may be transferred as part of the transaction. You will be notified of any such transfer and of any resulting changes to this Privacy Policy before the transfer takes effect.
Your data is never sold. ku9a does not participate in data brokerage, advertising networks, or third-party audience-profiling programmes. Data shared with processors is governed by contractual data processing agreements that restrict its use to the specific service being delivered.
Cookies & Tracking Technologies
ku9a uses cookies and similar tracking technologies to deliver, maintain, and improve the Platform. A cookie is a small text file placed on your device by your browser when you visit the Platform. The following categories of cookies are used:
- Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. The Platform cannot operate without them, and they cannot be disabled.
- Functional Cookies: Remember your preferences — such as language settings, your last-visited section, or interface display choices — to provide a more personalised experience across sessions.
- Analytics Cookies: Collect aggregated, anonymised data about how visitors interact with the Platform (pages visited, time on page, navigation paths) to help us identify technical issues and improve user experience. Individual users are not identifiable from analytics data.
- Security Cookies: Support fraud detection and security functions by flagging unusual access patterns, detecting concurrent sessions from different locations, and supporting our bot-detection systems.
ku9a does not use third-party advertising cookies or tracking pixels that share your behavioural data with external advertising networks. You may configure your browser settings to refuse or delete cookies; however, doing so may impair certain features of the Platform, including the ability to remain logged in to your account.
Data Retention
ku9a retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following general retention guidelines apply:
- Active Accounts: Personal data is retained for the full duration that your ku9a account remains active, and for a period of at least five (5) years following account closure, to meet anti-money-laundering record-keeping obligations.
- Transaction Records: Financial transaction records, including deposit and withdrawal histories, are retained for a minimum of seven (7) years from the date of the transaction, in accordance with standard financial compliance requirements.
- Identity Verification Documents: KYC documents are retained for a minimum of five (5) years following account closure or the completion of the verification process, whichever is later.
- Support Communications: Customer support correspondence is retained for a minimum of two (2) years from the date of the final message in the relevant thread, to support dispute resolution and service quality review.
- Marketing Consent Records: Records of marketing opt-in consents are retained for as long as you remain an active account holder and for a period of two (2) years following any consent withdrawal, as evidence of the lawful basis for prior communications.
- Technical and Log Data: Server logs and session data are retained for up to twelve (12) months and then permanently deleted or anonymised.
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual.
Security Measures
ku9a implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key measures include:
- 256-Bit SSL/TLS Encryption: All data in transit between your device and ku9a servers is encrypted using industry-standard TLS 1.2 or higher protocols.
- Encryption at Rest: Sensitive data fields — including identity document references, payment method identifiers, and password hashes — are encrypted at the database level using AES-256 encryption.
- Access Controls: Access to personal data within the ku9a organisation is restricted on a role-based, need-to-know basis. All staff with data access are subject to confidentiality agreements and receive regular security awareness training.
- Intrusion Detection: Automated intrusion detection and prevention systems monitor the Platform infrastructure continuously for anomalous access patterns and potential security breaches.
- Regular Security Reviews: The Platform undergoes periodic security assessments and vulnerability scanning to identify and remediate potential weaknesses before they can be exploited.
- Incident Response: ku9a maintains a documented data breach response plan. In the event of a breach affecting personal data, affected account holders will be notified promptly in accordance with applicable obligations.
Your responsibility: No security system is completely impenetrable. You are responsible for keeping your ku9a account credentials confidential and for logging out of your account after each session, particularly on shared devices. If you suspect unauthorised access to your account, contact [email protected] immediately and change your password without delay.
Your Privacy Rights
As a ku9a account holder, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please submit a written request to [email protected] from the email address associated with your ku9a account.
- Right of Access: You have the right to request a copy of all personal data that ku9a holds about you, together with information about how and why it is being processed. We will respond to access requests within 30 days.
- Right to Rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. Please keep your account profile up to date; for changes requiring identity re-verification, additional documentation may be requested.
- Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. This right is subject to legal and regulatory retention obligations that may override your erasure request in part or in full.
- Right to Restriction of Processing: You have the right to request that ku9a restrict the processing of your personal data in specified circumstances, such as while the accuracy of data is being contested or a legitimate-interest objection is being assessed.
- Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive a structured, machine-readable copy of the personal data you have provided to ku9a.
- Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. You also have the absolute right to object to processing of your personal data for direct marketing purposes at any time.
- Right to Withdraw Consent: Where processing is based on your consent (for example, marketing emails), you may withdraw that consent at any time by emailing [email protected] or by following the unsubscribe link in any marketing communication. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
ku9a will acknowledge all privacy rights requests within 5 business days and aim to fulfil them within 30 calendar days. Where a request is complex or involves multiple data sets, we may extend this period by a further 30 days and will inform you accordingly.
Third-Party Services & Links
The ku9a Platform integrates with third-party game providers, payment processors, and identity verification services as described in Section 6. Each of these providers operates under its own privacy policy and data protection framework. ku9a is not responsible for the privacy practices of third-party service providers, and we encourage you to review their policies where relevant.
The ku9a Platform does not contain links to external websites operated by unaffiliated third parties. All navigation within the Platform remains on the ku9a.io domain. ku9a is not responsible for the content, privacy practices, or data handling of any external website that you may access independently.
Game content delivered via embedded iframes from licensed studio providers (such as Evolution Gaming's live casino lobby or Pragmatic Play's slot engine) is governed by the respective studio's technical data handling practices in addition to the terms of our data processing agreements with those providers.
Children & Minors
The ku9a Platform is strictly intended for adults aged 21 years and over. ku9a does not knowingly collect, store, or process personal data relating to individuals under the age of 21. If we become aware that personal data has been collected from a person under the minimum age, we will immediately close the associated account, void any transactions, and permanently delete the data in question.
If you are a parent or guardian and believe that a minor in your care has registered an account with ku9a, please contact our support team immediately at [email protected]. We will investigate and take prompt corrective action, including permanent account closure and data deletion.
21+ Age Policy: ku9a enforces a strict minimum age of 21 years for all account holders. Registration by persons under 21 is a direct violation of our Terms and Conditions and will result in immediate account termination and forfeiture of any funds. Please gamble responsibly.
Amendments to This Policy
ku9a reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, Platform functionality, legal requirements, or operational circumstances. When we make material changes to this Policy, we will update the "Last Updated" date at the top of this document and, where the changes significantly affect your rights or the way we use your data, we will notify active account holders by email prior to the changes taking effect.
Your continued use of the ku9a Platform after any update to this Privacy Policy constitutes your acceptance of the revised terms. We therefore recommend that you review this Policy periodically. If you do not agree with any amendment, you may close your account and request deletion of your data by contacting [email protected].
Contact Us
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or would like to report a potential data protection concern, please contact the ku9a Data Support team using the details below. All communications are handled in English and responded to within Bangladesh Standard Time (BST, UTC+6).
- Email: [email protected]
- Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (BST, UTC+6)
- Response Time: We aim to acknowledge all privacy-related enquiries within 5 business days and resolve them within 30 calendar days.
Please Note: For the security of your account, all privacy rights requests must be submitted from the email address registered to your ku9a account. We may request additional verification before processing requests that involve accessing, amending, or deleting sensitive account data. Do not share your account password or full payment details in any support communication.
Have Questions About Your Data?
Our support team is available 24/7 in Bangladesh Standard Time to help you understand your rights or handle any privacy request.