ku9p Privacy Policy

1 Introduction

ku9p is committed to protecting the privacy and personal data of every player who uses our platform. This Privacy Policy applies to all services operated under the ku9p brand, accessible at https://ku9p.io, including the casino games library, sports betting markets, account management services, and customer support functions.

This policy has been written in plain English to make it as accessible as possible to players across Bangladesh — in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh — and wherever else our platform is accessed. We believe you should know exactly what data we hold about you and how it is used, without having to wade through impenetrable legal language.

This policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which contain additional provisions relevant to your use of the ku9p platform. This Privacy Policy came into effect on 1 January 2026 and supersedes any prior privacy notice published on the platform.

2 Data Controller

For the purposes of this Privacy Policy, ku9p acts as the data controller in respect of all personal data collected through the platform. As data controller, ku9p determines the purposes and means by which personal data is processed.

If you have any questions about how ku9p processes your personal data, or if you wish to exercise any of the rights described in Section 11, please contact our Data Protection team using the contact details provided in Section 16. All data-related requests will be acknowledged within 5 business days and fully resolved within 30 calendar days.

3 Data We Collect

ku9p collects personal data in several categories. The table below summarises the types of data we may collect, the context in which they are gathered, and the primary purpose for which each category is used.

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, biometric data, or health information, except where a player voluntarily discloses information related to responsible gaming self-exclusion requests — in which case such data is processed solely for the purpose of implementing the requested protections.

4 How We Collect Data

ku9p collects personal data through the following channels and mechanisms:

• Direct Submission: Data you provide directly when creating an account, completing KYC verification, making a deposit, submitting a withdrawal request, contacting customer support, or participating in a promotion.
• Automated Technologies: Technical and usage data collected automatically when you interact with the platform, including via cookies, web beacons, server logs, and similar tracking technologies. See Section 8 for full details on cookies.
• Third-Party Payment Processors: Transaction confirmation data shared with us by bKash, Nagad, Rocket, Upay, Visa, and Mastercard when you initiate a deposit or withdrawal through those services.
• KYC and Identity Verification Providers: Data returned by third-party identity verification services that we engage to confirm the authenticity of documents you submit during the KYC process.
• Fraud and Security Partners: Risk signals and device fingerprint data shared by fraud-prevention technology partners to help us identify and prevent suspicious activity on the platform.
• Game Providers: Session and outcome data from third-party game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, relating to your game activity on their software hosted within the ku9p platform.

5 Legal Basis for Processing

ku9p processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing is necessary to perform the contract between you and ku9p — i.e., to operate your account, process deposits and withdrawals, settle bets, and provide customer support.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) checks, Know Your Customer (KYC) requirements, and age verification (21+).
• Legitimate Interests: Processing is necessary for ku9p's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the quality of our services, provided such interests are not overridden by your rights and interests.
• Consent: Where we rely on your consent for a specific processing activity — such as sending you personalised promotional communications — you have the right to withdraw that consent at any time by contacting [email protected] or updating your account notification preferences. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

6 How We Use Your Data

The personal data we collect is used for the following purposes:

• Account Management: Creating, verifying, and maintaining your ku9p player account, including processing login requests, updating account details, and handling account closure requests.
• Payment Processing: Facilitating deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and processing withdrawal requests in BDT to your nominated account.
• Identity Verification: Confirming your identity, age (21+), and the legitimacy of your payment methods as part of our KYC process.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, multi-accounting, bonus abuse, and other prohibited conduct described in our Terms & Conditions.
• Responsible Gaming: Monitoring gaming behaviour for indicators of problem gambling, administering self-exclusion and deposit limit requests, and contacting players where we have legitimate concern for their well-being.
• Customer Support: Responding to enquiries, complaints, and disputes submitted via [email protected] or live chat, and maintaining records of those interactions for quality assurance.
• Marketing and Promotions: Sending promotional communications about ku9p bonuses, tournaments, and seasonal offers (e.g., Pohela Boishakh, Eid, Victory Day promotions) where you have provided consent or where permitted by applicable law. You may opt out at any time.
• Platform Improvement: Analysing aggregated usage data to improve the performance, design, and content of the ku9p platform, including game selection and betting market availability.
• Legal Compliance: Meeting our obligations under applicable law, including responding to lawful requests from regulatory or law enforcement authorities.

7 Data Sharing

ku9p does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share your data only with the following categories of recipients, and only to the extent strictly necessary for the purposes described in this policy:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and associated banking partners — solely to process your deposit and withdrawal transactions.
• KYC and Identity Verification Services: Third-party providers engaged to verify the authenticity of identity documents you submit. These providers are contractually bound to process your data solely for verification purposes.
• Game Software Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other integrated game studios receive session identifiers and game outcome data necessary to deliver game content and calculate results.
• Fraud Prevention and Cybersecurity Partners: Specialist providers that help ku9p identify and mitigate fraudulent activity, unauthorised access, and other security threats.
• Cloud Infrastructure Providers: Hosting and database providers that store platform data on secure, encrypted servers. All such providers operate under data processing agreements with ku9p.
• Legal and Regulatory Authorities: Where required by law or in response to a valid legal order, ku9p may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction.
• Professional Advisers: Lawyers, accountants, and auditors engaged by ku9p who are subject to professional confidentiality obligations.

All third-party data processors engaged by ku9p are required to enter into data processing agreements that bind them to process personal data solely on ku9p's documented instructions, maintain appropriate security measures, and not further sub-process the data without prior authorisation.

8 Cookies & Tracking Technologies

ku9p uses cookies and similar tracking technologies on the platform to improve functionality, personalise your experience, and support security and fraud-prevention operations. A cookie is a small text file placed on your device by the platform when you visit. The following categories of cookies are used:

You may control cookie settings through your browser preferences. Note that disabling strictly necessary cookies will prevent the platform from functioning correctly and may prevent you from logging in or accessing your account. Analytical and functional cookies may be disabled without affecting core platform access.

ku9p does not use third-party advertising cookies or behavioural tracking cookies for the purpose of displaying targeted advertisements on external websites.

9 Data Retention

ku9p retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention principles apply:

• Active Account Data: Personal data associated with an active player account is retained for the duration of the account relationship plus a period of 5 years following account closure, in order to meet legal, regulatory, and dispute-resolution obligations.
• Transaction and Financial Records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of 7 years from the date of the transaction in accordance with standard financial record-keeping requirements.
• KYC Documents: Identity verification documents are retained for 5 years from the date of submission or from the date of account closure, whichever is later.
• Customer Support Correspondence: Support chat transcripts and email correspondence are retained for 3 years from the date of the interaction.
• Technical Logs: Server and access logs containing IP address and device information are retained for 12 months unless a security investigation requires extended retention.
• Marketing Preferences: Records of your marketing consent or opt-out are retained for the lifetime of your account plus 2 years to evidence compliance.

When personal data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with you as an individual. Anonymised, aggregated data may be retained indefinitely for analytical and platform-improvement purposes.

10 Data Security

ku9p takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect it against unauthorised access, loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and ku9p servers is encrypted using industry-standard TLS 1.3 protocol.
• AES-256 Encryption at Rest: Sensitive personal and financial data stored in our databases is encrypted using AES-256 symmetric encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All ku9p staff and contractors with data access undergo background screening and complete mandatory data protection training.
• Multi-Factor Authentication: Internal systems handling personal data require multi-factor authentication for all staff access.
• Penetration Testing: The ku9p platform and infrastructure undergo regular independent security assessments and penetration tests to identify and remediate vulnerabilities.
• Incident Response Plan: ku9p maintains a documented data breach response procedure. In the event of a confirmed breach affecting your personal data, we will notify you and take prompt remedial action.

11 Your Rights

As a player on the ku9p platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request".

• Right of Access: You have the right to request a copy of all personal data that ku9p holds about you. We will provide this in a structured, commonly used format within 30 calendar days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details directly within your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request that ku9p delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal obligation to retain certain records for specified periods.
• Right to Restrict Processing: You may request that we restrict processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format and to transmit it to another service provider where technically feasible.
• Right to Object: You have the right to object to processing of your personal data based on our legitimate interests. We will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Right to Lodge a Complaint: If you believe ku9p has handled your personal data unlawfully, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

All rights requests submitted to [email protected] will receive an acknowledgement within 5 business days. We will endeavour to resolve all requests fully within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

12 Children & Minors

The ku9p platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. The age verification checks conducted during the KYC process are specifically designed to prevent minors from registering or accessing the platform.

If ku9p becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately suspended pending investigation, all funds will be handled in accordance with our Terms & Conditions, and all personal data associated with that account will be deleted as soon as the investigation is concluded. If you believe a minor has registered on the platform, please contact [email protected] immediately.

13 International Data Transfers

ku9p's primary operations and data infrastructure are designed to serve players in Bangladesh. However, some of the third-party service providers we engage — including game software providers such as Pragmatic Play, Evolution Gaming, and Microgaming, as well as cloud infrastructure partners — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection, ku9p ensures that appropriate safeguards are in place. These safeguards include contractual clauses that require the recipient to protect your data to a standard consistent with this Privacy Policy, and where available, adequacy decisions or equivalent legal frameworks recognised in the recipient jurisdiction.

If you would like more information about the safeguards in place for any specific international transfer of your personal data, please contact [email protected].

14 Third-Party Links

The ku9p platform may contain references to third-party game providers and payment partners. While we integrate their services within our platform environment, ku9p does not control the privacy practices of these third parties in relation to their own websites or applications. This Privacy Policy applies solely to personal data processed by ku9p in connection with your use of https://ku9p.io.

We encourage you to review the privacy policies of any third-party service providers whose services you use in connection with your ku9p account — in particular, your chosen payment provider such as bKash, Nagad, or Rocket — as their data practices are governed by their own policies, not by this one.

15 Policy Updates

ku9p reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this policy, we will notify registered players via email to the address on file and display a prominent notice on the platform for a period of no less than 14 days before the updated policy takes effect.

Minor or administrative changes — such as correcting typographical errors or updating contact details — may be made without advance notice. The "Last Updated" date at the top of this policy will always reflect the date of the most recent revision.

Your continued use of the ku9p platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a revised policy, you should close your account and cease using the platform before the updated policy takes effect. Account closure requests may be submitted to [email protected].

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way ku9p handles your personal data, please contact us using the details below. All enquiries will be handled in English and responses will be provided within the timescales set out in this policy.

Our customer support team is available 24 hours a day, 7 days a week, including Bangladesh public holidays such as Eid, Victory Day (16 December), Independence Day (26 March), and Pohela Boishakh. We are committed to resolving all data-related enquiries fairly, promptly, and in plain English.