ku92 Privacy Policy — How We Protect Your Data

1 Introduction

ku92 ("we", "us", "our", "the Platform") is committed to protecting and respecting the privacy of all users who interact with our online betting and casino services. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our practices regarding your personal data.

This document governs the privacy of all persons who access or use the ku92 platform, whether via desktop browser, mobile browser, or any other access method. It covers data collected through the registration process, betting and gaming activity, payment transactions, customer support interactions, and any other engagement with the ku92 platform or its associated communications.

References to "personal data" in this policy mean any information that relates to an identified or identifiable natural person — in other words, information that can directly or indirectly identify you as an individual. This includes your name, contact details, financial information, device identifiers, and behavioural data generated through your use of the ku92 platform.

2 Data Controller

For the purposes of applicable data protection law, ku92 acts as the data controller in respect of all personal data collected through the operation of the ku92 platform. As data controller, ku92 determines the purposes for which, and the manner in which, your personal data is processed.

All data protection enquiries, requests to exercise data subject rights, and privacy-related complaints should be directed to the ku92 Data Protection team using the contact details provided in Section 14 of this policy. We will acknowledge all legitimate enquiries and respond within a reasonable period, consistent with our obligations under applicable law.

3 Data We Collect

ku92 collects personal data that is necessary for the lawful, fair, and transparent operation of the platform. We do not collect personal data beyond what is required to provide our services, comply with legal obligations, and protect the integrity of the platform. The categories of personal data we collect are as follows:

Where ku92 requires you to provide personal data in order to comply with a legal obligation or to fulfil a contractual requirement, failure to provide the requested data may result in ku92 being unable to provide the relevant service, process a payment, or maintain your account in an active state.

4 How We Collect Data

ku92 collects personal data through the following means:

• Direct interactions: Data you provide when you register for an account, complete identity verification (KYC), make deposits or withdrawals, contact customer support, participate in promotions, or update your account settings.
• Automated technologies: Data collected automatically as you browse and interact with the ku92 platform, including IP address, device identifiers, browser fingerprint, session duration, pages visited, and in-game activity logs. This data is collected via server logs, cookies, and similar tracking technologies described in Section 7.
• Third-party sources: Data received from identity verification service providers, fraud detection agencies, payment processors (including bKash, Nagad, Rocket, Upay, Visa, and Mastercard), and credit reference or age verification bureaus. ku92 uses third-party verification services to confirm the accuracy of the data you provide and to fulfil its legal obligations regarding age verification and anti-money laundering compliance.
• Publicly available sources: In limited circumstances related to fraud prevention or compliance, ku92 may consult publicly available registers or databases to verify information associated with your account.

5 Purpose & Legal Basis for Processing

ku92 processes your personal data only where a valid legal basis for doing so exists. The table below sets out the primary purposes for which we process personal data and the corresponding legal basis in each case:

Where ku92 relies on legitimate interests as the legal basis for processing, we have assessed that those interests are not overridden by your rights and interests as a data subject. You have the right to object to processing based on legitimate interests; see Section 10 for details of how to exercise this right.

6 Data Sharing & Third-Party Disclosure

ku92 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share your personal data only in the following strictly defined circumstances:

• Identity and age verification providers: To confirm that you are at least 21 years of age and that the identity information you have provided is accurate. These providers are contractually bound to process your data solely for verification purposes and to maintain appropriate security standards.
• Payment processors: Including bKash, Nagad, Rocket, Upay, Visa, and Mastercard, to facilitate the processing of deposits and withdrawals. Each payment partner operates under its own privacy and data security obligations.
• Fraud prevention and anti-money laundering agencies: To detect, investigate, and prevent fraudulent transactions, match-fixing activity, and financial crime. Sharing in this context is a legal obligation and a legitimate operational necessity.
• Game content providers: Including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, to the minimum extent necessary to deliver game content and record game outcomes for your account. These providers are certified and operate under strict data processing agreements.
• IT infrastructure and security service providers: Who host, maintain, and secure the ku92 platform on our behalf. All such providers are engaged under data processing agreements that restrict the use of your data to the services they provide to ku92.
• Law enforcement and regulatory authorities: Where we are required to disclose personal data by applicable law, court order, or at the request of a competent authority. ku92 will notify affected users of any such disclosure where legally permitted to do so.

Where personal data is transferred to third-party processors, ku92 implements appropriate contractual safeguards to ensure that your data is processed lawfully, securely, and in a manner consistent with this Privacy Policy.

7 Cookies & Tracking Technologies

The ku92 platform uses cookies and similar tracking technologies to deliver and improve our services. A cookie is a small text file placed on your device when you visit a website. Cookies allow ku92 to recognise your device across sessions, remember your preferences, maintain your login state, and analyse how the platform is used.

ku92 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged in, security cookies that protect against cross-site request forgery, and cookies that maintain your account preferences. These cookies cannot be disabled without impairing core platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised or aggregated information about how players interact with the ku92 platform, including which pages are visited most frequently, how long sessions last, and which features generate the most engagement. This data is used solely to improve the platform and does not identify you individually.
• Functional Cookies: Used to remember choices you make on the platform — such as your preferred language setting (English), display preferences, and responsible gaming limit configurations — so that these do not need to be re-entered on each visit.
• Security Cookies: Used to support fraud detection, bot mitigation, and the identification of unusual account access patterns. These cookies are a core component of ku92's platform security infrastructure.

You may adjust your cookie preferences via your browser settings. Please note that disabling strictly necessary cookies may prevent certain parts of the ku92 platform from functioning correctly. ku92 does not use third-party advertising cookies or behavioural profiling cookies for the purpose of targeting you with advertisements on external websites.

8 Data Retention

ku92 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy applicable legal, accounting, and reporting obligations. The specific retention periods we apply are as follows:

• Account and identity data: Retained for the duration of your active account relationship with ku92, plus a minimum period of five (5) years following account closure. This extended retention period is required by anti-money laundering regulations and financial record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, consistent with financial regulatory requirements applicable to payment service providers operating in the Bangladesh market.
• Betting and gaming activity records: Retained for a minimum of three (3) years from the date of each recorded activity. These records may be retained for longer periods where they are relevant to an ongoing dispute, investigation, or legal proceeding.
• Customer support communications: Retained for two (2) years from the date of the interaction, unless the communication relates to a dispute, complaint, or investigation that remains unresolved, in which case it is retained until final resolution.
• Self-exclusion and responsible gaming records: Retained indefinitely to ensure that self-exclusion decisions are honoured and to prevent reinstatement of excluded accounts in contravention of a player's wishes.
• Technical and log data: Typically retained for ninety (90) days, unless flagged in connection with a security incident, fraud investigation, or platform integrity review, in which case the relevant records are retained for the duration of that review.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

9 Data Security

ku92 implements and maintains a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes, but is not limited to, the following measures:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the ku92 platform is encrypted using industry-standard 256-bit SSL/TLS protocols. This ensures that your personal and financial data cannot be intercepted during transmission.
• Secure server infrastructure: The ku92 platform is hosted on secure, access-controlled server infrastructure. Physical and logical access to servers is restricted to authorised personnel only, and all access is logged and monitored.
• Password security: Account passwords are stored using strong one-way hashing algorithms. ku92 staff do not have access to your plain-text password and will never ask you to provide it via email, live chat, or any other channel.
• Account access controls: Multi-factor authentication options are available to registered players. Unusual login activity triggers automated security alerts and may prompt additional identity verification steps before access is granted.
• Internal data access controls: Access to personal data by ku92 staff is restricted on a strict need-to-know basis. All staff with access to personal data are trained in data protection obligations and are bound by confidentiality agreements.
• Security monitoring: The ku92 platform is subject to continuous security monitoring, including intrusion detection, vulnerability scanning, and periodic independent security assessments.

Despite these measures, no system connected to the internet is entirely immune from security threats. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ku92 will notify affected players without undue delay and will take all appropriate remedial action.

10 Your Rights

As a data subject, you hold a number of rights in relation to the personal data that ku92 processes about you. ku92 is committed to facilitating the exercise of these rights in a timely and transparent manner. Your rights are as follows:

• Right of Access: You have the right to request a copy of the personal data that ku92 holds about you, together with information about how that data is processed. This is commonly referred to as a Subject Access Request (SAR).
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete personal data that ku92 holds about you. You may update certain account details directly via your account settings; for other corrections, please contact our support team.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to exceptions — for example, ku92 may be required to retain certain data for legal or regulatory compliance purposes even where an erasure request is received.
• Right to Restriction of Processing: You have the right to request that ku92 restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing based on legitimate interests.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract with you, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where ku92 relies on legitimate interests as the legal basis for processing. ku92 will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please submit your request in writing to the ku92 Data Protection team at [email protected]. ku92 will respond to all valid requests within thirty (30) calendar days. In complex or high-volume cases, this period may be extended by a further sixty (60) days, with prior notification provided to you.

11 Children's Privacy

Parents and guardians who believe that a minor under their care may have registered a ku92 account or provided personal data to the platform are urged to contact the ku92 support team immediately at [email protected]. ku92 will treat all such reports as a matter of the highest priority and will act swiftly to investigate and resolve the situation.

ku92 employs age verification procedures during the registration process, including the collection of date-of-birth information and, where required, documentary evidence of age such as a valid national identification card issued by the Government of Bangladesh. These procedures are a core component of ku92's responsible gaming commitment and its legal obligations with respect to the protection of minors.

12 Third-Party Links

The ku92 platform may contain references to third-party payment providers and game content suppliers. While ku92 takes care to associate with reputable and security-conscious partners, ku92 is not responsible for the privacy practices or data protection standards of any third-party organisation. Each third party operates under its own privacy policy, and ku92 encourages you to review the relevant policies before interacting with any third-party service.

In particular, when you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, you will be interacting with those payment providers' own systems and interfaces. ku92 does not store full payment credentials (such as card numbers or mobile banking PINs) on its own servers; payment data is handled directly by the relevant payment provider in accordance with their own security standards.

13 Updates to This Privacy Policy

ku92 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the services we provide. When material changes are made to this policy, ku92 will update the Effective Date displayed at the top of this document and, where reasonably practicable, notify active registered players via the email address associated with their account or via an in-platform notification.

Your continued use of the ku92 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any material change to this policy, you must discontinue use of the platform and may request account closure by contacting [email protected]. We recommend that you review this Privacy Policy periodically to remain informed of how ku92 protects your personal data.

14 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy, or if you wish to exercise any of your data subject rights as described in Section 10, please contact the ku92 Data Protection team using the details set out below. All privacy-related communications are handled by trained staff and are treated as strictly confidential.

ku92 is committed to resolving all privacy-related concerns fairly and promptly. If you are not satisfied with our response to a privacy complaint, you may have the right to escalate your complaint to a relevant supervisory authority in accordance with the laws applicable in your jurisdiction.